From T.T.Dinh@cs.bham.ac.uk Mon Jun 1 09:34:32 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 659453A6F5E for ; Mon, 1 Jun 2009 09:34:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.627 X-Spam-Level: * X-Spam-Status: No, score=1.627 tagged_above=-999 required=5 tests=[BAYES_40=-0.185, SARE_SPEC_REPLICA_OBFU=1.812] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id APQCTu3oFT0F for ; Mon, 1 Jun 2009 09:34:31 -0700 (PDT) Received: from sun60.bham.ac.uk (sun60.bham.ac.uk [147.188.128.137]) by core3.amsl.com (Postfix) with ESMTP id 90DB43A6B6F for ; Mon, 1 Jun 2009 09:34:31 -0700 (PDT) Received: from [147.188.128.127] (helo=bham.ac.uk) by sun60.bham.ac.uk with esmtp (Exim 4.67) (envelope-from ) id 1MBASz-0003bZ-Ox; Mon, 01 Jun 2009 17:34:29 +0100 Received: from mx1.cs.bham.ac.uk ([147.188.192.53]) by bham.ac.uk with esmtp (Exim 4.43) id 1MBASz-0003Tv-F4; Mon, 01 Jun 2009 17:34:29 +0100 Received: from acws-0193.cs.bham.ac.uk ([147.188.194.227]) by mx1.cs.bham.ac.uk with esmtp (Exim 4.51) id 1MBASz-0004MP-HW; Mon, 01 Jun 2009 17:34:29 +0100 Message-ID: <4A240315.1090606@cs.bham.ac.uk> Date: Mon, 01 Jun 2009 17:34:29 +0100 From: Tien Tuan Anh Dinh User-Agent: Thunderbird 2.0.0.21 (X11/20090302) MIME-Version: 1.0 To: p2psip@ietf.org, hgs@cs.columbia.edu, emcho@sip-communicator.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Mailman-Approved-At: Tue, 02 Jun 2009 19:21:07 -0700 Subject: [P2PSIP] A possible attack scenario for P2PSIP ? X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Jun 2009 16:34:32 -0000 Hi all, I've just finished reading the draft http://www.ietf.org/internet-drafts/draft-irtf-p2prg-rtc-security-01.txt It occurs to me that the following attack scenario might be possible: 1. Client A registers its location, storing a tuple of the form to a peer P in the DHT overlay (P also represents all replica nodes storing the key id_a) 2. Client B searches for A's location, as a result contacts P. 3. P decides to not give B the latest A's location. It either sends a out-of-date tuple regarding A's location or says that A is not in the network. A has no way to know or enforce P to behave properly. It is a variation of the Denial of Service attack, in which the client A could be made completely unreachable to the other clients. Assume the authenticity and integrity of all the tuples, would you say that this is a probable attack? My main concern is what incentives of P in doing this, especially in this P2P-SIP setting. I think this attack depends on the incentives model that encourages clients to act as peers in the DHT overlay. I would love to hear some reasonable explanation of why P would (and would not) engage in this attack. Looking forwards to hear your comments. Anh. From davidbryan@gmail.com Tue Jun 2 21:11:50 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 7B17C3A6877 for ; Tue, 2 Jun 2009 21:11:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.165 X-Spam-Level: X-Spam-Status: No, score=-0.165 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, SARE_SPEC_REPLICA_OBFU=1.812] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eay5tlnaxIAl for ; Tue, 2 Jun 2009 21:11:49 -0700 (PDT) Received: from yw-out-2324.google.com (yw-out-2324.google.com [74.125.46.29]) by core3.amsl.com (Postfix) with ESMTP id 963413A67A3 for ; Tue, 2 Jun 2009 21:11:49 -0700 (PDT) Received: by yw-out-2324.google.com with SMTP id 3so8941736ywj.49 for ; Tue, 02 Jun 2009 21:11:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:date:x-google-sender-auth:message-id:subject:from:to:cc :content-type:content-transfer-encoding; bh=PRYQ4puRqaF+gX7pncnMrzxf4WzGa/07FoxsDWfCR88=; b=rzcAh1ggqOPgHkYoUrlLthzlHKFZaX3vPEQ5EmRd7ygBCnyw9riUTqVzReGO4oaHSi 8u27lp4QMwQ5BInYoe4IMoHDET0BuQmYhUOxmsxaFl1NDSvrGHNAMsbe0VeM8zbS4m96 QElNjPbuqzIiaW8EplXuCGHOc85SYwZTqvcps= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; b=B15eF//4lE5+/cXXiFOEjvj5BlAIPVY4Wn8w2QRfcEDWquAfl61QWQpVzEdcwDMuDr ItjB5SeYO/FDwP+7NiV9QBrrFCEnq8ONn3X6iB4A0GE3IJY7WG3NOmJGx9GrdA4YxR84 nKwPXsBJbDalGIXyBJ/EIa0OL7W9wjK6daAvk= MIME-Version: 1.0 Sender: davidbryan@gmail.com Received: by 10.151.68.3 with SMTP id v3mr154654ybk.131.1244002308414; Tue, 02 Jun 2009 21:11:48 -0700 (PDT) In-Reply-To: <4A240315.1090606@cs.bham.ac.uk> References: <4A240315.1090606@cs.bham.ac.uk> Date: Wed, 3 Jun 2009 00:11:48 -0400 X-Google-Sender-Auth: 08fae9abd248ad2c Message-ID: <8b2769930906022111x2b475b14kc3f18ba0699f6d40@mail.gmail.com> From: "David A. Bryan" To: Tien Tuan Anh Dinh Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: p2psip@ietf.org Subject: Re: [P2PSIP] A possible attack scenario for P2PSIP ? X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 04:11:50 -0000 This particular type of attack has been looked at before in several of the proposed protocol drafts and discussed in some of the security documents in this WG, so you can find a bit more there. You are correct, however, that it is a bit of a different attack from those common in client server approaches. In the literature, there are several ways to protect against it, including signed registrations with expirations to prevent spoofed or expired registrations from being returned, and registration replication to protect against P simply saying there is no registration (I can ask someone else if I get a negative response to get a second opinion if the party really is in the system) David On Mon, Jun 1, 2009 at 12:34 PM, Tien Tuan Anh Dinh wrote: > Hi all, > > I've just finished reading the draft > http://www.ietf.org/internet-drafts/draft-irtf-p2prg-rtc-security-01.txt > > It occurs to me that the following attack scenario might be possible: > > 1. Client A registers its location, storing a tuple of the form location_a, expiredtime> to a peer P in the DHT overlay (P also represents > all replica nodes storing the key id_a) > > 2. Client B searches for A's location, as a result contacts P. > > 3. P decides to not give B the latest A's location. It either sends a > out-of-date tuple regarding A's location or says that A is not in the > network. A has no way to know or enforce P to behave properly. > > It is a variation of the Denial of Service attack, in which the client A > could be made completely unreachable to the other clients. > > Assume the authenticity and integrity of all the tuples, would you say that > this is a probable attack? My main concern is what incentives of P in doing > this, especially in this P2P-SIP setting. I think this attack depends on the > incentives model that encourages clients to act as peers in the DHT overlay. > I would love to hear some reasonable explanation of why P would (and would > not) engage in this attack. > > Looking forwards to hear your comments. > > Anh. > > > > > _______________________________________________ > P2PSIP mailing list > P2PSIP@ietf.org > https://www.ietf.org/mailman/listinfo/p2psip > From davidbryan@gmail.com Wed Jun 3 08:46:55 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C3E573A68FD for ; Wed, 3 Jun 2009 08:46:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.071 X-Spam-Level: X-Spam-Status: No, score=-1.071 tagged_above=-999 required=5 tests=[AWL=0.906, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KKKoSS35jLLo for ; Wed, 3 Jun 2009 08:46:55 -0700 (PDT) Received: from qw-out-2122.google.com (qw-out-2122.google.com [74.125.92.27]) by core3.amsl.com (Postfix) with ESMTP id C9AE33A6B49 for ; Wed, 3 Jun 2009 08:46:54 -0700 (PDT) Received: by qw-out-2122.google.com with SMTP id 3so53493qwe.31 for ; Wed, 03 Jun 2009 08:46:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:date:x-google-sender-auth:message-id:subject:from:to:cc :content-type:content-transfer-encoding; bh=q7yRT6F9cI49V5FD2qS56Ts8SbuPMJzDSmJZPIS3usc=; b=A46NtasckHBZKC1qrpCLzvGtuqSzB5VKjhmBj8rWhDInJc03GRKjqDy4VFp2ByPj9N MGUjKHexkc0QRF6HshNoeboaV3zS0Bugb0V5xwKcZgEEGobCCQdL/ap+XSqUkRWq6s07 FL7VyBgtCfQn4i+O5E/ls0B4cc2VGHAjZs+RY= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; b=OWw2WmsPTChwKR48TwM7u6o1Glw8FDClZU4ffUe0ZQUQV9hm0qQObRQEth7+9wTiJA VW9Mz3IdjDaHrFh3PbPOcgNqRiqkpWKeVESArDx4MO9NbsopWZJxgaLMh+5HOMn86lwD UtakGfI1NBefi7OoOXjMRjNYpvimNp4OSGKv4= MIME-Version: 1.0 Sender: davidbryan@gmail.com Received: by 10.151.69.11 with SMTP id w11mr1350008ybk.190.1244044001646; Wed, 03 Jun 2009 08:46:41 -0700 (PDT) In-Reply-To: <4A26634D.1060101@cs.bham.ac.uk> References: <4A240315.1090606@cs.bham.ac.uk> <8b2769930906022111x2b475b14kc3f18ba0699f6d40@mail.gmail.com> <4A26634D.1060101@cs.bham.ac.uk> Date: Wed, 3 Jun 2009 11:46:41 -0400 X-Google-Sender-Auth: f99362fd0a365394 Message-ID: <8b2769930906030846n44f4cb49q335128fa0a44b687@mail.gmail.com> From: "David A. Bryan" To: Tien Tuan Anh Dinh Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: p2psip@ietf.org Subject: Re: [P2PSIP] A possible attack scenario for P2PSIP ? X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Jun 2009 15:46:55 -0000 As I mentioned, the signer must include an expiration. There is of course a window where they could update (change) a registration, and so there could be a time where a hostile node has two valid, unexpired registrations at his disposal to choose from, and could return a false one. This is a reason why registrations (including the expiration time) must be signed, and why they should be short duration. If an attacker controls all replicas, you do have a problem, obviously, but forget the replicas, if the attacker can control that much of an overlay, they likely can simply prevent routing. Again, this is a classic attack on P2P systems, and rate-limiting new identities is designed to protect against this. If you are assuming that the attacker can somehow directly compromise and control either a large portion (so that it includes all replicas) or targeted (peer and it's replicas), again, at that point the attacker could simply take over the overlay (or just take over A). In such a case, you are out of luck, but with that assumption, so is any client server architecture (i.e., if I can take over the server, I control the network) This isn't a new attack, it has been considered extensively in the literature and in this group, and while there are some risks (peer-to-peer networks have different attack vectors), such an attack would be difficult to mount in practice with the sort of security safe guards that are being discussed in the WG. Thanks, David On Wed, Jun 3, 2009 at 7:49 AM, Tien Tuan Anh Dinh wrote: > >> In the literature, there are several ways to protect against it, >> including signed registrations with expirations to prevent spoofed or >> expired registrations from being returned, > > In the scenario I proposed, I assume the authenticity & integrity of these > registrations, which include expired date as well. So there's no worry of > spoofing. > >> replication to protect against P simply saying there is no >> registration (I can ask someone else if I get a negative response to >> get a second opinion if the party really is in the system) > > I also assumed that the attacker can control all the replicas that store the > particular registration. That could be a reasonable assumption given a > powerful attacker. > > The main issue here is not that client B (searching for client A) doesn't > get the answer from P, but instead it always gets the expired registration > from P, even A just "renewed" its registration a P. Thus, my question still > is: are there reasonable incentives for P to do that ? > > Anh. > From michaelc@idssoftware.com Wed Jun 10 16:24:46 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E955B28C136 for ; Wed, 10 Jun 2009 16:24:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.11 X-Spam-Level: X-Spam-Status: No, score=-1.11 tagged_above=-999 required=5 tests=[BAYES_05=-1.11] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1uesrs53HKAV for ; Wed, 10 Jun 2009 16:24:46 -0700 (PDT) Received: from elasmtp-curtail.atl.sa.earthlink.net (elasmtp-curtail.atl.sa.earthlink.net [209.86.89.64]) by core3.amsl.com (Postfix) with ESMTP id 0A65728C120 for ; Wed, 10 Jun 2009 16:24:45 -0700 (PDT) Received: from [64.203.45.253] (helo=[10.9.0.1]) by elasmtp-curtail.atl.sa.earthlink.net with esmtpa (Exim 4.67) (envelope-from ) id 1MEXA4-00011i-Os for p2psip@ietf.org; Wed, 10 Jun 2009 19:24:52 -0400 Message-ID: <4A304FC1.1090102@idssoftware.com> Date: Wed, 10 Jun 2009 16:28:49 -0800 From: Michael Chen User-Agent: Thunderbird 2.0.0.21 (Windows/20090302) MIME-Version: 1.0 To: p2psip@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-ELNK-Trace: 68edf72dbb77893ca35f5539f9d485d07e972de0d01da9408e8a21881150370008ca09feb0ef6dbf350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c X-Originating-IP: 64.203.45.253 Subject: [P2PSIP] Use case of big RELO packet? X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Jun 2009 23:24:47 -0000 Hi, Can anyone present some use cases of big RELO messages? Who will send a RELO message that is 65K, 500K, 1Meg, 2Gig in size across the overlay? I consider that an attack. This is not a file sharing protocol. I wouldn't be surprise if a node in the overlay refuses to store/relay a message bigger than some small number, say 16K (TLS/DTLS write boundary). Thanks --Michael From bbl@lowekamp.net Wed Jun 10 18:38:44 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id EF1493A6AC0 for ; Wed, 10 Jun 2009 18:38:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.977 X-Spam-Level: X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6wwhIimtCDJg for ; Wed, 10 Jun 2009 18:38:44 -0700 (PDT) Received: from mail-bw0-f213.google.com (mail-bw0-f213.google.com [209.85.218.213]) by core3.amsl.com (Postfix) with ESMTP id 002B63A6906 for ; Wed, 10 Jun 2009 18:38:43 -0700 (PDT) Received: by bwz9 with SMTP id 9so1161031bwz.37 for ; Wed, 10 Jun 2009 18:38:47 -0700 (PDT) MIME-Version: 1.0 Received: by 10.223.112.130 with SMTP id w2mr1863606fap.65.1244684327423; Wed, 10 Jun 2009 18:38:47 -0700 (PDT) In-Reply-To: <4A304FC1.1090102@idssoftware.com> References: <4A304FC1.1090102@idssoftware.com> Date: Wed, 10 Jun 2009 21:38:47 -0400 Message-ID: From: Bruce Lowekamp To: Michael Chen Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: p2psip@ietf.org Subject: Re: [P2PSIP] Use case of big RELO packet? X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jun 2009 01:38:45 -0000 Michael, With the current usages, you're right, there's absolutely no use for it. And there would need to be a different end-to-end protocol to support such messages. But we thought it was best to leave the fields large enough to support it in the future. We intend to add an explicit maximum message size to the overlay config file to make absolutely sure it doesn't happen. Should be in the next update (hopefully soon). Bruce On Wed, Jun 10, 2009 at 8:28 PM, Michael Chen wro= te: > Hi, > > Can anyone present some use cases of big RELO messages? =C2=A0Who will se= nd a > RELO message that is 65K, 500K, 1Meg, 2Gig in size across the overlay? = =C2=A0I > consider that an attack. =C2=A0This is not a file sharing protocol. > > I wouldn't be surprise if a node in the overlay refuses to store/relay a > message bigger than some small number, say 16K (TLS/DTLS write boundary). > > Thanks > > --Michael > _______________________________________________ > P2PSIP mailing list > P2PSIP@ietf.org > https://www.ietf.org/mailman/listinfo/p2psip > From melodysong@huawei.com Thu Jun 11 00:58:38 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2EA9F3A6979 for ; Thu, 11 Jun 2009 00:58:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.495 X-Spam-Level: X-Spam-Status: No, score=-0.495 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cXQcUC8E9Eva for ; Thu, 11 Jun 2009 00:58:37 -0700 (PDT) Received: from szxga03-in.huawei.com (unknown [119.145.14.66]) by core3.amsl.com (Postfix) with ESMTP id 695C03A6841 for ; Thu, 11 Jun 2009 00:58:37 -0700 (PDT) Received: from huawei.com (szxga03-in [172.24.2.9]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KL200G4QE5MJK@szxga03-in.huawei.com> for p2psip@ietf.org; Thu, 11 Jun 2009 15:58:34 +0800 (CST) Received: from huawei.com ([172.24.1.33]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KL200JYYE5MAW@szxga03-in.huawei.com> for p2psip@ietf.org; Thu, 11 Jun 2009 15:58:34 +0800 (CST) Received: from s64081 ([10.164.12.15]) by szxml06-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KL200LDJE5LQP@szxml06-in.huawei.com> for p2psip@ietf.org; Thu, 11 Jun 2009 15:58:34 +0800 (CST) Date: Thu, 11 Jun 2009 15:58:33 +0800 From: Song Haibin To: 'P2PSIP WG' Message-id: <006a01c9ea6a$6b2b69d0$0f0ca40a@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 X-Mailer: Microsoft Office Outlook 11 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Thread-index: AcnqamrhWqIcZh8ZQmy/XXYimXVcBA== Subject: [P2PSIP] Route Logging parameter X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Jun 2009 07:58:38 -0000 Hi, Peer's Uptime has been listed as a parameter in the structure of RouteLogEntry in section 5.3.2.3 of the base draft, since the diagnostics of the overlay network has been removed from the base base draft, I suggest to remove this parameter here. Thanks, Haibin Skype: alexsonghw From michaelc@IDSSOFTWARE.COM Sat Jun 13 05:55:52 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1CAC93A6B3A for ; Sat, 13 Jun 2009 05:55:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.447 X-Spam-Level: X-Spam-Status: No, score=-2.447 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, SARE_SUB_ENC_UTF8=0.152] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fidbLmYFFZT3 for ; Sat, 13 Jun 2009 05:55:51 -0700 (PDT) Received: from smtpoutwbe04.prod.mesa1.secureserver.net (smtpoutwbe04.prod.mesa1.secureserver.net [208.109.78.206]) by core3.amsl.com (Postfix) with SMTP id 5DBA73A6AFF for ; Sat, 13 Jun 2009 05:55:51 -0700 (PDT) Received: (qmail 7193 invoked from network); 13 Jun 2009 12:55:59 -0000 Received: from unknown (HELO gem-wbe23.prod.mesa1.secureserver.net) (64.202.189.214) by smtpoutwbe04.prod.mesa1.secureserver.net with SMTP; 13 Jun 2009 12:55:59 -0000 Received: (qmail 10372 invoked by uid 99); 13 Jun 2009 12:55:59 -0000 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" X-Originating-IP: 64.203.45.253 User-Agent: Web-Based Email 4.14.27 Message-Id: <20090613055559.61e8c06078a3b23a733c71e914c0b9df.aeb6ba320f.wbe@email.secureserver.net> From: To: "Bruce Lowekamp" Date: Sat, 13 Jun 2009 05:55:59 -0700 Mime-Version: 1.0 Cc: p2psip@ietf.org Subject: Re: [P2PSIP] =?utf-8?q?Use_case_of_big_RELO_packet=3F?= X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Jun 2009 12:55:52 -0000 Bruce, Thanks for the reply. I posted a related question May 7 titled "32-bit length in ForwardingHeader of draft-ietf-p2psip-base-02". None of the authors in the group responded. Would you please take a look? --Michael > -------- Original Message -------- > Subject: Re: [P2PSIP] Use case of big RELO packet? > From: Bruce Lowekamp > Date: Wed, June 10, 2009 6:38 pm > To: Michael Chen > Cc: p2psip@ietf.org >=20 >=20 > Michael, >=20 > With the current usages, you're right, there's absolutely no use for > it. And there would need to be a different end-to-end protocol to > support such messages. But we thought it was best to leave the fields > large enough to support it in the future. >=20 > We intend to add an explicit maximum message size to the overlay > config file to make absolutely sure it doesn't happen. Should be in > the next update (hopefully soon). >=20 > Bruce >=20 >=20 >=20 > On Wed, Jun 10, 2009 at 8:28 PM, Michael Chen w= rote: > > Hi, > > > > Can anyone present some use cases of big RELO messages? =C2=A0Who will = send a > > RELO message that is 65K, 500K, 1Meg, 2Gig in size across the overlay? = =C2=A0I > > consider that an attack. =C2=A0This is not a file sharing protocol. > > > > I wouldn't be surprise if a node in the overlay refuses to store/relay = a > > message bigger than some small number, say 16K (TLS/DTLS write boundary= ). > > > > Thanks > > > > --Michael > > _______________________________________________ > > P2PSIP mailing list > > P2PSIP@ietf.org > > https://www.ietf.org/mailman/listinfo/p2psip > > From lin.xiao@nsn.com Sun Jun 28 20:40:09 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0928B3A6818 for ; Sun, 28 Jun 2009 20:40:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.997 X-Spam-Level: X-Spam-Status: No, score=-5.997 tagged_above=-999 required=5 tests=[AWL=-3.398, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Jz+TBTZlzFyX for ; Sun, 28 Jun 2009 20:40:08 -0700 (PDT) Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [217.115.75.234]) by core3.amsl.com (Postfix) with ESMTP id EB5D13A6812 for ; Sun, 28 Jun 2009 20:40:06 -0700 (PDT) Received: from demuprx016.emea.nsn-intra.net ([10.150.129.55]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id n5T3ePDP005193 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Mon, 29 Jun 2009 05:40:25 +0200 Received: from demuexc024.nsn-intra.net (demuexc024.nsn-intra.net [10.159.32.11]) by demuprx016.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id n5T3eOlb014565 for ; Mon, 29 Jun 2009 05:40:24 +0200 Received: from CNBEEXC007.nsn-intra.net ([10.159.192.12]) by demuexc024.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.3959); Mon, 29 Jun 2009 05:40:24 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Mon, 29 Jun 2009 11:40:17 +0800 Message-ID: <5D84FDD8D5DC8646B9F73CF1EFD1BFA47D132E@CNBEEXC007.nsn-intra.net> In-Reply-To: <018901c9e191$870aa8a0$130ca40a@china.huawei.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [P2PSIP] I-D Action draft-xiao-p2psip-client-routing-00.txt Thread-Index: AcngbJPy1d6CzGV5RH+Rk60sntNOhgBIzTRwBbZYivA= References: <018901c9e191$870aa8a0$130ca40a@china.huawei.com> From: "Xiao, Lin (NSN - CN/Beijing)" To: X-OriginalArrivalTime: 29 Jun 2009 03:40:24.0742 (UTC) FILETIME=[5627FC60:01C9F86B] Subject: [P2PSIP] I-D Action draft-xiao-p2psip-client-routing-00.txt X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Jun 2009 03:40:09 -0000 Hi, all: A draft "A P2PSIP Client Routing for Reload" has been submitted. http://www.ietf.org/internet-drafts/draft-xiao-p2psip-client-routing-00. txt. It could be looked as an complement of current Reload Base draft on solving the client routing problem in the scenario that clients are connected with arbitrary peers.=20 Comments are welcome. Title : A P2PSIP Client Routing for Reload=20 Author(s) : L. Xiao and Y.Zhang. Filename : draft-xiao-p2psip-client-routing-00.txt Pages : 13 Date : 2009-05-13 Abstract: This document analyses the routing requirements of different types of clients, and then proposes a P2P client routing mechanism for REsource LOcation And Discovery (RELOAD). This mechanism is designed to solve the issues in one of the client routing options described in the RELOAD Base protocol [I-D.ietf-p2psip-base], where clients are allowed to connect with arbitrary peers. The solution is to store the information of a client's Attached Peer in the overlay together with the registration data of the client. The extension could be deployed on SIP usage of RELOAD easily [I-D.draft-ietf-p2psip-sip]. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-xiao-p2psip-client-routing-00. txt Best Regards Xiao Lin From root@core3.amsl.com Tue Jun 30 02:15:01 2009 Return-Path: X-Original-To: p2psip@ietf.org Delivered-To: p2psip@core3.amsl.com Received: by core3.amsl.com (Postfix, from userid 0) id 3698B28C348; Tue, 30 Jun 2009 02:15:01 -0700 (PDT) From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 Message-Id: <20090630091501.3698B28C348@core3.amsl.com> Date: Tue, 30 Jun 2009 02:15:01 -0700 (PDT) Cc: p2psip@ietf.org Subject: [P2PSIP] I-D Action:draft-ietf-p2psip-diagnostics-01.txt X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jun 2009 09:15:01 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Peer-to-Peer Session Initiation Protocol Working Group of the IETF. Title : P2PSIP Overlay Diagnostics Author(s) : S. Yongchao, et al. Filename : draft-ietf-p2psip-diagnostics-01.txt Pages : 26 Date : 2009-06-30 This document describes mechanisms for P2PSIP diagnostics. It describes the usage scenarios and defines several simple methods for performing diagnostics in P2PSIP overlay networks. It also describes the diagnostic information which is useful for the connection and node status monitoring. The methods and message formats are specified as extensions to P2PSIP base protocol RELOAD. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-p2psip-diagnostics-01.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-p2psip-diagnostics-01.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2009-06-30021411.I-D@ietf.org> --NextPart-- From zongning@huawei.com Tue Jun 30 02:37:20 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 016DA3A6E0B for ; Tue, 30 Jun 2009 02:37:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -95.514 X-Spam-Level: X-Spam-Status: No, score=-95.514 tagged_above=-999 required=5 tests=[AWL=-0.060, BAYES_00=-2.599, CHARSET_FARAWAY_HEADER=3.2, MANGLED_EMAIL=2.3, MIME_8BIT_HEADER=0.3, SARE_SUB_ENC_GB2312=1.345, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GgzgTsjZFXdg for ; Tue, 30 Jun 2009 02:37:17 -0700 (PDT) Received: from szxga04-in.huawei.com (szxga04-in.huawei.com [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id E34ED3A6CE4 for ; Tue, 30 Jun 2009 02:37:15 -0700 (PDT) Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KM100LKQP7GC9@szxga04-in.huawei.com> for p2psip@ietf.org; Tue, 30 Jun 2009 17:33:17 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KM100HE4P7GBG@szxga04-in.huawei.com> for p2psip@ietf.org; Tue, 30 Jun 2009 17:33:16 +0800 (CST) Received: from [172.24.1.24] (Forwarded-For: [10.164.12.81]) by szxmc04-in.huawei.com (mshttpd); Tue, 30 Jun 2009 17:33:16 +0800 Date: Tue, 30 Jun 2009 17:33:16 +0800 From: zongning 63316 To: p2psip@ietf.org Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-type: multipart/mixed; boundary="Boundary_(ID_jdmtfDgVzR8rKZ5qQRC7TA)" Content-language: zh-CN X-Accept-Language: zh-CN Priority: normal Subject: [P2PSIP] =?gb2312?b?16q3oiA6W3Bwc3BdINeqt6IgOk5ldyBWZXJzaW9uIE5v?= =?gb2312?b?dGlmaWNhdGlvbiBmb3IgZHJhZnQtem9uZy1wcHNwLWNodW5rLWRpc2NvdmVy?= =?gb2312?b?eS0wMA==?= X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jun 2009 09:37:20 -0000 This is a multi-part message in MIME format. --Boundary_(ID_jdmtfDgVzR8rKZ5qQRC7TA) Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline Hi, This draft of Chunk Discovery for P2P Streaming is being discussed in PPSP mailing list. You are welcome to give comments. Thank you! BR, Ning Zong ****************************************************************************************** This email and its attachments contain confidential information from HUAWEI, which is intended only for the person or entity whose address is listed above. Any use of the information contained herein in any way (including, but not limited to, total or partial disclosure, reproduction, or dissemination) by persons other than the intended recipient(s) is prohibited. If you receive this e-mail in error, please notify the sender by phone or em ail immediately and delete it! ***************************************************************************************** --Boundary_(ID_jdmtfDgVzR8rKZ5qQRC7TA) Content-type: message/rfc822 Content-disposition: inline Return-path: Received: from huawei.com ([172.24.2.9]) by szxmc04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KLZ009QQN4QGK@szxmc04-in.huawei.com> for zongning@huawei.com; Mon, 29 Jun 2009 14:53:14 +0800 (CST) Received: from szxga03-in (szxga03-in [172.24.2.9]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KLZ004QKN0B9L@szxga03-in.huawei.com> for zongning@huawei.com; Mon, 29 Jun 2009 14:53:14 +0800 (CST) Received: from szxrg01-in.huawei.com ([172.24.1.38]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KLZ00BBDMXXCO@szxga03-in.huawei.com> for zongning@huawei.com (ORCPT zongning@huawei.com); Mon, 29 Jun 2009 14:52:01 +0800 (CST) Received: from localhost (localhost [127.0.0.1]) by szxrg01-in.huawei.com (MOS 3.10.5-GA) id ABU31271; Mon, 29 Jun 2009 14:52:01 +0800 (CST) Received: from mail.ietf.org (mail.ietf.org [64.170.98.32]) by szxrg01-in.huawei.com (MOS 3.10.5-GA) with ESMTP id ABU31210; Mon, 29 Jun 2009 14:51:53 +0800 (CST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C514B28C136; Sun, 28 Jun 2009 23:51:31 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9B5283A6D3E for ; Sun, 28 Jun 2009 23:51:30 -0700 (PDT) Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G14xHFOJw-Fa for ; Sun, 28 Jun 2009 23:51:28 -0700 (PDT) Received: from szxga01-in.huawei.com (unknown [119.145.14.64]) by core3.amsl.com (Postfix) with ESMTP id 8999B3A6D38 for ; Sun, 28 Jun 2009 23:51:27 -0700 (PDT) Received: from huawei.com (szxga01-in [172.24.2.3]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KLZ00IEWN1YT0@szxga01-in.huawei.com> for ppsp@ietf.org; Mon, 29 Jun 2009 14:51:35 +0800 (CST) Received: from huawei.com ([172.17.1.36]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KLZ00IV5N1Y7K@szxga01-in.huawei.com> for ppsp@ietf.org; Mon, 29 Jun 2009 14:51:34 +0800 (CST) Received: from [172.24.1.24] (Forwarded-For: [10.164.12.81]) by szxmc04-in.huawei.com (mshttpd); Mon, 29 Jun 2009 14:51:34 +0800 Date: Mon, 29 Jun 2009 14:51:34 +0800 From: zongning 63316 Subject: [ppsp] =?gb2312?b?16q3oiA6TmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZv?= =?gb2312?b?ciBkcmFmdC16b25nLXBwc3AtY2h1bmstZGlzY292ZXJ5LTAw?= Sender: ppsp-bounces@ietf.org To: ppsp@ietf.org Errors-to: ppsp-bounces@ietf.org Message-id: MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 2.14 (built Aug 8 2006) Content-type: multipart/mixed; boundary="Boundary_(ID_TVLhJTFC11RLi2qZRp1Ptw)" Content-language: zh-CN X-Accept-Language: zh-CN Priority: normal Precedence: list X-BeenThere: ppsp@ietf.org Delivered-to: ppsp@core3.amsl.com X-Original-To: ppsp@core3.amsl.com X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -95.018 X-Spam-Level: X-Spam-Status: No, score=-95.018 tagged_above=-999 required=5 tests=[AWL=-1.668, BAYES_00=-2.599, CHARSET_FARAWAY_HEADER=3.2, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, MANGLED_EMAIL=2.3, MIME_8BIT_HEADER=0.3, RDNS_NONE=0.1, SARE_SUB_ENC_GB2312=1.345, USER_IN_WHITELIST=-100] X-Junkmail-Status: score=10/50, host=szxrg01-in.huawei.com X-Junkmail-SD-Raw: score=unknown, refid=str=0001.0A010209.4A486491.003A:SCFSTAT3674418,ss=1,fgs=0, ip=64.170.98.32, so=2009-03-06 19:59:02, dmn=5.7.1/2009-06-05, mode=single engine X-Junkmail-IWF: false X-Mirapoint-Loop-Id: 6d01fa69739eb5baccdd973657f70a47 X-Mailman-Version: 2.1.9 List-Post: List-Subscribe: , List-Unsubscribe: , List-Archive: List-Help: List-Id: discussing to draw up peer to peer streaming protocol Original-recipient: rfc822;@szxmc04-in.huawei.com:zongning@huawei.com This is a multi-part message in MIME format. --Boundary_(ID_TVLhJTFC11RLi2qZRp1Ptw) Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline Hi, There is an initial version of Chunk Discovery for P2P Streaming that describes some mechanisms for distributed chunk discovery in the case of P2P streaming, including re-using RELOAD, and combind Tracker/Peer Gossip method. Let me know any comments you have. Thanks. BR, Ning Zong ****************************************************************************************** This email and its attachments contain confidential information from HUAWEI, which is intended only for the person or entity whose address is listed above. Any use of the information contained herein in any way (including, but not limited to, total or partial disclosure, reproduction, or dissemination) by persons other than the intended recipient(s) is prohibited. If you receive this e-mail in error, please notify the sender by phone or em ail immediately and delete it! ***************************************************************************************** --Boundary_(ID_TVLhJTFC11RLi2qZRp1Ptw) Content-type: text/plain; NAME=draft-zong-ppsp-chunk-discovery-00.txt Content-transfer-encoding: 7BIT Content-disposition: attachment; filename=draft-zong-ppsp-chunk-discovery-00.txt PPSP N. Zong, Ed. Internet-Draft Huawei Technologies Intended status: Standards Track June 28, 2009 Expires: December 30, 2009 Chunk Discovery for P2P Streaming draft-zong-ppsp-chunk-discovery-00 Status of this Memo This Internet-Draft is submitted to IETF in full conformance with the provisions of BCP 78 and BCP 79. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet- Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt. The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This Internet-Draft will expire on December 30, 2009. Copyright Notice Copyright (c) 2009 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents in effect on the date of publication of this document (http://trustee.ietf.org/license-info). Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Abstract This document describes several mechanisms of Chunk Discovery in P2P Streaming use case. The Chunk Discovery for P2P streaming provides the functionality of streaming sources registrar and discovery in a Zong Expires December 30, 2009 [Page 1] Internet-Draft P2P Streaming Usage June 2009 fully-distributed system. It provides register, update and lookup service for video chunks in the P2P Streaming applications. The mechanisms include a P2P streaming usage for REsource LOcation And Discovery (RELOAD), and a combined Trakcer and Peer Gossip method. Table of Contents 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 2. Terminology . . . . . . . . . . . . . . . . . . . . . . . . . 3 3. Implementation using Current RELOAD Mechanisms . . . . . . . . 4 3.1. Register Chunk Information . . . . . . . . . . . . . . . . 5 3.2. PEER-REGISTRATION Kind Definition . . . . . . . . . . . . 6 3.3. Lookup Chunk Information . . . . . . . . . . . . . . . . . 7 3.4. Extend PeerRegistrationData . . . . . . . . . . . . . . . 7 4. Combine Data on the Storage Peer . . . . . . . . . . . . . . . 9 4.1. Register Chunk Information . . . . . . . . . . . . . . . . 9 4.2. Combine Data . . . . . . . . . . . . . . . . . . . . . . . 10 4.3. New PEER-REGISTRATION Kind Definition . . . . . . . . . . 10 4.4. Lookup Chunk Information . . . . . . . . . . . . . . . . . 10 4.5. New Requirement to Storage Peer . . . . . . . . . . . . . 11 5. Open Issues . . . . . . . . . . . . . . . . . . . . . . . . . 11 6. A Combined Tracker and Peer Gossip Method . . . . . . . . . . 11 6.1. Tracker Communication . . . . . . . . . . . . . . . . . . 12 6.2. Peer Gossip . . . . . . . . . . . . . . . . . . . . . . . 13 7. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 13 8. Security Considerations . . . . . . . . . . . . . . . . . . . 14 9. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . . 14 10. References . . . . . . . . . . . . . . . . . . . . . . . . . . 14 10.1. Normative References . . . . . . . . . . . . . . . . . . . 14 10.2. Informative References . . . . . . . . . . . . . . . . . . 14 Author's Address . . . . . . . . . . . . . . . . . . . . . . . . . 15 Zong Expires December 30, 2009 [Page 2] Internet-Draft P2P Streaming Usage June 2009 1. Introduction As one of the architectures for deliverying streaming traffic on the global Internet , the P2P streaming has the advantage of being scalable to a large number of subscribers with low infrastructural cost [PPSP1]. P2P streaming applications attract more and more users to consume video content online [PPLive][PPStrm][UUSee]. P2P streaming applications adopt a decentralized streaming architecture where the media content is separated into smaller chunks to be shared among peers. A chunk is a basic unit of partitioned streaming, which is used for the purpose of storage and advertising to neighbors what parts of a movie a peer holds [SIGP2P]. In the case of VoD, different users watch different parts of the video content (i.e. have different chunks) so that a peer normally maintains a buffer to share video chunks with other peers. In the case of live content, because all peers are mostly interested in what is actually happens "now", one possible role of a peer is to request video chunks from a live source and then forward the chunks to more peers. In all the cases, The procedure of chunk discovery for P2P streaming is needed to allow peers to register the information of the video chunks which have been received and ready for sharing with other peers, as well as locate video chunks from multiple peers in a fully-distributed manner. This document describes several mechanisms of Chunk Discovery in P2P Streaming use case. The Chunk Discovery for P2P streaming provides the functionality of streaming sources registrar and discovery in a fully-distributed system. It provides register, update and lookup service for video chunks in the P2P Streaming applications. The mechanisms include a P2P streaming usage for REsource LOcation And Discovery (RELOAD) [I-D.ietf-p2psip-base], and a combined Trakcer and Peer Gossip method [PPSP1][PPSP2]. 2. Terminology The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC 2119 [RFC2119]. We use the terminology and definitions from Concepts and Terminology for Peer to Peer SIP [I-D.ietf-p2psip-concepts] and the RELOAD Base Protocol [I-D.ietf-p2psip-base]. Zong Expires December 30, 2009 [Page 3] Internet-Draft P2P Streaming Usage June 2009 3. Implementation using Current RELOAD Mechanisms The P2P streaming usage for current RELOAD involves the following functions. 1, Registration. A peer can use the RELOAD data storage functionality to store a mapping from the Chunk-IDs of the stored video chunks to its Node-ID. 2, Lookup. A peer can use the RELOAD data storage functionality to retrieve the Node-IDs of the peers who have registered the information of the requested video chunks. For example, Peer A has received video chunks with Video-ID "Movie A" and Chunk-IDs "Chunk 1", "Chunk 2" and ready for sharing these chunks with other peers. Peer A could register its Node-ID "1234" under these Video-ID and Chunk-IDs. Similarly, Peer B has received video chunks with Video-ID "Movie A" and Chunk-IDs "Chunk 1", "Chunk 2" and "Chunk 3" and register its Node-ID "5678" under these Video-ID and Chunk-IDs. When Peer C wants to match "Movie A" from the chunk with Chunk-ID "Chunk 2", it queries the overlay for "Movie A" and "Chunk 2" and gets back Node-IDs "1234" and "5678". Peer C then uses the overlay to establish a direct connection with Peer A and Peer B and can use that direct connection to perform media signaling process. This example is depicted as follows: Zong Expires December 30, 2009 [Page 4] Internet-Draft P2P Streaming Usage June 2009 Peer A Overlay Peers Peer B Peer C (1234) | (5678) | | | | | |StoreReq(MovieA, | | | | Chunk1/2)-->| | | |<------------StoreAns| | | | |<--StoreReq(MovieA, | | | | Chunk1/2/3)| | | |StoreAns------------>| | | | | | | |<-----------------------FetchReq(MovieA, | | | | Chunk 2)| | | FetchAns(1234/5678)-------------------->| | | | | | | |<----Attach------->| |<----------------------------Attach--------------------------->| | | | | | | |<----ICE Check---->| |<----------------------------ICE Check------------------------>| | | | | | | |<--Media Signal--->| |<------------------------Media Signaling---------------------->| | | | | | | |-----Media-------->| |-----------------------------Media---------------------------->| | | | | 3.1. Register Chunk Information In conventional C/S streaming cases, the media information (e.g. media file URL) can be obtained by media clients from the media server. In P2P streaming usage of RELOAD, each peer registers the information of the video chunks which have been received and ready for sharing with other peers, as well as locate video chunks from multiple peers through the RELOAD overlay. To register its chunk information, a RELOAD peer stores a PeerRegistrationData structure. This uses the PEER-REGISTRATION Kind-ID, which is formally defined in Section 3.2. As a simple example, if Peer A has obtained the video chunks with Video-ID "Movie A" and Chunk-IDs "Chunk 1", "Chunk 2" and its Node-ID is "1234", it may store the mapping "Movie A, Chunk 1/2 -> 1234" in the RELOAD overlay. This would tell anyone who wanted to watch "Movie A" from the Chunk with Chunk-ID "Chunk 1" or "Chunk 2" to contact node "1234". The contents of a PeerRegistrationData structure are as follows: Zong Expires December 30, 2009 [Page 5] Internet-Draft P2P Streaming Usage June 2009 struct { uint16 destination_id_list_length; Destination destination_id_list[destination_id_list_length]; } PeerRegistrationData; The contents of the PeerRegistrationData PDU are: destination_id_list_length: The number of the peers having registered the chunk. destination_id_list: The identifiers of peers who have registered the chunk. Note that RELOAD explicitly supports that multiple peers registration the same combination of Video-ID and Chunk-ID. For example, both Peer A and Peer B could register "Movie A" and "Chunk 1". Therefore, the registrations are stored in a Dictionary with dictionary values being PeerRegistrationData and dictionary keys being Node-IDs. So, let's say Peer A (with Node-ID "1234") has "Chunk 1" and "Chunk 2" of "Movie A" and Peer B (with Node-ID "5678") has "Chunk 1", "Chunk 2" and "Chunk 3" of "Movie A". Peer A would generate PeerResgistrationData of {1, [1234]}, and PeerB would create PeerRegistrationData {1, [5678]}. Then they would do the following stores (registers) into the overlay: Peer A: Movie A:Chunk 1 -> 1234, {1, [1234] } Movie A:Chunk 2 -> 1234, {1, [1234] } Peer B: Movie A:Chunk 1 -> 5678, {1, [5678] } Movie A:Chunk 2 -> 5678, {1, [5678] } Movie A:Chunk 3 -> 5678, {1, [5678] } 3.2. PEER-REGISTRATION Kind Definition PEER-REGISTRATION Kind-ID include: 1, Kind IDs. The Resource Name for the PEER-REGISTRATION is the combination of Video-ID and Chunk-ID. The data stored is a PeerRegistrationData, which contains the Node-IDs of peers who can provide the video chunks. Zong Expires December 30, 2009 [Page 6] Internet-Draft P2P Streaming Usage June 2009 2, Data Model. The data model for the PEER-REGISTRATION Kind is dictionary. The dictionary key is the Node-ID of the peer who can provide the video chunk. 3, Access Control. If certificate-based access control is being used, stored data of Kind PEER-REGISTRATION must be signed by a certificate which contains a Node-ID matching the storing dictionary key. 3.3. Lookup Chunk Information In P2P streaming usage of RELOAD, when a peer wants to match a video from certain chunk, it queries the overlay for the corresponding Video-ID and Chunk-ID and gets back the Node-IDs of the peers who can provide the video chunks. As a simple example, if Peer C wants to match "Movie A" from the chunk with Chunk-ID "Chunk 2", it performs a Fetch for kind PEER- REGISTRATION at Video-ID "Movie A" and Chunk-ID "Chunk 2". If this Fetch does not indicate any specific dictionary keys, it will result in fetching all the stored values, which is PeerRegistrationData as follows: Dictionary Results: 1234, {1, [1234] } 5678, {1, [5678] } Peer C then uses the overlay to establish direct connections with Peer A and Peer B and can use these direct connections to perform media signaling process and video transportation. 3.4. Extend PeerRegistrationData Note that the performance of chunk discovery would be increased by adding some fields to the PeerRegostrationData structure that lets a peer list all the chunks it has. That is, if Peer C searches for "Movie A" and "Chunk 2", it will find not only that both Peer A and Peer B have "Movie A" and "Chunk 2", but aslo Peer A has "Chunk 1" and Peer B has "Chunk 1", "Chunk 3". Peer C then would probably directly request Peer B to serve "Chunk 3" after "Chunk 2", without asking for the RELOAD to do a new lookup for "Chunk 3". The contents of the extended PeerRegistrationData structure are as follows: Zong Expires December 30, 2009 [Page 7] Internet-Draft P2P Streaming Usage June 2009 typedef opaque ChunkID[2]; struct { Destination destination_id; uint16 chunk_id_list_length; ChunkID chunk_id_list[chunk_id_list_length]; } DestChunkData struct { uint16 destination_id_list_length; DestChunkData destination_chunk_list[destination_id_list_length]; } PeerRegistrationData; The contents of the DestChunkData PDU are: ChunkID: A fixed-length 16-bit string. chunk_id_list_length: The number of the chunks owned by the peer. chunk_id_list: The identifiers of chunks owned by the peer. The contents of the extened PeerRegistrationData PDU are: destination_id_list_length: The number of the peers having registered the chunk. destination_chunk_list: The list of DestChunkData corresponding to the peers that register the chunk. Therefore, in the previous example, Peer A and Peer B would do the following stores (registers) into the overlay: Peer A: Movie A:Chunk 1 -> 1234, {1, [ {1234, 2, [Chunk 1, Chunk 2]} ] } Movie A:Chunk 2 -> 1234, {1, [ {1234, 2, [Chunk 1, Chunk 2]} ] } Peer B: Movie A:Chunk 1 -> 5678, {1, [ {5678, 3, [Chunk 1, Chunk 2, Chunk 3]} ] } Movie A:Chunk 2 -> 5678, {1, [ {5678, 3, [Chunk 1, Chunk 2, Chunk 3]} ] } Movie A:Chunk 3 -> 5678, {1, [ {5678, 3, [Chunk 1, Chunk 2, Chunk 3]} ] } Zong Expires December 30, 2009 [Page 8] Internet-Draft P2P Streaming Usage June 2009 Similarly, if Peer C wants to match "Movie A" and "Chunk 2", it gets back the following results: Dictionary Results: 1234, {1, [ {1234, 2, [Chunk 1, Chunk 2]} ] } 5678, {1, [ {5678, 3, [Chunk 1, Chunk 2, Chunk 3]} ] } 4. Combine Data on the Storage Peer However, if there are many chunks (say more than 1000) in a movie, then a peer with the whole movie will have to perform many registrations to list all the things that it has registered. This would impact the RELOAD overlay as an inefficient way to do the chunk registration. 4.1. Register Chunk Information Now we define a new ChunkInfoData structure as follows: typedef opaque ChunkID[2]; struct { uint16 chunk_id_list_length; ChunkID chunk_id_list[chunk_id_list_length]; } ChunkInfoData; The contents of the ChunkInfoData PDU are: ChunkID: A fixed-length 16-bit string. chunk_id_list_length: The number of the chunks owned by the peer. chunk_id_list: The identifiers of chunks owned by the peer. Let's reuse the example in Section 3.1. Suppose that Peer A and Peer B both do the following stores (registers) into the overlay: Peer A: Movie A -> 1234, {2, [Chunk1,Chunk2]} Peer B: Movie A -> 5678, {3, [Chunk1,Chunk2,Chunk3]} Zong Expires December 30, 2009 [Page 9] Internet-Draft P2P Streaming Usage June 2009 It can be observed that the number of registrations performed by peers is largely reduced. 4.2. Combine Data The storage peer needs to re-arrage the stored data to: Movie A -> Chunk1, {2, [ {1234, 2, [Chunk 1, Chunk 2]}, {5678, 3, [Chunk 1, Chunk 2, Chunk 3]} ] } Movie A -> Chunk2, {2, [ {1234, 2, [Chunk 1, Chunk 2]}, {5678, 3, [Chunk 1, Chunk 2, Chunk 3]} ] } Movie A -> Chunk3, {1, [ {5678, 3, [Chunk 1, Chunk 2, Chunk 3]} ] } So, the registrations are stored in a Dictionary with dictionary values being PeerRegistrationData and dictionary keys being Chunk- IDs. 4.3. New PEER-REGISTRATION Kind Definition The new PEER-REGISTRATION Kind-ID include: 1, Kind IDs. The Resource Name for the new PEER-REGISTRATION is the Video-ID. The data stored is a PeerRegistrationData, which contains the Node-IDs of the peers who can provide the video. 2, Data Model. The data model for the new PEER-REGISTRATION Kind is dictionary. The dictionary key is the Chunk-ID of the chunk registered by the peers who can provide the video chunk. 3, Access Control. If certificate-based access control is being used, stored data of the new Kind PEER-REGISTRATION must be signed by a certificate which contains a Chunk-ID matching the storing dictionary key. 4.4. Lookup Chunk Information If Peer C wants to match "Movie A" from the chunk with Chunk-ID "Chunk 2", it performs a Fetch for kind PEER-REGISTRATION at Video-ID "Movie A" with dictionary key "Chunk2". It will send back dictionary results as follows: Dictionary Results: {2, [ {1234, 2, [Chunk 1, Chunk 2]}, {5678, 3, [Chunk 1, Chunk 2, Chunk 3]} ] } Zong Expires December 30, 2009 [Page 10] Internet-Draft P2P Streaming Usage June 2009 Peer C then uses the overlay to establish direct connections with Peer A and Peer B and can use these direct connections to perform media signaling process and video transportation. 4.5. New Requirement to Storage Peer It is now obviously required that the storage peer performes the combining of the chunk information data (with the data structure of ChunkInfoData) from different peers and convert them to the data structure of PeerRegistrationData. This capability of combining and converting data between different data structures would be a new functionality of RELOAD. 5. Open Issues Although the P2P streaming usage of RELOAD would be straightforward, it is still an open question that if the RELOAD is suitable for P2P streaming. 1, Searching Efficiency. P2P streaming applications normally require retrieving the real-time/para real-time video chunks quickly through the direct chunk information exchange among the peers. On the other hand, iterative and recursive routing process supported in RELAOD may not meet the real-time requirement of the P2P streaming [PPSP2]. 2, Working Load. P2P streaming applications need constant and more frequent support of RELOAD. On one hand, during the P2P streaming process, the requestor would constantly ask for RELOAD to lookup a new set of peers to serve next chunks of video. This is either because the current peers left or the requestor is not sure if the current peers can serve the next chunks of video. On the other hand, peers also need to constantly advise the chunks they have to the RELOAD to keep the chunk information updated on the RELOAD overlay. The need of constant support of RELOAD may impose a large burden on RELOAD, supposing that there are a large number (say hundreds of thousands) of simultaneously on-line P2P streaming peers. These issue of the performance of RELOAD on supporting P2P streaming applications need to be evaluated in both PPSP and P2PSIP communities. 6. A Combined Tracker and Peer Gossip Method The combined tracker and peer gossip method generally contains Zong Expires December 30, 2009 [Page 11] Internet-Draft P2P Streaming Usage June 2009 following components: 1. tracker communications. Peer reports to some centralized directory server (a.k.a. tracker) coarse information (i.e. Video-ID). When the tracker receives the video request from a peer, it returns to the requesting peer with a peer list (or, a swarm) in which the peers are sharing the requested video. 2. peer gossip. The grain information (i.e. Chunk-ID) is achieved by the requesting peer through directly communicating with the peers in the obtained peer list to exchange the chunk description. +---------------+ ------------>| Tracker |<------------------------ | +---------------+ | | | | | | Tracker Communications | | | | | V V | +--------+ Peer Gossip (Chunk Description) +--------+ | | |<------------------------------->| | | | Peer | | Peer | | | |<--------------------- | | | +--------+ | +--------+ | Peer Gossip | V (Chunk Description) | +--------+ | | | ---------------------->| Peer | | | +--------+ More Peers ... ... 6.1. Tracker Communication For example, Peer A is watching a video "Movie A" and ready for sharing this video with other peers. Peer A could report to the tracker by sending the Video-ID "Movie A" to the tracker. Similarly, Peer B is watching "Movie A" and register itself under the Video-ID "Movie A" to the tracker. Tracker then keep a record that both Peer A and Peer B would share "Movie A" with other peers. When Peer C wants to match "Movie A" , it firstly queries the tracker for the list of peers who would provide the video. It gets back Peer A and Peer B. Peer C then would communicate with both Peer A and Peer B to check who would serve the requested chunks of "Movie A". This exaple Zong Expires December 30, 2009 [Page 12] Internet-Draft P2P Streaming Usage June 2009 is shown as below: Peer A racker Peer B Peer C | | | | |Report(Movie A)--->| | | |<---------ReportAns| | | | | | | | |<---Report(Movie A)| | | |ReportAns--------->| | | | | | | |<-----------------------Request(Movie A)| | |RequestAns(Peer A/Peer B)-------------->| | | | | 6.2. Peer Gossip For example, even Peer C gets back the peer list including Peer A and Peer B, it still doesn't know who can serve the requested chunk (say "Chunk 3"). Therefore, Peer C needs to discover which peer would serve the request chunk of "Movie A". The chunk information (i.e. whick chunks are stored on which peers) can be achieved by directly communicating with both Peer A and Peer B to exchange the chunk description. Suppose that Peer A stores video chunks with Chunk-ID "Chunk 1", "Chunk 2" and Peer B stored "Chunk 1", "Chunk 2" and "Chunk 3". This exaple is illustrated as follows: Peer A Peer B Peer C | | | | <------------------------------------------ChunkDescReq | | ChunkDescAns(Chunk 1/2)-------------------------------> | | | | | | <--------------ChunkDescReq | | | ChunkDescAns(Chunk 1/2/3)-> | | | | | | <-----Media Signaling-----> | | | | | | ------Media---------------> | | | | Because only Peer B has the chunk with Chunk-ID of "Chunk 3", Peer C then requests the data of "Chunk 3" from Peer B by establishing a media connection with Peer B. 7. IANA Considerations TODO define PEER-REGISTRATION Kind-ID in the case of using RELOAD for P2P streaming chunk discovery, Zong Expires December 30, 2009 [Page 13] Internet-Draft P2P Streaming Usage June 2009 8. Security Considerations TODO describe security considerations when performing chunk discovery for P2P streaming. 9. Acknowledgements The authors would like to thank the following for their contributions to this document: David Bryan. TODO list more. 10. References 10.1. Normative References [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [I-D.ietf-p2psip-base] Jennings, C., Lowekamp, B., Rescorla, E., Baset, S., and H. Schulzrinne, "REsource LOcation And Discovery (RELOAD) Base Protocol", draft-ietf-p2psip-base-02 (work in progress), March 2009. [I-D.ietf-p2psip-concepts] Bryan, D., Matthews, P., Shim, E., Willis, D., and S. Dawkins, "Concepts and Terminology for Peer to Peer SIP", draft-ietf-p2psip-concepts-02 (work in progress), July 2008. 10.2. Informative References [PPLive] "www.pplive.com". [PPStrm] "www.ppstream.com". [UUSee] "www.uusee.com". [SIGP2P] Huang, "Challenges, Design and Analysis of a Large-scale P2P-VoD System". [PPSP1] Zong, N. and X. Jiang, "Survey and Problem Statement of P2P Streaming", IETF PPSP BoF, November 2008. [PPSP2] Zhang, Y., Zong, N., Camarillo, G., Seng, J., and R. Yang, "Problem Statement of P2P Streaming Protocol (PPSP)", IETF PPSP BoF, May 2009. Zong Expires December 30, 2009 [Page 14] Internet-Draft P2P Streaming Usage June 2009 Author's Address Ning Zong (editor) Huawei Technologies 10F, Huihong Mansion, No.91 Baixia Road Nanjing 210001 China Phone: +86 25 84565866 Email: zongning@huawei.com Zong Expires December 30, 2009 [Page 15] --Boundary_(ID_TVLhJTFC11RLi2qZRp1Ptw) Content-type: message/rfc822 Content-disposition: inline Return-path: Received: from huawei.com ([172.24.2.3]) by szxmc04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KLZ00ELQMQNXX@szxmc04-in.huawei.com> for zongning@huawei.com; Mon, 29 Jun 2009 14:44:47 +0800 (CST) Received: from szxga01-in (szxga01-in [172.24.2.3]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KLZ0054GMQN8Z@szxga01-in.huawei.com> for zongning@huawei.com; Mon, 29 Jun 2009 14:44:47 +0800 (CST) Received: from szxrg04-in.huawei.com ([172.24.1.41]) by szxga01-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KLZ00GUDMLTO0@szxga01-in.huawei.com> for zongning@huawei.com (ORCPT zongning@huawei.com); Mon, 29 Jun 2009 14:44:47 +0800 (CST) Received: from localhost (localhost [127.0.0.1]) by szxrg04-in.huawei.com (MOS 3.10.5-GA) id CXA08774; Mon, 29 Jun 2009 14:44:47 +0800 (CST) Received: from mail.ietf.org (mail.ietf.org [64.170.98.32]) by szxrg04-in.huawei.com (MOS 3.10.5-GA) with ESMTP id CXA08709; Mon, 29 Jun 2009 14:44:38 +0800 (CST) Received: by core3.amsl.com (Postfix, from userid 30) id 912CC3A69F9; Sun, 28 Jun 2009 23:44:17 -0700 (PDT) Date: Sun, 28 Jun 2009 23:44:17 -0700 (PDT) From: IETF I-D Submission Tool Subject: New Version Notification for draft-zong-ppsp-chunk-discovery-00 To: zongning@huawei.com Message-id: <20090629064417.912CC3A69F9@core3.amsl.com> MIME-version: 1.0 Content-type: text/plain; charset=utf-8 Content-transfer-encoding: 7BIT X-Junkmail-Status: score=10/50, host=szxrg04-in.huawei.com X-Junkmail-SD-Raw: score=unknown, refid=str=0001.0A010205.4A4862DE.01AF:SCFSTAT3674418,ss=1,fgs=0, ip=64.170.98.32, so=2009-03-06 19:59:02, dmn=5.7.1/2009-06-05, mode=single engine X-Junkmail-IWF: false X-Mirapoint-Loop-Id: 5d2a761648ca7561a0563a64c27215fc Original-recipient: rfc822;@szxmc04-in.huawei.com:zongning@huawei.com A new version of I-D, draft-zong-ppsp-chunk-discovery-00.txt has been successfuly submitted by Ning Zong and posted to the IETF repository. Filename: draft-zong-ppsp-chunk-discovery Revision: 00 Title: Chunk Discovery for P2P Streaming Creation_date: 2009-06-28 WG ID: Independent Submission Number_of_pages: 15 Abstract: This document describes several mechanisms of Chunk Discovery in P2P Streaming use case. The Chunk Discovery for P2P streaming provides the functionality of streaming sources registrar and discovery in a fully-distributed system. It provides register, update and lookup service for video chunks in the P2P Streaming applications. The mechanisms include a P2P streaming usage for REsource LOcation And Discovery (RELOAD), and a combined Trakcer and Peer Gossip method. The IETF Secretariat. --Boundary_(ID_TVLhJTFC11RLi2qZRp1Ptw) MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline _______________________________________________ ppsp mailing list ppsp@ietf.org https://www.ietf.org/mailman/listinfo/ppsp --Boundary_(ID_TVLhJTFC11RLi2qZRp1Ptw)-- --Boundary_(ID_jdmtfDgVzR8rKZ5qQRC7TA)-- From vidyan@qualcomm.com Tue Jun 30 13:51:12 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4FE0928C480 for ; Tue, 30 Jun 2009 13:51:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -104.599 X-Spam-Level: X-Spam-Status: No, score=-104.599 tagged_above=-999 required=5 tests=[AWL=2.000, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bixnOYmd2KcE for ; Tue, 30 Jun 2009 13:51:11 -0700 (PDT) Received: from wolverine01.qualcomm.com (wolverine01.qualcomm.com [199.106.114.254]) by core3.amsl.com (Postfix) with ESMTP id 0D12D28C47D for ; Tue, 30 Jun 2009 13:51:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qualcomm.com; i=vidyan@qualcomm.com; q=dns/txt; s=qcdkim; t=1246395092; x=1277931092; h=from:to:date:subject:thread-topic:thread-index: message-id:accept-language:content-language: x-ms-has-attach:x-ms-tnef-correlator:x-cr-puzzleid: x-cr-hashedpuzzle:acceptlanguage:content-type: content-transfer-encoding:mime-version:x-ironport-av; z=From:=20"Narayanan,=20Vidya"=20|To: =20"p2psip@ietf.org"=20|Date:=20Tue,=203 0=20Jun=202009=2013:50:56=20-0700|Subject:=20New=20draft =20on=20enhanced=20client=20operation=20for=20RELOAD |Thread-Topic:=20New=20draft=20on=20enhanced=20client=20o peration=20for=20RELOAD|Thread-Index:=20Acn5xHdjXSCOJeAyS HaET63vlRlGBw=3D=3D|Message-ID:=20 |Accept-Language:=20en-US|Content-Language:=20en-US |X-MS-Has-Attach:|X-MS-TNEF-Correlator:|x-cr-puzzleid:=20 {53A1ED96-BBD0-4C5F-90C6-84DE073FB385}|x-cr-hashedpuzzle: =20AEwD=20Al3w=20A0Iw=20A+kH=20BQqc=20BrC3=20C25v=20DLIQ =20D0L2=20EMwn=20Fu8a=0D=0A=20GKfu=20HBx5=20HeVF=20HpzV =0D=0A=20IW0X=3B1=3BcAAyAHAAcwBpAHAAQABpAGUAdABmAC4AbwByA GcA=3BSosha1_v1=3B7=3B{53A1ED96-BBD0-4C5F-90C6-84DE073FB3 85}=3BdgBpAGQAeQBhAG4AQABxAHUAYQBsAGMAbwBtAG0ALgBjAG8AbQA =3D=3BTue,=0D=0A=2030=20Jun=202009=2020:50:57=0D=0A=20GMT =3BTgBlAHcAIABkAHIAYQBmAHQAIABvAG4AIABlAG4AaABhAG4AYwBlAG QAIABjAGwAaQBlAG4AdAAgAG8AcABlAHIAYQB0AGkAbwBuACAAZgBvAHI AIABSAEUATABPAEEARAA=3D|acceptlanguage:=20en-US |Content-Type:=20text/plain=3B=20charset=3D"us-ascii" |Content-Transfer-Encoding:=20quoted-printable |MIME-Version:=201.0|X-IronPort-AV:=20E=3DMcAfee=3Bi=3D"5 300,2777,5662"=3B=20a=3D"20096226"; bh=PC2aav95aQ0X0XT7TZsIFwyrHhaGGnGCax9dikVtn2Q=; b=HaP4+GNqODjYbys+w5stojISa2SJdLxxCpe/4mCwaqKdMFJ8TOI2C21W 89pw9B/9ZvDxsi9JYkHfBFyxOW2KyaxmBmOBrCyfg95wHA1X7wPONfq5K wLLUzYZdOD9VuABwI1rE61bMeuO0ExLszlGYY2mS/ELBTVAxVFIKaSB68 c=; X-IronPort-AV: E=McAfee;i="5300,2777,5662"; a="20096226" Received: from pdmz-ns-mip.qualcomm.com (HELO ithilien.qualcomm.com) ([199.106.114.10]) by wolverine01.qualcomm.com with ESMTP/TLS/DHE-RSA-AES256-SHA; 30 Jun 2009 13:51:03 -0700 Received: from hamtaro.qualcomm.com (hamtaro.qualcomm.com [129.46.61.157]) by ithilien.qualcomm.com (8.14.2/8.14.2/1.0) with ESMTP id n5UKp28P024646 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Tue, 30 Jun 2009 13:51:02 -0700 Received: from nasanexhub05.na.qualcomm.com (nasanexhub05.na.qualcomm.com [129.46.134.219]) by hamtaro.qualcomm.com (8.14.2/8.14.2/1.0) with ESMTP id n5UKp04X018260 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT) for ; Tue, 30 Jun 2009 13:51:02 -0700 (PDT) Received: from nalasexhub03.na.qualcomm.com (10.47.130.45) by nasanexhub05.na.qualcomm.com (129.46.134.219) with Microsoft SMTP Server (TLS) id 8.1.358.0; Tue, 30 Jun 2009 13:50:59 -0700 Received: from NALASEXMB08.na.qualcomm.com ([10.47.16.12]) by nalasexhub03.na.qualcomm.com ([10.47.130.45]) with mapi; Tue, 30 Jun 2009 13:50:59 -0700 From: "Narayanan, Vidya" To: "p2psip@ietf.org" Date: Tue, 30 Jun 2009 13:50:56 -0700 Thread-Topic: New draft on enhanced client operation for RELOAD Thread-Index: Acn5xHdjXSCOJeAySHaET63vlRlGBw== Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-cr-puzzleid: {53A1ED96-BBD0-4C5F-90C6-84DE073FB385} x-cr-hashedpuzzle: AEwD Al3w A0Iw A+kH BQqc BrC3 C25v DLIQ D0L2 EMwn Fu8a GKfu HBx5 HeVF HpzV IW0X; 1; cAAyAHAAcwBpAHAAQABpAGUAdABmAC4AbwByAGcA; Sosha1_v1; 7; {53A1ED96-BBD0-4C5F-90C6-84DE073FB385}; dgBpAGQAeQBhAG4AQABxAHUAYQBsAGMAbwBtAG0ALgBjAG8AbQA=; Tue, 30 Jun 2009 20:50:57 GMT; TgBlAHcAIABkAHIAYQBmAHQAIABvAG4AIABlAG4AaABhAG4AYwBlAGQAIABjAGwAaQBlAG4AdAAgAG8AcABlAHIAYQB0AGkAbwBuACAAZgBvAHIAIABSAEUATABPAEEARAA= acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [P2PSIP] New draft on enhanced client operation for RELOAD X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Jun 2009 20:51:12 -0000 Hi, We have submitted a draft on enhanced client operation for RELOAD. It supp= orts the attachment of clients to arbitrary peers without needing applicati= on specific destination list population and it inherently provides support = for client mobility. =20 The draft can be found at http://www.ietf.org/internet-drafts/draft-vidya-p= 2psip-eclients-00.txt. Comments welcome. =20 Thanks, Vidya From shen.jiong@zte.com.cn Tue Jun 30 18:16:42 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CB8373A6861 for ; Tue, 30 Jun 2009 18:16:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.838 X-Spam-Level: X-Spam-Status: No, score=-101.838 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_DOUBLE_IP_LOOSE=0.76, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XDbPGKp44xd9 for ; Tue, 30 Jun 2009 18:16:42 -0700 (PDT) Received: from mx6.zte.com.cn (mx6.zte.com.cn [63.218.89.70]) by core3.amsl.com (Postfix) with ESMTP id 81B893A6814 for ; Tue, 30 Jun 2009 18:16:41 -0700 (PDT) Received: from [10.30.17.100] by mx6.zte.com.cn with surfront esmtp id 91102075036648; Wed, 1 Jul 2009 09:04:58 +0800 (CST) Received: from [10.30.3.19] by [10.30.17.100] with StormMail ESMTP id 53123.2075036648; Wed, 1 Jul 2009 09:10:36 +0800 (CST) Received: from notes_smtp.zte.com.cn ([10.30.1.239]) by mse2.zte.com.cn with ESMTP id n611H2S1081378 for ; Wed, 1 Jul 2009 09:17:02 +0800 (CST) (envelope-from shen.jiong@zte.com.cn) In-Reply-To: To: p2psip@ietf.org MIME-Version: 1.0 X-Mailer: Lotus Notes Release 6.5.6 March 06, 2007 Message-ID: From: shen.jiong@zte.com.cn Date: Wed, 1 Jul 2009 09:16:38 +0800 X-MIMETrack: Serialize by Router on notes_smtp/zte_ltd(Release 6.5.4|March 27, 2005) at 2009-07-01 09:16:55, Serialize complete at 2009-07-01 09:16:55 Content-Type: multipart/alternative; boundary="=_alternative 0006CD50482575E6_=" X-MAIL: mse2.zte.com.cn n611H2S1081378 Subject: [P2PSIP] New draft on content sharing usage for RELOAD X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Jul 2009 01:16:42 -0000 This is a multipart message in MIME format. --=_alternative 0006CD50482575E6_= Content-Type: text/plain; charset="US-ASCII" Hi all, We have submitted a draft on content sharing usage for RELOAD. It provides the functionality of distributing and fetching shared content efficiently to and from a P2P overlay network, which performs as Content Delivery Network and is service insensitive. The draft can be found at http://www.ietf.org/internet-drafts/draft-shen-p2psip-content-sharing-00.txt. Comments are welcome. Thanks, Jiong -------------------------------------------------------- ZTE Information Security Notice: The information contained in this mail is solely property of the sender's organization. This mail communication is confidential. Recipients named above are obligated to maintain secrecy and are not permitted to disclose the contents of this communication to others. This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the originator of the message. Any views expressed in this message are those of the individual sender. This message has been scanned for viruses and Spam by ZTE Anti-Spam system. --=_alternative 0006CD50482575E6_= Content-Type: text/html; charset="US-ASCII"
Hi all,

We have submitted a draft on content sharing usage for RELOAD. It provides the functionality of distributing and fetching shared content efficiently to and from a P2P overlay network, which performs as Content Delivery Network and is service insensitive.

The draft can be found at http://www.ietf.org/internet-drafts/draft-shen-p2psip-content-sharing-00.txt.  Comments are welcome.  


Thanks,
Jiong
 

--------------------------------------------------------
ZTE Information Security Notice: The information contained in this mail is solely property of the sender's organization. This mail communication is confidential. Recipients named above are obligated to maintain secrecy and are not permitted to disclose the contents of this communication to others.
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the originator of the message. Any views expressed in this message are those of the individual sender.
This message has been scanned for viruses and Spam by ZTE Anti-Spam system.
--=_alternative 0006CD50482575E6_=-- From melodysong@huawei.com Tue Jun 30 19:10:28 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3CDBD3A6AE6 for ; Tue, 30 Jun 2009 19:10:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.495 X-Spam-Level: X-Spam-Status: No, score=-0.495 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EgqDw5l-p3v2 for ; Tue, 30 Jun 2009 19:10:27 -0700 (PDT) Received: from szxga04-in.huawei.com (unknown [119.145.14.67]) by core3.amsl.com (Postfix) with ESMTP id B59463A6A7F for ; Tue, 30 Jun 2009 19:10:26 -0700 (PDT) Received: from huawei.com (szxga04-in [172.24.2.12]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KM200GC4ZDPG9@szxga04-in.huawei.com> for p2psip@ietf.org; Wed, 01 Jul 2009 10:10:37 +0800 (CST) Received: from huawei.com ([172.24.1.33]) by szxga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KM2001FXZDPPL@szxga04-in.huawei.com> for p2psip@ietf.org; Wed, 01 Jul 2009 10:10:37 +0800 (CST) Received: from s64081 ([10.164.12.15]) by szxml06-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KM2009URZDOZL@szxml06-in.huawei.com> for p2psip@ietf.org; Wed, 01 Jul 2009 10:10:37 +0800 (CST) Date: Wed, 01 Jul 2009 10:10:33 +0800 From: Song Haibin To: 'P2PSIP WG' Message-id: <007e01c9f9f1$1d9d4350$0f0ca40a@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 X-Mailer: Microsoft Office Outlook 11 Content-type: multipart/mixed; boundary="Boundary_(ID_NPvgObosNoR2NIBH0C0RBg)" Thread-index: Acn58R1M6jcxyzNVTjuVa1MZcP8DZA== Subject: [P2PSIP] P2PSIP Security Requirements Taken Out From draft-matuszewski-p2psip-security-requirements-04 X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Jul 2009 02:10:28 -0000 This is a multi-part message in MIME format. --Boundary_(ID_NPvgObosNoR2NIBH0C0RBg) Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Dear all, According to the comments from IETF 73 meeting in Minneapolis, the security requirements in the merged draft-matuszewski-p2psip-security-requirements-04 should be transferred to the base draft, and the remaining part will become an informational i-d on p2psip security analysis and tutorial. The authors of draft-matuszewski-p2psip-security-requirements have taken the security requirements out, and list it in the attached document. We had a few email exchange with the authors of the base draft several weeks ago, but not covered all the requirements. More discussion is welcome. Best Regards, Haibin Skype: alexsonghw --Boundary_(ID_NPvgObosNoR2NIBH0C0RBg) Content-type: application/msword; name="P2PSIP Security Requirements.doc" Content-transfer-encoding: base64 Content-disposition: attachment; filename="P2PSIP Security Requirements.doc" 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAAUwAAAAAAAAAA EAAAVQAAAAEAAAD+////AAAAAFQAAAD///////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ///////////////////////////////////////////////////////////////////////////s pcEAA2AJBAAA8FK/AAAAAAAAEAAAAAAABgAA/iwAAA4AYmpiastzy3MAAAAAAAAAAAAAAAAAAAAA AAAJBBYAMi4AAKkZAQCpGQEAOgwAAAAAAAAPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD//w8AAAAA AAAAAAD//w8AAAAAAAAAAAD//w8AAAAAAAAAAAAAAAAAAAAAAKQAAAAAAFAFAAAAAAAAUAUAAFAF AAAAAAAAUAUAAAAAAABQBQAAAAAAAFAFAAAAAAAAUAUAABQAAAAAAAAAAAAAAKQFAAD0AgAAYBMA AAAAAABgEwAAAAAAAGATAAA4AAAAmBMAADQAAADMEwAAHAAAAJgIAAAAAAAAt0UAAC4CAAD0EwAA AAAAAPQTAAAEAAAA+BMAAAAAAAD4EwAAAAAAAPgTAAAAAAAA8igAAAAAAADyKAAAAAAAAPIoAAAA AAAABkUAAAIAAAAIRQAAAAAAAAhFAAAAAAAACEUAAAAAAAAIRQAAAAAAAAhFAAAAAAAACEUAACQA AADlRwAAaAIAAE1KAABWAAAALEUAAEUAAAAAAAAAAAAAAAAAAAAAAAAAUAUAAAAAAADyKAAAAAAA AAAAAAAAAAAAAAAAAAAAAADQKAAAIgAAAPIoAAAAAAAA8igAAAAAAADyKAAAAAAAACxFAAAAAAAA AAAAAAAAAABQBQAAAAAAAFAFAAAAAAAA+BMAAAAAAAAAAAAAAAAAAPgTAADYFAAAcUUAABYAAABu KQAAAAAAAG4pAAAAAAAAbikAAAAAAADyKAAAIgAAAFAFAAAAAAAA+BMAAAAAAABQBQAAAAAAAPgT AAAAAAAABkUAAAAAAAAAAAAAAAAAAG4pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAA8igAAAAAAAAGRQAAAAAAAAAAAAAAAAAAbikAAAAAAABuKQAA /gAAAB5BAAAUAQAAUAUAAAAAAABQBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFkMAAAAAAAD4EwAAAAAAAOgTAAAMAAAAYB2GcO75 yQEAAAAAAAAAAGATAAAAAAAAFCkAACIAAAAyQgAAGAAAAAAAAAAAAAAABkUAAAAAAACHRQAAMAAA ALdFAAAAAAAASkIAAMwAAACjSgAAAAAAADYpAAAWAAAAo0oAADAAAAAWQwAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAW QwAAFAAAAKNKAAAAAAAAAAAAAAAAAABQBQAAAAAAACpDAADcAQAA8igAAAAAAADyKAAAAAAAAG4p AAAAAAAA8igAAAAAAADyKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8igA AAAAAADyKAAAAAAAAPIoAAAAAAAALEUAAAAAAAAsRQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAATCkAACIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPIoAAAA AAAA8igAAAAAAADyKAAAAAAAALdFAAAAAAAA8igAAAAAAADyKAAAAAAAAPIoAAAAAAAA8igAAAAA AAAAAAAAAAAAAJgIAAAAAAAAmAgAAAAAAACYCAAAJAcAALwPAACkAwAAmAgAAAAAAACYCAAAAAAA AJgIAAAAAAAAvA8AAAAAAABkBQAAJAAAAIgFAAAYAAAAoAUAAAQAAABQBQAAAAAAAFAFAAAAAAAA UAUAAAAAAABQBQAAAAAAAFAFAAAAAAAAUAUAAAAAAAD/////AAAAAAIADAEAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgICAg ICAgICAgICAgIFAyUFNJUCBTZWN1cml0eSBSZXF1aXJlbWVudHMgVGFrZW4gT3V0IEZyb20gZHJh ZnQtbWF0dXN6ZXdza2ktcDJwc2lwLXNlY3VyaXR5LXJlcXVpcmVtZW50cy0wNA0NMS4gVXNlciBz ZWN1cml0eSByZXF1aXJlbWVudHMNDVRoZSB1c2VyIHdhbnRzIGF2YWlsYWJsZSBhbmQgcmVsaWFi bGUgc2VydmljZSB0aGF0IGVuYWJsZXMgaGltIHRvIGludGVyYWN0IHdpdGggb3RoZXIgdXNlcnMg YW5kIHJlc291cmNlcyBpbiBhIHNlY3VyZSB3YXkuICBUaGlzIG1lYW5zIHRoYXQgdGhlIFAyUFNJ UCBzeXN0ZW0gTVVTVCBwcm92aWRlOg0NUmVxLiAxOiBMb29rdXAgYW5kIGRpc2NvdmVyeSBvZiB1 c2VycyBhbmQgcmVzb3VyY2VzIHRoYXQgaXMgc2VjdXJlIGFuZCByZWxpYWJsZS4gDShOb3RlOiBI b3dldmVyLCBpdCBpcyBub3QgY2xlYXIgdG8gd2hhdCBleHRlbnQgdGhlIHJlbGlhYmlsaXR5IGlz LCBhbmQgaXQgbWF5IGNvbXBsaWNhdGUgdGhlIHNvbHV0aW9uLikNDVJlcS4gMjogQ2VydGFpbnR5 IG9mIHVzZXIgYW5kIHJlc291cmNlIGlkZW50aXR5Ow0NUmVxLiAzOiBDb25maWRlbnRpYWxpdHkg YW5kIGludGVncml0eSBvZiBlbmQtdG8tZW5kIFJFTE9BRCBjb21tdW5pY2F0aW9uLiBUaGUgbXVs dGltZWRpYSBjb21tdW5pY2F0aW9uIHNob3VsZCBhbHNvIGJlIHNlY3VyZTsNDVJlcS4gNDogRWFz eSBhbmQgc2VjdXJlIGVucm9sbG1lbnQgdG8gdGhlIFAyUFNJUCBzeXN0ZW0sDQ1SZXEuIDU6IFNl Y3VyaXR5IG1lY2hhbmlzbSBzaG91bGQgbm90IGFkZCB0b28gbXVjaCBjb21wdXRhdGlvbmFsoGNv bXBsZXhpdHkNDTIuIFN5c3RlbSBzZWN1cml0eSByZXF1aXJlbWVudHM6DQ1SZXEuIDE6IFAyUFNJ UCBzZWN1cml0eSBNVVNUIGFkZHJlc3MgZGlmZmVyZW50IGFyY2hpdGVjdHVyZXOgZnJvbSBhIHNt YWxsIGFkLWhvYyBuZXR3b3JrIHRvIGEgbmV0d29yayB3aXRoIGxhcmdlIG51bWJlciBvZiBuZXR3 b3JrIG5vZGVzIGFuZCB1c2VycywgZm9yIGV4YW1wbGUgd2l0aCBhbmQgd2l0aG91dCBlAG4AcgBv AGwAbQBlAG4AdAAgAHMAZQByAHYAZQByAHMALgANAA0AIAAgACAACP9SAEUATABPAEEARAAgAG0A YQB5ACAAYQBsAHIAZQBhAGQAeQAgAHMAdQBwAHAAbwByAHQAIAB0AGgAaQBzACwAIABiAHUAdAAg AGkAbgAgAHQAaABlACAAYgBhAHMAZQAgAGQAcgBhAGYAdAAgAHQAaABlAHIAZQAgAG0AYQB5ACAA YgBlACAAdABoAGUAIABwAG8AdABlAG4AdABpAGEAbAAgAHIAaQBzAGsAIAB0AGgAYQB0ACAAYQBm AHQAZQByACAAcwBvAG0AZQAgAGYAYQBpAGwAdQByAGUALAAgAGEAbABsACAAdABoAGUAcwBlACAA cABlAGUAcgBzACAAYwBvAG4AdABhAGMAdAAgAHQAaABlACAAZQBuAHIAbwBsAGwAbQBlAG4AdAAg AHMAZQByAHYAZQByACAAcwBpAG0AdQBsAHQAYQBuAGUAbwB1AHMAbAB5ACwAIAB3AGgAaQBjAGgA IAB3AGkAbABsACAAbQBhAGsAZQAgAHQAaABlACAAcwB5AHMAdABlAG0AIABjAG8AbABsAGEAcABz AGUAZAAsACAAdABoAGkAbgBrACAAYQBiAG8AdQB0ACAAdABoAGUAIABTAGsAeQBwAGUAIABlAHYA ZQBuAHQACf8NACAAIAAgAA0AIAAgACAAUgBlAHEALgAgADIAOgAgAEUAeABpAHMAdABpAG4AZwAg AHMAZQBjAHUAcgBpAHQAeQAgAG0AZQBjAGgAYQBuAGkAcwBtAHMAIABTAEgATwBVAEwARAAgAGIA ZQAgAHUAcwBlAGQAIABhAHMAIABtAHUAYwBoACAAYQBzACAAcABvAHMAcwBpAGIAbABlACAAdABv ACAAcAByAG8AdABlAGMAdAAgAFAAMgBQAFMASQBQACAAZgB1AG4AYwB0AGkAbwBuAHMALAAgAGEA bgBkACAAYQB2AG8AaQBkACAAdABoAGUAIABuAGUAZQBkACAAdABvACAAcwB0AGEAbgBkAGEAcgBk AGkAegBlACAAbgBlAHcAIABtAGUAYwBoAGEAbgBpAHMAbQBzAC4ADQANACAAIAAgACgAUgBFAEwA TwBBAEQAIABNAEEAWQAgAGEAbAByAGUAYQBkAHkAIABzAHUAcABwAG8AcgB0ACAAdABoAGkAcwAs ACAAdwBpAHQAaAAgAGUAeABpAHMAdABpAG4AZwAgAFAASwBJACAAYQBuAGQAIABUAEwAUwAvAEQA VABMAFMAKQANAA0AIAAgACAAUgBlAHEALgAgADMAOgAgAFMAZQBjAHUAcgBpAHQAeSByZXF1aXJl bWVudHMgb24gdGhlIGJhc2UgUDJQIGFsZ29yaXRobSAoZS5nLiwgREhUIGltcGxlbWVudGF0aW9u cykgdXNlZCBpbiBQMlBTSVAgU0hPVUxEIGJlIG1pbmltaXplZCBhbmQgc2VjdXJpdHkgbWVjaGFu aXNtIHNob3VsZCBub3QgcHJldmVudCB1c2luZyBvdGhlciBvdmVybGF5IGFsZ29yaXRobXMuDQ0g ICBSZXEuIDQ6IFRoZSB1c2VyIGlkIHNob3VsZCBiZSB1bmlxdWUgYW5kIHNlY3VyZS4gT25seSB0 aGUgY3JlYXRvciBvZiB0aGUgdXNlciBpZCBzaG91bGQgYmUgYWJsZSB0byBtb2RpZnkgaXQgYW5k IGl0IHNob3VsZCBiZSBwb3NzaWJsZSB0byBhc3NlcnQgYW4gaWRlbnRpdHkNDSAgIFJlcS4gNTog SXQgTVVTVCBiZSBwb3NzaWJsZSB0byBhdXRoZW50aWNhdGUgdXNlcnMgYW5kIFAyUFNJUCBuZXR3 b3JrIGVudGl0aWVzLg0NICAgUmVxLiA2OiBUaGUgc3lzdGVtIG11c3QgYmUgYWJsZSB0byBpZGVu dGlmeSByZXBlYXQgYW5kIGRlbGF5IGF0dGFja3MNICAgDSAgIFJlcS4gNzogVGhlIFAyUFNJUCBz ZWN1cml0eSBNVVNUIHN1cHBvcnQgaW50ZWdyaXR5IHByb3RlY3Rpb24gb2YgdGhlIGRhdGEgYmVp bmcgaW5zZXJ0ZWQgb3IgcmV0cmlldmVkIHRvL2Zyb20gYW4gb3ZlcmxheS4NDSAgIFJlcS4gODog VGhlIFAyUFNJUCBuZXR3b3JrIGVudGl0aWVzIE1VU1QgYmUgcHJvdmlkZWQgd2l0aCBhbiBvcHRp b24gdG8gZW5jcnlwdCBkYXRhIGV4Y2hhbmdlZCB3aXRoIG90aGVyIFAyUFNJUCBuZXR3b3JrIGVu dGl0aWVzLg0NICAgUmVxLiA5OiBPbmx5IGF1dGhvcml6ZWQgdXNlcnMgYW5kIFAyUFNJUCBuZXR3 b3JrIGVudGl0aWVzIE1VU1QgYmUgYWJsZSB0byBqb2luIHRoZSBQMlBTSVAgc3lzdGVtIGFuZCBp bnNlcnQsIG1vZGlmeSwgZGVsZXRlIG9yIG92ZXJ3cml0ZSBQMlBTSVAgcmVzb3VyY2UgKHVzZXIp IHJlY29yZHMgaW4gdGhlIFAyUFNJUCBzeXN0ZW0uDQ0gICBSZXEuIDEwOiBJbiB0aGUgc2l0dWF0 aW9ucyB3aGVyZSBtYW55IHVzZXJzIG9yIFAyUFNJUCBuZXR3b3JrIGVudGl0aWVzIHJlZ2lzdGVy IHRoZSBzYW1lIHJlc291cmNlIGluIHRoZSBQMlBTSVAgb3ZlcmxheSwgZWFjaCBlbnRpdHkgTVVT VCBoYXZlIG93bmVyc2hpcCByaWdodHMgb25seSB0byBpdHMgb3duIHBhcnQgb2YgYSByZXNvdXJj ZSByZWNvcmQuDQ0gICBSZXEuIDExOiBBbiBvd25lciBvZiBQMlBTSVAgcmVzb3VyY2UgKHVzZXIp IHJlY29yZCBNQVkgaW5kaWNhdGUgd2hpY2ggdXNlcnMgb3IgbmV0d29yayBlbnRpdGllcyBjYW4g cmV0cmlldmUsIG1vZGlmeSwgYW5kIGRlbGV0ZSBkYXRhIHN0b3JlZCBpbiB0aGVpciBQMlBTSVAg cmVzb3VyY2UgKHVzZXIpIHJlY29yZHMuDQ0gICBSZXEuIDEyAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYAAA8IAAA2CAAA NwgAADsIAABsCAAAcQgAAHYIAAB/CAAAjAgAABMJAAAUCQAAOgkAAD8JAABACQAAQQkAAEMJAACA CQAAiQkAAIoJAACLCQAA797N3sPesaCxj4CPdmtga49SgEMAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAdFmixZ1oAQ0oUAEtIAABPSgMAXkoDAGFKFABvKAEaFmjNZ48AQ0oUAEtIAABPSgMA XkoDAGFKFAAAFRZouiA2AENKFABPSgMAYUoUAG8oARUWaDpHMABDShQAT0oDAGFKFABvKAESFmg6 RzAAQ0oUAE9KAwBhShQAAB0WaM1njwBDShQAS0gAAE9KAwBeSgMAYUoUAG8oASAVaGpLdAAWaGpL dABDShQAS0gAAE9KAwBeSgMAYUoUAAAgFmjdWxIANQiBQ0oUAEtIAABPSgMAXkoDAGFKFABvKAEA IxVo6xzMABZoakt0ADUIgUNKFABLSAAAT0oDAF5KAwBhShQAEhZoQEuEADBKEwBtSAkAc0gJAAAg FmhAS4QANQiBQ0oUAEtIAABPSgMAXkoDAGFKFABvKAEAIBZobm8DADUIgUNKFABLSAAAT0oDAF5K AwBhShQAbygBACAWaDNEOgA1CIFDShQAS0gAAE9KAwBeSgMAYUoUAG8oARQABgAAbQgAAG4IAACM CAAAjQgAADkJAAA6CQAAjAkAAPQJAAD1CQAAJgoAACcKAAClCgAApgoAAN8KAADgCgAALAsAAC0L AABOCwAA6QAAAAAAAAAAAAAAAN0AAAAAAAAAAAAAAADdAAAAAAAAAAAAAAAA3QAAAAAAAAAAAAAA AN0AAAAAAAAAAAAAAADdAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADFAAAA AAAAAAAAAAAAuQAAAAAAAAAAAAAAAMUAAAAAAAAAAAAAAACtAAAAAAAAAAAAAAAAnQAAAAAAAAAA AAAAAK0AAAAAAAAAAAAAAADFAAAAAAAAAAAAAAAArQAAAAAAAAAAAAAAAN0AAAAAAAAAAAAAAADd AAAAAAAAAAAAAAAAAAAAABAAAAMkAA+EOwE3JAA4JABIJABehDsBYSQAZ2SsX+kADAAAAyQANyQA OCQASCQAYSQAZ2QdIMAADAAAAyQANyQAOCQASCQAYSQAZ2QDd20ADAAAAyQANyQAOCQASCQAYSQA Z2SsX+kADAAAAyQANyQAOCQASCQAYSQAZ2Q6RzAADAAAAyQANyQAOCQASCQAYSQAZ2RqS3QAFgAA AyQAD4SKARGEdv43JAA4JABIJABXRDz/XoSKAWCEdv5hJABnZEBLhAAAEgAGAADuLAAA/SwAAP39 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAQAAQECiwkAAIwJAACNCQAAkwkA AL8JAADKCQAA8wkAAPQJAAD1CQAA+gkAAPsJAAD8CQAA/gkAAAUKAAAkCgAAJQoAACYKAAAnCgAA LAoAAC4KAAAvCgAA8OHw4dDhwa+lmo+afnBhwU9FjzoAAAAAAAAAAAAAAAAVFmhROrUAQ0oUAE9K AwBhShQAbygBEhZoHSDAAENKFABPSgMAYUoUAAAjFWi6IDYAFmisX+kAQ0oUAEtIAABPSgMAXkoD AGFKFABvKAEdFmgdIMAAQ0oUAEtIAABPSgMAXkoDAGFKFABvKAEaFmgdIMAAQ0oUAEtIAABPSgMA XkoDAGFKFAAAIBVoakt0ABZoakt0AENKFABLSAAAT0oDAF5KAwBhShQAABUWaLogNgBDShQAT0oD AGFKFABvKAEVFmgDd20AQ0oUAE9KAwBhShQAbygBEhZoA3dtAENKFABPSgMAYUoUAAAjFWhqS3QA FmisX+kAQ0oUAEtIAABPSgMAXkoDAGFKFABvKAEdFmhqS3QAQ0oUAEtIAABPSgMAXkoDAGFKFABv KAEgFWixZ1oAFmixZ1oAQ0oUAEtIAABPSgMAXkoDAGFKFAAAHRZosWdaAENKFABLSAAAT0oDAF5K AwBhShQAbygBHRZo32UtAENKFABLSAAAT0oDAF5KAwBhShQAbygBABQvCgAAMAoAAFAKAABvCgAA cAoAAHEKAAByCgAAowoAAKQKAAClCgAApgoAAKsKAACuCgAArwoAAN4KAADfCgAA4AoAAOUKAADm CgAA5woAAOkKAAABCwAAIAsAACsLAAAsCwAALQsAAC8LAAD69vL69vr2+uDOxLmunY58xK65rnh0 eGKdUQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFmhCJ1kANQiBQ0oUAEtIAABPSgMAXkoD AGFKFABvKAEAIxVorF/pABZoJBbJAENKFABLSAAAT0oDAF5KAwBhShQAbygBBhZoFgMTAAAGFmgk FskAACMVaLogNgAWaKxf6QBDShQAS0gAAE9KAwBeSgMAYUoUAG8oAR0WaGpLdABDShQAS0gAAE9K AwBeSgMAYUoUAG8oASAVaGpLdAAWaGpLdABDShQAS0gAAE9KAwBeSgMAYUoUAAAVFmgdIMAAQ0oU AE9KAwBhShQAbygBFRZouiA2AENKFABPSgMAYUoUAG8oARIWaB0gwABDShQAT0oDAGFKFAAAIxVo HSDAABZorF/pAENKFABLSAAAT0oDAF5KAwBhShQAbygBIxVorF/pABZoakt0AENKFABLSAAAT0oD AF5KAwBhShQAbygBBhZoHSDAAAAGFmh2BCUAAAkWaB0gwABvKAEAGi8LAAAwCwAAMQsAADcLAABA CwAATAsAAE0LAABOCwAATwsAAFQLAABVCwAAVwsAAMQLAADhCwAA5AsAAP8LAAAkDAAAJgwAAC4M AAAwDAAAbgwAADINAADv3sy7zKyaiX90Z2BcV2BTS4maPIkAAAAAAAAAAAAAAB0WaLwXdABDShQA S0gAAE9KAwBeSgMAYUoUAG8oAQ8VaE4YEAAWaE4YEABvKAEGFmiAHeEAAAkWaK9AZwBvKAEGFmiv QGcAAAwVaE4YEAAWaE4YEAAAGBVoakt0ABZoakt0AENKFABPSgMAYUoUAAAVFmhOGBAAQ0oUAE9K AwBhShQAbygBEhZoThgQAENKFABPSgMAYUoUAAAgFWhqS3QAFmhqS3QAQ0oUAEtIAABPSgMAXkoD AGFKFAAAIxVoakt0ABZoakt0AENKFABLSAAAT0oDAF5KAwBhShQAbygBHRZoaniIAENKFABLSAAA T0oDAF5KAwBhShQAbygBIBZoAxucADUIgUNKFABLSAAAT0oDAF5KAwBhShQAbygBACMVaGp4iAAW aGpLdAA1CIFDShQAS0gAAE9KAwBeSgMAYUoUACAWaOsGtAA1CIFDShQAS0gAAE9KAwBeSgMAYUoU AG8oAQAgFmiJMzMANQiBQ0oUAEtIAABPSgMAXkoDAGFKFABvKAEVTgsAAE8LAAAmDAAAKAwAABIO AAAaDgAATg8AAFAPAADaDwAA3A8AALIQAACzEAAAUxEAAFQRAACmEQAApxEAAO8RAADzAAAAAAAA AAAAAAAA6gAAAAAAAAAAAAAAAPMAAAAAAAAAAAAAAADUAAAAAAAAAAAAAAAA8wAAAAAAAAAAAAAA AL4AAAAAAAAAAAAAAADzAAAAAAAAAAAAAAAA8wAAAAAAAAAAAAAAAPMAAAAAAAAAAAAAAACoAAAA AAAAAAAAAAAA8wAAAAAAAAAAAAAAAJIAAAAAAAAAAAAAAADzAAAAAAAAAAAAAAAA8wAAAAAAAAAA AAAAAPMAAAAAAAAAAAAAAADzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYAAAMkAA+ELAER hNT+NyQAOCQASCQAV0Rq/16ELAFghNT+YSQAZ2RTTs8AFgAAAyQAD4QsARGE1P43JAA4JABIJABX RGr/XoQsAWCE1P5hJABnZBgDOQAWAAADJAAPhCwBEYTU/jckADgkAEgkAFdEav9ehCwBYITU/mEk AGdkYgVOABYAAAMkAA+E9AERhAz+NyQAOCQASCQAV0QG/16E9AFghAz+YSQAZ2TNPWkAAAgSAA+E aAFehGgBZ2ROGBAADAAAAyQANyQAOCQASCQAYSQAZ2RqS3QAABAyDQAAbA0AAPYNAAD4DQAADg4A ABAOAAAqDgAALA4AAFAPAABYDwAAbg8AAH4PAACWDwAA7A8AAO4PAABsEAAAsBAAALsQAAC8EAAA vhAAAL8QAAAXEQAAIhEAACcRAABSEQAAXBEAAF0RAACbEQAA8uHS4cDhseHyopOi4YThgOFx4Wxo ZF9o4VDhAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRZoqy+9AENKFABLSAAAT0oDAF5KAwBhShQAbygB CRZoIFx5AG8oAQYWaCBceQAABhZoB0eYAAAJFmj+EZsAbygBHRZodH8gAENKFABLSAAAT0oDAF5K AwBhShQAbygBBhZoGAM5AAAdFmimd/wAQ0oUAEtIAABPSgMAXkoDAGFKFABvKAEdFmgdDyMAQ0oU AEtIAABPSgMAXkoDAGFKFABvKAEdFmjvRgcAQ0oUAEtIAABPSgMAXkoDAGFKFABvKAEdFmjNPWkA Q0oUAEtIAABPSgMAXkoDAGFKFABvKAEjFWhqS3QAFmhqS3QAQ0oUAEtIAABPSgMAXkoDAGFKFABv KAEdFmibPDoAQ0oUAEtIAABPSgMAXkoDAGFKFABvKAEgFWhqS3QAFmhqS3QAQ0oUAEtIAABPSgMA XkoDAGFKFAAAGhZo70YHAENKFABLSAAAT0oDAF5KAwBhShQAG5sRAACcEQAArxEAALARAACyEQAA sxEAAO4RAAD7EQAA/BEAAHASAABxEgAAeRIAAHoSAAD/EgAAABMAAMITAADDEwAAkRQAAJIUAABL FQAATBUAAAAsAADsLAAA7SwAAO4sAADvLAAA8SwAAPIsAAD0LAAA9SwAAPcsAAD4LAAA+iwAAPss AAD8LAAA/SwAAP4sAADw39Dfy8ff0N+239Df0N/Q39Df0LTfn42FgYWBhYGFgXyBeI0AAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYWaB8QuAAA CRZoGRzkAG8oAQYWaBkc5AAADwNqAAAAABZoGRzkAFUIASMVaBQG7gAWaOkDkgBDShQAS0gAAE9K AwBeSgMAYUoUAG8oASkDagAAAAAWaA8KfABPSgQAUUoEAFUIAWFKFQBtSAAEbkgABG8oAXUIAQNV CAEgFWirL70AFmhqS3QAQ0oUAEtIAABPSgMAXkoDAGFKFAAABhZosCGHAAAJFmiwIYcAbygBHRZo qy+9AENKFABLSAAAT0oDAF5KAwBhShQAbygBIBVoakt0ABZoakt0AENKFABLSAAAT0oDAF5KAwBh ShQAAB0WaFNOzwBDShQAS0gAAE9KAwBeSgMAYUoUAG8oAQAk7xEAAPMRAABwEgAAcRIAAPYSAAD3 EgAAuBMAALkTAACHFAAAiBQAAEEVAABCFQAA7iwAAPAsAADxLAAA8ywAAPQsAAD2LAAA9ywAAPks AAD6LAAA+ywAAPwsAAD9LAAA/iwAAPMAAAAAAAAAAAAAAADzAAAAAAAAAAAAAAAA8wAAAAAAAAAA AAAAAOcAAAAAAAAAAAAAAADzAAAAAAAAAAAAAAAA8wAAAAAAAAAAAAAAAPMAAAAAAAAAAAAAAADz AAAAAAAAAAAAAAAA8wAAAAAAAAAAAAAAAPMAAAAAAAAAAAAAAADzAAAAAAAAAAAAAAAA2wAAAAAA AAAAAAAAANkAAAAAAAAAAAAAAADZAAAAAAAAAAAAAAAA2QAAAAAAAAAAAAAAANkAAAAAAAAAAAAA AADZAAAAAAAAAAAAAAAA2QAAAAAAAAAAAAAAANkAAAAAAAAAAAAAAADZAAAAAAAAAAAAAAAA0QAA AAAAAAAAAAAAANkAAAAAAAAAAAAAAADZAAAAAAAAAAAAAAAA2wAAAAAAAAAAAAAAAAAAAAAAAAAH DwADJANhJANnZFswNwAAAQAADAAAAyQANyQAOCQASCQAYSQAZ2QUBu4ADAAAAyQANyQAOCQASCQA YSQAZ2QfKxAADAAAAyQANyQAOCQASCQAYSQAZ2RqS3QAABgAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADogSXQgU0hPVUxEIGJlIHBvc3NpYmxl IHRvIGxpbWl0IHRoZSBpbXBhY3Qgb2YgYmFkbHkgYmVoYXZpbmcgUDJQU0lQIG5vZGVzIG9uIHRo ZSBvdmVyYWxsIHN5c3RlbSBzZWN1cml0eS4gIFRoZXJlIFNIT1VMRCBiZSBhbiBvcHRpb24gdG8g aWRlbnRpZnkgbWFsZnVuY3Rpb25pbmcgb3IgYmFkbHkgYmVoYXZpbmcgbm9kZXMsIGFuZCBleGNs dWRlIG9yIHJlamVjdCB0aGVtIGZyb20gdGhlIFAyUFNJUCBzeXN0ZW0uCA0DDQ0EDQ0DDQ0EDQ0N DQ0NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAAxkDgBMlACAB+wgi4gsMZBIbAIByKw CAcjkKAFJJCgBSWwAAAXsFMDGLDgAwyQqQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGAhQAEgABAJwADwAEAAAAAwAAAAAABAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABWAABA 8f8CAFYADAAAAAAAAAAAAAYATgBvAHIAbQBhAGwAAAALAAAAAyQDMSQAYSQDACQAQ0oVAEtIAgBQ SgMAX0gBBGFKGABtSAkEbkgECHNICQR0SAQIAAAAAAAAAAAAAAAAAAAAAAAARABBQPL/oQBEAAwB AAAAAAAAAAAWAEQAZQBmAGEAdQBsAHQAIABQAGEAcgBhAGcAcgBhAHAAaAAgAEYAbwBuAHQAAAAA AFIAaQDz/7MAUgAMAQAAAAAAAAAADABUAGEAYgBsAGUAIABOAG8AcgBtAGEAbAAAABwAF/YDAAA0 1gYAAQoDbAA01gYAAQUDAABh9gMAAAIACwAAACgAawD0/8EAKAAAAQAAAAAAAAAABwBOAG8AIABM AGkAcwB0AAAAAgAAAAAAAABEAB9AAQDyAEQADAQAAFswNwAAAAYASABlAGEAZABlAHIAAAAWAA8A AyQBDcYIAAI5EHIgAQJHJABhJAEIAENKEgBhShIARAAgQAEAAgFEAAwEAABbMDcAAAAGAEYAbwBv AHQAZQByAAAAFgAQAAMkAA3GCAACORByIAECRyQAYSQACABDShIAYUoSAFoA/k8BABIBWgAMAAAA WzA3AAAAAwD+VjdoD18AACUAEQADJAEGJAESZGgBAQATpFAAFKRQADEkATckADgkAEgkAGEkAQAT AEtIAABPSgQAUUoEAGFKFQBoCAAAZgD+TwEAIgFmAAwAAABOGBAAAAAQAG0AcwBvAGwAaQBzAHQA cABhAHIAYQBnAHIAYQBwAGgAAAATABIAAyQAD4TQAjEkAV6E0AJhJAAAGABDShYAS0gAAE9KBQBR SgUAXkoDAGFKFgBEAP5PogAxAUQADAAAAEBLhAAAAAMAaAAxADEAAAAmABEIgBgIADUIgTwIgENK GABPSgYAUUoGAFwIgV5KBgBhShgAbygAAAAAAEoMAAAFAAAuAAAEAP////8CAAAABCAAAP//AQAi JqMAAAAAAAIgAAD//wIAIiajAAAAAAAAAAAApgcAAEoMAAAAAAEAAAABAAAAAAAAAAAAAAAAAG0A AABuAAAAjAAAAI0AAAA5AQAAOgEAAIwBAAD0AQAA9QEAACYCAAAnAgAApQIAAKYCAADfAgAA4AIA ACwDAAAtAwAATgMAAE8DAAATBAAAFAQAAAkFAAANBQAApwUAAKgFAADtBQAA7gUAALIGAACzBgAA UwcAAFQHAACmBwAApwcAAO8HAADzBwAAcAgAAHEIAAD2CAAA9wgAALgJAAC5CQAAhwoAAIgKAABB CwAAQgsAAEYMAABLDAAABP8AAHIgAADMCwYABP8AAHIgAADmBQMABP8AAHIgAADmBQMABP8AAHIg AADmBQMABP8AAHIgAADMCwYABP8AAHIgAADmBQMABP8AAHIgAADmBQMABP8AAHIgAADMCwYABP8A AHIgAADmBQMABP8AAHIgAADmBQMABP8AAHIgAADmBQMABP8AAHIgAADMCwYABP8AAHIgAADmBQMA BP8AAHIgAADmBQMABP8AAHIgAADmBQMABP8AAHIgAADmBQMABP8AAHIgAADmBQMABP8AAHIgAADm BQMABP8AAHIgAADmBQMABP8AAHIgAACyEQkABP8AAHIgAADmBQMABP8AAHIgAACyEQkABP8AAHIg AADmBQMABP8AAHIgAADMCwYABP8AAHIgAADmBQMABP8AAHIgAADmBQMABP8AAHIgAADmBQMABP8A AHIgAACyEQkABP8AAHIgAADmBQMABP8AAHIgAADMCwYABP8AAHIgAADmBQMABP8AAHIgAADmBQMA BP8AAHIgAADmBQMABP8AAHIgAADmBQMABP8AAHIgAADmBQMABP8AAHIgAADMCwYABP8AAHIgAADm BQMABP8AAHIgAADMCwYABP8AAHIgAADmBQMABP8AAHIgAACyEQkABP8AAHIgAADmBQMABP8AAHIg AACyEQkABP8AAHIgAADmBQMABP8AAHIgAACyEQkABP8AAHIgAADmBQMABv8AAHIgAACyEQkAAAEA AHIgAABqAQIAAAAAAG0AAABuAAAAjAAAAI0AAAA5AQAAOgEAAIwBAAD0AQAA9QEAACYCAAAnAgAA pQIAAKYCAADfAgAA4AIAACwDAAAtAwAATgMAAE8DAAATBAAAFAQAAAkFAAANBQAApwUAAKgFAADt BQAA7gUAALIGAACzBgAAUwcAAFQHAACmBwAApwcAAO8HAADzBwAAcAgAAHEIAAD2CAAA9wgAALgJ AAC5CQAAhwoAAIgKAABBCwAAQgsAADoMAAA8DAAAPQwAAD8MAABADAAAQgwAAEMMAABFDAAARgwA AEcMAABIDAAASwwAAJgAAAAAAAAAAAAAAACAAAAAgAAAAIAAAAAAAAGYAAAAADAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAEjAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAAAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAAAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAAAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAAAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA ADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAA MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAw AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAAAwAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAEAAAAAAAAACAAAAAgAAAAIAAAAAAAAGYAAAAADAAAAAA AAAAgAAAAIAAAAAAAAAAAIAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAAMAAAAAAA AACAAAAAgAAAAAAAAAAAgACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAAAwAAAAAAAA AIAAAACAAAAAAAAAAACAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAAADAAAAAAAAAA gAAAAIAAAAAAAAAAAIAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAaIsAMAoAAAAAAAAAAQAA AAIAAAAAAAAAAABTAwAAAABtAAAAjAAAAI0AAAA5AQAAOgEAAPQBAAD1AQAAJgIAACcCAAClAgAA pgIAAN8CAADgAgAALAMAAC0DAABOAwAATwMAABMEAACoBQAA7QUAAO4FAACyBgAAswYAAFMHAABU BwAApgcAAKcHAADvBwAASwwAAJoAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAAeYAAAAADAAAAAA AAAAgAAAAIAAAAAAAAAAAAAHmgAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAB5oAAAAAMAAAAAAA AACAAAAAgAAAAAAAAAAAAAeaAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAHmgAFIAAwAAAAAAAA AIAAAACAAAAAAAAAAAAAB5oAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAAeaAAUgADABAAAAAAAA gAAAAIAAAAAAAAAAAAAHmgAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAB5oABSAAMAIAAAAAAACA AAAAgAAAAAAAAAAAAAeaAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAHmgAFIAAwAwAAAAAAAIAA AACAAAAAAAAAAAAAB5oAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAAeaAAUgADAEAAAAAAAAgAAA AIAAAAAAAAAAAAAHmgAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAB5oAAAAAMAAAAAAAAACAAAAA gAAAAAAAAAAAAAeaAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAHmgAIIBIwAAAAAAAAAIAAAACA AAAAAAAAAACAB2qLADAVMAAAAAAAAAEAAAAKAAAAFgAAABxMJAdqiwAwFTAAAAAAAAABAAAACQAA AAAAAAAAAAAHaosAMBUwAAAAAAAAAgAAAAcAAAAAAAAAAAAAB2qLADAAMAAAAAAAAAEAAAAFAAAA AAAAAAAAAAdqiwAwADAAAAAAAAABAAAABQAAAAAAAAAAAAAHaosAMAAwAAAAAAAAAQAAAAUAAAAA AAAAAAAAB2qLADAbMAAAAAAAAAEAAAAJAAAAAAAAAAAAAAdqiwAwADAAAAAAAAABAAAABAAAAAAA AAAAAAAHaosAMAAwAAAAAAAAAQAAAAUAAAAAAAAAAAAAB2qLADAAMAAAAAAAAAEAAAAFAAAAAAAA AAAAAAeaAAAAABAAAAAAAAAAgAAAAIAAAACAAAAAgAMHAAAAAAMAAAAGAAAABgAAAAkAAAAMAAAA DAAAAAwAAAAOAAAADgAAAA4AAAAOAAAADgAAABEAAAAABgAAiwkAAC8KAAAvCwAAMg0AAJsRAAD+ LAAACwAAAA4AAAAPAAAAEAAAABIAAAATAAAAAAYAAE4LAADvEQAA/iwAAAwAAAARAAAAFAAAAAAG AAD9LAAADQAAABEAAAAPAADwQAAAAAAABvAgAAAAAgwAAAMAAAADAAAAAgAAAAIAAAADAAAAAQAA AAEAAABAAB7xEAAAAP//AAAAAP8AgICAAPcAABAADwAC8DYUAAAgAAjwCAAAAAIAAAACBAAADwAD 8NQTAAAPAATwKAAAAAEACfAQAAAAAAAAAAAAAAAAAAAAAAAAAAIACvAIAAAAAAQAAAUAAAAPAATw nBMAAKIECvAIAAAAAgQAAAAKAAAzAAvwXhMAAIDDGgAAAIHDMhMAAL8DAgACAEQAdABzAFMAaABh AHAAZQBOAGEAbQBlAAAARQAyADEARwA0AEAARQA3AEAAQwAwADEANQBFADUANQA5ADYAOQBAAEUA MwA5ADEANwA5ADUAOQBAAEQAMgA0ADAAOAA0AEgAOwAzADgANgAwADgAYgBSADcANQAxADkAMAAh ACEAIQAhACEAIQBCAEkASABPAEAAXQByADcANQAxADkAMAAhACEAIQAxAEAAQAA1ADEAQgAxAEcA MQAxADAANwBEAEIANgAwAEQANwBHADIAUQAzAFEAUgBIAFEAIQBSAGQAYgB0AHMAaAB1AHgAIQBT AGQAcAB0AGgAcwBkAGwAZABvAHUAcgAvAGUAbgBiACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEA IQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAhACEAIQAh ACEAIQAhACEAIQAhACEAIQAhADEAIQBSAAAAEwAi8QYAAAC/AQAAYAAAABDwBAAAAAAAAAAAABHw BAAAAAEAAAAPAATwQgAAABIACvAIAAAAAQQAAAAOAABTAAvwHgAAAL8BAAAQAMsBAAAAAP8BAAAI AAQDCQAAAD8DAQABAAAAEfAEAAAAAQAAAAEPAALwSAAAABAACPAIAAAAAQAAAAAIAAAPAAPwMAAA AA8ABPAoAAAAAQAJ8BAAAAAAAAAAAAAAAAAAAAAAAAAAAgAK8AgAAAAACAAABQAAADgMAABKDAAA AgQAAAAAAAAAAAAAAQAAAAEAAAB0oAAAAAAAAAAAAAAAAPwEAAABBQAAOgwAAEsMAAAEAAcAHAAH AAcAAAAAAGwAAAAXBAAACAUAADoMAABLDAAABAAHAAUABwAHAAAAAABsAAAAOgwAAEsMAAAEAAcA BwAAAAAAAAAAAEILAAA5DAAAOgwAAEsMAAAEAAcAAQAHAAcACQCfFuYISBS+F/8P/w//D/8P/w// D/8P/w//DxAAGzpKD3J7qK3/D/8P/w//D/8P/w//D/8P/w8AANQmAxpIFL4X/w//D/8P/w//D/8P /w//D/8PAADBLR0ntgwCRv8P/w//D/8P/w//D/8P/w//DxAAVFnLKnjAAOX/D/8P/w//D/8P/w// D/8P/w8QACVlgDNSpWLd/w//D/8P/w//D/8P/w//D/8PEACYTyRP3vyOkP8P/w//D/8P/w//D/8P /w//DxAA+zB7UbCN4vX/D/8P/w//D/8P/w//D/8P/w8AAC4qUHJSpWLd/w//D/8P/w//D/8P/w// D/8PAAABAAAAFxAAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4TfAhGEXP4VxgUAAd8CBl6E3wJghFz+ T0oHAFFKBwBvKACHaAAAAACISAAAAQBu8AAAAAAXAAAAAAAAAAAAAAAAAAAAAAAAABMYAAAPhEcE EYSY/hXGBQABRwQGXoRHBGCEmP5PSgcAUEoDAFFKBwBeSgMAbygAAQBs8AEAAAAXkAAAAAAAAAAA AAAAAAAAAAAAABUYAAAPhCcGEYRc/hXGBQABJwYGXoQnBmCEXP5PSgcAUUoHAG8oAIdoAAAAAIhI AAABAHXwAQAAABeQAAAAAAAAAAAAAAAAAAAAAAAAFRgAAA+EywcRhFz+FcYFAAHLBwZehMsHYIRc /k9KBwBRSgcAbygAh2gAAAAAiEgAAAEAbPABAAAAF5AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4Rv CRGEXP4VxgUAAW8JBl6EbwlghFz+T0oHAFFKBwBvKACHaAAAAACISAAAAQBu8AEAAAAXkAAAAAAA AAAAAAAAAAAAAAAAABUYAAAPhBMLEYRc/hXGBQABEwsGXoQTC2CEXP5PSgcAUUoHAG8oAIdoAAAA AIhIAAABAHXwAQAAABeQAAAAAAAAAAAAAAAAAAAAAAAAFRgAAA+EtwwRhFz+FcYFAAG3DAZehLcM YIRc/k9KBwBRSgcAbygAh2gAAAAAiEgAAAEAbPABAAAAF5AAAAAAAAAAAAAAAAAAAAAAAAAVGAAA D4RbDhGEXP4VxgUAAVsOBl6EWw5ghFz+T0oHAFFKBwBvKACHaAAAAACISAAAAQBu8AEAAAAXkAAA AAAAAAAAAAAAAAAAAAAAABUYAAAPhP8PEYRc/hXGBQAB/w8GXoT/D2CEXP5PSgcAUUoHAG8oAIdo AAAAAIhIAAABAHXwAQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+EpAERhFz+FcYFAAGkAQZe hKQBYIRc/odoAAAAAIhIAAACAAAALgABAAAABAABAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4RIAxGE XP4VxgUAAUgDBl6ESANghFz+h2gAAAAAiEgAAAIAAQApAAEAAAACAgEAAAAAAAAAAAAAAAAAAAAA AAoYAAAPhOwEEYRc/hXGBQAB7AQGXoTsBGCEXP6HaAAAAACISAAAAgACAC4AAQAAAAAAAQAAAAAA AAAAAAAAAAAAAAAAChgAAA+EkAYRhFz+FcYFAAGQBgZehJAGYIRc/odoAAAAAIhIAAACAAMALgAB AAAABAABAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4Q0CBGEXP4VxgUAATQIBl6ENAhghFz+h2gAAAAA iEgAAAIABAApAAEAAAACAgEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhNgJEYRc/hXGBQAB2AkGXoTY CWCEXP6HaAAAAACISAAAAgAFAC4AAQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+EfAsRhFz+ FcYFAAF8CwZehHwLYIRc/odoAAAAAIhIAAACAAYALgABAAAABAABAAAAAAAAAAAAAAAAAAAAAAAK GAAAD4QgDRGEXP4VxgUAASANBl6EIA1ghFz+h2gAAAAAiEgAAAIABwApAAEAAAACAgEAAAAAAAAA AAAAAAAAAAAAAAoYAAAPhMQOEYRc/hXGBQABxA4GXoTEDmCEXP6HaAAAAACISAAAAgAIAC4AAQAA ABcQAAAAAAAAAAAAAAAAAAAAAAAAFRgAAA+E3wIRhFz+FcYFAAHfAgZehN8CYIRc/k9KBwBRSgcA bygAh2gAAAAAiEgAAAEAbvAAAAAAFwAAAAAAAAAAAAAAAAAAAAAAAAATGAAAD4RHBBGEmP4VxgUA AUcEBl6ERwRghJj+T0oHAFBKAwBRSgcAXkoDAG8oAAEAbPABAAAAFxAAAAAAAAAAAAAAAAAAAAAA AAAVGAAAD4QnBhGEXP4VxgUAAScGBl6EJwZghFz+T0oHAFFKBwBvKACHaAAAAACISAAAAQB18AEA AAAXEAAAAAAAAAAAAAAAAAAAAAAAABUYAAAPhMsHEYRc/hXGBQABywcGXoTLB2CEXP5PSgcAUUoH AG8oAIdoAAAAAIhIAAABAGzwAQAAABcQAAAAAAAAAAAAAAAAAAAAAAAAFRgAAA+EbwkRhFz+FcYF AAFvCQZehG8JYIRc/k9KBwBRSgcAbygAh2gAAAAAiEgAAAEAbvABAAAAFxAAAAAAAAAAAAAAAAAA AAAAAAAVGAAAD4QTCxGEXP4VxgUAARMLBl6EEwtghFz+T0oHAFFKBwBvKACHaAAAAACISAAAAQB1 8AEAAAAXEAAAAAAAAAAAAAAAAAAAAAAAABUYAAAPhLcMEYRc/hXGBQABtwwGXoS3DGCEXP5PSgcA UUoHAG8oAIdoAAAAAIhIAAABAGzwAQAAABcQAAAAAAAAAAAAAAAAAAAAAAAAFRgAAA+EWw4RhFz+ FcYFAAFbDgZehFsOYIRc/k9KBwBRSgcAbygAh2gAAAAAiEgAAAEAbvABAAAAFxAAAAAAAAAAAAAA AAAAAAAAAAAVGAAAD4T/DxGEXP4VxgUAAf8PBl6E/w9ghFz+T0oHAFFKBwBvKACHaAAAAACISAAA AQB18AEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAoQAAAPhNACEYSY/l6E0AJghJj+h2gAAAAAiEgA AAIAAAAuAAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhKAFEYSY/hXGBQABoAUGXoSgBWCE mP6HaAAAAACISAAAAgABAC4AAQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+EcAgRhJj+FcYF AAFwCAZehHAIYISY/odoAAAAAIhIAAACAAIALgABAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAKGAAA D4RACxGEmP4VxgUAAUALBl6EQAtghJj+h2gAAAAAiEgAAAIAAwAuAAEAAAAAAAEAAAAAAAAAAAAA AAAAAAAAAAoYAAAPhBAOEYSY/hXGBQABEA4GXoQQDmCEmP6HaAAAAACISAAAAgAEAC4AAQAAAAAA AQAAAAAAAAAAAAAAAAAAAAAAChgAAA+E4BARhJj+FcYFAAHgEAZehOAQYISY/odoAAAAAIhIAAAC AAUALgABAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4SwExGEmP4VxgUAAbATBl6EsBNghJj+ h2gAAAAAiEgAAAIABgAuAAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhIAWEYSY/hXGBQAB gBYGXoSAFmCEmP6HaAAAAACISAAAAgAHAC4AAQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+E UBkRhJj+FcYFAAFQGQZehFAZYISY/odoAAAAAIhIAAACAAgALgAAAAAAFwAAAAAAAAAAAAAAAAAA AAAAAAATGAAAD4SjAhGEmP4VxgUAAaMCBl6EowJghJj+T0oHAFBKAwBRSgcAXkoDAG8oAAEAbPAB AAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4SDBBGEXP4VxgUAAYMEBl6EgwRghFz+T0oHAFFK BwBvKACHaAAAAACISAAAAQBu8AEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAABUYAAAPhCcGEYRc/hXG BQABJwYGXoQnBmCEXP5PSgcAUUoHAG8oAIdoAAAAAIhIAAABAHXwAQAAABeAAAAAAAAAAAAAAAAA AAAAAAAAFRgAAA+EywcRhFz+FcYFAAHLBwZehMsHYIRc/k9KBwBRSgcAbygAh2gAAAAAiEgAAAEA bPABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4RvCRGEXP4VxgUAAW8JBl6EbwlghFz+T0oH AFFKBwBvKACHaAAAAACISAAAAQBu8AEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAABUYAAAPhBMLEYRc /hXGBQABEwsGXoQTC2CEXP5PSgcAUUoHAG8oAIdoAAAAAIhIAAABAHXwAQAAABeAAAAAAAAAAAAA AAAAAAAAAAAAFRgAAA+EtwwRhFz+FcYFAAG3DAZehLcMYIRc/k9KBwBRSgcAbygAh2gAAAAAiEgA AAEAbPABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4RbDhGEXP4VxgUAAVsOBl6EWw5ghFz+ T0oHAFFKBwBvKACHaAAAAACISAAAAQBu8AEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAABUYAAAPhP8P EYRc/hXGBQAB/w8GXoT/D2CEXP5PSgcAUUoHAG8oAIdoAAAAAIhIAAABAHXwAQAAAAAAAQAAAAAA AAAAAAAAAAAAAAAAChgAAA+EpAERhFz+FcYFAAGkAQZehKQBYIRc/odoAAAAAIhIAAACAAAAKQAB AAAABAABAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4RIAxGEXP4VxgUAAUgDBl6ESANghFz+h2gAAAAA iEgAAAIAAQApAAEAAAACggEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhOwEEYRc/hXGBQAB7AQGXoTs BGCEXP6HaAAAAACISAAAAgACAC4AAQAAAACAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+EkAYRhFz+ FcYFAAGQBgZehJAGYIRc/odoAAAAAIhIAAACAAMALgABAAAABIABAAAAAAAAAAAAAAAAAAAAAAAK GAAAD4Q0CBGEXP4VxgUAATQIBl6ENAhghFz+h2gAAAAAiEgAAAIABAApAAEAAAACggEAAAAAAAAA AAAAAAAAAAAAAAoYAAAPhNgJEYRc/hXGBQAB2AkGXoTYCWCEXP6HaAAAAACISAAAAgAFAC4AAQAA AACAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+EfAsRhFz+FcYFAAF8CwZehHwLYIRc/odoAAAAAIhI AAACAAYALgABAAAABIABAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4QgDRGEXP4VxgUAASANBl6EIA1g hFz+h2gAAAAAiEgAAAIABwApAAEAAAACggEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhMQOEYRc/hXG BQABxA4GXoTEDmCEXP6HaAAAAACISAAAAgAIAC4AAQAAAAMQAQAAAAAAAAAAAAAAAAAAAAAADRgA AA+E3wIRhFz+FcYFAAHfAgZehN8CYIRc/m8oAIdoAAAAAIhIAAACAAAALgAAAAAAFwAAAAAAAAAA AAAAAAAAAAAAAAATGAAAD4RHBBGEmP4VxgUAAUcEBl6ERwRghJj+T0oHAFBKAwBRSgcAXkoDAG8o AAEAbPABAAAAF5AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4QnBhGEXP4VxgUAAScGBl6EJwZghFz+ T0oHAFFKBwBvKACHaAAAAACISAAAAQB18AEAAAAXkAAAAAAAAAAAAAAAAAAAAAAAABUYAAAPhMsH EYRc/hXGBQABywcGXoTLB2CEXP5PSgcAUUoHAG8oAIdoAAAAAIhIAAABAGzwAQAAABeQAAAAAAAA AAAAAAAAAAAAAAAAFRgAAA+EbwkRhFz+FcYFAAFvCQZehG8JYIRc/k9KBwBRSgcAbygAh2gAAAAA iEgAAAEAbvABAAAAF5AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4QTCxGEXP4VxgUAARMLBl6EEwtg hFz+T0oHAFFKBwBvKACHaAAAAACISAAAAQB18AEAAAAXkAAAAAAAAAAAAAAAAAAAAAAAABUYAAAP hLcMEYRc/hXGBQABtwwGXoS3DGCEXP5PSgcAUUoHAG8oAIdoAAAAAIhIAAABAGzwAQAAABeQAAAA AAAAAAAAAAAAAAAAAAAAFRgAAA+EWw4RhFz+FcYFAAFbDgZehFsOYIRc/k9KBwBRSgcAbygAh2gA AAAAiEgAAAEAbvABAAAAF5AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4T/DxGEXP4VxgUAAf8PBl6E /w9ghFz+T0oHAFFKBwBvKACHaAAAAACISAAAAQB18AEAAAADAAEAAAAAAAAAAAAAAAAAAAAAAAoY AAAPhKQBEYRc/hXGBQABpAEGXoSkAWCEXP6HaAAAAACISAAAAgAAAC4AAQAAAAQAAQAAAAAAAAAA AAAAAAAAAAAAChgAAA+ESAMRhFz+FcYFAAFIAwZehEgDYIRc/odoAAAAAIhIAAACAAEAKQABAAAA AgIBAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4TsBBGEXP4VxgUAAewEBl6E7ARghFz+h2gAAAAAiEgA AAIAAgAuAAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhJAGEYRc/hXGBQABkAYGXoSQBmCE XP6HaAAAAACISAAAAgADAC4AAQAAAAQAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+ENAgRhFz+FcYF AAE0CAZehDQIYIRc/odoAAAAAIhIAAACAAQAKQABAAAAAgIBAAAAAAAAAAAAAAAAAAAAAAAKGAAA D4TYCRGEXP4VxgUAAdgJBl6E2AlghFz+h2gAAAAAiEgAAAIABQAuAAEAAAAAAAEAAAAAAAAAAAAA AAAAAAAAAAoYAAAPhHwLEYRc/hXGBQABfAsGXoR8C2CEXP6HaAAAAACISAAAAgAGAC4AAQAAAAQA AQAAAAAAAAAAAAAAAAAAAAAAChgAAA+EIA0RhFz+FcYFAAEgDQZehCANYIRc/odoAAAAAIhIAAAC AAcAKQABAAAAAgIBAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4TEDhGEXP4VxgUAAcQOBl6ExA5ghFz+ h2gAAAAAiEgAAAIACAAuAAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhKQBEYRc/hXGBQAB pAEGXoSkAWCEXP6HaAAAAACISAAAAgAAACkAAQAAAAQAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+E SAMRhFz+FcYFAAFIAwZehEgDYIRc/odoAAAAAIhIAAACAAEAKQABAAAAAgIBAAAAAAAAAAAAAAAA AAAAAAAKGAAAD4TsBBGEXP4VxgUAAewEBl6E7ARghFz+h2gAAAAAiEgAAAIAAgAuAAEAAAAAAAEA AAAAAAAAAAAAAAAAAAAAAAoYAAAPhJAGEYRc/hXGBQABkAYGXoSQBmCEXP6HaAAAAACISAAAAgAD AC4AAQAAAAQAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+ENAgRhFz+FcYFAAE0CAZehDQIYIRc/odo AAAAAIhIAAACAAQAKQABAAAAAgIBAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4TYCRGEXP4VxgUAAdgJ Bl6E2AlghFz+h2gAAAAAiEgAAAIABQAuAAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhHwL EYRc/hXGBQABfAsGXoR8C2CEXP6HaAAAAACISAAAAgAGAC4AAQAAAAQAAQAAAAAAAAAAAAAAAAAA AAAAChgAAA+EIA0RhFz+FcYFAAEgDQZehCANYIRc/odoAAAAAIhIAAACAAcAKQABAAAAAgIBAAAA AAAAAAAAAAAAAAAAAAAKGAAAD4TEDhGEXP4VxgUAAcQOBl6ExA5ghFz+h2gAAAAAiEgAAAIACAAu AAoAAACfFuYIAAAAAAAAAAAAAAAAVFnLKgAAAAAAAAAAAAAAANQmAxoAAAAAAAAAAAAAAACYTyRP AAAAAAAAAAAAALgNJWWAMwAAAAAAAAAAAAAAAPswe1EAAAAAAAAAAAAAAAAbOkoPAAAAAAAAAAAA AAAAwS0dJwAAAADUTQEKCQD+AC4qUHIAAAAAAAAAAAAAAADBLR0nAAAAAAAAAAAAAAAA//////// //////////////////////////////////8BAAAA0KMSAAEAAAARAAAAAQAAABIAAAABAAAAk6MS AAEAAACU/mExAQAAAFX6yjABAAAAFgAAAAEAAAAXAAAAAQAAABgAKxz/////////////CQAAAAAA AAAAAAAAAAAAAAAAAAAAAP//CQAAABIAAwAJBKQEdkIFAAkEAQAJBAMACQQFAAkEAQAJBAMACQQF AAkEAAAAABIA5mwQrxkACQQbAAkEDwAJBBkACQQbAAkEDwAJBBkACQQbAAkEEgB2JnjjAwAJBAUA CQQBAAkEAwAJBAUACQQBAAkEAwAJBAUACQQSABEACQQZAAkEGwAJBA8ACQQZAAkEGwAJBA8ACQQZ AAkEGwAJBBIAFQAJBKQEdkIFAAkEAQAJBAMACQQFAAkEAQAJBAMACQQFAAkEAAAAAAEAaiSxJQAA AAAAAAAAAAECAAIAcQAAAAQAAAAIAAAA5QAAAAAAAABwAAAAPh0DAG5vAwDvRgcATlMKAE4YEAAf KxAACigRAN1bEgAWAxMAvh0XAPJEGQArFB8AmiQfACZZHwB0fyAAOGghAB0PIwB0VCMAdgQlAGou JQDfZS0AOkcwAMgEMgBNDDMAiTMzALogNgBbMDcAGAM5APBIOQCbPDoAM0Q6AMhCOwCcMTwABXE9 ANQyRQCpDkcAYgVOANQqVQA4R1cAQidZALFnWgDTbF0ARzlgACkPYgD+YmYAr0BnANxVaADNPWkA MmhtAAN3bQC8F3QAakt0AMpldAAgXHkANwh7AA8KfAAHKX4A9Qd/AIsqgAADVoIAQEuEAEdahACw IYcAaniIAN9UigDFLIsAzWePAChsjwBEJZAA6QOSAFE4kgAcNpYAB0eYAP4RmwADG5wAlk+hAKVt oQCAGaQAikqlAM5npQALV60AWiezAOsGtAB7F7QAUTq1APcMtgAfELgA6yG6ANYjvQCrL70AHSDA ACQWyQDrHMwAwE3OAFNOzwC/FNAAsBLVAD4o1QA2PtkAe1TdAK1x3gCAHeEAGRzkAGB45QCXdOYA twbnAKxf6QDaPOoAFhzsABQG7gAeNfEA1nz1AKZ3/AD/QAGAAQAAAAAAAAAAAEwkAQoBAAEAAAAA AAAAAAAAAAAAAAAAAAJAAAAAAAAAAAAEAAAABQAAAAYAAEwLAABKDAAAUAAAEABAAABQAAAMAAAA AFAAAA4AAAAAUAAAIABAAABQAABYAEAAAP//AQAAAAcAVQBuAGsAbgBvAHcAbgD//wEACAAAAAAA AAAAAAAA//8BAAAAAAD//wAAAgD//wAAAAD//wAAAgD//wAAAAAIAAAARxaQAQAAAgIGAwUEBQID BId6ACAAAACACAAAAAAAAAD/AQAAAAAAAFQAaQBtAGUAcwAgAE4AZQB3ACAAUgBvAG0AYQBuAAAA NRaQAQIABQUBAgEHBgIFBwAAAAAAAAAQAAAAAAAAAAAAAACAAAAAAFMAeQBtAGIAbwBsAAAAMyaQ AQAAAgsGBAICAgICBId6ACAAAACACAAAAAAAAAD/AQAAAAAAAEEAcgBpAGEAbAAAADsGkAGGAwIB BgADAQEBAQEDAAAAAAAOCBAAAAAAAAAAAQAEAAAAAACLW1NPAABTAGkAbQBTAHUAbgAAAGcmkAEA GAILBQMEBQQCAgSvAACgSiAAQAAAAAAAAAAAEQEAAAAAAABGAHIAdQB0AGkAZwBlAHIATgBlAHgA dAAgAEwAVAAgAFIAZQBnAHUAbABhAHIAAABWAGUAcgBkAGEAbgBhAAAAVwSQAQAIAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMAYQBsAGkAYgByAGkAAABUAGkAbQBlAHMAIABOAGUA dwAgAFIAbwBtAGEAbgAAAD81kAEAAAIHAwkCAgUCBASHOgAgAAAAAAAAAAAAAAAA/wEAAAAAAABD AG8AdQByAGkAZQByACAATgBlAHcAAAA7BpABAgAFAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAA AIAAAAAAVwBpAG4AZwBkAGkAbgBnAHMAAAAgAAQAMQiIGAAApAEAAGgBAAAAAJTD1mZzCtdmAAAA AG4AMQAAANMBAABnCgAAAgAGAAAABAADEBYAAADTAQAAZwoAAAIABgAAABYAAAAAAAAAIQMAAAAA AAADAC0AEwAhACkALAAuADoAOwA/AF0AfQCoALcAxwLJAhUgFiAZIB0gJiA2IgEwAjADMAUwCTAL MA0wDzARMBUwFzAB/wL/B/8J/wz/Dv8a/xv/H/89/0D/XP9d/17/4P8AAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKABbAHsAtwAYIBwgCDAKMAww DjAQMBQwFjAI/w7/O/9b/+H/5f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAegBbQAnACCgB4EAAAQABkAZAAAABkAAAA0DAAA NAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEABQAAAAAAAAAA AAAAAAAAAAIAAAAAAAAAAAAEMoNRAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhQ AAAAAAnw/w8BAAE/AACoAwAA////f////3////9/////f////3////9/////f8UsiwAAAAAAMgAA AAAAAAAAAAAAAAAAAAAA//8SAAAAAAAAAAAAAAAAAAAACwBTAG8AbgBnACAASABhAGkAYgBpAG4A CwBTAG8AbgBnACAASABhAGkAYgBpAG4AAAAAAAAAAAAAAAAAAAAAAAAAAAAwAAAABgAAAAkAAAAA AAwAAQAMAAIADAADAAwABAAMAAUADAAGAAwABwAMAAgADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/v8AAAUB AgAAAAAAAAAAAAAAAAAAAAAAAQAAAOCFn/L5T2gQq5EIACsns9kwAAAAdAEAABEAAAABAAAAkAAA AAIAAACYAAAAAwAAAKQAAAAEAAAAsAAAAAUAAADEAAAABgAAANAAAAAHAAAA3AAAAAgAAADwAAAA CQAAAAQBAAASAAAAEAEAAAoAAAAwAQAADAAAADwBAAANAAAASAEAAA4AAABUAQAADwAAAFwBAAAQ AAAAZAEAABMAAABsAQAAAgAAAKgDAAAeAAAABAAAAAAAAAAeAAAABAAAAAAAAAAeAAAADAAAAFNv bmcgSGFpYmluAB4AAAAEAAAAAAAAAB4AAAAEAAAAAAAAAB4AAAAMAAAATm9ybWFsLmRvdAAAHgAA AAwAAABTb25nIEhhaWJpbgAeAAAABAAAADExMAAeAAAAGAAAAE1pY3Jvc29mdCBPZmZpY2UgV29y ZAAAAEAAAAAAZmDYBgAAAEAAAAAAqGPNk/TJAUAAAAAAWhdi7vnJAQMAAAACAAAAAwAAANMBAAAD AAAAZwoAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7/AAAFAQIAAAAAAAAA AAAAAAAAAAAAAAIAAAAC1c3VnC4bEJOXCAArLPmuRAAAAAXVzdWcLhsQk5cIACss+a5IAQAABAEA AAwAAAABAAAAaAAAAA8AAABwAAAABQAAAJgAAAAGAAAAoAAAABEAAACoAAAAFwAAALAAAAALAAAA uAAAABAAAADAAAAAEwAAAMgAAAAWAAAA0AAAAA0AAADYAAAADAAAAOUAAAACAAAAqAMAAB4AAAAg AAAASHVhd2VpIFRlY2hub2xvZ2llcyBDby4sTHRkLgAAAAADAAAAFgAAAAMAAAAGAAAAAwAAADQM AAADAAAAqBkLAAsAAAAAAAAACwAAAAAAAAALAAAAAAAAAAsAAAAAAAAAHhAAAAEAAAABAAAAAAwQ AAACAAAAHgAAAAYAAABUaXRsZQADAAAAAQAAAABQAAAAAwAAAAAAAAAgAAAAAQAAADIAAAACAAAA OgAAAAEAAAACAAAABgAAAHNmbGFnAAIAAACoAwAAHgAAAAwAAAAxMjQ2NDEzMDc2AAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAgAAAAMAAAAEAAAABQAAAAYA AAAHAAAACAAAAAkAAAAKAAAACwAAAAwAAAANAAAADgAAAA8AAAAQAAAAEQAAABIAAAATAAAAFAAA ABUAAAAWAAAAFwAAAP7///8ZAAAAGgAAABsAAAAcAAAAHQAAAB4AAAAfAAAAIAAAACEAAAAiAAAA IwAAACQAAAAlAAAAJgAAACcAAAAoAAAAKQAAACoAAAArAAAALAAAAC0AAAAuAAAALwAAADAAAAAx AAAAMgAAADMAAAA0AAAANQAAADYAAAA3AAAAOAAAADkAAAA6AAAAOwAAADwAAAA9AAAA/v///z8A AABAAAAAQQAAAEIAAABDAAAARAAAAEUAAAD+////RwAAAEgAAABJAAAASgAAAEsAAABMAAAATQAA AP7////9////UAAAAP7////+/////v////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////1IAbwBvAHQAIABFAG4AdAByAHkAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWAAUB//////////8DAAAA BgkCAAAAAADAAAAAAAAARgAAAAAAAAAAAAAAAGByM3ju+ckBUgAAAAABAAAAAAAAMQBUAGEAYgBs AGUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A AgH/////BQAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYAAAA00oA AAAAAABXAG8AcgBkAEQAbwBjAHUAbQBlAG4AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAGgACAAEAAAD//////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAyLgAAAAAAAAUAUwB1AG0AbQBhAHIAeQBJAG4AZgBvAHIAbQBhAHQAaQBvAG4A AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAAIBBgAAAAQAAAD/////AAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAPgAAAAAQAAAAAAAABQBEAG8AYwB1AG0AZQBuAHQAUwB1AG0A bQBhAHIAeQBJAG4AZgBvAHIAbQBhAHQAaQBvAG4AAAAAAAAAAAAAADgAAgH///////////////8A AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGAAAAABAAAAAAAAABAEMAbwBtAHAA TwBiAGoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAC AP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxAAAA AAAAAEkAcgBtAFQAbwBvAGwASQBuAGYAbwBTAHQAcgBlAGEAbQAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAkAAIBAgAAAAcAAAD/////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAgAAAAwAAAAAAAAASQByAG0AVABvAG8AbABTAEwAZQB2AGUAbABJAG4AZgBvAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQAAgD///////////////8AAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAADAAAAEAAAAAAAAAABAAAA/v////7////+//////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////wEA/v8DCgAA/////wYJAgAAAAAAwAAAAAAA AEYfAAAATWljcm9zb2Z0IE9mZmljZSBXb3JkIERvY3VtZW50AAoAAABNU1dvcmREb2MAEAAAAFdv cmQuRG9jdW1lbnQuOAD0ObJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyBsyAQwAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgbMgEQ AAAAAAAAAAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUgBvAG8AdAAgAEUAbgB0AHIAeQAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYABQH//////////wMAAAAGCQIA AAAAAMAAAAAAAABGAAAAAAAAAAAAAAAAQItMHfH5yQFYAAAAwAIAAAAAAAAxAFQAYQBiAGwAZQAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgACAf// //8FAAAA/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgAAADTSgAAAAAA AFcAbwByAGQARABvAGMAdQBtAGUAbgB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAaAAIAAQAAAP//////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAADIuAAAAAAAABQBTAHUAbQBtAGEAcgB5AEkAbgBmAG8AcgBtAGEAdABpAG8AbgAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAgEGAAAABAAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAA+AAAAABAAAAAAAAABAAAAAgAAAAMAAAAEAAAABQAAAAYAAAAHAAAA CAAAAAkAAAAKAAAACwAAAAwAAAANAAAADgAAAA8AAAAQAAAAEQAAABIAAAATAAAAFAAAABUAAAAW AAAAFwAAAP7///8ZAAAAGgAAABsAAAAcAAAAHQAAAB4AAAAfAAAAIAAAACEAAAAiAAAAIwAAACQA AAAlAAAAJgAAACcAAAAoAAAAKQAAACoAAAArAAAALAAAAC0AAAAuAAAALwAAADAAAAAxAAAAMgAA ADMAAAA0AAAANQAAADYAAAA3AAAAOAAAADkAAAA6AAAAOwAAADwAAAA9AAAA/v///z8AAABAAAAA QQAAAEIAAABDAAAARAAAAEUAAAD+//////////////////////////////////////////////// /////////////////////////1cAAAD9/////v////7////+////VgAAAP////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////wEAAAD+/////v////7///8FAAAABgAAAAcAAAAI AAAACQAAAAoAAAD+//////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////////////////////////////////AAAAAAsAAAAAAAAACwAAAAAAAAALAAAAAAAAAB4Q AAABAAAAAQAAAAAMEAAAAgAAAB4AAAAGAAAAVGl0bGUAAwAAAAEAAAAAUAAAAAMAAAAAAAAAIAAA AAEAAAA0AAAAAgAAADwAAAABAAAAAgAAAAYAAABzZmxhZwACAAIAAACoAwAAHgAAAAwAAAAxMjQ2 NDEzMDc2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFAEQAbwBjAHUAbQBlAG4AdABTAHUAbQBtAGEAcgB5 AEkAbgBmAG8AcgBtAGEAdABpAG8AbgAAAAAAAAAAAAAAOAACAf///////////////wAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAACYAQAAAAAAAAEAQwBvAG0AcABPAGIAagAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASAAIA//////// ////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHEAAAAAAAAASQBy AG0AVABvAG8AbABJAG4AZgBvAFMAdAByAGUAYQBtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAACQAAgECAAAABwAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC AAAADAAAAAAAAABJAHIAbQBUAG8AbwBsAFMATABlAHYAZQBsAEkAbgBmAG8AAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAJAACAP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAMAAAAQAAAAAAAAAAEA/v8DCgAA/////wYJAgAAAAAAwAAAAAAAAEYfAAAA TWljcm9zb2Z0IE9mZmljZSBXb3JkIERvY3VtZW50AAoAAABNU1dvcmREb2MAEAAAAFdvcmQuRG9j dW1lbnQuOAD0ObJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyBsyAQwAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgbMgEQAAAAAAAA AAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+/wAA BQECAAAAAAAAAAAAAAAAAAAAAAACAAAAAtXN1ZwuGxCTlwgAKyz5rkQAAAAF1c3VnC4bEJOXCAAr LPmuSAEAAAQBAAAMAAAAAQAAAGgAAAAPAAAAcAAAAAUAAACYAAAABgAAAKAAAAARAAAAqAAAABcA AACwAAAACwAAALgAAAAQAAAAwAAAABMAAADIAAAAFgAAANAAAAANAAAA2AAAAAwAAADlAAAAAgAA AKgDAAAeAAAAIAAAAEh1YXdlaSBUZWNobm9sb2dpZXMgQ28uLEx0ZC4AAAAAAwAAABYAAAADAAAA BgAAAAMAAAA0DAAAAwAAAKgZCwALAAAA --Boundary_(ID_NPvgObosNoR2NIBH0C0RBg)-- From ekr@networkresonance.com Tue Jun 30 19:21:48 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id AE7623A67B4 for ; Tue, 30 Jun 2009 19:21:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.308 X-Spam-Level: X-Spam-Status: No, score=-0.308 tagged_above=-999 required=5 tests=[AWL=-0.326, BAYES_00=-2.599, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, HELO_MISMATCH_COM=0.553, HOST_MISMATCH_NET=0.311, RDNS_DYNAMIC=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kFFiRvvpQ31s for ; Tue, 30 Jun 2009 19:21:48 -0700 (PDT) Received: from kilo.networkresonance.com (74-95-2-169-SFBA.hfc.comcastbusiness.net [74.95.2.169]) by core3.amsl.com (Postfix) with ESMTP id 0D8373A65A6 for ; Tue, 30 Jun 2009 19:21:48 -0700 (PDT) Received: from kilo.local (localhost [127.0.0.1]) by kilo.networkresonance.com (Postfix) with ESMTP id 76D161C6002; Tue, 30 Jun 2009 19:22:19 -0700 (PDT) Date: Tue, 30 Jun 2009 19:22:19 -0700 From: Eric Rescorla To: Song Haibin In-Reply-To: <007e01c9f9f1$1d9d4350$0f0ca40a@china.huawei.com> References: <007e01c9f9f1$1d9d4350$0f0ca40a@china.huawei.com> User-Agent: Wanderlust/2.15.5 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII Message-Id: <20090701022219.76D161C6002@kilo.networkresonance.com> Cc: 'P2PSIP WG' Subject: Re: [P2PSIP] P2PSIP Security Requirements Taken Out From draft-matuszewski-p2psip-security-requirements-04 X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Jul 2009 02:21:48 -0000 At Wed, 01 Jul 2009 10:10:33 +0800, Song Haibin wrote: > > [1 ] > Dear all, > > According to the comments from IETF 73 meeting in Minneapolis, the security > requirements in the merged draft-matuszewski-p2psip-security-requirements-04 > should be transferred to the base draft, and the remaining part will become > an informational i-d on p2psip security analysis and tutorial. My memory of the discussion is a little different. Namely, that any security requirements that weren't already reflected in the RELOAD design would be discussed for appropriateness and merged into RELOAD if appropriate. Which of the requirements in this document do you believe fit that description? -Ekr From melodysong@huawei.com Tue Jun 30 20:01:19 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E6CCE3A6A68 for ; Tue, 30 Jun 2009 20:01:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.261 X-Spam-Level: X-Spam-Status: No, score=-1.261 tagged_above=-999 required=5 tests=[AWL=1.338, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z-hel-A+oO4w for ; Tue, 30 Jun 2009 20:01:19 -0700 (PDT) Received: from szxga03-in.huawei.com (szxga03-in.huawei.com [119.145.14.66]) by core3.amsl.com (Postfix) with ESMTP id 0B30C3A68D3 for ; Tue, 30 Jun 2009 20:01:19 -0700 (PDT) Received: from huawei.com (szxga03-in [172.24.2.9]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KM3000OY1QM5Y@szxga03-in.huawei.com> for p2psip@ietf.org; Wed, 01 Jul 2009 11:01:34 +0800 (CST) Received: from huawei.com ([172.24.1.33]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KM300HXL1QMJL@szxga03-in.huawei.com> for p2psip@ietf.org; Wed, 01 Jul 2009 11:01:34 +0800 (CST) Received: from s64081 ([10.164.12.15]) by szxml06-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KM30093F1QMZQ@szxml06-in.huawei.com> for p2psip@ietf.org; Wed, 01 Jul 2009 11:01:34 +0800 (CST) Date: Wed, 01 Jul 2009 11:01:34 +0800 From: Song Haibin In-reply-to: <20090701022219.76D161C6002@kilo.networkresonance.com> To: 'Eric Rescorla' Message-id: <009501c9f9f8$3df82cd0$0f0ca40a@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 X-Mailer: Microsoft Office Outlook 11 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Thread-index: Acn59CXmf0yzcVl/RROvGFgFDsZKZQAA7fBw Cc: 'P2PSIP WG' Subject: Re: [P2PSIP] P2PSIP Security Requirements Taken Out From draft-matuszewski-p2psip-security-requirements-04 X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Jul 2009 03:01:20 -0000 Hi Ekr, >-----Original Message----- >From: Eric Rescorla [mailto:ekr@networkresonance.com] >Sent: Wednesday, July 01, 2009 10:22 AM >To: Song Haibin >Cc: 'P2PSIP WG' >Subject: Re: [P2PSIP] P2PSIP Security Requirements Taken Out >From draft-matuszewski-p2psip-security-requirements-04 > >At Wed, 01 Jul 2009 10:10:33 +0800, >Song Haibin wrote: >> >> [1 ] >> Dear all, >> >> According to the comments from IETF 73 meeting in Minneapolis, the >> security requirements in the merged >> draft-matuszewski-p2psip-security-requirements-04 >> should be transferred to the base draft, and the remaining part will >> become an informational i-d on p2psip security analysis and tutorial. > >My memory of the discussion is a little different. Namely, >that any security requirements that weren't already reflected >in the RELOAD design would be discussed for appropriateness >and merged into RELOAD if appropriate. > Okay. >Which of the requirements in this document do you believe fit >that description? What about system security requirement 6, 11 and 12? -Haibin > >-Ekr > From ekr@networkresonance.com Tue Jun 30 20:15:43 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 678EC3A6A57 for ; Tue, 30 Jun 2009 20:15:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.288 X-Spam-Level: X-Spam-Status: No, score=-0.288 tagged_above=-999 required=5 tests=[AWL=-0.306, BAYES_00=-2.599, FH_HOST_EQ_D_D_D_D=0.765, FH_HOST_EQ_D_D_D_DB=0.888, HELO_MISMATCH_COM=0.553, HOST_MISMATCH_NET=0.311, RDNS_DYNAMIC=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kb4WjKzxXlKO for ; Tue, 30 Jun 2009 20:15:42 -0700 (PDT) Received: from kilo.networkresonance.com (74-95-2-169-SFBA.hfc.comcastbusiness.net [74.95.2.169]) by core3.amsl.com (Postfix) with ESMTP id 92FF33A68CF for ; Tue, 30 Jun 2009 20:15:42 -0700 (PDT) Received: from kilo.local (localhost [127.0.0.1]) by kilo.networkresonance.com (Postfix) with ESMTP id DDA881C6057; Tue, 30 Jun 2009 20:15:56 -0700 (PDT) Date: Tue, 30 Jun 2009 20:15:56 -0700 From: Eric Rescorla To: Song Haibin In-Reply-To: <009501c9f9f8$3df82cd0$0f0ca40a@china.huawei.com> References: <20090701022219.76D161C6002@kilo.networkresonance.com> <009501c9f9f8$3df82cd0$0f0ca40a@china.huawei.com> User-Agent: Wanderlust/2.15.5 (Almost Unreal) Emacs/22.3 Mule/5.0 (SAKAKI) MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka") Content-Type: text/plain; charset=US-ASCII Message-Id: <20090701031556.DDA881C6057@kilo.networkresonance.com> Cc: 'P2PSIP WG' Subject: Re: [P2PSIP] P2PSIP Security Requirements Taken Out From draft-matuszewski-p2psip-security-requirements-04 X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Jul 2009 03:15:43 -0000 At Wed, 01 Jul 2009 11:01:34 +0800, Song Haibin wrote: > >Which of the requirements in this document do you believe fit > >that description? > > What about system security requirement 6, 11 and 12? For those of you who can't read Word, these are: > Req. 6: The system must be able to identify repeat and delay attacks Well, these are both normal functions of a best-effort network, so I'm not sure how one would determine whether a node was misbehaving. > Req. 11: An owner of P2PSIP resource (user) record MAY indicate > which users or network entities can retrieve, modify, and delete > data stored in their P2PSIP resource (user) records. I actually think this is a bad idea. Previous experiences with trying to design access control systems (see WebDAV ACLs) have turned out to be really overcomplicated. As far as I can tell, this isn't necessary for the SIP use cases. > Req. 12: It SHOULD be possible to limit the impact of badly behaving > P2PSIP nodes on the overall system security. There SHOULD be an > option to identify malfunctioning or badly behaving nodes, and exclude > or reject them from the P2PSIP system. Hmm... It seems to me that this is already possible at least in some sense: you use short-lived certificates and then refuse to reissue their certificates. Did you have something else in mind? CRLs? -Ekr From melodysong@huawei.com Tue Jun 30 21:16:09 2009 Return-Path: X-Original-To: p2psip@core3.amsl.com Delivered-To: p2psip@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2A8253A67B4 for ; Tue, 30 Jun 2009 21:16:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.543 X-Spam-Level: X-Spam-Status: No, score=-0.543 tagged_above=-999 required=5 tests=[AWL=-0.048, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_COM=0.553, RDNS_NONE=0.1] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pZN8+dzDLSCH for ; Tue, 30 Jun 2009 21:16:08 -0700 (PDT) Received: from szxga02-in.huawei.com (unknown [119.145.14.65]) by core3.amsl.com (Postfix) with ESMTP id 43B543A69FE for ; Tue, 30 Jun 2009 21:16:08 -0700 (PDT) Received: from huawei.com (szxga02-in [172.24.2.6]) by szxga02-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KM3001YR575WN@szxga02-in.huawei.com> for p2psip@ietf.org; Wed, 01 Jul 2009 12:16:17 +0800 (CST) Received: from huawei.com ([172.24.1.24]) by szxga02-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0KM300E8S575UO@szxga02-in.huawei.com> for p2psip@ietf.org; Wed, 01 Jul 2009 12:16:17 +0800 (CST) Received: from s64081 ([10.164.12.15]) by szxml04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0KM300JYM570R1@szxml04-in.huawei.com> for p2psip@ietf.org; Wed, 01 Jul 2009 12:16:17 +0800 (CST) Date: Wed, 01 Jul 2009 12:16:12 +0800 From: Song Haibin In-reply-to: <20090701031556.DDA881C6057@kilo.networkresonance.com> To: 'Eric Rescorla' Message-id: <00a001c9fa02$adfae770$0f0ca40a@china.huawei.com> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 X-Mailer: Microsoft Office Outlook 11 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Thread-index: Acn5+kayE3TEPWG2SK2K+GUbBzhhKwABc3ng Cc: 'P2PSIP WG' Subject: Re: [P2PSIP] P2PSIP Security Requirements Taken Out From draft-matuszewski-p2psip-security-requirements-04 X-BeenThere: p2psip@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: Peer-to-Peer SIP working group discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Jul 2009 04:16:09 -0000 Hi Ekr, Thanks! Haibin >-----Original Message----- >From: Eric Rescorla [mailto:ekr@networkresonance.com] >Sent: Wednesday, July 01, 2009 11:16 AM >To: Song Haibin >Cc: 'Eric Rescorla'; 'P2PSIP WG' >Subject: Re: [P2PSIP] P2PSIP Security Requirements Taken Out >From draft-matuszewski-p2psip-security-requirements-04 > >At Wed, 01 Jul 2009 11:01:34 +0800, >Song Haibin wrote: >> >Which of the requirements in this document do you believe fit that >> >description? >> >> What about system security requirement 6, 11 and 12? > >For those of you who can't read Word, these are: > >> Req. 6: The system must be able to identify repeat and delay attacks > >Well, these are both normal functions of a best-effort >network, so I'm not sure how one would determine whether a >node was misbehaving. > > >> Req. 11: An owner of P2PSIP resource (user) record MAY >indicate which >> users or network entities can retrieve, modify, and delete >data stored >> in their P2PSIP resource (user) records. > >I actually think this is a bad idea. Previous experiences with >trying to design access control systems (see WebDAV ACLs) have >turned out to be really overcomplicated. As far as I can tell, >this isn't necessary for the SIP use cases. > As RELOAD is designed to support various usages. Other usages may have this requirement. For example, we can image group communication scenarios, only members of a group can retrieve and modify the files belonging to this group. I think ACL might work. Could you tell me what causes the WebDAV ACLs overcomplicated? > >> Req. 12: It SHOULD be possible to limit the impact of badly behaving >> P2PSIP nodes on the overall system security. There SHOULD be an >> option to identify malfunctioning or badly behaving nodes, >and exclude >> or reject them from the P2PSIP system. > >Hmm... It seems to me that this is already possible at least >in some sense: you use short-lived certificates and then >refuse to reissue their certificates. Did you have something >else in mind? CRLs? > I'm not sure about the solution here. I think it may be hard to determine the TTL for such kind shor-lived certificates. Misbehaving nodes still function in the overlay until its certificate expires. Too short TTL may overload the CA anyway. I don't know how CRLs work in the overlay, in a p2p fashion or in a c/s fashion. -Haibin >-Ekr >