From owner-radiusext@ops.ietf.org Wed Jun 1 02:27:13 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7ABC4E069E for ; Wed, 1 Jun 2011 02:27:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.324 X-Spam-Level: X-Spam-Status: No, score=-103.324 tagged_above=-999 required=5 tests=[AWL=0.274, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QkW21KYtrFXz for ; Wed, 1 Jun 2011 02:27:12 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 5532DE0694 for ; Wed, 1 Jun 2011 02:27:11 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QRhee-0009be-UP for radiusext-data0@psg.com; Wed, 01 Jun 2011 09:23:56 +0000 Received: from co300216-co-outbound.net.avaya.com ([198.152.13.100]) by psg.com with esmtps (TLSv1:SEED-SHA:128) (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QRheb-0009bK-1a for radiusext@ops.ietf.org; Wed, 01 Jun 2011 09:23:53 +0000 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AmoBALcD5k2HCzI1/2dsb2JhbABTglKUfQ+DM4sRd4hxoj8CmxyGIASVNYQPhjk X-IronPort-AV: E=Sophos;i="4.65,302,1304308800"; d="scan'208,217";a="282609200" Received: from unknown (HELO p-us1-erheast.us1.avaya.com) ([135.11.50.53]) by co300216-co-outbound.net.avaya.com with ESMTP; 01 Jun 2011 05:23:04 -0400 X-IronPort-AV: E=Sophos;i="4.65,302,1304308800"; d="scan'208,217";a="658306034" Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.11]) by p-us1-erheast-out.us1.avaya.com with ESMTP; 01 Jun 2011 05:23:04 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CC203D.825CBE41" Subject: RE: AD review of draft-ietf-radext-crypto-agility-requirements-06.txt Date: Wed, 1 Jun 2011 11:23:02 +0200 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: AD review of draft-ietf-radext-crypto-agility-requirements-06.txt Thread-Index: Acwfut8tpipgqkl7Rt+hJQ0nH6xR4gAgomaQ References: From: "Romascanu, Dan (Dan)" To: "Bernard Aboba" , Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: This is a multi-part message in MIME format. ------_=_NextPart_001_01CC203D.825CBE41 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable =20 =20 Hi, See in line.=20 Thanks and Regards, Dan From: Bernard Aboba [mailto:bernard_aboba@hotmail.com]=20 Sent: Tuesday, May 31, 2011 8:48 PM To: Romascanu, Dan (Dan); radiusext@ops.ietf.org Subject: RE: AD review of draft-ietf-radext-crypto-agility-requirements-06.txt =20 > T1. I am a little concerned by the fact that the second paragraph of > section 1.2 speaks in terms of 'compliance', 'unconditional compliance' > and 'conditional compliance' with 'this specification' which is actually > an Informational document. Is this really needed? We tend to avoid such > strict language in IETF documents.=20 [BA] This language appears to be boilerplate in AAA requirements RFCs and BCPs (see RFC 2989 Section 1.1, RFC 4962 Section 1.1, etc.) [[DR]] OK.=20 =20 > T3. Also in section 4.2 I see the following:=20 >=20 > In addition to the goals referred to above, [RFC4962] Section 2 > describes additional security requirements, which translate into the > following requirements for RADIUS crypto-agility solutions: >=20 > It may be my understanding but I could not find in section 2 of > [RFC4962] the requirements that translate into 'strong, fresh, session > key' and 'Limit key scope'. Can you explain me what I am missing?=20 [BA] Looks like a typo -- should this refer to Section 3? [[DR]] Yes - please correct.=20 =20 ------_=_NextPart_001_01CC203D.825CBE41 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

 

 

Hi,

See in line. =


Thanks and = Regards,

Dan

From:= = Bernard Aboba [mailto:bernard_aboba@hotmail.com]
Sent: = Tuesday, May 31, 2011 8:48 PM
To: Romascanu, Dan (Dan); = radiusext@ops.ietf.org
Subject: RE: AD review of = draft-ietf-radext-crypto-agility-requirements-06.txt

 


> = T1. I am a little concerned by the fact that the second paragraph = of
> section 1.2 speaks in terms of 'compliance', 'unconditional = compliance'
> and 'conditional compliance' with 'this = specification' which is actually
> an Informational document. Is = this really needed? We tend to avoid such
> strict language in = IETF documents.

[BA] This language appears to be boilerplate in = AAA requirements RFCs and BCPs (see RFC 2989 Section 1.1, RFC 4962 = Section 1.1, etc.)

[[DR]] OK.


 > T3. Also in section 4.2 I see the following:
>
> In = addition to the goals referred to above, [RFC4962] Section 2
> = describes additional security requirements, which translate into = the
> following requirements for RADIUS crypto-agility = solutions:
>
> It may be my understanding but I could not = find in section 2 of
> [RFC4962] the requirements that translate = into 'strong, fresh, session
> key' and 'Limit key scope'. Can you = explain me what I am missing?

[BA] Looks like a typo -- should = this refer to Section 3?

[[DR]] Yes – please correct.

 



------_=_NextPart_001_01CC203D.825CBE41-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Sat Jun 4 14:34:51 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1651721F84CB for ; Sat, 4 Jun 2011 14:34:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.001 X-Spam-Level: X-Spam-Status: No, score=-100.001 tagged_above=-999 required=5 tests=[NO_RELAYS=-0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QaQll01zBrhB for ; Sat, 4 Jun 2011 14:34:50 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id E164821F84CA for ; Sat, 4 Jun 2011 14:34:46 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QSyR1-000JHi-5w for radiusext-data0@psg.com; Sat, 04 Jun 2011 21:31:07 +0000 Received: from zinfandel.tools.ietf.org ([2001:1890:1112:1::2a]) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QSyQw-000JH4-95 for radiusext@ops.ietf.org; Sat, 04 Jun 2011 21:31:02 +0000 Received: from localhost ([::1] helo=zinfandel.tools.ietf.org) by zinfandel.tools.ietf.org with esmtp (Exim 4.75) (envelope-from ) id 1QSyQs-0003LD-NW; Sat, 04 Jun 2011 14:30:59 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: "radext issue tracker" X-Trac-Version: 0.11.7 Cc: radiusext@ops.ietf.org Auto-Submitted: auto-generated X-Mailer: Trac 0.11.7, by Edgewall Software To: mary.ietf.barnes@gmail.com X-Trac-Project: radext Date: Sat, 04 Jun 2011 21:30:58 -0000 Reply-To: radiusext@ops.ietf.org X-URL: http://tools.ietf.org/radext/ Subject: [radext] #100: Gen-ART Review X-Trac-Ticket-URL: http://trac.tools.ietf.org/wg/radext/trac/ticket/100 Message-ID: <067.e81dbf4d76574598789baa0c45d6a812@trac.tools.ietf.org> X-Trac-Ticket-ID: 100 X-SA-Exim-Connect-IP: ::1 X-SA-Exim-Rcpt-To: mary.ietf.barnes@gmail.com, radiusext@ops.ietf.org X-SA-Exim-Mail-From: trac+radext@trac.tools.ietf.org X-SA-Exim-Scanned: No (on zinfandel.tools.ietf.org); SAEximRunCond expanded to false Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: #100: Gen-ART Review I am the assigned Gen-ART reviewer for this draft. For background on Gen- ART, please see the FAQ at . Please resolve these comments along with any other Last Call comments you may receive. Document: draft-ietf-radext-crypto-agility-requirements-06.txt Reviewer: Mary Barnes Review Date: 3 June 2011 IETF LC End Date: 14 June 2011 Summary: Almost Ready. The document is well written and concise. My primary concerns (minor issues really) are the many references to the WG, mailing list, IETF meetings, that while useful context for folks deeply involved in the activity, the information is not relevant to a broader audience and clutters the document IMHO. In addition, there are a few cases where I think normative language might be required (going along with the idea that normative language is appropriate in an Informational document). Major issue: - None Minor issue: - Introduction: It's my understanding that published RFCs shouldn't reference specific WGs and this sentence includes "when approved" which doesn't fit in the body of an RFC. Also, it's my understanding that any document published by a WG reflects consensus of that WG. So, I would suggest this sentence could be better stated as follows: OLD: This memo, when approved, reflects the consensus of the RADIUS Extensions (RADEXT) Working Group of the IETF as to the features, properties and limitations of the crypto-agility work item for RADIUS. NEW: This memo describes the features, properties and limitations of the crypto-agility solution for RADIUS. - General. I don't think you need references to the RADEXT WG since it a product of that WG - it's listed in the document header and it's obvious in the tools. Folks that aren't familiar with IETF probably don't care what WG produced the document. Subsequent comments below give specific suggestions around this. - Introduction,second paragraph. I don't think this necessarily fits the context of a published RFC. In general, the content of WG documents is based on mailing list discussion. And, it's usual that an informational document is published to provide the type of information that is noted in that paragraph. So, I would think you could just delete that paragraph. - Section 1.3. I don't think the background is necessary. Certainly, the motivation for this work is useful introductory information, but I think that initial problem statement/objectives could be reworded in present tense in terms of objectives and what this document specifies. - SEction 2. You could easily strike the first sentence in the first paragraph without any loss of information. Does it really matter that the definition was offered at IETF-68? - Section 2, 4th paragraph. Why is the second part of the first sentence a SHOULD NOT? What happens if this is done? For example, does this require additional specification of how the solution is still backwards compatible? It's generally a good idea to describe what might happen if someone doesn't abide by a SHOULD or SHOULD NOT. - Section 4.2, 5th paragraph, 1st sentence. Shouldn't the "need not" be stated using normative language - i.e., stated as "OPTIONAL", something like "Support for encryption of individual RADIUS attributes is OPTIONAL for solutions that provide encryption of entire RADIUS packets". - Section 4.2, "Limit key scope" paragraph. Should the "not required" be "is OPTIONAL"? - Section 4.3, 3rd paragraph. Shouldn't the "can be" be a "MAY be"? - i.e, isn't this normative behavior in terms of describing how the requirements for backwards compatibility can be satisfied or in some cases where they can't? - Section 4.3, 4th paragraph. Shouldn't the "can omit" be a "MAY omit"? - Section 4.3, 6th paragraph. Shouldn't the "can be" be a "MAY be"? - Section 4.6. This could be reworded to remove the references to IETF-70 and just state something like the following: OLD: At the IETF-70 meeting, and leading up to that meeting, the RADEXT WG debated whether or not RFC 4107 would require a RADIUS Crypto-Agility solution to feature Automated Key Management (AKM). The working group determined that AKM was not inherently required for RADIUS based on the following points: NEW: Consideration was given as to whether or not RFC 4107 would require a RADIUS Crypto-Agility solution to feature Automated Key Management (AKM). It was determined that AKM was not inherently required for RADIUS based on the following points: Nits: ----- - Section 4.6, 1st paragraph after the bulleted list: .., the same time, … -> …, at the same time,... -- ----------------------------------------+----------------------------------- Reporter: mary.ietf.barnes@… | Owner: Type: defect | Status: new Priority: minor | Milestone: milestone1 Component: Crypto-Agility | Version: 1.0 Severity: Submitted WG Document | Keywords: ----------------------------------------+----------------------------------- Ticket URL: radext -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Sat Jun 4 20:32:57 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D17411E8087 for ; Sat, 4 Jun 2011 20:32:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.109 X-Spam-Level: X-Spam-Status: No, score=-5.109 tagged_above=-999 required=5 tests=[BAYES_05=-1.11, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GOj8FulFPD3x for ; Sat, 4 Jun 2011 20:32:56 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 1BA1D11E8077 for ; Sat, 4 Jun 2011 20:32:53 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QT41P-000Axa-VJ for radiusext-data0@psg.com; Sun, 05 Jun 2011 03:29:03 +0000 Received: from mail201.messagelabs.com ([216.82.254.211]) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QT41N-000AxN-Dp for radiusext@ops.ietf.org; Sun, 05 Jun 2011 03:29:01 +0000 X-VirusChecked: Checked X-Env-Sender: avi@bridgewatersystems.com X-Msg-Ref: server-13.tower-201.messagelabs.com!1307244537!59183226!1 X-StarScan-Version: 6.2.17; banners=-,-,- X-Originating-IP: [72.35.6.119] Received: (qmail 10785 invoked from network); 5 Jun 2011 03:28:58 -0000 Received: from mail.bridgewatersystems.com (HELO webmail.bridgewatersystems.com) (72.35.6.119) by server-13.tower-201.messagelabs.com with RC4-SHA encrypted SMTP; 5 Jun 2011 03:28:58 -0000 Received: from m679t05.fpmis.bridgewatersys.com ([10.52.81.148]) by m679t01.fpmis.bridgewatersys.com ([10.52.81.144]) with mapi; Sat, 4 Jun 2011 23:28:54 -0400 From: Avi Lior To: Bernard Aboba , "radiusext@ops.ietf.org" Date: Sat, 4 Jun 2011 23:28:53 -0400 Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwjMLKj1Zo4LRE9SsqZb2kKnCyEVA== Message-ID: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.10.0.110310 acceptlanguage: en-US x-exclaimer-md-config: f069778a-5a3c-4a57-aa01-0f5f3f2623e3 Content-Type: multipart/alternative; boundary="_000_CA106E6218B2Davibridgewatersystemscom_" MIME-Version: 1.0 Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: --_000_CA106E6218B2Davibridgewatersystemscom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable See inline=85. -- Avi Lior --Bridgewater Systems On 22-05-11 05:29 , "Bernard Aboba" > wrote: I agree with Alan and Stefan: against allocation. Alan DeKok said: > In summary: against allocation. I agree. Stefan Winter said; "In summary: against allocation. In detail: My reservations against doing the WiFi Interworking are the same= as in the meeting (i.e. why is "WiMAX Wifi" different from normal WiFi, wh= ich has a NAS-Port-Type already), but I don't care too much. Because the behaviour in WiMAX is different then when the AAA is performing= 'normal' WiFi operations. Anyway you seem to care a lot. For the other types, my feeling is much stronger against allocation. As per= Avi's mail, there are - voice service - DHCP service - location based service The word "service" in these is a brightly blinking indicator that this is n= ot about a port type, but a service type. So allocating a NAS-*Port*-Type h= ere just doesn't seem to fit semantically. Service Type does not work. I wish it would. But its overloaded. For examp= le if I want to say Authenticate-Only for Voice Service I would not be able= to do so. There is also "WiMAX Pre-Release 8 ..." stuff. This would at best be a temp= orary thing; when Release 8 is out, this NAS-Port-Type would just be a burn= t integer. I don't think that's right. Temporary thing hmmm. Burnt Integer =97 seriously. Leave alone that there are values which are a "function" - what would that = have to do with NAS-Port-Type? Seems to me that NAS-Port type IS the way you specify the type of service c= onnection and hence service the request is about. Given that all these values are to be registered as a block, and the majori= ty of the proposed values have a big question mark for me, I can't help but= say No. Greetings, Stefan Winter" --_000_CA106E6218B2Davibridgewatersystemscom_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
See inline=85.
<= div>
-- Avi Lior
--Bridgewater Systems


On 22-05-11 05:29 , "Bernard Aboba" <= ;bernard_aboba@hotmail.com= > wrote:

I agree with Alan and Stefan:  against allocation.

Alan DeKok = said:

> In summary: against allocation.

I agree.

Stefan Winter said;

"In summary: against allocation.

In detail: My reservations against doing the WiFi Interworking are the same as in the meeting (i.e. why is "WiMAX Wifi" differen= t from normal WiFi, which has a NAS-Port-Type already), but I don't care too much.
Because the behavi= our in WiMAX is different then when the AAA is performing 'normal' WiFi ope= rations.
Anyway you seem to care a lot.


For the other types, my feeling is much stronger against allocation. As per Avi's mail, there are

- voice service
- DHCP service
- location based service

The word "service" in these is a brightly blinking indicator = that this is not about a port type, but a service type. So allocating a NAS-*Port*-Type here just doesn't seem to fit semantically.
Service Type does not work.  I wish it= would. But its overloaded. For example if I want to say Authenticate-Only = for Voice Service I would not be able to do so.



There is also "WiMAX Pre-Release 8 ..." stuff. This would at = best be a temporary thing; when Release 8 is out, this NAS-Port-Type would just be a burnt integer. I don't think that's right.
Temporary thing hmmm.
Burnt Integer =97= seriously.  


Leave alone that there are values which are a "function" - wh= at would that have to do with NAS-Port-Type?
Seems to me that NAS-Port type IS the way you specify the ty= pe of service connection and hence service the request is about.
=


Given that all these values are to be registered as a block, and the majority of the proposed values have a big question mark for me, I can't help but say No.

Greetings,

Stefan Winter"

 --_000_CA106E6218B2Davibridgewatersystemscom_-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Sun Jun 5 22:34:27 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4EA911E80BE for ; Sun, 5 Jun 2011 22:34:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.494 X-Spam-Level: X-Spam-Status: No, score=-103.494 tagged_above=-999 required=5 tests=[AWL=0.943, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RCVD_IN_DNSWL_MED=-4, RDNS_NONE=0.1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hwnTU554xWz3 for ; Sun, 5 Jun 2011 22:34:23 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 2EB6F11E8088 for ; Sun, 5 Jun 2011 22:34:20 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QTSP1-000Ots-Ku for radiusext-data0@psg.com; Mon, 06 Jun 2011 05:31:04 +0000 Received: from mail.ietf.org ([2001:1890:1112:1::1e]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QTSOx-000OtY-Vu for radiusext@ops.ietf.org; Mon, 06 Jun 2011 05:31:00 +0000 Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 430F111E80BC for ; Sun, 5 Jun 2011 22:30:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TPJITMfxzm4u; Sun, 5 Jun 2011 22:30:56 -0700 (PDT) Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DAA4511E8076; Sun, 5 Jun 2011 22:30:56 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org Cc: radiusext@ops.ietf.org Subject: I-D Action: draft-ietf-radext-radius-extensions-01.txt X-Test-IDTracker: no X-IETF-IDTracker: 3.55 Message-ID: <20110606053056.2195.82606.idtracker@ietfa.amsl.com> Date: Sun, 05 Jun 2011 22:30:56 -0700 Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the RADIUS EXTensions Working Group of th= e IETF. Title : Remote Authentication Dial In User Service (RADIUS) Prot= ocol Extensions Author(s) : Alan DeKok Avi Lior Filename : draft-ietf-radext-radius-extensions-01.txt Pages : 58 Date : 2011-06-05 The Remote Authentication Dial In User Service (RADIUS) protocol is nearing exhaustion of its current 8-bit attribute type space. In addition, experience shows a growing need for complex grouping, along with attributes which can carry more than 253 octets of data. This document defines changes to RADIUS which address all of the above problems. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-radext-radius-extensions-01.= txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ This Internet-Draft can be retrieved at: ftp://ftp.ietf.org/internet-drafts/draft-ietf-radext-radius-extensions-01.t= xt -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Mon Jun 6 01:30:14 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B97E011E808C for ; Mon, 6 Jun 2011 01:30:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YkyKKad-kVo7 for ; Mon, 6 Jun 2011 01:30:13 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 633FE11E808B for ; Mon, 6 Jun 2011 01:30:13 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QTVAF-000CcS-2I for radiusext-data0@psg.com; Mon, 06 Jun 2011 08:27:59 +0000 Received: from liberty.deployingradius.com ([88.191.76.128]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QTVAB-000CcE-OJ for radiusext@ops.ietf.org; Mon, 06 Jun 2011 08:27:55 +0000 Message-ID: <4DEC8F87.5050103@deployingradius.com> Date: Mon, 06 Jun 2011 10:27:51 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: radiusext@ops.ietf.org Subject: Re: I-D Action: draft-ietf-radext-radius-extensions-01.txt References: <20110606053056.2195.82606.idtracker@ietfa.amsl.com> In-Reply-To: <20110606053056.2195.82606.idtracker@ietfa.amsl.com> X-Enigmail-Version: 0.96.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: This draft fixes some typos, adds some clarifications, and adds an "integer64" data type as suggested by Stephan Winter. Alan DeKok. internet-drafts@ietf.org wrote: > A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the RADIUS EXTensions Working Group of the IETF. > > Title : Remote Authentication Dial In User Service (RADIUS) Protocol Extensions > Author(s) : Alan DeKok > Avi Lior > Filename : draft-ietf-radext-radius-extensions-01.txt > Pages : 58 > Date : 2011-06-05 > > The Remote Authentication Dial In User Service (RADIUS) protocol is > nearing exhaustion of its current 8-bit attribute type space. In > addition, experience shows a growing need for complex grouping, along > with attributes which can carry more than 253 octets of data. This > document defines changes to RADIUS which address all of the above > problems. > > > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-ietf-radext-radius-extensions-01.txt > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > This Internet-Draft can be retrieved at: > ftp://ftp.ietf.org/internet-drafts/draft-ietf-radext-radius-extensions-01.txt > > -- > to unsubscribe send a message to radiusext-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: > > -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Mon Jun 6 01:33:56 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BDFC111E80D1 for ; Mon, 6 Jun 2011 01:33:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f954Zq2965FT for ; Mon, 6 Jun 2011 01:33:56 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 8D3EF11E80BC for ; Mon, 6 Jun 2011 01:33:55 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QTVED-000CxO-GW for radiusext-data0@psg.com; Mon, 06 Jun 2011 08:32:05 +0000 Received: from smtprelay.restena.lu ([2001:a18:1::62]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QTVEA-000Cw0-GK for radiusext@ops.ietf.org; Mon, 06 Jun 2011 08:32:02 +0000 Received: from smtprelay.restena.lu (localhost [127.0.0.1]) by smtprelay.restena.lu (Postfix) with ESMTP id 1F98010584; Mon, 6 Jun 2011 10:32:01 +0200 (CEST) Received: from [IPv6:2001:a18:1:8::155] (unknown [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id 08DF810582; Mon, 6 Jun 2011 10:32:01 +0200 (CEST) Message-ID: <4DEC907B.5090102@restena.lu> Date: Mon, 06 Jun 2011 10:31:55 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.9.2.17) Gecko/20110414 Lightning/1.0b2 Thunderbird/3.1.10 MIME-Version: 1.0 To: Avi Lior CC: Bernard Aboba , "radiusext@ops.ietf.org" Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request References: In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig7954507DCB1ED58ACAD6D711" X-Virus-Scanned: ClamAV Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig7954507DCB1ED58ACAD6D711 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hi, > (me) In detail: My reservations against doing the WiFi > Interworking are the same as in the meeting (i.e. why is "WiMAX > Wifi" different from normal WiFi, which has a NAS-Port-Type > already), but I don't care too much. > > (Avi)Because the behaviour in WiMAX is different then when the AAA is > performing 'normal' WiFi operations. > Anyway you seem to care a lot. I care less about this one value than about all the others I wrote something about in the remainder of my mail. Unfortunately, you didn't respond to these AFAICT. On-topic again: I just don't get what "behaviour is different" means. Is the type of network access being provisioned (i.e. what the user gets after authenticating) compatible to the IEEE 802.11 standard (and/or any of the amendments)? If so, it's WiFi, and WiFi already has a NAS-Port-Type. If it's not, maybe WiMAX should get a new NSA-Port-Type. I think I can guesstimate where the desire for a separate NAS-Port-Type for WiMAX-WiFi would come from, even if the actual network access is plain WiFi. I am (sortof) facing the same desire for my eduroam hotspots: when doing AAA for eduroam, the business logic may be a different one from when doing just-some-other-WiFi on the same NAS. I would be delighted to have an IETF-approved tag "this is *eduroam* WiFi" so I could apply my different business logic depending on whether I want to service an eduroam login, or a something-else login that comes in from the same NAS. Still, that desire is wrong :-) A protocol isn't there to support one particular implementor's internal business logic; its purpose is to make interoperable (cross-organisation) standards. NAS-Port-Type has a clear semantics: an implementation which sees this value can expect the network access type to be IEEE 802.11. If you want to express something more fine-grained than just the NAS-Port-Type, why use the attribute NAS-Port-Type with wrong semantics for it. From a quick look into the draft "RADIUS attributes for IEEE 802 Networks", there are some candidates: Mobility-Domain-Id, Network-Id-Name ? Not sure about the semantics of either, but that document in general looks like a much more natural fit to express what *exact* WiFi properties to expect within the NAS-Port-Type of IEEE-80211.= So, I would really call for a litmus test: is the network access being provisioned compatible to IEEE 802.11(a/b/g/n/whatever)? Yes: NAS-Port-Type exists; no new allocation, look into other attributes. No: Consider issuing a new NAS-Port-Type for this. That question is a technical one, and I would hope it has a clear answer = :-) Greetings, Stefan > > > For the other types, my feeling is much stronger against > allocation. As per Avi's mail, there are > > - voice service > - DHCP service > - location based service > > The word "service" in these is a brightly blinking indicator that > this is not about a port type, but a service type. So allocating a > NAS-*Port*-Type here just doesn't seem to fit semantically. > > Service Type does not work. I wish it would. But its overloaded. For > example if I want to say Authenticate-Only for Voice Service I would > not be able to do so. > > > > There is also "WiMAX Pre-Release 8 ..." stuff. This would at best > be a temporary thing; when Release 8 is out, this NAS-Port-Type > would just be a burnt integer. I don't think that's right. > > Temporary thing hmmm. > Burnt Integer =97 seriously. =20 > > > > Leave alone that there are values which are a "function" - what > would that have to do with NAS-Port-Type? > > Seems to me that NAS-Port type IS the way you specify the type of > service connection and hence service the request is about. > > > > Given that all these values are to be registered as a block, and > the majority of the proposed values have a big question mark for > me, I can't help but say No. > > Greetings, > > Stefan Winter" > --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education National= e et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 --------------enig7954507DCB1ED58ACAD6D711 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk3skIEACgkQ+jm90f8eFWa0eQCfQMBHaqAMzlf1EgGlbxT54f/C cw8AoIQ2rdibv66tPCA55ZiUi0rDbYBz =a7rd -----END PGP SIGNATURE----- --------------enig7954507DCB1ED58ACAD6D711-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Mon Jun 6 01:39:18 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0EAFC11E80DA for ; Mon, 6 Jun 2011 01:39:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MrN2NJpl17+C for ; Mon, 6 Jun 2011 01:39:17 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 1113311E80DE for ; Mon, 6 Jun 2011 01:39:14 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QTVJK-000DKi-SM for radiusext-data0@psg.com; Mon, 06 Jun 2011 08:37:22 +0000 Received: from liberty.deployingradius.com ([88.191.76.128]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QTVJI-000DKW-RK for radiusext@ops.ietf.org; Mon, 06 Jun 2011 08:37:21 +0000 Message-ID: <4DEC91BF.2010905@deployingradius.com> Date: Mon, 06 Jun 2011 10:37:19 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Stefan Winter CC: "radiusext@ops.ietf.org" Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request References: <4DEC907B.5090102@restena.lu> In-Reply-To: <4DEC907B.5090102@restena.lu> X-Enigmail-Version: 0.96.0 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: Stefan Winter wrote: > If it's not, maybe WiMAX should get a new NSA-Port-Type. IMHO, the "NSA" port type attribute should encode a zero-width bit field with fixed value "tapped". :) Alan DeKok. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Wed Jun 8 05:51:55 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C86B21F8524 for ; Wed, 8 Jun 2011 05:51:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nYt-1fmXE6gn for ; Wed, 8 Jun 2011 05:51:54 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 4D4ED21F8521 for ; Wed, 8 Jun 2011 05:51:54 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QUIBm-0007nW-NH for radiusext-data0@psg.com; Wed, 08 Jun 2011 12:48:50 +0000 Received: from smtprelay.restena.lu ([2001:a18:1::62]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QUIBj-0007kf-9L for radiusext@ops.ietf.org; Wed, 08 Jun 2011 12:48:47 +0000 Received: from smtprelay.restena.lu (localhost [127.0.0.1]) by smtprelay.restena.lu (Postfix) with ESMTP id C32AE10590; Wed, 8 Jun 2011 14:48:44 +0200 (CEST) Received: from [IPv6:2001:a18:1:8::155] (unknown [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id 895C110584; Wed, 8 Jun 2011 14:48:44 +0200 (CEST) Message-ID: <4DEF6FAC.70903@restena.lu> Date: Wed, 08 Jun 2011 14:48:44 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.9.2.17) Gecko/20110414 Lightning/1.0b2 Thunderbird/3.1.10 MIME-Version: 1.0 To: Alper Yegin CC: "'Sanchez, Mauricio \(HP Networking\)'" , radiusext@ops.ietf.org Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request References: <9BC2F7926B33FE4AB10D69891D58FC1C5C72F203A9@GVW0671EXC.americas.hpqcorp.net> <9BC2F7926B33FE4AB10D69891D58FC1C5C72F204E4@GVW0671EXC.americas.hpqcorp.net> <4DD37259.9010005@restena.lu> <001201cc18e3$faf75de0$f0e619a0$@yegin@yegin.org> In-Reply-To: <001201cc18e3$faf75de0$f0e619a0$@yegin@yegin.org> X-Enigmail-Version: 1.1.1 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enigED7DAF3DB1E08789D21135B6" X-Virus-Scanned: ClamAV Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigED7DAF3DB1E08789D21135B6 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hi, > I think we need to get these question marks discussed before saying no.= > > Historically, the NAS-port-type is associated with the L1/L2 port over > which the =93access=94 service is provided. But with the new use of > RADIUS, this view is no longer applicable. Again, consider a Mobile IP > Home Agent node implementing RADIUS client for AAAing the MN=92s > registration requests. The L1/L2 port that receives the MN > registration request has no significance, and it can be one of many > types. Here, our thinking is, the =93logical=94 port is the =93Mobile I= P > Home Agent=94, and that has nothing to do with the L1/L2 port. > > What do people think? > > If the use of RADIUS has nothing to do with giving access to real NAS-Ports - then why overload the NAS-Port-Type attribute for this unrelated business? NAS-Port-Type is optional, so if you don't provision service on a NAS port leave the attribute out. RFC2865 says: An Access-Request SHOULD contain a NAS-Port or NAS-Port-Typ= e attribute or both unless the type of access being requested does not involve a port or the NAS does not distinguish among its ports. Sounds clear to me :-) I understand the need for signalling for what kind of service the user is being authenticated. I have same at home where our RADIUS server does IMAP, SMTP, 802.11, Jabber, Dialup, etc... logins. These are different services; so it would sound natural to use Service-Type for it: RFC2865 says: This Attribute indicates the type of service the user has requested, or the type of service to be provided. Which is, BTW, extremely similar to how I solved the problem for me. I defined a VSA "RESTENA-Service-Type" (string) and put things like "IMAP" into it. That makes server-side per-service processing easy. Of course, WiMAX could get a "real" Service-Type value instead and wouldn't need to hide behind a VSA :-) Greetings, Stefan Winter --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education National= e et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 --------------enigED7DAF3DB1E08789D21135B6 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk3vb6wACgkQ+jm90f8eFWZ9YACdFu0+6jCCax3vu9uvfZqIl1SL a6UAn1BCvNgVXTXLy+gFCmoUZd4qqhYd =r67L -----END PGP SIGNATURE----- --------------enigED7DAF3DB1E08789D21135B6-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Wed Jun 8 09:15:42 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EDEB61F0C38 for ; Wed, 8 Jun 2011 09:15:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.854 X-Spam-Level: X-Spam-Status: No, score=-5.854 tagged_above=-999 required=5 tests=[AWL=0.745, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CB41gdN3aIkj for ; Wed, 8 Jun 2011 09:15:41 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 9BD481F0C3C for ; Wed, 8 Jun 2011 09:15:41 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QULMc-000MfS-Ct for radiusext-data0@psg.com; Wed, 08 Jun 2011 16:12:14 +0000 Received: from mail201.messagelabs.com ([216.82.254.211]) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QULMZ-000Mf7-6z for radiusext@ops.ietf.org; Wed, 08 Jun 2011 16:12:11 +0000 X-VirusChecked: Checked X-Env-Sender: avi@bridgewatersystems.com X-Msg-Ref: server-8.tower-201.messagelabs.com!1307549527!87446620!1 X-StarScan-Version: 6.2.17; banners=-,-,- X-Originating-IP: [72.35.6.119] Received: (qmail 8612 invoked from network); 8 Jun 2011 16:12:09 -0000 Received: from mail.bridgewatersystems.com (HELO webmail.bridgewatersystems.com) (72.35.6.119) by server-8.tower-201.messagelabs.com with RC4-SHA encrypted SMTP; 8 Jun 2011 16:12:09 -0000 Received: from m679t05.fpmis.bridgewatersys.com ([10.52.81.148]) by m679t01.fpmis.bridgewatersys.com ([10.52.81.144]) with mapi; Wed, 8 Jun 2011 12:12:05 -0400 From: Avi Lior To: Stefan Winter , Alper Yegin CC: "'Sanchez, Mauricio (HP Networking)'" , "radiusext@ops.ietf.org" Date: Wed, 8 Jun 2011 12:12:05 -0400 Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: Acwl9s7lEXLw+5mbQKij5fwBLhh/cQ== Message-ID: In-Reply-To: <4DEF6FAC.70903@restena.lu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.10.0.110310 acceptlanguage: en-US x-exclaimer-md-config: f069778a-5a3c-4a57-aa01-0f5f3f2623e3 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: You cant use Service-Type because service type is also indicating authorize only or authenticate only and call-check etc. and thus you cant express the Type of Service as well. I pointed this out oh it seem like 30 years ago when we were doing Chiba work. -- Avi Lior --Bridgewater Systems On 08-06-11 08:48 , "Stefan Winter" wrote: >Hi, > >> I think we need to get these question marks discussed before saying no. >> >> Historically, the NAS-port-type is associated with the L1/L2 port over >> which the =B3access=B2 service is provided. But with the new use of >> RADIUS, this view is no longer applicable. Again, consider a Mobile IP >> Home Agent node implementing RADIUS client for AAAing the MN=B9s >> registration requests. The L1/L2 port that receives the MN >> registration request has no significance, and it can be one of many >> types. Here, our thinking is, the =B3logical=B2 port is the =B3Mobile IP >> Home Agent=B2, and that has nothing to do with the L1/L2 port. >> >> What do people think? >> >> > >If the use of RADIUS has nothing to do with giving access to real >NAS-Ports - then why overload the NAS-Port-Type attribute for this >unrelated business? NAS-Port-Type is optional, so if you don't provision >service on a NAS port leave the attribute out. > >RFC2865 says: An Access-Request SHOULD contain a NAS-Port or NAS-Port-Type >attribute or both unless the type of access being requested does >not involve a port or the NAS does not distinguish among its >ports. > >Sounds clear to me :-) > >I understand the need for signalling for what kind of service the user >is being authenticated. I have same at home where our RADIUS server does >IMAP, SMTP, 802.11, Jabber, Dialup, etc... logins. These are different >services; so it would sound natural to use Service-Type for it: > >RFC2865 says: This Attribute indicates the type of service the user has >requested, or the type of service to be provided. > >Which is, BTW, extremely similar to how I solved the problem for me. I >defined a VSA "RESTENA-Service-Type" (string) and put things like "IMAP" >into it. That makes server-side per-service processing easy. > >Of course, WiMAX could get a "real" Service-Type value instead and >wouldn't need to hide behind a VSA :-) > >Greetings, > >Stefan Winter > >--=20 >Stefan WINTER >Ingenieur de Recherche >Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education Nationale= et >de la Recherche >6, rue Richard Coudenhove-Kalergi >L-1359 Luxembourg > >Tel: +352 424409 1 >Fax: +352 422473 > > -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Thu Jun 9 02:06:53 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B78811E8071 for ; Thu, 9 Jun 2011 02:06:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g2Qt+fS4p6zY for ; Thu, 9 Jun 2011 02:06:51 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 4B675228005 for ; Thu, 9 Jun 2011 02:06:50 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QUb9s-000NJQ-6p for radiusext-data0@psg.com; Thu, 09 Jun 2011 09:04:08 +0000 Received: from smtprelay.restena.lu ([2001:a18:1::62]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QUb9p-000NJ0-BB for radiusext@ops.ietf.org; Thu, 09 Jun 2011 09:04:05 +0000 Received: from smtprelay.restena.lu (localhost [127.0.0.1]) by smtprelay.restena.lu (Postfix) with ESMTP id 10F4E10590; Thu, 9 Jun 2011 11:04:03 +0200 (CEST) Received: from [IPv6:2001:a18:1:8::155] (unknown [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id EDA3510582; Thu, 9 Jun 2011 11:04:02 +0200 (CEST) Message-ID: <4DF08C76.60000@restena.lu> Date: Thu, 09 Jun 2011 11:03:50 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.9.2.17) Gecko/20110414 Lightning/1.0b2 Thunderbird/3.1.10 MIME-Version: 1.0 To: Dave Nelson CC: Alper Yegin , "Sanchez, Mauricio (HP Networking)" , radiusext@ops.ietf.org Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request References: <9BC2F7926B33FE4AB10D69891D58FC1C5C72F203A9@GVW0671EXC.americas.hpqcorp.net> <9BC2F7926B33FE4AB10D69891D58FC1C5C72F204E4@GVW0671EXC.americas.hpqcorp.net> <4DD37259.9010005@restena.lu> <4DEF6FAC.70903@restena.lu> In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig2D794547F632950FCB187B46" X-Virus-Scanned: ClamAV Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig2D794547F632950FCB187B46 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi, >> Which is, BTW, extremely similar to how I solved the problem for me. I= >> defined a VSA "RESTENA-Service-Type" (string) and put things like "IMA= P" >> into it. > What else was in the request message? Was there an instance of > Service-Type, and if so what was it's value? The requests were generated by a pam_radius_auth module, which sends Service-Type =3D Authenticate-Only. That module doesn't even send VSA's, so I had to trick like "if the sending client was IP adress x.y.z.a, add RESTENA-Service-Type =3D IMAP prior to further processing". And there I was lucky that this IP address has only *one* process that uses RADIUS. Well, standard ugly hacks. > I see the argument for using Service-Type for this application. OTOH, > there are two minor issues with that path: (a) allocation requires > IETF Consensus, and (b) it tends to clutter up what's currently a > concise list of options. That's true (and that's why I just took a VSA and went my merry way). Of course, having an IETF-allocated string attribute of sorts "Extended-Service-Type-Info" that people could fill with whatever is needed inside their AAA infrastructure would be not so bad. Better than cluttering Service-Type with hundreds(?) of possible RADIUS-speaking applications IMHO; where the list would be necessarily incomplete. Greetings, Stefan Winter > Regards, > > Dave > > David B. Nelson > Sr. Software Architect > Elbrys Networks, Inc. > www.elbrys.com > +1.603.570.2636 --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education National= e et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 --------------enig2D794547F632950FCB187B46 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk3wjIEACgkQ+jm90f8eFWa3dwCfelydAnTJa9qTAv5afflW2oto cb4AniAWCzjkoRUukMqeoX9Clncy7t52 =zy15 -----END PGP SIGNATURE----- --------------enig2D794547F632950FCB187B46-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Thu Jun 9 02:10:03 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24E6C11E80A5 for ; Thu, 9 Jun 2011 02:10:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oKTOTrybH2mn for ; Thu, 9 Jun 2011 02:10:02 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 8695711E80AC for ; Thu, 9 Jun 2011 02:09:54 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QUbDq-000NcB-8J for radiusext-data0@psg.com; Thu, 09 Jun 2011 09:08:14 +0000 Received: from smtprelay.restena.lu ([2001:a18:1::62]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QUbDn-000Nc0-R6 for radiusext@ops.ietf.org; Thu, 09 Jun 2011 09:08:12 +0000 Received: from smtprelay.restena.lu (localhost [127.0.0.1]) by smtprelay.restena.lu (Postfix) with ESMTP id 30A8010590; Thu, 9 Jun 2011 11:08:11 +0200 (CEST) Received: from [IPv6:2001:a18:1:8::155] (unknown [IPv6:2001:a18:1:8::155]) by smtprelay.restena.lu (Postfix) with ESMTPS id 22D6310582; Thu, 9 Jun 2011 11:08:11 +0200 (CEST) Message-ID: <4DF08D79.6020200@restena.lu> Date: Thu, 09 Jun 2011 11:08:09 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.9.2.17) Gecko/20110414 Lightning/1.0b2 Thunderbird/3.1.10 MIME-Version: 1.0 To: Avi Lior CC: Alper Yegin , "'Sanchez, Mauricio (HP Networking)'" , "radiusext@ops.ietf.org" Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request References: In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig1F15EC992F9152BD9D3D8B6B" X-Virus-Scanned: ClamAV Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig1F15EC992F9152BD9D3D8B6B Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi, > You cant use Service-Type because service type is also indicating > authorize only or authenticate only and call-check etc. and thus you ca= nt > express the Type of Service as well. I pointed this out oh it seem lik= e > 30 years ago when we were doing Chiba work. Well... would an IETF attribute like the "Extended-Service-Type-Info" as I mentioned earlier help you? I.e. your requests could be tagged: Service-Type =3D Authorize-Only Extended-Service-Type-Info =3D "WiMAX IP Mobility" or so? Stefan --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education National= e et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 --------------enig1F15EC992F9152BD9D3D8B6B Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk3wjXkACgkQ+jm90f8eFWYkdACdHj7X5PEZIl5Q0aMqK6zNiCVm 3bEAnjq0FHRnuhETRXrY+eMvChy04V2a =Mm+A -----END PGP SIGNATURE----- --------------enig1F15EC992F9152BD9D3D8B6B-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Thu Jun 9 06:44:32 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E043D21F846E for ; Thu, 9 Jun 2011 06:44:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.226 X-Spam-Level: X-Spam-Status: No, score=-6.226 tagged_above=-999 required=5 tests=[AWL=0.373, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cMLzAwo98Blg for ; Thu, 9 Jun 2011 06:44:31 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 35EF021F8470 for ; Thu, 9 Jun 2011 06:44:30 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QUfTQ-000JBU-Ni for radiusext-data0@psg.com; Thu, 09 Jun 2011 13:40:36 +0000 Received: from mail28.messagelabs.com ([216.82.249.131]) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QUfTO-000JAx-8L for radiusext@ops.ietf.org; Thu, 09 Jun 2011 13:40:34 +0000 X-VirusChecked: Checked X-Env-Sender: avi@bridgewatersystems.com X-Msg-Ref: server-6.tower-28.messagelabs.com!1307626831!79663406!1 X-StarScan-Version: 6.2.17; banners=-,-,- X-Originating-IP: [72.35.6.119] Received: (qmail 11722 invoked from network); 9 Jun 2011 13:40:32 -0000 Received: from mail.bridgewatersystems.com (HELO webmail.bridgewatersystems.com) (72.35.6.119) by server-6.tower-28.messagelabs.com with RC4-SHA encrypted SMTP; 9 Jun 2011 13:40:32 -0000 Received: from m679t05.fpmis.bridgewatersys.com ([10.52.81.148]) by m679t01.fpmis.bridgewatersys.com ([10.52.81.144]) with mapi; Thu, 9 Jun 2011 09:40:29 -0400 From: Avi Lior To: Stefan Winter CC: Alper Yegin , "'Sanchez, Mauricio (HP Networking)'" , "radiusext@ops.ietf.org" Date: Thu, 9 Jun 2011 09:40:26 -0400 Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: Acwmqsr8lVYE1d7VTGW0BCRO5KDXMQ== Message-ID: In-Reply-To: <4DF08D79.6020200@restena.lu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.10.0.110310 acceptlanguage: en-US x-exclaimer-md-config: f069778a-5a3c-4a57-aa01-0f5f3f2623e3 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: If we would invent a new attribute then I would vote for Application-Id. This is more inline with Diameter etc.... If we have support for that I would be more than happy to write it up. -- Avi Lior --Bridgewater Systems On 09-06-11 05:08 , "Stefan Winter" wrote: >Hi, > >> You cant use Service-Type because service type is also indicating >> authorize only or authenticate only and call-check etc. and thus you >>cant >> express the Type of Service as well. I pointed this out oh it seem like >> 30 years ago when we were doing Chiba work. > >Well... would an IETF attribute like the "Extended-Service-Type-Info" as >I mentioned earlier help you? I.e. your requests could be tagged: > >Service-Type =3D Authorize-Only >Extended-Service-Type-Info =3D "WiMAX IP Mobility" > >or so? > >Stefan > > >--=20 >Stefan WINTER >Ingenieur de Recherche >Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education Nationale= et >de la Recherche >6, rue Richard Coudenhove-Kalergi >L-1359 Luxembourg > >Tel: +352 424409 1 >Fax: +352 422473 > > -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Fri Jun 10 06:53:24 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57B4D11E8135 for ; Fri, 10 Jun 2011 06:53:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.351 X-Spam-Level: X-Spam-Status: No, score=-6.351 tagged_above=-999 required=5 tests=[AWL=0.248, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p8Gkmfhq-MLa for ; Fri, 10 Jun 2011 06:53:23 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 1EBDB11E81A2 for ; Fri, 10 Jun 2011 06:53:18 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QV26l-0006M1-Ro for radiusext-data0@psg.com; Fri, 10 Jun 2011 13:50:43 +0000 Received: from mail200.messagelabs.com ([216.82.254.195]) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QV26j-0006Lr-HQ for radiusext@ops.ietf.org; Fri, 10 Jun 2011 13:50:41 +0000 X-VirusChecked: Checked X-Env-Sender: avi@bridgewatersystems.com X-Msg-Ref: server-6.tower-200.messagelabs.com!1307713835!125592853!1 X-StarScan-Version: 6.2.17; banners=-,-,- X-Originating-IP: [72.35.6.119] Received: (qmail 4649 invoked from network); 10 Jun 2011 13:50:36 -0000 Received: from mail.bridgewatersystems.com (HELO webmail.bridgewatersystems.com) (72.35.6.119) by server-6.tower-200.messagelabs.com with RC4-SHA encrypted SMTP; 10 Jun 2011 13:50:36 -0000 Received: from m679t05.fpmis.bridgewatersys.com ([10.52.81.148]) by m679t01.fpmis.bridgewatersys.com ([10.52.81.144]) with mapi; Fri, 10 Jun 2011 09:50:35 -0400 From: Avi Lior To: Dave Nelson CC: Stefan Winter , Alper Yegin , "Sanchez, Mauricio (HP Networking)" , "radiusext@ops.ietf.org" Date: Fri, 10 Jun 2011 09:50:33 -0400 Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwndV75WRkoa68xTViu10u+z0pziQ== Message-ID: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.10.0.110310 acceptlanguage: en-US x-exclaimer-md-config: f069778a-5a3c-4a57-aa01-0f5f3f2623e3 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: Its just a name - so I am okay with another name. Do you have a suggestion? The issue I have with Service-Type is that that is already overloaded. The purpose of the attribute is to convey to the Server the context of the request message. The approach would be to have an IANA registry/name space (just like in Diameter) of reserved identifiers for IETF that would require an RFC and a space that is to be allocated to Vendors/SDO. -- Avi Lior --Bridgewater Systems On 09-06-11 09:51 , "Dave Nelson" wrote: >> If we would invent a new attribute then I would vote for Application-Id. >> >> This is more inline with Diameter etc.... > >I would support a new attribute, but I would *not* support >Application-Id, as that concept exists in Diameter. IMO, that's a >shortcoming of Diameter. Moving it over to RADUS would not be >attractive. > >Regards, > >Dave > >David B. Nelson >Sr. Software Architect >Elbrys Networks, Inc. >www.elbrys.com >+1.603.570.2636 -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Mon Jun 13 16:45:18 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88F641F0C43 for ; Mon, 13 Jun 2011 16:45:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HAD-DK4UjZLE for ; Mon, 13 Jun 2011 16:45:17 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 63AE61F0C35 for ; Mon, 13 Jun 2011 16:45:17 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QWGls-000GsU-9X for radiusext-data0@psg.com; Mon, 13 Jun 2011 23:42:16 +0000 Received: from mail-ey0-f180.google.com ([209.85.215.180]) by psg.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QWGlo-000GsC-LF for radiusext@ops.ietf.org; Mon, 13 Jun 2011 23:42:13 +0000 Received: by eyg24 with SMTP id 24so2386657eyg.11 for ; Mon, 13 Jun 2011 16:42:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:from:content-type:content-transfer-encoding :subject:date:references:to:message-id:mime-version:x-mailer; bh=sr5Ls7ahtDv3zL79x/ogkYAU0dQYyBoY6rTFY7l1KHU=; b=YB8MzTFdqJmNxtpAYQQA//0ienJVmNBb+wVRBPdXuXtwY1yb3P9/st4Lj7NEYDJeX6 Yf9A4E15dZJ8zTiukNc7yjtSYRl+IjX4Zunz+fvZPKJcbc+9AtgLIX13W3ymQtXtlhly 3ixrxiHXhaGkS8svm/b6yM2oB4wjdWfEnn9O0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:content-type:content-transfer-encoding:subject:date:references :to:message-id:mime-version:x-mailer; b=j357XGOf9Welzu2//DHzTywiJXxXV3wDJBnZ+7C5a4K5pt0Qs1x/vNeKKFOiMok2i/ sa1Nfq2JqxqR+eSrlaa4dOTXMZwMzOzgQIF2nHAGXhNbLAlQILKRbvAeJ6lN6oWzxT8C 4vccBIrYAulPkIr/qTTJDsd9FAavas2gLRTBk= Received: by 10.14.51.144 with SMTP id b16mr2693330eec.126.1308008530742; Mon, 13 Jun 2011 16:42:10 -0700 (PDT) Received: from a88-114-67-79.elisa-laajakaista.fi (a88-114-67-79.elisa-laajakaista.fi [88.114.67.79]) by mx.google.com with ESMTPS id p80sm5628794eeb.25.2011.06.13.16.42.09 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 13 Jun 2011 16:42:10 -0700 (PDT) From: jouni korhonen Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: Fwd: Nomcom 2011-12: Call for Volunteers Date: Tue, 14 Jun 2011 02:42:09 +0300 References: <20110611025606.F14E521F84B1@ietfa.amsl.com> To: radiusext@ops.ietf.org Message-Id: <5242D23B-6D4E-4B05-8ABF-AFF839004A9F@gmail.com> Mime-Version: 1.0 (Apple Message framework v1084) X-Mailer: Apple Mail (2.1084) Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: FYI Begin forwarded message: > From: NomCom Chair > Date: June 11, 2011 5:56:06 AM GMT+03:00 > To: IETF Announcement list > Subject: Nomcom 2011-12: Call for Volunteers > > The IETF nominating committee process for 2011-12 has begun. The IETF > nominating committee appoints folks to fill the open slots on the > IAOC, the IAB, and the IESG. The 10 nominating committee members are > selected randomly from a pool of volunteers. The more volunteers, the > better the chance we have of choosing a random yet representative > cross section of the IETF population. The details of the nomcom > process can be found in RFC 3777. > > To be eligible, volunteers for the nomcom need to have attended 3 of > the past 5 IETF meetings as of the time this announcement goes out > (i.e. IETF76-IETF80). If you qualify, and are not seeking appointment > to any of the open positions this nomcom will be filling, please > consider volunteering. > > The list of people and posts whose terms end with the March 2012 IETF > meeting, and thus the positions for which the nominating committee is > responsible, are as follows: > > IAB > === > > Bernard Aboba > Hannes Tschofenig > Andrei Robachevsky > Olaf Kolkman > Spencer Dawkins > Ross Callon > > IAOC > ==== > > Marshall Eubanks > > IESG > ==== > > Peter Saint-Andre (Applications) > Jari Arkko (Internet) > Dan Romascanu (Operations & Management) > Gonzalo Camarillo (RAI) > Stewart Bryant (Routing) > Sean Turner (Security) > David Harrington (Transport) > > > The primary activity for this nomcom will begin during IETF-81 in > Quebec City and should be completed by January 2012. The nomcom will > be collecting requirements from the community, as well as talking to > candidates and to community members about candidates. There will be > regularly scheduled conference calls to ensure progress. Thus, being a > nomcom member does require some time commitment. > > Please volunteer by sending an email to me before > 11:59 pm EDT July 10, 2011 as follows: > > To: suresh.krishnan@ericsson.com > Subject: Nomcom 2011-12 Volunteer > > Please include the following information in the body of the mail: > > Full Name: // As you enter in the IETF Registration Form, > // First/Given name followed by Last/Family Name > > Current Primary Affiliation: // typically what goes in the Company > // field in the IETF Registration Form > > Email Address(es): // all email addresses used to Register for the > // past 5 IETF meetings > // Please designate a Preferred email address for > // contact if there is more than one email address > > Telephone number: // With country code (for confirmation if selected) > > Please expect an email response from me within 3 business days stating > whether or not you are qualified. If you do not receive a response in > this timeframe, please re-send your email with the tag "RESEND:" added > to the subject line. > > If you are not yet sure you would like to volunteer, please consider > that nomcom members play a very important role in shaping the > leadership of the IETF. Ensuring the leadership of the IETF is fair > and balanced and comprised of those who can lead the IETF in the right > direction is an important responsibility that rests on the IETF > participants at large. Volunteering for the nomcom is a good way of > contributing in that direction. > > I will be publishing a more detailed target timetable, as well as > details of the randomness seeds to be used for the RFC 3797 selection > process within the next few days. > > Thank you in advance for your participation. > > Suresh Krishnan > Nomcom Chair 2011-2012 > Email: nomcom-chair@ietf.org, suresh.krishnan@ericsson.com > > _______________________________________________ > IETF-Announce mailing list > IETF-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/ietf-announce -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Tue Jun 14 23:21:33 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DABE228009 for ; Tue, 14 Jun 2011 23:21:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.075 X-Spam-Level: X-Spam-Status: No, score=-101.075 tagged_above=-999 required=5 tests=[AWL=1.074, BAYES_00=-2.599, MIME_8BIT_HEADER=0.3, NO_RELAYS=-0.001, SARE_SUB_ENC_UTF8=0.152, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YYdVtMeIWCaW for ; Tue, 14 Jun 2011 23:21:32 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 473FC228006 for ; Tue, 14 Jun 2011 23:21:32 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QWjPx-0008Vk-Aa for radiusext-data0@psg.com; Wed, 15 Jun 2011 06:17:33 +0000 Received: from zinfandel.tools.ietf.org ([2001:1890:1112:1::2a]) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QWjPt-0008VW-Ro for radiusext@ops.ietf.org; Wed, 15 Jun 2011 06:17:30 +0000 Received: from localhost ([::1] helo=zinfandel.tools.ietf.org) by zinfandel.tools.ietf.org with esmtp (Exim 4.76) (envelope-from ) id 1QWjPr-0000Xj-9T; Tue, 14 Jun 2011 23:17:27 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: "radext issue tracker" X-Trac-Version: 0.11.7 Cc: radiusext@ops.ietf.org Auto-Submitted: auto-generated X-Mailer: Trac 0.11.7, by Edgewall Software To: charliek@microsoft.com X-Trac-Project: radext Date: Wed, 15 Jun 2011 06:17:27 -0000 Reply-To: radiusext@ops.ietf.org X-URL: http://tools.ietf.org/radext/ Subject: =?utf-8?q?=5Bradext=5D_=23101=3A_Secdir_review_of_draft-ietf-rad?= =?utf-8?q?ext-crypto-agility-requirements-06=E2=80=8F?= X-Trac-Ticket-URL: http://trac.tools.ietf.org/wg/radext/trac/ticket/101 Message-ID: <063.921701c6d8a7e1501f2bc570ac34eb42@trac.tools.ietf.org> X-Trac-Ticket-ID: 101 X-SA-Exim-Connect-IP: ::1 X-SA-Exim-Rcpt-To: charliek@microsoft.com, radiusext@ops.ietf.org X-SA-Exim-Mail-From: trac+radext@trac.tools.ietf.org X-SA-Exim-Scanned: No (on zinfandel.tools.ietf.org); SAEximRunCond expanded to false Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: #101: Secdir review of draft-ietf-radext-crypto-agility-requirements-06‏ I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document was written based on a request/demand from the security area, so it would seem only fair that we review it fairly carefully. RADIUS was developed in simpler times and uses a naïve approach to encryption and authentication of messages. Among the least of its problems, it has a hard-wired dependency on MD5. Russ Housley - Security Area Director at the time - asked the RADEXT WG to propose remediations to the protocol (perhaps as the price of withdrawing a 'discuss' on some other work they were doing). This was in 2006. This document does not propose remediations to RADIUS, but rather proposes requirements that any such remediations must satisfy. I've always hated IETF 'requirements' documents, because they tend to be a form of shadow boxing where people have solutions in mind and are trying not to admit it as that argue for requirements that would favor their solution when solutions are judged against requirements. That makes it especially hard for people who are not deeply involved to understand the implications of what is being said. I couldn't figure out what solutions people might have in mind motivating these requirements. In fact, these requirements appeared to me to rule out any possible solution. In particular, page 5 para 3 line 1 says "Proposals MUST NOT introduce new capabilities negotiation features into the RADIUS protocol and crypto-agility solutions SHOULD NOT require changes to the RADIUS operational model.", where the model says that RADIUS is a stateless request/response protocol. That makes most cryptographic algorithm negotiation protocols impossible. Actually, crypto agility for RADIUS would be pretty trivial. RADIUS uses pair-wise configured secret keys. Cryptographic algorithms could be associated with those keys, and therefore configured in the same manner as the keys. You couldn't assign the new kinds of keys unless both ends understood the new algorithms. Everything would work with no cryptographic negotiation at all. The apparent reason that doesn't address the problem is that they are trying to do much more than algorithm agility. They are also trying to improve the protocol to include features like Perfect Forward Secrecy, Automated Key Management, and authentication using X.509 certificates. Some text in the document seems to imply that running the whole thing over DTLS might be acceptable (because DTLS would be considered a transport so it's algorithm negotiation mechanisms would not be considered new capabilities negotiation features in RADIUS). If that were acceptable, it would solve all of their other problems, though it would add a lot of heft to implementations on small devices. The bottom line is that they are working really hard to do the right thing, but there is a danger they will be wasting their time unless someone from the security community is working with them to find a reasonable solution that works for both the RADIUS community and the security community. I have my doubts as to whether this document brings them closer to a solution, but it is certainly an opportunity for someone to volunteer to step up. --Charlie p.s. One protocol nit to worry about. In section 4.3, paragraph 4, the spec suggests to one way to mitigate downgrade attacks is for initiators to remember that responders once accepted the newer (stronger) protocol, and on that basis refuse to accept the older (weaker) protocol in subsequent negotiations. While it sounds logical, it can lead to deployment problems where someone rolls out a newer responder but then finds due to some problem that they must back it out. For that case, there must be some (likely out of band) way to tell the initiator to go back to accepting the old protocol. -- ------------------------------------+--------------------------------------- Reporter: charliek@… | Owner: Type: defect | Status: new Priority: minor | Milestone: milestone1 Component: Crypto-Agility | Version: 1.0 Severity: Submitted WG Document | Keywords: ------------------------------------+--------------------------------------- Ticket URL: radext -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Wed Jun 15 01:47:18 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EE1211E807A for ; Wed, 15 Jun 2011 01:47:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.898 X-Spam-Level: X-Spam-Status: No, score=-102.898 tagged_above=-999 required=5 tests=[AWL=0.701, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id alvekvX0gVHi for ; Wed, 15 Jun 2011 01:47:17 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 2552411E8074 for ; Wed, 15 Jun 2011 01:47:17 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QWliV-000Hio-Vm for radiusext-data0@psg.com; Wed, 15 Jun 2011 08:44:51 +0000 Received: from co300216-co-outbound.net.avaya.com ([198.152.13.100]) by psg.com with esmtps (TLSv1:SEED-SHA:128) (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QWliS-000HiM-IA for radiusext@ops.ietf.org; Wed, 15 Jun 2011 08:44:48 +0000 X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: Ag4BAP9v+E2HCzI1/2dsb2JhbABSl0uPBXesRAKbdoYmBJZGino X-IronPort-AV: E=Sophos;i="4.65,369,1304308800"; d="scan'208";a="285095687" Received: from unknown (HELO p-us1-erheast.us1.avaya.com) ([135.11.50.53]) by co300216-co-outbound.net.avaya.com with ESMTP; 15 Jun 2011 04:44:45 -0400 X-IronPort-AV: E=Sophos;i="4.65,369,1304308800"; d="scan'208";a="666296466" Received: from unknown (HELO 307622ANEX5.global.avaya.com) ([135.64.140.14]) by p-us1-erheast-out.us1.avaya.com with ESMTP; 15 Jun 2011 04:44:44 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: FW: Secdir review of draft-ietf-radext-crypto-agility-requirements-06 Date: Wed, 15 Jun 2011 10:44:42 +0200 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Secdir review of draft-ietf-radext-crypto-agility-requirements-06 Thread-Index: AcwrEhaCu4VKSJ6LSL6yByy0oqg7zQAJjwMg From: "Romascanu, Dan (Dan)" To: Cc: "Charlie Kaufman" Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: Document authors and WG,=20 Please respond to the issues raised by Charlie in his secdir review. Thanks and Regards, Dan=20 -----Original Message----- From: Charlie Kaufman [mailto:charliek@microsoft.com]=20 Sent: Wednesday, June 15, 2011 9:04 AM To: secdir@ietf.org; iesg@ietf.org; = draft-ietf-radext-crypto-agility-requirements.all@tools.ietf.org Subject: Secdir review of = draft-ietf-radext-crypto-agility-requirements-06 I have reviewed this document as part of the security directorate's = ongoing effort to review all IETF documents being processed by the = IESG.=A0 These comments were written primarily for the benefit of the = security area directors.=A0 Document editors and WG chairs should treat = these comments just like any other last call comments. This document was written based on a request/demand from the security = area, so it would seem only fair that we review it fairly carefully. = RADIUS was developed in simpler times and uses a na=EFve approach to = encryption and authentication of messages. Among the least of its = problems, it has a hard-wired dependency on MD5. Russ Housley - Security = Area Director at the time - asked the RADEXT WG to propose remediations = to the protocol (perhaps as the price of withdrawing a 'discuss' on some = other work they were doing). This was in 2006. This document does not propose remediations to RADIUS, but rather = proposes requirements that any such remediations must satisfy. I've = always hated IETF 'requirements' documents, because they tend to be a = form of shadow boxing where people have solutions in mind and are trying = not to admit it as that argue for requirements that would favor their = solution when solutions are judged against requirements. That makes it = especially hard for people who are not deeply involved to understand the = implications of what is being said. I couldn't figure out what solutions people might have in mind = motivating these requirements. In fact, these requirements appeared to = me to rule out any possible solution. In particular, page 5 para 3 line = 1 says "Proposals MUST NOT introduce new capabilities negotiation = features into the RADIUS protocol and crypto-agility solutions SHOULD = NOT require changes to the RADIUS operational model.", where the model = says that RADIUS is a stateless request/response protocol. That makes = most cryptographic algorithm negotiation protocols impossible. Actually, crypto agility for RADIUS would be pretty trivial. RADIUS uses = pair-wise configured secret keys. Cryptographic algorithms could be = associated with those keys, and therefore configured in the same manner = as the keys. You couldn't assign the new kinds of keys unless both ends = understood the new algorithms. Everything would work with no = cryptographic negotiation at all. The apparent reason that doesn't = address the problem is that they are trying to do much more than = algorithm agility. They are also trying to improve the protocol to = include features like Perfect Forward Secrecy, Automated Key Management, = and authentication using X.509 certificates. Some text in the document seems to imply that running the whole thing = over DTLS might be acceptable (because DTLS would be considered a = transport so it's algorithm negotiation mechanisms would not be = considered new capabilities negotiation features in RADIUS). If that = were acceptable, it would solve all of their other problems, though it = would add a lot of heft to implementations on small devices. The bottom line is that they are working really hard to do the right = thing, but there is a danger they will be wasting their time unless = someone from the security community is working with them to find a = reasonable solution that works for both the RADIUS community and the = security community. I have my doubts as to whether this document brings = them closer to a solution, but it is certainly an opportunity for = someone to volunteer to step up. --Charlie p.s. One protocol nit to worry about. In section 4.3, paragraph 4, the = spec suggests to one way to mitigate downgrade attacks is for initiators = to remember that responders once accepted the newer (stronger) protocol, = and on that basis refuse to accept the older (weaker) protocol in = subsequent negotiations. While it sounds logical, it can lead to = deployment problems where someone rolls out a newer responder but then = finds due to some problem that they must back it out. For that case, = there must be some (likely out of band) way to tell the initiator to go = back to accepting the old protocol. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Wed Jun 15 03:22:30 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA37D9E800A for ; Wed, 15 Jun 2011 03:22:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pekbm5kJ6qvL for ; Wed, 15 Jun 2011 03:22:30 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id E0CC19E8005 for ; Wed, 15 Jun 2011 03:22:29 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QWnCA-000NPJ-G0 for radiusext-data0@psg.com; Wed, 15 Jun 2011 10:19:34 +0000 Received: from liberty.deployingradius.com ([88.191.76.128]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QWnC7-000NP1-Hp for radiusext@ops.ietf.org; Wed, 15 Jun 2011 10:19:31 +0000 Message-ID: <4DF8872F.90405@deployingradius.com> Date: Wed, 15 Jun 2011 12:19:27 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: "Romascanu, Dan (Dan)" CC: radiusext@ops.ietf.org, Charlie Kaufman Subject: Re: FW: Secdir review of draft-ietf-radext-crypto-agility-requirements-06 References: In-Reply-To: X-Enigmail-Version: 0.96.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: Romascanu, Dan (Dan) wrote: > I couldn't figure out what solutions people might have in mind motivating these requirements. In fact, these requirements appeared to me to rule out any possible solution. In particular, page 5 para 3 line 1 says "Proposals MUST NOT introduce new capabilities negotiation features into the RADIUS protocol and crypto-agility solutions SHOULD NOT require changes to the RADIUS operational model.", where the model says that RADIUS is a stateless request/response protocol. That makes most cryptographic algorithm negotiation protocols impossible. I think that's part of the goal. There isn't much point in having the RADIUS WG design new cryptographic protocols. It would seem more efficient and secure to just leverage TLS. > Actually, crypto agility for RADIUS would be pretty trivial. RADIUS uses pair-wise configured secret keys. Cryptographic algorithms could be associated with those keys, and therefore configured in the same manner as the keys. You couldn't assign the new kinds of keys unless both ends understood the new algorithms. Everything would work with no cryptographic negotiation at all. Hmm... the secrets would then need to contain both the cryptographic algorithms, *and* any keys necessary for those algorithms. That's possible, I guess. > The apparent reason that doesn't address the problem is that they are trying to do much more than algorithm agility. They are also trying to improve the protocol to include features like Perfect Forward Secrecy, Automated Key Management, and authentication using X.509 certificates. Yes. The WG has been focusing on TLS and DTLS for a while now. > Some text in the document seems to imply that running the whole thing over DTLS might be acceptable (because DTLS would be considered a transport so it's algorithm negotiation mechanisms would not be considered new capabilities negotiation features in RADIUS). If that were acceptable, it would solve all of their other problems, though it would add a lot of heft to implementations on small devices. Most small devices doing RADIUS have HTTPS web interfaces. The cost of DTLS is likely acceptable. Also, if a device is doing RADIUS, it's probably forwarding, filtering, and switching traffic at multiple Mbps. Adding TLS for a few packets/s is likely to be acceptable. > The bottom line is that they are working really hard to do the right thing, but there is a danger they will be wasting their time unless someone from the security community is working with them to find a reasonable solution that works for both the RADIUS community and the security community. I have my doubts as to whether this document brings them closer to a solution, but it is certainly an opportunity for someone to volunteer to step up. If TLS is acceptable to the RADIUS WG, I presume it is likely to also be acceptable to the security reviewers. > p.s. One protocol nit to worry about. In section 4.3, paragraph 4, the spec suggests to one way to mitigate downgrade attacks is for initiators to remember that responders once accepted the newer (stronger) protocol, and on that basis refuse to accept the older (weaker) protocol in subsequent negotiations. While it sounds logical, it can lead to deployment problems where someone rolls out a newer responder but then finds due to some problem that they must back it out. For that case, there must be some (likely out of band) way to tell the initiator to go back to accepting the old protocol. IIRC, that is usually done via an administrative configuration change on the device. Alan DeKok. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Tue Jun 21 05:44:49 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6738D9E8014 for ; Tue, 21 Jun 2011 05:44:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w1samhYoJV-r for ; Tue, 21 Jun 2011 05:44:48 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 6C1D69E8021 for ; Tue, 21 Jun 2011 05:44:48 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QZ0HG-000ERH-EM for radiusext-data0@psg.com; Tue, 21 Jun 2011 12:41:58 +0000 Received: from liberty.deployingradius.com ([88.191.76.128]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QZ0HE-000ER3-06 for radiusext@ops.ietf.org; Tue, 21 Jun 2011 12:41:56 +0000 Message-ID: <4E00918D.6010105@deployingradius.com> Date: Tue, 21 Jun 2011 14:41:49 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: 'radext mailing list' Subject: Extended attrs doc X-Enigmail-Version: 0.96.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: Does anyone have feedback? My $0.02 is that the format of the "long" attributes is very awkward. It means that there are *two* format changes. The "flags" octet has 7 unused bits, which doesn't seem useful. And the discussion around the whole "flags" thing seems awkward. I've had some off-list discussions with people, and would like to propose an alternative. The idea is to allow "fragmented" attributes, via an explicit "Fragment-Data" attribute. This attribute would be assigned number 255, and would be defined as being a fragment of the *previous* attribute. The rules for encoding it are: - take attribute data (> 253 octets) - fill up the first attribute as normal, until "length = 255" - take the rest of the data - chop it into fragments of 253 octets - pack it into "Fragment-Data" (type = 255, length = 255) - last fragment has length <= 255 OR last fragment has length == 255, AND the next attribute is not Fragment-Data The rules for decoding it are: - For each attribute in the packet - if length is 255 AND the next attribute is Fragment-Data (255) THEN the data from the next attribute is concatenated to this one There are two issues with this proposal: 1) vendors have "self allocated" attribute 255. This proposal is compatible with that, as Fragment-Data is define only when the previous attribute has Length==255. This should be rare. 2) existing proxies re-ordering attributes. RFC 2865 says that implementations MUST NOT re-order attributes of the same type. But they CAN re-order attributes of differing type. So there's a chance that proxies which don't understand Fragment-Data will re-order them, breaking the packet entirely... I'm not aware of many (if any) proxies that do (2). Most are more stringent than the requirements of RFC 2865, and don't re-order attributes of differing type. Thoughts? Alan DeKok. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Tue Jun 21 09:54:04 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F93F21F84CB for ; Tue, 21 Jun 2011 09:54:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FqUz7Vyk-9E4 for ; Tue, 21 Jun 2011 09:54:03 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 9826121F84C9 for ; Tue, 21 Jun 2011 09:53:59 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QZ49d-0002Up-0d for radiusext-data0@psg.com; Tue, 21 Jun 2011 16:50:21 +0000 Received: from remote.iea-software.com ([70.89.142.196] helo=aspen.internal.iea-software.com) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QZ49Z-0002UK-Hc for radiusext@ops.ietf.org; Tue, 21 Jun 2011 16:50:17 +0000 Received: from SMURF (unverified [10.0.3.195]) by aspen.internal.iea-software.com (Rockliffe SMTPRA 7.0.6) with ESMTP id ; Tue, 21 Jun 2011 09:50:11 -0700 Date: Tue, 21 Jun 2011 09:49:37 -0700 (Pacific Daylight Time) From: Peter Deacon To: Alan DeKok cc: 'radext mailing list' Subject: Re: Extended attrs doc In-Reply-To: <4E00918D.6010105@deployingradius.com> Message-ID: References: <4E00918D.6010105@deployingradius.com> User-Agent: Alpine 2.00 (WNT 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: On Tue, 21 Jun 2011, Alan DeKok wrote: > Does anyone have feedback? > My $0.02 is that the format of the "long" attributes is very awkward. > It means that there are *two* format changes. The "flags" octet has 7 > unused bits, which doesn't seem useful. And the discussion around the > whole "flags" thing seems awkward. Interesting...RFC 2865 5: "A RADIUS server or client MUST NOT have any dependencies on the order of attributes of different types." "A RADIUS server or client MUST NOT require attributes of the same type to be contiguous." RFC 3579 3.1 (EAP) "If multiple EAP-Message attributes are contained within an Access-Request or Access-Challenge packet, they MUST be in order and they MUST be consecutive attributes in the Access-Request or Access-Challenge packet." Note the direct contradiction of 'MUST NOT' vs 'MUST'. I tend to prefer a system which minimizes the possibility of data corruption caused by ordering or truncation of attributes by systems (Not necessarily only proxies) some of which may not even know what an extended attribute is. If the system detects an error or the data is missing no data is ALWAYS preferable to wrong data. WiMax uses more flags, EAP I will just ignore. Extended attribute is like WiMax however a little worse in that the inner attribute type is not preserved in the next fragment so any error could cause weird situations where the data field of a mis-ordered extended type leaks into a separate attributes 'type' field. (Esp last attribute with more bit not set) The use of a separate fragment-data attribute raises more ordering dependency questions. From a design POV I prefer the attributes to be self-contained within the same type. What happens when there are multiple ext frag attributes in the same request with different attribute id's (245,246) ? There is no RFC anywhere preventing reorder and as you mention how do you know which fragment is which or when one stops and the other starts? My suggestion is to keep the draft as is but add an explicit fragment counter next to the more flag using some or all of the remaining 7-bits. Since max RADIUS packet size is 4096 there are more than enough bits. With this approach the chance of at least detecting out of order fragments increase. For example Attr1 requires 4 fragments to assemble.. Attr1 - (More=Yes, Counter=1) ... data ... Attr1 - (More=Yes, Counter=2) ... data ... Attr1 - (More=Yes, Counter=3) ... data ... Attr1 - (More=No, Counter=4) ... data ... Attr2 does not require fragmentation: Attr2 - (More=No, Counter=0) Note attributes not requiring fragmentation could use 0 to explicitly indicate so they could never be confused with an end of fragment. I also prefer fragmentation occur on the same level of the attribute like WiMax VSAs where the attributes inner type is fully defined before the fragmentation payload so there can never be any ambiguity regarding at least the attribute type the fragment belongs. With the above Counter fields in the picture this preference does not matter as much and perhaps saving the extra byte(s) is the better tradeoff. regards, Peter > I've had some off-list discussions with people, and would like to > propose an alternative. > > The idea is to allow "fragmented" attributes, via an explicit > "Fragment-Data" attribute. This attribute would be assigned number 255, > and would be defined as being a fragment of the *previous* attribute. > > The rules for encoding it are: > > - take attribute data (> 253 octets) > - fill up the first attribute as normal, until "length = 255" > - take the rest of the data > - chop it into fragments of 253 octets > - pack it into "Fragment-Data" (type = 255, length = 255) > - last fragment has length <= 255 > OR last fragment has length == 255, AND the next attribute > is not Fragment-Data > > The rules for decoding it are: > > - For each attribute in the packet > - if length is 255 AND the next attribute is Fragment-Data (255) > THEN the data from the next attribute is concatenated to this one > > There are two issues with this proposal: > > 1) vendors have "self allocated" attribute 255. This proposal is > compatible with that, as Fragment-Data is define only when the > previous attribute has Length==255. This should be rare. > > 2) existing proxies re-ordering attributes. > RFC 2865 says that implementations MUST NOT re-order attributes > of the same type. But they CAN re-order attributes of differing > type. So there's a chance that proxies which don't understand > Fragment-Data will re-order them, breaking the packet entirely... > > I'm not aware of many (if any) proxies that do (2). Most are more > stringent than the requirements of RFC 2865, and don't re-order > attributes of differing type. > > Thoughts? > > Alan DeKok. > > -- > to unsubscribe send a message to radiusext-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: > -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Tue Jun 21 10:18:33 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCFC411E808B for ; Tue, 21 Jun 2011 10:18:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V4TV3xmp6NIZ for ; Tue, 21 Jun 2011 10:18:31 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id D0C6D11E80CA for ; Tue, 21 Jun 2011 10:18:30 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QZ4Ys-0004Qe-VS for radiusext-data0@psg.com; Tue, 21 Jun 2011 17:16:26 +0000 Received: from liberty.deployingradius.com ([88.191.76.128]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QZ4Yq-0004QD-2m for radiusext@ops.ietf.org; Tue, 21 Jun 2011 17:16:24 +0000 Message-ID: <4E00D1E6.700@deployingradius.com> Date: Tue, 21 Jun 2011 19:16:22 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Peter Deacon CC: 'radext mailing list' Subject: Re: Extended attrs doc References: <4E00918D.6010105@deployingradius.com> In-Reply-To: X-Enigmail-Version: 0.96.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: Peter Deacon wrote: > Interesting...RFC 2865 5: > > "A RADIUS server or client MUST NOT have any dependencies on the order > of attributes of different types." Yes. However, the WG can change that if consensus is reached. > "A RADIUS server or client MUST NOT require attributes of the same type > to be contiguous." > > RFC 3579 3.1 (EAP) > > "If multiple EAP-Message attributes are contained within an > Access-Request or Access-Challenge packet, they MUST be in order and > they MUST be consecutive attributes in the Access-Request or > Access-Challenge packet." > > Note the direct contradiction of 'MUST NOT' vs 'MUST'. Yes. I haven't seen any interoperability issues as a result of EAP violating RFC 2865 Section 5. > I tend to prefer a system which minimizes the possibility of data > corruption caused by ordering or truncation of attributes by systems > (Not necessarily only proxies) some of which may not even know what an > extended attribute is. I agree. > If the system detects an error or the data is missing no data is ALWAYS > preferable to wrong data. That's why the document introduces the concept of an "invalid attribute". These are attributes which are not treated as their alleged number would indicate. > Extended attribute is like WiMax however a little worse in that the > inner attribute type is not preserved in the next fragment so any error > could cause weird situations where the data field of a mis-ordered > extended type leaks into a separate attributes 'type' field. (Esp last > attribute with more bit not set) Yes. The hope is that proxies will not re-order attributes of the same type. So having the fragments buried inside of multiple attributes of type 245 *should* be OK. > The use of a separate fragment-data attribute raises more ordering > dependency questions. From a design POV I prefer the attributes to be > self-contained within the same type. What happens when there are > multiple ext frag attributes in the same request with different > attribute id's (245,246) ? My message describes how they're treated. Ordering *is* important. > There is no RFC anywhere preventing reorder > and as you mention how do you know which fragment is which or when one > stops and the other starts? My message describes how to detect when a fragment starts and stops. > My suggestion is to keep the draft as is but add an explicit fragment > counter next to the more flag using some or all of the remaining 7-bits. > Since max RADIUS packet size is 4096 there are more than enough bits. One issue is having a "fragment id" field means there's another opportunity for implementations to get the encoding wrong. And there's been talk of extending the maximum RADIUS packet size. > For example Attr1 requires 4 fragments to assemble.. > > Attr1 - (More=Yes, Counter=1) ... data ... Attr1 - (More=Yes, Counter=2) > ... data ... Attr1 - (More=Yes, Counter=3) ... data ... Attr1 - > (More=No, Counter=4) ... data ... > > Attr2 does not require fragmentation: > > Attr2 - (More=No, Counter=0) > > Note attributes not requiring fragmentation could use 0 to explicitly > indicate so they could never be confused with an end of fragment. OK. > I also prefer fragmentation occur on the same level of the attribute > like WiMax VSAs where the attributes inner type is fully defined before > the fragmentation payload so there can never be any ambiguity regarding > at least the attribute type the fragment belongs. The difficulty with that is that the fragmentation method *cannot* modify how the VSA space is encoded. That space is completely under control of the vendors. > With the above > Counter fields in the picture this preference does not matter as much > and perhaps saving the extra byte(s) is the better tradeoff. The counter makes it easier to detect re-ordered attributes, that's true. Changing the "more" flag to an 8-bit fragment counter would solve a number of issues. You would have an explicit ordering of fragments, and it would mean that attributes could be 251*255, or 64005 octets long. That *should* be enough for most RADIUS purposes... Alan DeKok. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Wed Jun 22 13:16:52 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CA6FA1F0C44 for ; Wed, 22 Jun 2011 13:16:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iQzEuLDTYzgl for ; Wed, 22 Jun 2011 13:16:52 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id CB68F1F0C42 for ; Wed, 22 Jun 2011 13:16:51 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QZTmg-000ASf-95 for radiusext-data0@psg.com; Wed, 22 Jun 2011 20:12:22 +0000 Received: from remote.iea-software.com ([70.89.142.196] helo=aspen.internal.iea-software.com) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QZTmd-000AST-7E for radiusext@ops.ietf.org; Wed, 22 Jun 2011 20:12:19 +0000 Received: from SMURF (unverified [10.0.3.195]) by aspen.internal.iea-software.com (Rockliffe SMTPRA 7.0.6) with ESMTP id ; Wed, 22 Jun 2011 13:12:18 -0700 Date: Wed, 22 Jun 2011 13:12:17 -0700 (Pacific Daylight Time) From: Peter Deacon To: Alan DeKok cc: 'radext mailing list' Subject: Re: Extended attrs doc In-Reply-To: Message-ID: References: <4E00918D.6010105@deployingradius.com> User-Agent: Alpine 2.00 (WNT 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: Slightly off-topic -- wanted to point out proxies seem to be allowed to add add attributes anywhere they want in a packet while still respecting ordering constraint of RFC 2865 2.3. >> The use of a separate fragment-data attribute raises more ordering >> dependency questions. From a design POV I prefer the attributes to be >> self-contained within the same type. What happens when there are >> multiple ext frag attributes in the same request with different >> attribute id's (245,246) ? > My message describes how they're treated. Ordering *is* important. >> There is no RFC anywhere preventing reorder >> and as you mention how do you know which fragment is which or when one >> stops and the other starts? > My message describes how to detect when a fragment starts and stops. Yes, think we agree on the constraints. Packet wide ordering would need to be preserved. >> My suggestion is to keep the draft as is but add an explicit fragment >> counter next to the more flag using some or all of the remaining 7-bits. >> Since max RADIUS packet size is 4096 there are more than enough bits. > One issue is having a "fragment id" field means there's another > opportunity for implementations to get the encoding wrong. And there's > been talk of extending the maximum RADIUS packet size. I believe practically if this type of encoding were wrong the situation would be detected quickly in any reasonable interop test. It is the not so obvious interactions between systems and extension attributes I'm most concerned about. >> I also prefer fragmentation occur on the same level of the attribute >> like WiMax VSAs where the attributes inner type is fully defined before >> the fragmentation payload so there can never be any ambiguity regarding >> at least the attribute type the fragment belongs. > The difficulty with that is that the fragmentation method *cannot* > modify how the VSA space is encoded. That space is completely under > control of the vendors. Don't think this applies to extensions VSAs. In 4.6 Vendor Type is explicitly defined as a single byte. "The Vendor-Type field is one octet. Values are assigned at the sole discretion of the Vendor." This type has a more flag so thinking we would expect the same encoding rules for all extensions VSAs where it came to fragmentation. >> With the above >> Counter fields in the picture this preference does not matter as much >> and perhaps saving the extra byte(s) is the better tradeoff. > The counter makes it easier to detect re-ordered attributes, that's > true. > Changing the "more" flag to an 8-bit fragment counter would solve a > number of issues. You would have an explicit ordering of fragments, and > it would mean that attributes could be 251*255, or 64005 octets long. > That *should* be enough for most RADIUS purposes... If I had to choose between a more flag and the counter I would pick the counter. Prefer combination of more and counter since it gives you the end marker to detect truncation. regards, Peter -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Thu Jun 23 00:32:12 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1223F21F849F for ; Thu, 23 Jun 2011 00:32:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Sofr8NFVbfEC for ; Thu, 23 Jun 2011 00:32:11 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 3094F21F849D for ; Thu, 23 Jun 2011 00:32:11 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QZeLN-000DNY-Su for radiusext-data0@psg.com; Thu, 23 Jun 2011 07:28:53 +0000 Received: from liberty.deployingradius.com ([88.191.76.128]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QZeLL-000DNK-JF for radiusext@ops.ietf.org; Thu, 23 Jun 2011 07:28:51 +0000 Message-ID: <4E02EB2E.6070709@deployingradius.com> Date: Thu, 23 Jun 2011 09:28:46 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Peter Deacon CC: 'radext mailing list' Subject: Re: Extended attrs doc References: <4E00918D.6010105@deployingradius.com> In-Reply-To: X-Enigmail-Version: 0.96.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: Peter Deacon wrote: > Slightly off-topic -- wanted to point out proxies seem to be allowed to > add add attributes anywhere they want in a packet while still respecting > ordering constraint of RFC 2865 2.3. Yes. > I believe practically if this type of encoding were wrong the situation > would be detected quickly in any reasonable interop test. It is the not > so obvious interactions between systems and extension attributes I'm > most concerned about. People do interop tests? Maybe I post a list of vendors who've blatantly violated the RFCs and interoperability. > Don't think this applies to extensions VSAs. In 4.6 Vendor Type is > explicitly defined as a single byte. > > "The Vendor-Type field is one octet. Values are assigned at the sole > discretion of the Vendor." > > This type has a more flag so thinking we would expect the same encoding > rules for all extensions VSAs where it came to fragmentation. Yes. The top-level VSA can be fragmented. Anything *inside* of that, such as sub-TLVs, cannot be fragmented. > If I had to choose between a more flag and the counter I would pick the > counter. > > Prefer combination of more and counter since it gives you the end marker > to detect truncation. Or, start the counter at the last fragment. Counters go N, N-1, N-2, ..., 1, 0. If the list is truncated, it doesn't end at zero. Alan DeKok. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Thu Jun 23 01:21:55 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 53F2111E8098 for ; Thu, 23 Jun 2011 01:21:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2IqGRFI5nEro for ; Thu, 23 Jun 2011 01:21:54 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 9615D11E807B for ; Thu, 23 Jun 2011 01:21:54 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QZf85-000FTR-IR for radiusext-data0@psg.com; Thu, 23 Jun 2011 08:19:13 +0000 Received: from remote.iea-software.com ([70.89.142.196] helo=aspen.internal.iea-software.com) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QZf83-000FTF-Fb for radiusext@ops.ietf.org; Thu, 23 Jun 2011 08:19:11 +0000 Received: from SMURF (unverified [10.0.3.195]) by aspen.internal.iea-software.com (Rockliffe SMTPRA 7.0.6) with ESMTP id ; Thu, 23 Jun 2011 01:18:59 -0700 Date: Thu, 23 Jun 2011 01:18:58 -0700 (Pacific Daylight Time) From: Peter Deacon To: Alan DeKok cc: 'radext mailing list' Subject: Re: Extended attrs doc In-Reply-To: <4E02EB2E.6070709@deployingradius.com> Message-ID: References: <4E00918D.6010105@deployingradius.com> <4E02EB2E.6070709@deployingradius.com> User-Agent: Alpine 2.00 (WNT 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: On Thu, 23 Jun 2011, Alan DeKok wrote: >> If I had to choose between a more flag and the counter I would pick the >> counter. >> Prefer combination of more and counter since it gives you the end marker >> to detect truncation. > Or, start the counter at the last fragment. Counters go N, N-1, N-2, > ..., 1, 0. If the list is truncated, it doesn't end at zero. This shifts the problem from the end to the start. regards, Peter -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Fri Jun 24 12:47:19 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C88C11E80A7 for ; Fri, 24 Jun 2011 12:47:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -105.999 X-Spam-Level: X-Spam-Status: No, score=-105.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_48=0.6, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zYxt1-HajlEg for ; Fri, 24 Jun 2011 12:47:16 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id 7ACEE11E80A3 for ; Fri, 24 Jun 2011 12:47:05 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QaCI0-000PQm-OD for radiusext-data0@psg.com; Fri, 24 Jun 2011 19:43:40 +0000 Received: from g4t0016.houston.hp.com ([15.201.24.19]) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QaCHp-000PQW-E7 for radiusext@ops.ietf.org; Fri, 24 Jun 2011 19:43:29 +0000 Received: from G1W0400.americas.hpqcorp.net (g1w0400.americas.hpqcorp.net [16.236.31.10]) (using TLSv1 with cipher RC4-MD5 (128/128 bits)) (No client certificate requested) by g4t0016.houston.hp.com (Postfix) with ESMTPS id 75655145C3 for ; Fri, 24 Jun 2011 19:43:26 +0000 (UTC) Received: from G5W0324.americas.hpqcorp.net (16.228.8.69) by G1W0400.americas.hpqcorp.net (16.236.31.10) with Microsoft SMTP Server (TLS) id 8.2.176.0; Fri, 24 Jun 2011 19:42:44 +0000 Received: from GVW0671EXC.americas.hpqcorp.net ([16.230.34.3]) by G5W0324.americas.hpqcorp.net ([16.228.8.69]) with mapi; Fri, 24 Jun 2011 19:42:44 +0000 From: "Sanchez, Mauricio (HP Networking)" To: "'radiusext@ops.ietf.org'" Date: Fri, 24 Jun 2011 19:42:17 +0000 Subject: Conclusion of RADEXT WG call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Conclusion of RADEXT WG call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: Acwypm964uThU1ZbSRareRnDLH9nqA== Message-ID: <9BC2F7926B33FE4AB10D69891D58FC1C5C753B978A@GVW0671EXC.americas.hpqcorp.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/mixed; boundary="_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_" MIME-Version: 1.0 Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable After discussion between current chairs and AD, the conclusion we have reac= hed is to approve this request as we believe rough consensus for approval h= as been achieved. The situation is bit peculiar in that a number of indust= ry individuals expressed themselves in favor of approving the request, but = sent their email to the incorrect email address (owner-radiusext@ops.ietf.o= rg rather than radiusext@ops.ietf.org). I have attached the emails for all= those individuals who used the incorrect address. =20 The chairs appreciate the spirited conversation arising from this topic and= do agree with the long-term RADIUS experts that these new types are not en= tirely in-line given the definition and past usage of the attribute. Howe= ver, the chairs feel the misalignment between these new types and the attri= bute definition is not sufficiently large to warrant disallowing the alloca= tion. We also took into account the industry support for immediate usage o= f these types into account. =20 So as to improve the usability of these new values, we will be asking IANA = to include references to the appropriate WiMAX standards (and sections if a= vailable) in the IANA registry. Avi: We'd appreciate your assistance in g= etting us the right information to include.=20 If after this decision the WG would like to continue exploring a generalize= d solution to similar use cases, the chairs and AD are supportive.=20 -MS=20 ---------------------------------------------------------------------------= ----------------------- Final count=20 In Favor Clearwire - Dave McGiniss, David Holmes ZTE - Chu Li Alcatel - Pertez Feder Intel - Muthiah Venkatachala Huawei - Ronal Mao Samsun - Jungshin Park NSN - Seyeedi Shahab Sprint - Mark Lipford, Brent Hirschman Bridgewater - Avi Lior Opposed=20 Alan DeKok Stefan Winter Bernard Aboba Dave Nelson --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g6t0182.atlanta.hp.com (15.193.32.59) by G4W1842.americas.hpqcorp.net (16.234.97.224) with Microsoft SMTP Server (TLS) id 8.2.176.0; Tue, 17 May 2011 17:19:27 +0000 Received: from mail51.messagelabs.com (mail51.messagelabs.com [216.82.241.99]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by g6t0182.atlanta.hp.com (Postfix) with ESMTPS id 46DE918003 for ; Tue, 17 May 2011 17:19:27 +0000 (UTC) Received: (qmail 19811 invoked from network); 17 May 2011 17:19:26 -0000 Received: from mail.bridgewatersystems.com (HELO webmail.bridgewatersystems.com) (72.35.6.119) by server-10.tower-51.messagelabs.com with RC4-SHA encrypted SMTP; 17 May 2011 17:19:26 -0000 Received: from m679t05.fpmis.bridgewatersys.com ([10.52.81.148]) by m679t01.fpmis.bridgewatersys.com ([10.52.81.144]) with mapi; Tue, 17 May 2011 13:19:24 -0400 From: Avi Lior To: "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" Date: Tue, 17 May 2011 17:19:23 +0000 Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwUtpDxK+cumzgyTLmiYTBUw1gv9w== Message-ID: In-Reply-To: <9BC2F7926B33FE4AB10D69891D58FC1C5C72F20527@GVW0671EXC.americas.hpqcorp.net> Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G4W1842.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US user-agent: Microsoft-MacOutlook/14.10.0.110310 x-originating-ip: [72.35.6.119] x-msg-ref: server-10.tower-51.messagelabs.com!1305652766!94676505!1 x-env-sender: avi@bridgewatersystems.com x-viruschecked: Checked x-starscan-version: 6.2.16; banners=-,-,- Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Yes. -- Avi Lior --Bridgewater Systems On 17-05-11 22:52 , "Sanchez, Mauricio (HP Networking)" > wrote: At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: owner-radiusext@ops.ietf.org [ma= ilto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio (HP Netwo= rking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g1t0023.austin.hp.com (15.216.28.30) by G4W1844.americas.hpqcorp.net (16.234.97.226) with Microsoft SMTP Server (TLS) id 8.2.176.0; Thu, 19 May 2011 18:53:54 +0000 Received: from VA3EHSOBE002.bigfish.com (va3ehsobe002.messaging.microsoft.com [216.32.180.12]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by g1t0023.austin.hp.com (Postfix) with ESMTPS id 041EB3C071 for ; Thu, 19 May 2011 18:53:53 +0000 (UTC) Received: from mail120-va3-R.bigfish.com (10.7.14.241) by VA3EHSOBE002.bigfish.com (10.7.40.22) with Microsoft SMTP Server id 14.1.225.22; Thu, 19 May 2011 18:53:53 +0000 Received: from mail120-va3 (localhost.localdomain [127.0.0.1]) by mail120-va3-R.bigfish.com (Postfix) with ESMTP id 481A2DA845E; Thu, 19 May 2011 18:53:53 +0000 (UTC) Received: from mail120-va3 (localhost.localdomain [127.0.0.1]) by mail120-va3 (MessageSwitch) id 1305831232570423_13452; Thu, 19 May 2011 18:53:52 +0000 (UTC) Received: from VA3EHSMHS023.bigfish.com (unknown [10.7.14.239]) by mail120-va3.bigfish.com (Postfix) with ESMTP id 80378114804E; Thu, 19 May 2011 18:53:52 +0000 (UTC) Received: from plsasdm1.corp.sprint.com (144.230.168.25) by VA3EHSMHS023.bigfish.com (10.7.99.33) with Microsoft SMTP Server (TLS) id 14.1.225.22; Thu, 19 May 2011 18:53:50 +0000 Received: from PLSWEH01.ad.sprint.com (PLSWEH01.corp.sprint.com [144.226.242.129]) by plsasdm1.corp.sprint.com (Sentrion-MTA-4.0.5/Sentrion-MTA-4.0.5) with ESMTP id p4JIrmod012189 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 19 May 2011 13:53:49 -0500 Received: from PLSWM14A.ad.sprint.com ([fe80::39b3:69de:7a65:ad5f]) by PLSWEH01.ad.sprint.com ([2002:90e2:f281::90e2:f281]) with mapi id 14.01.0270.001; Thu, 19 May 2011 13:53:48 -0500 From: "Hirschman, Brent B [CTO]" To: "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" Date: Thu, 19 May 2011 18:53:48 +0000 Subject: Consensus poll for IANA #409959 NAS-Port-Type value request - Support Thread-Topic: Consensus poll for IANA #409959 NAS-Port-Type value request - Support Thread-Index: AcwWVhFSVaiT3i3GTryxNc1uniKAkw== Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G4W1844.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US x-originating-ip: [10.214.116.69] received-spf: pass (mail120-va3: domain of sprint.com designates 144.230.168.25 as permitted sender) client-ip=144.230.168.25; envelope-from=Brent.Hirschman@sprint.com; helo=plsasdm1.corp.sprint.com ;p.sprint.com ; x-bigfish: VS-33(zz9371O1fa4J4015Lzz1202hzz8275dh1033ILz2fh2a8h668h839h61h) x-spamscore: -33 x-spam-tcs-scl: 0:0 x-forefront-antispam-report: CIP:144.230.168.25;KIP:(null);UIP:(null);IPVD:NLI;H:plsasdm1.corp.sprint.com;RD:smtpls1.sprint.com;EFVD:NLI x-originatororg: sprint.com Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Support At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g6t0182.atlanta.hp.com (15.193.32.59) by G3W0630.americas.hpqcorp.net (16.233.58.74) with Microsoft SMTP Server id 8.2.176.0; Fri, 20 May 2011 00:05:07 +0000 Received: from AM1EHSOBE003.bigfish.com (am1ehsobe003.messaging.microsoft.com [213.199.154.206]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by g6t0182.atlanta.hp.com (Postfix) with ESMTPS id F266118033 for ; Fri, 20 May 2011 00:05:06 +0000 (UTC) Received: from mail30-am1-R.bigfish.com (10.3.201.244) by AM1EHSOBE003.bigfish.com (10.3.204.23) with Microsoft SMTP Server id 14.1.225.22; Fri, 20 May 2011 00:05:05 +0000 Received: from mail30-am1 (localhost.localdomain [127.0.0.1]) by mail30-am1-R.bigfish.com (Postfix) with ESMTP id C17BCB904CB; Fri, 20 May 2011 00:05:05 +0000 (UTC) Received: from mail30-am1 (localhost.localdomain [127.0.0.1]) by mail30-am1 (MessageSwitch) id 1305849904952069_3094; Fri, 20 May 2011 00:05:04 +0000 (UTC) Received: from AM1EHSMHS003.bigfish.com (unknown [10.3.201.242]) by mail30-am1.bigfish.com (Postfix) with ESMTP id E2F9F4F004E; Fri, 20 May 2011 00:05:04 +0000 (UTC) Received: from CWCH3EXCAPVW007.NA.corp.clearwire.com (64.14.230.15) by AM1EHSMHS003.bigfish.com (10.3.207.103) with Microsoft SMTP Server (TLS) id 14.1.225.22; Fri, 20 May 2011 00:05:04 +0000 Received: from cwch3excapsw003.NA.corp.clearwire.com ([fe80::c97f:4fd1:de81:9153]) by CWCH3EXCAPVW007.NA.corp.clearwire.com ([fe80::3819:5711:9b29:b4a0%11]) with mapi id 14.01.0270.001; Thu, 19 May 2011 19:05:02 -0500 From: David Holmes To: "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" CC: "Avi Lior (avi@bridgewatersystems.com)" , "Lipford, Mark A [CTO] (Mark.A.Lipford@sprint.com)" , "nwg@list.wimaxforum.org" Date: Fri, 20 May 2011 00:05:01 +0000 Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOg== Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G3W0630.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US x-originating-ip: [172.20.240.135] received-spf: neutral (mail30-am1: 64.14.230.15 is neither permitted nor denied by domain of clearwire.com) client-ip=64.14.230.15; envelope-from=David.Holmes@clearwire.com; helo=CWCH3EXCAPVW007.NA.corp.clearwire.com ;learwire.com ; x-bigfish: VPS-37(zz9371Oe2eM1fa4J4015Lzz1202hzz8275bh8275dh1033ILz2ei2a8h668h839h61h) x-spamscore: -37 x-spam-tcs-scl: 0:0 x-forefront-antispam-report: CIP:64.14.230.15;KIP:(null);UIP:(null);IPVD:NLI;H:CWCH3EXCAPVW007.NA.corp.clearwire.com;RD:none;EFVD:NLI x-originatororg: clearwire.com Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Yes. Thanks. David Holmes Standards Integration clearwire P (+1) (425) 247-7104 C (+1) (206) 696-6713 At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g6t0183.atlanta.hp.com (15.193.32.60) by G4W1842.americas.hpqcorp.net (16.234.97.224) with Microsoft SMTP Server (TLS) id 8.2.176.0; Fri, 20 May 2011 13:49:41 +0000 Received: from AM1EHSOBE001.bigfish.com (am1ehsobe001.messaging.microsoft.com [213.199.154.204]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by g6t0183.atlanta.hp.com (Postfix) with ESMTPS id 773C438011 for ; Fri, 20 May 2011 13:49:40 +0000 (UTC) Received: from mail97-am1-R.bigfish.com (10.3.201.243) by AM1EHSOBE001.bigfish.com (10.3.204.21) with Microsoft SMTP Server id 14.1.225.22; Fri, 20 May 2011 13:49:39 +0000 Received: from mail97-am1 (localhost.localdomain [127.0.0.1]) by mail97-am1-R.bigfish.com (Postfix) with ESMTP id 519BE17E83BB; Fri, 20 May 2011 13:49:39 +0000 (UTC) Received: from mail97-am1 (localhost.localdomain [127.0.0.1]) by mail97-am1 (MessageSwitch) id 1305899378400497_14022; Fri, 20 May 2011 13:49:38 +0000 (UTC) Received: from AM1EHSMHS012.bigfish.com (unknown [10.3.201.252]) by mail97-am1.bigfish.com (Postfix) with ESMTP id 5C76A420052; Fri, 20 May 2011 13:49:38 +0000 (UTC) Received: from pdaasdm1.corp.sprint.com (144.229.32.56) by AM1EHSMHS012.bigfish.com (10.3.207.112) with Microsoft SMTP Server (TLS) id 14.1.225.22; Fri, 20 May 2011 13:49:35 +0000 Received: from PDAWEH02.ad.sprint.com (PDAWEH02.corp.sprint.com [144.226.111.42]) by pdaasdm1.corp.sprint.com (Sentrion-MTA-4.0.5/Sentrion-MTA-4.0.5) with ESMTP id p4KDnWcI018375 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 20 May 2011 08:49:33 -0500 Received: from PDAWEH04.ad.sprint.com (144.226.111.59) by PDAWEH02.ad.sprint.com (144.226.111.42) with Microsoft SMTP Server (TLS) id 14.1.270.1; Fri, 20 May 2011 08:49:32 -0500 Received: from plswm03b.ad.sprint.com ([fe80::f4e1:a2df:50a0:f75d]) by PDAWEH04.ad.sprint.com ([2002:90e2:6f3b::90e2:6f3b]) with mapi id 14.01.0270.001; Fri, 20 May 2011 08:49:32 -0500 From: "Lipford, Mark A [CTO]" To: David Holmes , "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" CC: "Avi Lior (avi@bridgewatersystems.com)" , "nwg@list.wimaxforum.org" Date: Fri, 20 May 2011 13:49:32 +0000 Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOgAcyy/Q Message-ID: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G4W1842.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US x-originating-ip: [10.122.53.24] received-spf: pass (mail97-am1: domain of sprint.com designates 144.229.32.56 as permitted sender) client-ip=144.229.32.56; envelope-from=Mark.A.Lipford@sprint.com; helo=pdaasdm1.corp.sprint.com ;p.sprint.com ; x-bigfish: VS-46(zz9371O1fa4J62a3Kef4R4015Lzz1202hzz8275bh8275dh1033ILz2fh2a8h668h839h61h) x-spamscore: -46 x-spam-tcs-scl: 0:0 x-forefront-antispam-report: CIP:144.229.32.56;KIP:(null);UIP:(null);IPVD:NLI;H:pdaasdm1.corp.sprint.com;RD:smtpda1.sprint.com;EFVD:NLI x-originatororg: sprint.com Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Yes as well Mark A. Lipford Manager - Industry Standards Sprint Nextel 6220 Sprint Parkway Mailstop: KSOPHD0402-4B350 Overland Park, KS 66251 USA +1 (913) 762-6740 (Office) +1 (913) 579-2319 (Mobile) email: mark.a.lipford@sprint.com From: David Holmes [mailto:David.Holmes@clearwire.com] Sent: Thursday, May 19, 2011 7:05 PM To: mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); Lip= ford, Mark A [CTO]; nwg@list.wimaxforum.org Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Yes. Thanks. David Holmes Standards Integration clearwire P (+1) (425) 247-7104 C (+1) (206) 696-6713 At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g6t0183.atlanta.hp.com (15.193.32.60) by G5W0332.americas.hpqcorp.net (16.228.8.74) with Microsoft SMTP Server (TLS) id 8.2.176.0; Fri, 20 May 2011 15:43:56 +0000 Received: from motgate3.mot-solutions.com (motgate3.mot-solutions.com [136.182.1.13]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by g6t0183.atlanta.hp.com (Postfix) with ESMTPS id BE47038014 for ; Fri, 20 May 2011 15:43:55 +0000 (UTC) Received: from il27exr02.cig.mot.com (il27exr02.mot.com [10.17.196.71]) by motgate3.mot-solutions.com (8.14.3/8.14.3) with ESMTP id p4KFhtKh009812 for ; Fri, 20 May 2011 08:43:55 -0700 (MST) Received: from il27vts02.mot.com (il27vts02.cig.mot.com [10.17.196.86]) by il27exr02.cig.mot.com (8.13.1/Vontu) with SMTP id p4KFhsWw000083 for ; Fri, 20 May 2011 10:43:54 -0500 (CDT) Received: from de01exm70.ds.mot.com (de01exm70.am.mot.com [10.176.8.26]) by il27exr02.cig.mot.com (8.13.1/8.13.0) with ESMTP id p4KFhs8N000079 for ; Fri, 20 May 2011 10:43:54 -0500 (CDT) From: Sayeedi Shahab-CLXR88 To: "ext Lipford, Mark A [CTO]" , David Holmes , "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" CC: "avi@bridgewatersystems.com" , "nwg@list.wimaxforum.org" Content-Class: urn:content-classes:message Date: Fri, 20 May 2011 15:43:30 +0000 Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOgAcyy/QAAP5PEA= Message-ID: References: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> In-Reply-To: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G5W0332.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: x-cfilter-loop: Reflected Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 YES. Regards,, Shahab Sayeedi From: ext Lipford, Mark A [CTO] [mailto:Mark.A.Lipford@sprint.com] Sent: Friday, May 20, 2011 8:50 AM To: David Holmes; mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); nwg= @list.wimaxforum.org Subject: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value requ= est Yes as well Mark A. Lipford Manager - Industry Standards Sprint Nextel 6220 Sprint Parkway Mailstop: KSOPHD0402-4B350 Overland Park, KS 66251 USA +1 (913) 762-6740 (Office) +1 (913) 579-2319 (Mobile) email: mark.a.lipford@sprint.com From: David Holmes [mailto:David.Holmes@clearwire.com] Sent: Thursday, May 19, 2011 7:05 PM To: mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); Lip= ford, Mark A [CTO]; nwg@list.wimaxforum.org Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Yes. Thanks. David Holmes Standards Integration clearwire P (+1) (425) 247-7104 C (+1) (206) 696-6713 At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g4t0011.houston.hp.com (15.201.24.14) by G5W0331.americas.hpqcorp.net (16.228.8.76) with Microsoft SMTP Server (TLS) id 8.2.176.0; Mon, 23 May 2011 04:09:55 +0000 Received: from mailout3.samsung.com (mailout3.samsung.com [203.254.224.33]) by g4t0011.houston.hp.com (Postfix) with ESMTP id 8D66E20087 for ; Mon, 23 May 2011 04:09:54 +0000 (UTC) Received: from epcpsbgm1.samsung.com (mailout3.samsung.com [203.254.224.33]) by mailout3.samsung.com (Oracle Communications Messaging Exchange Server 7u4-19.01 64bit (built Sep 7 2010)) with ESMTP id <0LLM00E4JRKCSEL0@mailout3.samsung.com> for mauricio.sanchez@hp.com; Mon, 23 May 2011 13:09:53 +0900 (KST) Received: from epmmp2 ( [203.254.227.17]) by epcpsbgm1.samsung.com (MMPCPMTA) with SMTP id EE.B9.06799.ACDD9DD4; Mon, 23 May 2011 13:08:42 +0900 (KST) Received: from NOSHIN02PAR03 ([168.219.197.48]) by mmp2.samsung.com (iPlanet Messaging Server 5.2 Patch 2 (built Jul 14 2004)) with ESMTPSA id <0LLM007G6RIIBL@mmp2.samsung.com> for mauricio.sanchez@hp.com; Mon, 23 May 2011 13:08:42 +0900 (KST) From: "Park,Jungshin" To: 'Sayeedi Shahab-CLXR88' , "'ext Lipford, Mark A [CTO]'" , 'David Holmes' , "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" CC: "avi@bridgewatersystems.com" , "nwg@list.wimaxforum.org" Date: Mon, 23 May 2011 04:08:43 +0000 Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOgAcyy/QAAP5PEAAfpgcgA== Message-ID: <013b01cc18ff$1ada6830$508f3890$%park@samsung.com> References: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> In-Reply-To: X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G5W0331.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: x-auditid: cbfee61a-b7ce2ae000001a8f-97-4dd9ddca0269 x-brightmail-tracker: AAAAAA== Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Yes. Samsung also supports. Regards, Jungshin From: Sayeedi Shahab-CLXR88 [mailto:shahab.sayeedi@nsn.com] Sent: Saturday, May 21, 2011 12:44 AM To: ext Lipford, Mark A [CTO]; David Holmes; mauricio.sanchez@hp.com; owner= -radiusext@ops.ietf.org Cc: avi@bridgewatersystems.com; nwg@list.wimaxforum.org Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value = request YES. Regards,, Shahab Sayeedi From: ext Lipford, Mark A [CTO] [mailto:Mark.A.Lipford@sprint.com] Sent: Friday, May 20, 2011 8:50 AM To: David Holmes; mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); nwg= @list.wimaxforum.org Subject: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value requ= est Yes as well Mark A. Lipford Manager - Industry Standards Sprint Nextel 6220 Sprint Parkway Mailstop: KSOPHD0402-4B350 Overland Park, KS 66251 USA +1 (913) 762-6740 (Office) +1 (913) 579-2319 (Mobile) email: mark.a.lipford@sprint.com From: David Holmes [mailto:David.Holmes@clearwire.com] Sent: Thursday, May 19, 2011 7:05 PM To: mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); Lip= ford, Mark A [CTO]; nwg@list.wimaxforum.org Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Yes. Thanks. David Holmes Standards Integration clearwire P (+1) (425) 247-7104 C (+1) (206) 696-6713 At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g5t0005.atlanta.hp.com (15.192.0.42) by G4W1844.americas.hpqcorp.net (16.234.97.226) with Microsoft SMTP Server (TLS) id 8.2.176.0; Mon, 23 May 2011 17:02:50 +0000 Received: from usaga04-in.huawei.com (usaga04-in.huawei.com [206.16.17.180]) by g5t0005.atlanta.hp.com (Postfix) with ESMTP id 7D095801B for ; Mon, 23 May 2011 17:02:50 +0000 (UTC) Received: from huawei.com (usaga04-in [172.18.4.101]) by usaga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0LLN009U7RCOBY@usaga04-in.huawei.com> for mauricio.sanchez@hp.com; Mon, 23 May 2011 12:02:50 -0500 (CDT) Received: from RonaldMao1 ([10.192.25.52]) by usaga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0LLN00527RCM87@usaga04-in.huawei.com> for mauricio.sanchez@hp.com; Mon, 23 May 2011 12:02:48 -0500 (CDT) From: Ronald Mao To: "'Park,Jungshin'" , 'Sayeedi Shahab-CLXR88' , "'ext Lipford, Mark A [CTO]'" , 'David Holmes' , "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" CC: "avi@bridgewatersystems.com" , "nwg@list.wimaxforum.org" Date: Mon, 23 May 2011 17:02:46 +0000 Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOgAcyy/QAAP5PEAAfpgcgAAbCQ5A Message-ID: <00df01cc196b$3df1beb0$b9d53c10$@com> References: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> <013b01cc18ff$1ada6830$508f3890$%park@samsung.com> In-Reply-To: <013b01cc18ff$1ada6830$508f3890$%park@samsung.com> X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G4W1844.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Yes from Huawei. Ronald From: Park,Jungshin [mailto:shin02.park@samsung.com] Sent: Sunday, May 22, 2011 9:09 PM To: 'Sayeedi Shahab-CLXR88'; 'ext Lipford, Mark A [CTO]'; 'David Holmes'; m= auricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: avi@bridgewatersystems.com; nwg@list.wimaxforum.org Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value = request Yes. Samsung also supports. Regards, Jungshin From: Sayeedi Shahab-CLXR88 [mailto:shahab.sayeedi@nsn.com] Sent: Saturday, May 21, 2011 12:44 AM To: ext Lipford, Mark A [CTO]; David Holmes; mauricio.sanchez@hp.com; owner= -radiusext@ops.ietf.org Cc: avi@bridgewatersystems.com; nwg@list.wimaxforum.org Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value = request YES. Regards,, Shahab Sayeedi From: ext Lipford, Mark A [CTO] [mailto:Mark.A.Lipford@sprint.com] Sent: Friday, May 20, 2011 8:50 AM To: David Holmes; mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); nwg= @list.wimaxforum.org Subject: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value requ= est Yes as well Mark A. Lipford Manager - Industry Standards Sprint Nextel 6220 Sprint Parkway Mailstop: KSOPHD0402-4B350 Overland Park, KS 66251 USA +1 (913) 762-6740 (Office) +1 (913) 579-2319 (Mobile) email: mark.a.lipford@sprint.com From: David Holmes [mailto:David.Holmes@clearwire.com] Sent: Thursday, May 19, 2011 7:05 PM To: mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); Lip= ford, Mark A [CTO]; nwg@list.wimaxforum.org Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Yes. Thanks. David Holmes Standards Integration clearwire P (+1) (425) 247-7104 C (+1) (206) 696-6713 At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g1t0024.austin.hp.com (15.216.28.31) by G5W0332.americas.hpqcorp.net (16.228.8.74) with Microsoft SMTP Server (TLS) id 8.2.176.0; Mon, 23 May 2011 17:08:22 +0000 Received: from mga09.intel.com (mga09.intel.com [134.134.136.24]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by g1t0024.austin.hp.com (Postfix) with ESMTPS id 8E889403B for ; Mon, 23 May 2011 17:08:20 +0000 (UTC) Received: from orsmga002.jf.intel.com ([10.7.209.21]) by orsmga102.jf.intel.com with ESMTP; 23 May 2011 10:08:19 -0700 Received: from orsmsx604.amr.corp.intel.com ([10.22.226.87]) by orsmga002.jf.intel.com with ESMTP; 23 May 2011 10:08:19 -0700 Received: from orsmsx508.amr.corp.intel.com ([10.22.226.46]) by orsmsx604.amr.corp.intel.com ([10.250.113.17]) with mapi; Mon, 23 May 2011 10:08:19 -0700 From: "Venkatachalam, Muthaiah" To: Ronald Mao , "'Park,Jungshin'" , 'Sayeedi Shahab-CLXR88' , "'ext Lipford, Mark A [CTO]'" , 'David Holmes' , "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" CC: "avi@bridgewatersystems.com" , "nwg@list.wimaxforum.org" Date: Mon, 23 May 2011 17:08:17 +0000 Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOgAcyy/QAAP5PEAAfpgcgAAbCQ5AAAA06rA= Message-ID: References: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> <013b01cc18ff$1ada6830$508f3890$%park@samsung.com> <00df01cc196b$3df1beb0$b9d53c10$@com> In-Reply-To: <00df01cc196b$3df1beb0$b9d53c10$@com> Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G5W0332.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US x-extloop1: 1 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Yes from Intel. From: Ronald Mao [mailto:rmao@huawei.com] Sent: Monday, May 23, 2011 10:03 AM To: 'Park,Jungshin'; 'Sayeedi Shahab-CLXR88'; 'ext Lipford, Mark A [CTO]'; = 'David Holmes'; mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: avi@bridgewatersystems.com; nwg@list.wimaxforum.org Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value = request Yes from Huawei. Ronald From: Park,Jungshin [mailto:shin02.park@samsung.com] Sent: Sunday, May 22, 2011 9:09 PM To: 'Sayeedi Shahab-CLXR88'; 'ext Lipford, Mark A [CTO]'; 'David Holmes'; m= auricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: avi@bridgewatersystems.com; nwg@list.wimaxforum.org Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value = request Yes. Samsung also supports. Regards, Jungshin From: Sayeedi Shahab-CLXR88 [mailto:shahab.sayeedi@nsn.com] Sent: Saturday, May 21, 2011 12:44 AM To: ext Lipford, Mark A [CTO]; David Holmes; mauricio.sanchez@hp.com; owner= -radiusext@ops.ietf.org Cc: avi@bridgewatersystems.com; nwg@list.wimaxforum.org Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value = request YES. Regards,, Shahab Sayeedi From: ext Lipford, Mark A [CTO] [mailto:Mark.A.Lipford@sprint.com] Sent: Friday, May 20, 2011 8:50 AM To: David Holmes; mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); nwg= @list.wimaxforum.org Subject: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value requ= est Yes as well Mark A. Lipford Manager - Industry Standards Sprint Nextel 6220 Sprint Parkway Mailstop: KSOPHD0402-4B350 Overland Park, KS 66251 USA +1 (913) 762-6740 (Office) +1 (913) 579-2319 (Mobile) email: mark.a.lipford@sprint.com From: David Holmes [mailto:David.Holmes@clearwire.com] Sent: Thursday, May 19, 2011 7:05 PM To: mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); Lip= ford, Mark A [CTO]; nwg@list.wimaxforum.org Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Yes. Thanks. David Holmes Standards Integration clearwire P (+1) (425) 247-7104 C (+1) (206) 696-6713 At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g4t0013.houston.hp.com (15.201.24.16) by G5W0330.americas.hpqcorp.net (16.228.8.75) with Microsoft SMTP Server (TLS) id 8.2.176.0; Mon, 23 May 2011 17:41:28 +0000 Received: from ihemail3.lucent.com (ihemail3.lucent.com [135.245.0.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by g4t0013.houston.hp.com (Postfix) with ESMTPS id 81B633C03D for ; Mon, 23 May 2011 17:41:28 +0000 (UTC) Received: from usnavsmail4.ndc.alcatel-lucent.com (usnavsmail4.ndc.alcatel-lucent.com [135.3.39.12]) by ihemail3.lucent.com (8.13.8/IER-o) with ESMTP id p4NHfPsV004582 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Mon, 23 May 2011 12:41:25 -0500 (CDT) Received: from USNAVSXCHHUB03.ndc.alcatel-lucent.com (usnavsxchhub03.ndc.alcatel-lucent.com [135.3.39.112]) by usnavsmail4.ndc.alcatel-lucent.com (8.14.3/8.14.3/GMO) with ESMTP id p4NHfPfw004093 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT); Mon, 23 May 2011 12:41:25 -0500 Received: from USNAVSXCHMBSA3.ndc.alcatel-lucent.com ([135.3.39.124]) by USNAVSXCHHUB03.ndc.alcatel-lucent.com ([135.3.39.112]) with mapi; Mon, 23 May 2011 12:41:25 -0500 From: "Feder, Peretz (Peretz)" To: Ronald Mao , "'Park,Jungshin'" , 'Sayeedi Shahab-CLXR88' , "'ext Lipford, Mark A [CTO]'" , 'David Holmes' , "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" Date: Mon, 23 May 2011 17:41:24 +0000 Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOgAcyy/QAAP5PEAAfpgcgAAbCQ5AAAFCoEA= Message-ID: <16F113FE6689D24D9A2B8229FD4540B0250A0877A1@USNAVSXCHMBSA3.ndc.alcatel-lucent.com> References: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> <013b01cc18ff$1ada6830$508f3890$%park@samsung.com> <00df01cc196b$3df1beb0$b9d53c10$@com> In-Reply-To: <00df01cc196b$3df1beb0$b9d53c10$@com> Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G5W0330.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US x-scanned-by: MIMEDefang 2.64 on 135.3.39.12 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Mauricio et al: I am in full support of the proposed allocation. Peretz Feder Director, Alcatel-Lucent At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Sun Jun 26 05:29:15 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1033B11E8077 for ; Sun, 26 Jun 2011 05:29:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.599 X-Spam-Level: X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KSDbwd1LU+FW for ; Sun, 26 Jun 2011 05:29:14 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id B8DC911E8072 for ; Sun, 26 Jun 2011 05:29:12 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QaoPS-0005ob-QH for radiusext-data0@psg.com; Sun, 26 Jun 2011 12:25:54 +0000 Received: from out21-ams.mf.surf.net ([145.0.1.21]) by psg.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QaoPL-0005nW-JO for radiusext@ops.ietf.org; Sun, 26 Jun 2011 12:25:48 +0000 Received: from teletubbie.het.net.je (teletubbie.het.net.je [192.87.110.29]) by outgoing1-ams.mf.surf.net (8.14.3/8.14.3/Debian-5+lenny1) with ESMTP id p5QCPd4A023735; Sun, 26 Jun 2011 14:25:40 +0200 Received: from 64-103-25-233.cisco.com ([64.103.25.233] helo=macmini.wierenga.net) by teletubbie.het.net.je with esmtpsa (TLSv1:CAMELLIA256-SHA:256) (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QaoP8-00078Y-HA; Sun, 26 Jun 2011 14:25:34 +0200 Message-ID: <4E072543.5070903@wierenga.net> Date: Sun, 26 Jun 2011 14:25:39 +0200 From: Klaas Wierenga User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.2.18) Gecko/20110616 Thunderbird/3.1.11 MIME-Version: 1.0 To: "Sanchez, Mauricio (HP Networking)" CC: "'radiusext@ops.ietf.org'" Subject: Re: Conclusion of RADEXT WG call for consensus poll for IANA #409959 NAS-Port-Type value request References: <9BC2F7926B33FE4AB10D69891D58FC1C5C753B978A@GVW0671EXC.americas.hpqcorp.net> In-Reply-To: <9BC2F7926B33FE4AB10D69891D58FC1C5C753B978A@GVW0671EXC.americas.hpqcorp.net> X-Enigmail-Version: 1.1.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Antivirus: no malware found X-Bayes-Prob: 0.0001 (Score 0, tokens from: @@RPTN) X-CanIt-Geo: ip=192.87.110.29; country=NL; latitude=52.5000; longitude=5.7500; http://maps.google.com/maps?q=52.5000,5.7500&z=6 X-CanItPRO-Stream: p-out:default (inherits from p:default,base:default) X-Canit-Stats-ID: 0uF0ApDxF - 05d77fa458eb - 20110626 (trained as not-spam) X-Scanned-By: CanIt (www . roaringpenguin . com) on 145.0.1.21 Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 6/24/11 9:42 PM, Sanchez, Mauricio (HP Networking) wrote: Mauricio, I find this procedure rather odd. I think at the very least you should have forwarded the replies to the proper list before the poll closed. Far be it from me to suggest any conspiracy, but I find it inappropriate to come up with a rabbit from the hat trick after the poll has closed. I thought consensus was gauged on the list, not at some private alias? I have seen no discussion on the list, apart from Avi's responses (thanks for that!), where do all these people all of a sudden come from? And does it matter what company they represent? I was under the impression that "we are all individuals"..... Can I ask for some more openness in future consensus polls? Klaas (who is ashamed that after expressing his opinion in the meeting, then on the list, he missed the final consensus call) > After discussion between current chairs and AD, the conclusion we > have reached is to approve this request as we believe rough consensus > for approval has been achieved. The situation is bit peculiar in > that a number of industry individuals expressed themselves in favor > of approving the request, but sent their email to the incorrect email > address (owner-radiusext@ops.ietf.org rather than > radiusext@ops.ietf.org). I have attached the emails for all those > individuals who used the incorrect address. > > The chairs appreciate the spirited conversation arising from this > topic and do agree with the long-term RADIUS experts that these new > types are not entirely in-line given the definition and past usage of > the attribute. However, the chairs feel the misalignment between > these new types and the attribute definition is not sufficiently > large to warrant disallowing the allocation. We also took into > account the industry support for immediate usage of these types into > account. > > So as to improve the usability of these new values, we will be asking > IANA to include references to the appropriate WiMAX standards (and > sections if available) in the IANA registry. Avi: We'd appreciate > your assistance in getting us the right information to include. > > If after this decision the WG would like to continue exploring a > generalized solution to similar use cases, the chairs and AD are > supportive. > > -MS > > -------------------------------------------------------------------------------------------------- > > Final count In Favor Clearwire - Dave McGiniss, David Holmes ZTE - > Chu Li Alcatel - Pertez Feder Intel - Muthiah Venkatachala Huawei - > Ronal Mao Samsun - Jungshin Park NSN - Seyeedi Shahab Sprint - Mark > Lipford, Brent Hirschman Bridgewater - Avi Lior > > Opposed Alan DeKok Stefan Winter Bernard Aboba Dave Nelson -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk4HJUMACgkQH2Wy/p4XeFJpOwCdF+yKyZdjhuZdRLGkGrCdsj68 weEAnAiv2I8hkMYF0bQsk096qjFTi/69 =ZmUy -----END PGP SIGNATURE----- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Sun Jun 26 08:48:05 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8CD621F84C1 for ; Sun, 26 Jun 2011 08:48:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v-iBHWFoAQlq for ; Sun, 26 Jun 2011 08:48:04 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id B23A121F8476 for ; Sun, 26 Jun 2011 08:48:04 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QarWb-000Fa5-3t for radiusext-data0@psg.com; Sun, 26 Jun 2011 15:45:29 +0000 Received: from liberty.deployingradius.com ([88.191.76.128]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QarWU-000FZV-SJ for radiusext@ops.ietf.org; Sun, 26 Jun 2011 15:45:23 +0000 Message-ID: <4E07540E.4040202@deployingradius.com> Date: Sun, 26 Jun 2011 17:45:18 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Klaas Wierenga CC: "Sanchez, Mauricio (HP Networking)" , "'radiusext@ops.ietf.org'" Subject: Re: Conclusion of RADEXT WG call for consensus poll for IANA #409959 NAS-Port-Type value request References: <9BC2F7926B33FE4AB10D69891D58FC1C5C753B978A@GVW0671EXC.americas.hpqcorp.net> <4E072543.5070903@wierenga.net> In-Reply-To: <4E072543.5070903@wierenga.net> X-Enigmail-Version: 0.96.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: Klaas Wierenga wrote: > I find this procedure rather odd. I think at the very least you should > have forwarded the replies to the proper list before the poll closed. > Far be it from me to suggest any conspiracy, but I find it inappropriate > to come up with a rabbit from the hat trick after the poll has closed. I > thought consensus was gauged on the list, not at some private alias? I agree. The consensus on the list clearly was against allocation. Having the consensus negated by large numbers of "off the record" posts is a problem. > I have seen no discussion on the list, apart from Avi's responses > (thanks for that!), where do all these people all of a sudden come from? This reeks of last-minute ballot stuffing. > Can I ask for some more openness in future consensus polls? > > Klaas (who is ashamed that after expressing his opinion in the meeting, > then on the list, he missed the final consensus call) I would ask that the chairs open the consensus call again, this time restricting entries to *on list* messages. If people can't be bothered to follow the process, then by the rules, their opinions should not be taken into account. Alan DeKok. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Mon Jun 27 00:17:53 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36DC521F860E for ; Mon, 27 Jun 2011 00:17:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -99.999 X-Spam-Level: X-Spam-Status: No, score=-99.999 tagged_above=-999 required=5 tests=[BAYES_50=0.001, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mr4mjzPhm4x8 for ; Mon, 27 Jun 2011 00:17:52 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id D683321F860A for ; Mon, 27 Jun 2011 00:17:48 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1Qb62c-0003Q1-TA for radiusext-data0@psg.com; Mon, 27 Jun 2011 07:15:30 +0000 Received: from smtprelay.restena.lu ([2001:a18:1::62]) by psg.com with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1Qb62V-0003Ph-ET for radiusext@ops.ietf.org; Mon, 27 Jun 2011 07:15:23 +0000 Received: from smtprelay.restena.lu (localhost [127.0.0.1]) by smtprelay.restena.lu (Postfix) with ESMTP id EC83910590; Mon, 27 Jun 2011 09:15:20 +0200 (CEST) Received: from aragorn.restena.lu (dhcp189.restena.lu [158.64.1.189]) by smtprelay.restena.lu (Postfix) with ESMTPS id D535C10582; Mon, 27 Jun 2011 09:15:20 +0200 (CEST) Message-ID: <4E082E0B.30701@restena.lu> Date: Mon, 27 Jun 2011 09:15:23 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.9.2.18) Gecko/20110616 SUSE/3.1.11 Lightning/1.0b2 Thunderbird/3.1.11 MIME-Version: 1.0 To: Bernard Aboba CC: "radiusext@ops.ietf.org" , trac+radext@zinfandel.tools.ietf.org Subject: Re: [radext] #93: Compliance with Crypto-Agility Requirements References: <066.cbbe14ddeb8841047bdcf9c9dd8d3d7b@trac.tools.ietf.org>,<4DCD3751.8050807@restena.lu> In-Reply-To: X-Enigmail-Version: 1.1.1 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig4B460A8149F51A5F107D0990" X-Virus-Scanned: ClamAV Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig4B460A8149F51A5F107D0990 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi, > This material might be appropriate for inclusion in an Appendix so > that it wouldn't clutter the main text. > > Interesting point with respect to TLS_RSA_WITH_3DES_EDE_CBC_SHA.=20 > Since later TLS RFCs provide recommendations on implementations of > algorithms that would be "Acceptable" with > no known deprecation date, would it make sense for the document to > incorporate that guidance (even though it only requires earlier > versions of TLS)? Well, guidance is alright, but not sufficient. The Crypto-Agility Requirements speak of > RECOMMENDED that mandatory-to-implement cryptographic > algorithms be chosen from among those classified as "Acceptable" with > no known deprecation date. So it's about mandatory-to-implement algorithms; not recommended-to-implement algorithms. Of course, the draft could be changed to make TLS_RSA_WITH_AES_128_CBC_SHA the required-to-implement algorithm. That would fix the crypto-agility-req point; but it might render some TLS 1.1 implementations not compatible to that new draft spec because in 1.1, that ciphersuite was optional. Greetings, Stefan > > > Date: Fri, 13 May 2011 15:51:13 +0200 > > From: stefan.winter@restena.lu > > To: radiusext@ops.ietf.org > > CC: trac+radext@zinfandel.tools.ietf.org; bernard_aboba@hotmail.com > > Subject: Re: [radext] #93: Compliance with Crypto-Agility Requirement= s > > > > Dear radext issue tracker, all, > > > > below is a discussion of all the requirements. It is somewhat verbose= ; I > > wonder if it should go into the document in its entirety or if a > > condensed "I believe it's allright" statement would be enough. > > > > Note that I'm not sure whether TLS_RSA_WITH_3DES_EDE_CBC_SHA is a > > two-key or a three-key 3DES algorithm. This condition would be the on= ly > > one that could downgrade the proposal from "unconditionally compliant= " > > to "conditionally compliant". Note also that there's a proposed > > mitigation for that in the text below. > > > > Here goes: > > > > The Requirements > > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > > > > 4.2: Security Services > > > > MUST support the negotiation of cryptographic algorithms for per-pack= et > > integrity/authentication protection. > > -> Check, TLS allows negotiation of cipher suites and thus cryptograp= hic > > algorithms. > > > > MUST support per-packet replay protection for all RADIUS message type= s. > > -> Check, TLS allows for replay protection. > > > > MUST specify mandatory-to-implement cryptographic algorithms for each= > > defined mechanism. > > -> Check, see section 2.3.2 > > > > MUST avoid security compromise, even in > > situations where the existing cryptographic algorithms utilized by > > RADIUS implementations are shown to be weak enough to provide little > > or no security > > -> Check, the RADIUS shared secret is of no cryptographic significanc= e > > > > RECOMMENDED that mandatory-to-implement cryptographic > > algorithms be chosen from among those classified as "Acceptable" with= > > no known deprecation date. > > -> UNKNOWN: > > The mandatory-to-implement alogrithm is TLS_RSA_WITH_3DES_EDE_CBC_SHA= , > > is a three-key Triple DES Encryption and Decryption algorithm ** IS T= HIS > > TRUE??? **, > > which is classified as "Acceptable" without deprecation date in the > > document in question. > > Can be mitigated; TLS 1.2 makes TLS_RSA_WITH_AES_128_CBC_SHA > > mandatory-to-implement, > > which fulfills the NIST "Acceptable" in any case. Could raise TLS > > requirements to strictly 1.2 and above. > > > > RECOMMENDED that solutions provide support for confidentiality > > -> Check, encryption of entire RADIUS packets is supported. > > > > MUST support the negotiation of cryptographic algorithms for encrypti= on. > > -> Check, TLS allows negotiation of cipher suites and thus cryptograp= hic > > algorithms. > > > > REQUIRED to generate fresh session keys for use between the RADIUS > > client and server > > -> Check, TLS session keys fulfill requirement. > > > > RECOMMENDED to support Perfect Forward Secrecy (PFS) with respect to > > session keys > > negotiated between the RADIUS client and server. > > -> Check, TLS supports PFS when negotiating appropriate ciphers. > > > > RECOMMENDED that a RADIUS crypto-agility solution > > support X.509 certificates for authentication between the NAS and > > RADIUS server. > > -> Check. > > > > SHOULD also support pre-shared key credentials. > > -> Check. > > > > 4.3: Backwards Compatibility > > > > MUST demonstrate backward compatibility with existing RADIUS > > implementations. > > -> Check, there are multiple implementations which support RADIUS and= > > RADIUS/TLS, > > and can act as a translator between the two > > > > After legacy mechanisms have been compromised, secure algorithms MUST= be > > used, > > so that backward compatibility is no longer possible. > > -> Check, RADIUS clients always need to manually configured (IP and > > shared secret needed), > > and can thus be de-configured after the compromise. > > > > 4.4: Interoperability and Change Control > > > > MUST indicate a willingness to cede change control to the IETF. > > -> Check, change control is at IETF. > > > > MUST be interoperable between independent implementations based purel= y > > on the > > information provided in the specification. > > -> Check, at least one implementation was created according to draft > > specs only. > > > > 4.5: Scope of Work > > > > Crypto-agility solutions MUST apply to all RADIUS packet types > > -> Check, crypto-agility is achieved on transport layer, and agnostic= to > > RADIUS content. > > > > message data exchanged with Diameter SHOULD NOT be affected. > > -> Check, the solution is Diameter-agnostic. > > > > MUST discuss any inherent assumptions about, or limitations on, > > client/server operations or deployment > > > > -> Believed to be a check, as I don't think I have unarticulated > > assumptions in my head, > > hence nothing to be discussed. > > > > SHOULD provide recommendations for transition of deployments from leg= acy > > RADIUS to > > crypto-agile RADIUS. > > -> Check, see Security Considerations. > > > > Issues regarding cipher-suite negotiation, > > legacy interoperability and the potential for bidding down attacks, > > SHOULD be among these discussions. > > -> Check, see Security Considerations. > > > > 4.6: Applicability of Automated Key Management Requirements > > > > As a result, support for Automated Key Management is RECOMMENDED > within a > > RADIUS crypto-agility solution. > > -> Check; TLS supports PFS and thus supports AKM. > > > > automated key management is REQUIRED for RADIUS crypto-agility > > solutions that use cryptographic modes of operation that require > > frequent key changes. > > -> Check. > > > > > > > > Am 29.04.2011 18:48, schrieb radext issue tracker: > > > #93: Compliance with Crypto-Agility Requirements > > > > > > The Crypto-Agility Requirements document now in WG last call (see > > > > http://tools.ietf.org/html/draft-ietf-radext-crypto-agility-requirement= s ) > > > includes the following in Section 1.4: > > > > > > In the initial phase, crypto-agility solutions adopted by the worki= ng > > > group will be published on the Experimental Track. Experimental > > > Track documents should contain a description of experimental > > > deployments and implementations in progress, as well as an evaluati= on > > > of the proposal against the requirements described in this document= =2E > > > > > > > > > The RADSEC document currently does not include this information. > > > > > > > > > -- > > Stefan WINTER > > Ingenieur de Recherche > > Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education Nati= onale > et de la Recherche > > 6, rue Richard Coudenhove-Kalergi > > L-1359 Luxembourg > > > > Tel: +352 424409 1 > > Fax: +352 422473 > > > > --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education National= e et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 --------------enig4B460A8149F51A5F107D0990 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAk4ILg8ACgkQ+jm90f8eFWajyQCZAYbYjCGMt2kdWeoOjCQDjNRM WqMAnjgVnk4CP55WWRCQcUT3+Pai4G+N =dmS0 -----END PGP SIGNATURE----- --------------enig4B460A8149F51A5F107D0990-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: From owner-radiusext@ops.ietf.org Mon Jun 27 00:30:44 2011 Return-Path: X-Original-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Delivered-To: ietfarch-radext-archive-IeZ9sae2@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 83BDE21F862B for ; Mon, 27 Jun 2011 00:30:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.881 X-Spam-Level: * X-Spam-Status: No, score=1.881 tagged_above=-999 required=5 tests=[BAYES_50=0.001, HELO_EQ_IT=0.635, HOST_EQ_IT=1.245] Received: from mail.ietf.org ([64.170.98.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hpne09RdxeNZ for ; Mon, 27 Jun 2011 00:30:44 -0700 (PDT) Received: from psg.com (psg.com [IPv6:2001:418:1::62]) by ietfa.amsl.com (Postfix) with ESMTP id E4D7B21F8612 for ; Mon, 27 Jun 2011 00:30:40 -0700 (PDT) Received: from majordom by psg.com with local (Exim 4.76 (FreeBSD)) (envelope-from ) id 1Qb6Ep-0003pV-0F for radiusext-data0@psg.com; Mon, 27 Jun 2011 07:28:07 +0000 Received: from grfedg701ba020.telecomitalia.it ([156.54.233.200]) by psg.com with esmtps (TLSv1:RC4-MD5:128) (Exim 4.76 (FreeBSD)) (envelope-from ) id 1Qb6Eg-0003ot-CU for radiusext@ops.ietf.org; Mon, 27 Jun 2011 07:28:00 +0000 Received: from GRFHUB702BA020.griffon.local (10.188.101.112) by GRFEDG701BA020.telecomitalia.it (10.188.45.100) with Microsoft SMTP Server (TLS) id 8.2.254.0; Mon, 27 Jun 2011 09:27:54 +0200 Received: from GRFMBX704BA020.griffon.local ([10.188.101.15]) by GRFHUB702BA020.griffon.local ([10.188.101.112]) with mapi; Mon, 27 Jun 2011 09:27:53 +0200 From: Maglione Roberta To: "'radiusext@ops.ietf.org'" CC: Ullio Mario Date: Mon, 27 Jun 2011 09:27:53 +0200 Subject: Comments on draft-ietf-radext-ipv6-access-04 Thread-Topic: Comments on draft-ietf-radext-ipv6-access-04 Thread-Index: Acw0m7lJraVtFYOuSsK429Ac/B2j9A== Message-ID: <282BBE8A501E1F4DA9C775F964BB21FE3EB35BEC73@GRFMBX704BA020.griffon.local> Accept-Language: en-US, it-IT Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: acceptlanguage: en-US, it-IT Content-Type: multipart/mixed; boundary="_002_282BBE8A501E1F4DA9C775F964BB21FE3EB35BEC73GRFMBX704BA02_" MIME-Version: 1.0 Sender: owner-radiusext@ops.ietf.org Precedence: bulk List-ID: --_002_282BBE8A501E1F4DA9C775F964BB21FE3EB35BEC73GRFMBX704BA02_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, I read this document and I have some comments. This draft, in section 2.1, introduces Framed-IPv6-Address Attribute to be = used for providing a DHCPv6 server residing on a NAS with one or more IPv6 = addresses to be assigned to the clients. An alternative way to achieve a similar result is to extract an IPv6 addres= s to be assigned, from a pool of addresses locally configured on the NAS. In my opinion it would be useful to add in this document a new attribute to= allow the RADIUS server to convey a pool name to be used for DHCPv6 based = addressing, when a single IPv6 address needs to be assigned to a host, to a= NAS hosting a DHCPv6 server. I wrote an initial proposal in order to add the new attribute in the curren= t draft, please see attached file. Any comments or feedback from the authors and from the group are welcome. Thanks, Best regards, Roberta Questo messaggio e i suoi allegati sono indirizzati esclusivamente alle per= sone indicate. La diffusione, copia o qualsiasi altra azione derivante dall= a conoscenza di queste informazioni sono rigorosamente vietate. Qualora abb= iate ricevuto questo documento per errore siete cortesemente pregati di dar= ne immediata comunicazione al mittente e di provvedere alla sua distruzione= , Grazie. This e-mail and any attachments is confidential and may contain privileged = information intended for the addressee(s) only. Dissemination, copying, pri= nting or use by anybody else is unauthorised. If you are not the intended r= ecipient, please delete this message and any attachments and advise the sen= der by return e-mail, Thanks. --_002_282BBE8A501E1F4DA9C775F964BB21FE3EB35BEC73GRFMBX704BA02_ Content-Type: application/msword; name="draft-ietf-radext-ipv6-access-04-RM.doc" Content-Description: draft-ietf-radext-ipv6-access-04-RM.doc Content-Disposition: attachment; filename="draft-ietf-radext-ipv6-access-04-RM.doc"; size=143360; creation-date="Thu, 23 Jun 2011 09:26:09 GMT"; modification-date="Mon, 27 Jun 2011 09:27:52 GMT" Content-Transfer-Encoding: base64 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAADAAAAEwEAAAAAAAAA EAAAFQEAAAEAAAD+////AAAAABABAAARAQAAEgEAAP////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ///////////////////////////////////////////////////////////////////////////s pcEAJ2AJBAAA8BK/AAAAAAAAEAAAAAAABgAAi3EAAA4AYmpiakxVTFUAAAAAAAAAAAAAAAAAAAAA AAAJBBYANMIAAC4/AQAuPwEAi2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD//w8AAAAA AAAAAAD//w8AAAAAAAAAAAD//w8AAAAAAAAAAAAAAAAAAAAAAKQAAAAAADgEAAAAAAAAOAQAADgE AAAAAAAAOAQAAAAAAAA4BAAAAAAAADgEAAAAAAAAOAQAABQAAAAAAAAAAAAAABIGAACELwAAHvgA AAAAAAAe+AAAAAAAAB74AAAAAAAAHvgAADQAAABS+AAADAEAAJY1AAAAAAAAozUBAMYBAABq+QAA AAAAAGr5AAAAAAAAavkAAAAAAABq+QAAAAAAAGr5AAAAAAAARfoAAAAAAABF+gAAAAAAAEX6AAAA AAAAFjQBAAIAAAAYNAEAAAAAABg0AQAAAAAAGDQBAAAAAAAYNAEAAAAAABg0AQAAAAAAGDQBACQA AABpNwEAaAIAANE5AQDkAAAAPDQBABUAAAAAAAAAAAAAAAAAAAAAAAAAOAQAAAAAAAAW/wAAAAAA AAAAAAAAAAAAAAAAAAAAAABF+gAAAAAAAEX6AAAAAAAAFv8AAAAAAAAW/wAAAAAAADw0AQAAAAAA AAAAAAAAAAA4BAAAAAAAADgEAAAAAAAAavkAAAAAAAAAAAAAAAAAAGr5AADbAAAAUTQBAGoAAABW DgEAAAAAAFYOAQAAAAAAVg4BAAAAAAAW/wAA3gQAADgEAAAAAAAAavkAAAAAAAA4BAAAAAAAAGr5 AAAAAAAAFjQBAAAAAAAAAAAAAAAAAFYOAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAFv8AAAAAAAAWNAEAAAAAAAAAAAAAAAAAVg4BAAAAAABWDgEA cgAAAMoZAQBUAAAAOAQAAAAAAAA4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyhoBAAAAAABq+QAAAAAAAF75AAAMAAAAsNSI5Xsx zAEAAAAAAAAAAB74AAAAAAAA9AMBAB4KAAAeGgEADgAAAAAAAAAAAAAAFjQBAAAAAAC7NAEA6AAA AKM1AQAAAAAALBoBAJ4AAAC1OgEAAAAAABIOAQA6AAAAtToBABwAAADKGgEAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAALU6AQAAAAAAAAAAAAAAAAA4BAAAAAAAAMoaAQBMGQAARfoAAB4BAABj+wAAzAAAAFYO AQAAAAAAL/wAAKQAAADT/AAAQwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARfoA AAAAAABF+gAAAAAAAEX6AAAAAAAAPDQBAAAAAAA8NAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAATA4BAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEX6AAAA AAAARfoAAAAAAABF+gAAAAAAAKM1AQAAAAAAFv8AAAAAAAAW/wAAAAAAABb/AAAAAAAAFv8AAAAA AAAAAAAAAAAAAJY1AAAAAAAAljUAAAAAAACWNQAARGEAANqWAABEYQAAljUAAAAAAACWNQAAAAAA AJY1AAAAAAAA2pYAAAAAAABMBAAAFAEAAGAFAACuAAAADgYAAAQAAAA4BAAAAAAAADgEAAAAAAAA OAQAAAAAAAA4BAAAAAAAADgEAAAAAAAAOAQAAAAAAAD/////AAAAAAIADAEAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0NDU5l dHdvcmsgV29ya2luZyBHcm91cCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IEIuIExvdXJkZWxldA1JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgVy4gRGVjLCBFZC4NSW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMg VHJhY2sgICAgICAgICAgICAgICAgICAgICBDaXNjbyBTeXN0ZW1zLCBJbmMuDUV4cGlyZXM6IFNl cHRlbWJlciAxNSwgMjAxMSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBCLiBTYXJp a2F5YQ0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIEh1YXdlaSBVU0ENICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBHLiBab3JuDSAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBOZXR3b3JrIFplbg0gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgRC4gTWlsZXMNICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIEFsY2F0ZWwtTHVjZW50DSAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNYXJjaCAxNCwgMjAxMQ0NDSAgICAgICAgICAg ICAgIFJBRElVUyBhdHRyaWJ1dGVzIGZvciBJUHY2IEFjY2VzcyBOZXR3b3Jrcw0gICAgICAgICAg ICAgICAgICBkcmFmdC1pZXRmLXJhZGV4dC1pcHY2LWFjY2Vzcy0wNC50eHQNDUFic3RyYWN0DQ0g ICBUaGlzIGRvY3VtZW50IHNwZWNpZmllcyBhZGRpdGlvbmFsIElQdjYgUkFESVVTIGF0dHJpYnV0 ZXMgdXNlZnVsIGluDSAgIHJlc2lkZW50aWFsIGJyb2FkYmFuZCBuZXR3b3JrIGRlcGxveW1lbnRz LiAgVGhlIGF0dHJpYnV0ZXMsIHdoaWNoIGFyZQ0gICB1c2VkIGZvciBhdXRob3JpemF0aW9uIGFu ZCBhY2NvdW50aW5nLCBlbmFibGUgYXNzaWdubWVudCBvZiBhIGhvc3QNICAgSVB2NiBhZGRyZXNz IGFuZCBJUHY2IEROUyBzZXJ2ZXIgYWRkcmVzcyB2aWEgREhDUHY2OyBhc3NpZ25tZW50IG9mIGFu DSAgIElQdjYgcm91dGUgYW5ub3VuY2VkIHZpYSByb3V0ZXIgYWR2ZXJ0aXNlbWVudCwgYW5kIGFz c2lnbm1lbnQgb2YgYQ0gICBuYW1lZCBJUHY2IGRlbGVnYXRlZCBwcmVmaXggcG9vbCBhbmQgYXNz aWdubWVudCBvZiBhIG5hbWVkIElQdjYgcG9vbCBmb3IgREhDUHY2IGJhc2VkIGFkZHJlc3Npbmcs IHdoZW4gYSBzaW5nbGUgSVB2NiBhZGRyZXNzIG5lZWRzIHRvIGJlIGFzc2lnbmVkIHRvIGEgaG9z dC4NDVJlcXVpcmVtZW50cyBMYW5ndWFnZQ0NICAgVGhlIGtleSB3b3JkcyAiTVVTVCIsICJNVVNU IE5PVCIsICJSRVFVSVJFRCIsICJTSEFMTCIsICJTSEFMTCBOT1QiLA0gICAiU0hPVUxEIiwgIlNI T1VMRCBOT1QiLCAiUkVDT01NRU5ERUQiLCAiTUFZIiwgYW5kICJPUFRJT05BTCIgaW4gdGhpcw0g ICBkb2N1bWVudCBhcmUgdG8gYmUgaW50ZXJwcmV0ZWQgYXMgZGVzY3JpYmVkIGluIFJGQyAyMTE5 IFtSRkMyMTE5XS4NDVN0YXR1cyBvZiB0aGlzIE1lbW8NDSAgIFRoaXMgSW50ZXJuZXQtRHJhZnQg aXMgc3VibWl0dGVkIGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGUNICAgcHJvdmlzaW9ucyBv ZiBCQ1AgNzggYW5kIEJDUCA3OS4NDSAgIEludGVybmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1 bWVudHMgb2YgdGhlIEludGVybmV0IEVuZ2luZWVyaW5nDSAgIFRhc2sgRm9yY2UgKElFVEYpLiAg Tm90ZSB0aGF0IG90aGVyIGdyb3VwcyBtYXkgYWxzbyBkaXN0cmlidXRlDSAgIHdvcmtpbmcgZG9j dW1lbnRzIGFzIEludGVybmV0LURyYWZ0cy4gIFRoZSBsaXN0IG9mIGN1cnJlbnQgSW50ZXJuZXQt DSAgIERyYWZ0cyBpcyBhdCBodHRwOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZHJhZnRzL2N1cnJl bnQvLg0NICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEg bWF4aW11bSBvZiBzaXggbW9udGhzDSAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9y IG9ic29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55DSAgIHRpbWUuICBJdCBpcyBpbmFw cHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlDSAgIG1hdGVyaWFs IG9yIHRvIGNpdGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiINDSAgIFRo aXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gU2VwdGVtYmVyIDE1LCAyMDExLg0NQ29w eXJpZ2h0IE5vdGljZQ0NDQ1Mb3VyZGVsZXQsIGV0IGFsLiAgICAgIEV4cGlyZXMgU2VwdGVtYmVy IDE1LCAyMDExICAgICAgICAgICAgICAgW1BhZ2UgMV0NDA1JbnRlcm5ldC1EcmFmdCAgICAgICAg ICAgICBSQURJVVMgSVB2NiBBY2Nlc3MgICAgICAgICAgICAgICAgIE1hcmNoIDIwMTENDQ0gICBD b3B5cmlnaHQgKGMpIDIwMTEgSUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRlbnRpZmllZCBh cyB0aGUNICAgZG9jdW1lbnQgYXV0aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuDQ0gICBUaGlz IGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQIDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2Fs DSAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVudHMNICAgKGh0dHA6Ly90cnVz dGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mDSAgIHB1 YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQuICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50 cw0gICBjYXJlZnVsbHksIGFzIHRoZXkgZGVzY3JpYmUgeW91ciByaWdodHMgYW5kIHJlc3RyaWN0 aW9ucyB3aXRoIHJlc3BlY3QNICAgdG8gdGhpcyBkb2N1bWVudC4gIENvZGUgQ29tcG9uZW50cyBl eHRyYWN0ZWQgZnJvbSB0aGlzIGRvY3VtZW50IG11c3QNICAgaW5jbHVkZSBTaW1wbGlmaWVkIEJT RCBMaWNlbnNlIHRleHQgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gNC5lIG9mDSAgIHRoZSBUcnVz dCBMZWdhbCBQcm92aXNpb25zIGFuZCBhcmUgcHJvdmlkZWQgd2l0aG91dCB3YXJyYW50eSBhcw0g ICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UuDQ0gICBUaGlzIGRvY3Vt ZW50IG1heSBjb250YWluIG1hdGVyaWFsIGZyb20gSUVURiBEb2N1bWVudHMgb3IgSUVURg0gICBD b250cmlidXRpb25zIHB1Ymxpc2hlZCBvciBtYWRlIHB1YmxpY2x5IGF2YWlsYWJsZSBiZWZvcmUg Tm92ZW1iZXINICAgMTAsIDIwMDguICBUaGUgcGVyc29uKHMpIGNvbnRyb2xsaW5nIHRoZSBjb3B5 cmlnaHQgaW4gc29tZSBvZiB0aGlzDSAgIG1hdGVyaWFsIG1heSBub3QgaGF2ZSBncmFudGVkIHRo ZSBJRVRGIFRydXN0IHRoZSByaWdodCB0byBhbGxvdw0gICBtb2RpZmljYXRpb25zIG9mIHN1Y2gg bWF0ZXJpYWwgb3V0c2lkZSB0aGUgSUVURiBTdGFuZGFyZHMgUHJvY2Vzcy4NICAgV2l0aG91dCBv YnRhaW5pbmcgYW4gYWRlcXVhdGUgbGljZW5zZSBmcm9tIHRoZSBwZXJzb24ocykgY29udHJvbGxp bmcNICAgdGhlIGNvcHlyaWdodCBpbiBzdWNoIG1hdGVyaWFscywgdGhpcyBkb2N1bWVudCBtYXkg bm90IGJlIG1vZGlmaWVkDSAgIG91dHNpZGUgdGhlIElFVEYgU3RhbmRhcmRzIFByb2Nlc3MsIGFu ZCBkZXJpdmF0aXZlIHdvcmtzIG9mIGl0IG1heQ0gICBub3QgYmUgY3JlYXRlZCBvdXRzaWRlIHRo ZSBJRVRGIFN0YW5kYXJkcyBQcm9jZXNzLCBleGNlcHQgdG8gZm9ybWF0DSAgIGl0IGZvciBwdWJs aWNhdGlvbiBhcyBhbiBSRkMgb3IgdG8gdHJhbnNsYXRlIGl0IGludG8gbGFuZ3VhZ2VzIG90aGVy DSAgIHRoYW4gRW5nbGlzaC4NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NTG91cmRlbGV0LCBl dCBhbC4gICAgICBFeHBpcmVzIFNlcHRlbWJlciAxNSwgMjAxMSAgICAgICAgICAgICAgIFtQYWdl IDJdDQwNSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgUkFESVVTIElQdjYgQWNjZXNzICAgICAg ICAgICAgICAgICBNYXJjaCAyMDExDQ0NVGFibGUgb2YgQ29udGVudHMNDSAgIDEuICBJbnRyb2R1 Y3Rpb24gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg NA0gICAyLiAgRGVwbG95bWVudCBTY2VuYXJpb3MgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gIDQNICAgICAyLjEuICBJUHY2IEFkZHJlc3MgQXNzaWdubWVudCAgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1DSAgICAgMi4yLiAgUmVjdXJzaXZlIERO UyBTZXJ2ZXJzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNg0gICAgIDIu My4gIElQdjYgUm91dGUgSW5mb3JtYXRpb24gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDYNICAgICAyLjQuICBEZWxlZ2F0ZWQgSVB2NiBQcmVmaXggUG9vbCAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2DSAgIDMuICBBdHRyaWJ1dGVzIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNw0gICAgIDMuMS4gIEZyYW1l ZC1JUHY2LUFkZHJlc3MgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDcN ICAgICAzLjIuICBETlMtU2VydmVyLUlQdjYtQWRkcmVzcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICA4DSAgICAgMy4zLiAgUm91dGUtSVB2Ni1JbmZvcm1hdGlvbiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgOQ0gICAgIDMuNC4gIERlbGVnYXRlZC1JUHY2 LVByZWZpeC1Qb29sIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTANICAgICAzLjUu ICBUYWJsZSBvZiBhdHRyaWJ1dGVzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIDEwDSAgIDQuICBEaWFtZXRlciBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAxMA0gICA1LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTENICAgNi4gIElBTkEgQ29uc2lk ZXJhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDExDSAg IDcuICBBY2tub3dsZWRnZW1lbnRzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAxMQ0gICA4LiAgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTENICAgICA4LjEuICBOb3JtYXRpdmUgUmVmZXJl bmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDExDSAgICAgOC4yLiAg SW5mb3JtYXRpdmUgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAxMg0gICBBdXRob3JzJyBBZGRyZXNzZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gMTINDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ1Mb3VyZGVs ZXQsIGV0IGFsLiAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDE1LCAyMDExICAgICAgICAgICAgICAg W1BhZ2UgM10NDA1JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICBSQURJVVMgSVB2NiBBY2Nlc3Mg ICAgICAgICAgICAgICAgIE1hcmNoIDIwMTENDQ0xLiAgSW50cm9kdWN0aW9uDQ0gICBJbiBJUHY2 IGRlcGxveW1lbnRzIERIQ1B2NiBhbmQvb3IgSUNNUHY2IFJvdXRlciBBZHZlcnRpc2VtZW50cyBj YW4gYmUNICAgdXNlZCB0byBjb252ZXkgY29uZmlndXJhdGlvbiBpbmZvcm1hdGlvbiBieSBhIE5B UyB0b3dhcmRzIGFjY2Vzc2luZw0gICBob3N0cy4gIFN1Y2ggaW5mb3JtYXRpb24gdHlwaWNhbGx5 IG5lZWRzIHRvIGJlIHByb3Zpc2lvbmVkIG9uIHRoZSBOQVMNICAgYW5kIG1heSBiZSBkb25lIHNv IG9uIGEgcGVyIGhvc3Qgb3IgdXNlciBiYXNpcyB1c2luZyB0aGUgQUFBIHByb2Nlc3MuDSAgIFRo aXMgZG9jdW1lbnQgc3BlY2lmaWVzIGFkZGl0aW9uYWwgUkFESVVTIGF0dHJpYnV0ZXMgdXNlZCB0 byBzdXBwb3J0DSAgIGNvbmZpZ3VyYXRpb24gb2YgREhDUHY2IGFuZC9vciBJQ01QdjYgcGFyYW1l dGVycyBvbiBhIHBlci11c2VyIGJhc2lzLg0gICBUaGUgYXR0cmlidXRlcywgd2hpY2ggY29tcGxl bWVudCB0aG9zZSBkZWZpbmVkIGluIFtSRkMzMTYyXSBhbmQNICAgW1JGQzQ4MThdLCBzdXBwb3J0 IHRoZSBmb2xsb3dpbmc6DQ0gICBvICBUaGUgYXNzaWdubWVudCBvciBhY2NvdW50aW5nIG9mIHNw ZWNpZmljIElQdjYgYWRkcmVzc2VzIGFzc2lnbmVkDSAgICAgIHRvIGhvc3RzLiAgV2hpbGUgW1JG QzMxNjJdIHBlcm1pdHMgYW4gSVB2NiBhZGRyZXNzIHRvIGJlIHNwZWNpZmllZA0gICAgICB2aWEg dGhlIGNvbWJpbmF0aW9uIG9mIHRoZSBGcmFtZWQtSW50ZXJmYWNlLUlkIGFuZCBGcmFtZWQtSVB2 Ni0NICAgICAgUHJlZml4IGF0dHJpYnV0ZXMsIHRoaXMgc2VwYXJhdGlvbiBpcyBtb3JlIG5hdHVy YWwgZm9yIHVzZSB3aXRoDSAgICAgIElQdjZDUCB0aGFuIGl0IGlzIGZvciB1c2Ugd2l0aCBESENQ djYsIGFuZCB0aGUgdXNlIG9mIGEgc2luZ2xlDSAgICAgIElQdjYgYWRkcmVzcyBhdHRyaWJ1dGUg bWFrZXMgZm9yIGVhc2llciBwcm9jZXNzaW5nIG9mIGFjY291bnRpbmcNICAgICAgcmVjb3Jkcy4N DSAgIG8gIEFzc2lnbm1lbnQgb2YgYW4gSVB2NiBETlMgc2VydmVyIGFkZHJlc3MsIHZpYSBESENQ djYgb3IgW1JGQzUwMDZdDQ0gICBvICBDb25maWd1cmF0aW9uIG9mIGEgcm91dGUgdG8gYmUgcGFz c2VkIHRvIHRoZSBob3N0IHZpYSBSb3V0ZXINICAgICAgQWR2ZXJ0aXNlbWVudCBbUkZDNDE5MV0g b3Igb3RoZXIgc2ltaWxhciBtZWNoYW5pc21zIChlZyBESENQdjYpDQ0gICBvICBUaGUgYXNzaWdu bWVudCBvZiBhIG5hbWVkIGRlbGVnYXRlZCBwcmVmaXggcG9vbCBmb3IgdXNlIHdpdGggIklQdjYN ICAgICAgUHJlZml4IE9wdGlvbnMgZm9yIERIQ1B2NiIgW1JGQzM2MzNdDQ1UaGUgYXNzaWdubWVu dCBvZiBhIG5hbWVkIElQdjYgcG9vbCBmb3IgREhDUHY2IGJhc2VkIGFkZHJlc3NpbmcsIHdoZW4g YSBzaW5nbGUgSVB2NiBhZGRyZXNzIG5lZWRzIHRvIGJlIGFzc2lnbmVkIHRvIGEgaG9zdCBmb3Ig dGhlIHNhbWUgcmVhc29ucyBkZXNjcmliZWQgaW4gdGhlIGZpcnN0IGJ1bGxldC4NDQ0yLiAgRGVw bG95bWVudCBTY2VuYXJpb3MNDSAgIEEgY29tbW9uIGJyb2FkYmFuZCBuZXR3b3JrIHNjZW5hcmlv IGlzIGlsbHVzdHJhdGVkIGluIEZpZ3VyZSAxLiAgSXQNICAgaXMgY29tcG9zZWQgb2YgYSBJUCBS b3V0aW5nIFJlc2lkZW50aWFsIEdhdGV3YXkgKFJHKSBvciBob3N0LCBhIExheWVyDSAgIDIgQWNj ZXNzLU5vZGUgKGUuZy4gYSBEU0xBTSksIG9uZSBvciBtb3JlIElQIE5ldHdvcmsgQWNjZXNzIFNl cnZlcnMNICAgKE5BU2VzKSwgYW5kIGFuIEFBQSBzZXJ2ZXIuICBUaGUgUkcgb3IgaG9zdCBhcmUg ZXhwZWN0ZWQgdG8gYmUgbXVsdGkNICAgaG9tZWQgdG8gYm90aCBOQVNlcy4gIExheWVyIDIgQ29u bmVjdGl2aXR5IGJldHdlZW4gdGhlIGhvc3QgYW5kIE5BUw0gICBjYW4gYmUgZWl0aGVyIHZpYSBQ UFBvRSBvciBJUCBvdmVyIEV0aGVybmV0LCBhbmQgZXN0YWJsaXNoZWQNICAgZHluYW1pY2FsbHku DQ0NDQ0NDQ0NDQ0NDQ0NTG91cmRlbGV0LCBldCBhbC4gICAgICBFeHBpcmVzIFNlcHRlbWJlciAx NSwgMjAxMSAgICAgICAgICAgICAgIFtQYWdlIDRdDQwNSW50ZXJuZXQtRHJhZnQgICAgICAgICAg ICAgUkFESVVTIElQdjYgQWNjZXNzICAgICAgICAgICAgICAgICBNYXJjaCAyMDExDQ0NICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tKw0gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKFJhZGl1cykgICB8IEFBQSB8DSAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC4uLi4uLi4uLi4uPnwgICAgIHwN ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLiAgICAgICAgICAgKy0tKy0t Kw0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB2ICAgICAgICAgICAgICBe DSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLSstLS0rICAgICAgICAgIC4N ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICBOQVMgIHwgICAgICAgICAgLihS YWRpdXMpDSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICB8ICAgICAg ICAgIC4NICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICArLS0tKy0tLSsgICAgICAg ICAgdg0gICAgICAgICAgICAgICAgICAgICstLS0tLS0rICAgICAgICAgICB8ICAgICAgICAgICst LS0rLS0tKw0gICAgICstLS0tLS0rICAgICAgIHwgIEFOICB8ICAgICAgICAgICB8ICAgICAgICAg IHwgIE5BUyAgfA0gICAgIHwgIFJHLyArLS0tLS0tLXwgICAgICArLS0tLS0tLS0tLS0rLS0tLS0t LS0tLSsgICAgICAgfA0gICAgIHwgaG9zdCB8ICAgICAgIHwgICAgICB8ICAgICAgICAgICAgICAg ICAgICAgIHwgICAgICAgfA0gICAgICstLS0tLS0rIChEU0wpICstLS0tLS0rICAgICAgKEV0aGVy bmV0KSAgICAgICstLS0tLS0tKw0NICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRmlndXJl IDENDSAgIEluIHRoaXMgc2NlbmFyaW8gdGhlIE5BU2VzIG1heSBlbWJlZCBhIERIQ1B2NiBzZXJ2 ZXIgdG8gaGFuZGxlIERIQ1B2Ng0gICByZXF1ZXN0cyBpc3N1ZWQgYnkgUkdzL2hvc3RzLCBhcyB3 ZWxsIGFzIGFjdGluZyBhcyBhIHJvdXRlciBwcm92aWRpbmcNICAgUm91dGVyIEFkdmVydGlzZW1l bnRzLiAgVGhlIFJBRElVUyBzZXJ2ZXIgYXV0aGVudGljYXRlcyBlYWNoIFJHL2hvc3QNICAgYW5k IHJldHVybnMgdG8gdGhlIE5BUyBhdHRyaWJ1dGVzIHVzZWQgZm9yIGF1dGhvcml6YXRpb24gYW5k DSAgIGFjY291bnRpbmcuICBUaGVzZSBhdHRyaWJ1dGVzIGNhbiBpbmNsdWRlIGEgaG9zdCBJUHY2 IGFkZHJlc3MgdG8gYmUNICAgY29uZmlndXJlZCB2aWEgREhDUHY2OyB0aGUgSVB2NiBhZGRyZXNz IG9mIGEgRE5TIHNlcnZlciB0byBjb25maWd1cmVkDSAgIHZpYSBESENQdjYgb3Igcm91dGVyIGFk dmVydGlzZW1lbnQ7IHRoZSBuYW1lIG9mIGEgcHJlZml4IHBvb2wgdG8gYmUNICAgdXNlZCBmb3Ig REhDUHY2IFByZWZpeCBEZWxlZ2F0aW9uOyBvciBJUHY2IHJvdXRlcyB0byBiZSBhbm5vdW5jZWQg dG8NICAgdGhlIGhvc3QuDQ0gICBUaGUgZm9sbG93aW5nIHN1Yi1zZWN0aW9ucyBkaXNjdXNzIGhv dyB0aGVzZSB1c2VzIGluIG1vcmUgZGV0YWlsLg0NMi4xLiAgSVB2NiBBZGRyZXNzIEFzc2lnbm1l bnQNDSAgIERIQ1B2NiBbUkZDMzMxNV0gcHJvdmlkZXMgYSBtZWNoYW5pc20gdG8gYXNzaWduIG9u ZSBvciBtb3JlIG9yIG5vbi0NICAgdGVtcG9yYXJ5IElQdjYgYWRkcmVzc2VzIHRvIGhvc3RzLiAg VG8gcHJvdmlkZSBhIERIQ1B2NiBzZXJ2ZXINICAgcmVzaWRpbmcgb24gYSBOQVMgd2l0aCBvbmUg b3IgbW9yZSBJUHY2IGFkZHJlc3NlcyB0byBiZSBhc3NpZ25lZCwNICAgdGhpcyBkb2N1bWVudCBz cGVjaWZpZXMgdGhlIEZyYW1lZC1JUHY2LUFkZHJlc3MgQXR0cmlidXRlLg0NICAgU2luY2UgREhD UHY2IGNhbiBiZSBkZXBsb3llZCBvbiB0aGUgc2FtZSBuZXR3b3JrIGFzIElDTVB2NiBzdGF0ZWxl c3MNICAgKFNMQUFDKSBbUkZDNDg2Ml0sIGl0IGlzIHBvc3NpYmxlIHRoYXQgdGhlIE5BUyB3aWxs IHJlcXVpcmUgYm90aA0gICBzdGF0ZWZ1bCBhbmQgc3RhdGVsZXNzIGNvbmZpZ3VyYXRpb24gaW5m b3JtYXRpb24uICBUaGVyZWZvcmUgaXQgaXMNICAgcG9zc2libGUgZm9yIHRoZSBGcmFtZWQtSVB2 Ni1BZGRyZXNzLCBGcmFtZWQtSVB2Ni1QcmVmaXggYW5kIEZyYW1lZC0NICAgSW50ZXJmYWNlLUlk IGF0dHJpYnV0ZXMgW1JGQzMxNjJdIHRvIGJlIGluY2x1ZGVkIHdpdGhpbiB0aGUgc2FtZQ0gICBw YWNrZXQuICBUbyBhdm9pZCBhbWJpZ3VpdHksIHRoZSBGcmFtZWQtSVB2Ni1BZGRyZXNzIGF0dHJp YnV0ZSBpcw0gICBvbmx5IHVzZWQgZm9yIGF1dGhvcml6YXRpb24gYW5kIGFjY291bnRpbmcgb2Yg REhDUHY2LWFzc2lnbmVkDSAgIGFkZHJlc3NlcyBhbmQgdGhlIEZyYW1lZC1JUHY2LVByZWZpeCBh bmQgRnJhbWVkLUludGVyZmFjZS1JZA0gICBhdHRyaWJ1dGVzIGFyZSB1c2VkIGZvciBhdXRob3Jp emF0aW9uIGFuZCBhY2NvdW50aW5nIG9mIGFkZHJlc3Nlcw0gICBhc3NpZ25lZCB2aWEgU0xBQUMu DQ0NDQ0NTG91cmRlbGV0LCBldCBhbC4gICAgICBFeHBpcmVzIFNlcHRlbWJlciAxNSwgMjAxMSAg ICAgICAgICAgICAgIFtQYWdlIDVdDQwNSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgUkFESVVT IElQdjYgQWNjZXNzICAgICAgICAgICAgICAgICBNYXJjaCAyMDExDQ0NMi4yLiAgUmVjdXJzaXZl IEROUyBTZXJ2ZXJzDQ0gICBESENQdjYgcHJvdmlkZXMgYW4gb3B0aW9uIGZvciByZWN1cnNpdmUg RE5TIHNlcnZlcnMgdG8gaG9zdHMsIGFzIGRvZXMNICAgSUNNUHY2IHdpdGggUm91dGVyIEFkdmVy dGlzZW1lbnRzIHN1cHBvcnRpbmcgdGhlIGV4cGVyaW1lbnRhbA0gICBbUkZDNTAwNl0gb3B0aW9u LiAgRXhpc3RpbmcgSUVURiBSQURJVVMgYXR0cmlidXRlcyBjb252ZXkgRE5TIGFzIDMyLQ0gICBi aXQgSVB2NCBhZGRyZXNzZXMgYW5kIGNhbm5vdCBzdXBwb3J0IGEgMTI4LWJpdCBJUHY2IGFkZHJl c3MuICBUaGlzDSAgIGRvY3VtZW50IHNwZWNpZmllcyB0aGUgUkFESVVTIGF0dHJpYnV0ZSB0byBj b252ZXkgYSBsaXN0IG9mIElQdjYgRE5TDSAgIFJlY3Vyc2l2ZSBuYW1lIHNlcnZlciBhZGRyZXNz ZXMsIGZyb20gYW4gQUFBIHNlcnZlciwgd2hpY2ggY2FuIHRoYXQNICAgY2FuIGJlIGNvbnZleWVk IGJ5IGEgTkFTIHRvIGEgaG9zdC4NDTIuMy4gIElQdjYgUm91dGUgSW5mb3JtYXRpb24NDSAgIEFu IElQdjYgUm91dGUgSW5mb3JtYXRpb24gb3B0aW9uLCBkZWZpbmVkIGluIFtSRkM0MTkxXSBpcyBp bnRlbmRlZCB0bw0gICBiZSB1c2VkIHRvIGluZm9ybSBhIGhvc3QgY29ubmVjdGVkIHRvIHRoZSBO QVMgdGhhdCBhIHNwZWNpZmljIHJvdXRlDSAgIGlzIHJlYWNoYWJsZSB2aWEgdGhlIE5BUy4gIFRo aXMgaXMgcGFydGljdWxhcmx5IGRlc2lyYWJsZSBpbiBjYXNlcw0gICB3aGVyZSB0aGUgUkcgb3Ig aG9zdCBhcmUgbXVsdGktaG9tZWQgdG8gZGlmZmVyZW50IE5BU2VzIGFzIHNob3duIGluDSAgIEZp Z3VyZSAxLg0NICAgVGhpcyBkb2N1bWVudCBzcGVjaWZpZXMgdGhlIFJBRElVUyBhdHRyaWJ1dGUg dGhhdCBhbGxvd3MgdGhlIEFBQQ0gICBzeXN0ZW0gdG8gcHJvdmlzaW9uIHRoZSBhbm5vdW5jZW1l bnQgYnkgdGhlIE5BUyBvZiBhIHNwZWNpZmljIFJvdXRlDSAgIEluZm9ybWF0aW9uIE9wdGlvbiB0 byBhbiBhY2Nlc3NpbmcgaG9zdC4gIFRoZSBOQVMgbWF5IGFkdmVydGlzZSB0aGlzDSAgIHJvdXRl IHVzaW5nIHRoZSBtZXRob2QgZGVmaW5lZCBpbiBbUkZDNDE5MV0gb3IgdXNpbmcgb3RoZXIgZXF1 aXZhbGVudA0gICBtZXRob2RzLg0NICAgVGhlIGRpc3RpbmN0aW9uIGFuZCBzZXBhcmF0aW9uIGJl dHdlZW4gdGhpcyBhdHRyaWJ1dGUgYW5kIHRoZSBGcmFtZWQtDSAgIElQdjYtUm91dGUgYXR0cmli dXRlIGRlZmluZWQgaW4gW1JGQzMxNjJdIGlzIG5lZWRlZCBkdWUgdG8gdGhlIG5lZWQNICAgdG8g aGF2ZSB0aGUgaW5mb3JtYXRpb24gY2FycmllZCBieSB0aGlzIGF0dHJpYnV0ZSBhZHZlcnRpc2Vk IChpbg0gICBiaW5hcnkgZm9ybWF0IGFzIHBlciBSRkM0MTkxKSB0byBhbiBhdHRhY2hpbmcgY2xp ZW50LCByYXRoZXIgdGhhbg0gICBpbnRlbmRlZCBmb3IgdGhlIE5BUyBpdHNlbGYuDQ0yLjQuICBE ZWxlZ2F0ZWQgSVB2NiBQcmVmaXggUG9vbA0NICAgREhDUHY2IFByZWZpeCBEZWxlZ2F0aW9uIFtS RkMzNjMzXSBpbnZvbHZlcyBhIGRlbGVnYXRpbmcgcm91dGVyDSAgIHNlbGVjdGluZyBhIHByZWZp eCBhbmQgZGVsZWdhdGluZyBpdCBvbiBhIHRlbXBvcmFyeSBiYXNpcyB0byBhDSAgIHJlcXVlc3Rp bmcgcm91dGVyLiAgVGhlIGRlbGVnYXRpbmcgcm91dGVyIG1heSBpbXBsZW1lbnQgYSBudW1iZXIg b2YNICAgc3RyYXRlZ2llcyBhcyB0byBob3cgaXQgY2hvb3NlcyB3aGF0IHByZWZpeCBpcyB0byBi ZSBkZWxlZ2F0ZWQgdG8gYQ0gICByZXF1ZXN0aW5nIHJvdXRlciwgb25lIG9mIHRoZW0gYmVpbmcg dGhlIHVzZSBvZiBhIGxvY2FsIG5hbWVkIHByZWZpeA0gICBwb29sLiAgVGhlIERlbGVnYXRlZC1J UHY2LVByZWZpeC1Qb29sIEF0dHJpYnV0ZSBhbGxvd3MgdGhlIFJBRElVUw0gICBzZXJ2ZXIgdG8g Y29udmV5IGEgcHJlZml4IHBvb2wgbmFtZSB0byBhIE5BUyBob3N0aW5nIGEgREhDUHY2LVBEDSAg IHNlcnZlciBhbmQgYWN0aW5nIGFzIGEgZGVsZWdhdGVkIHJvdXRlci4NDSAgIFNpbmNlIERIQ1B2 NiBQcmVmaXggRGVsZWdhdGlvbiBjYW4gY29uY2VpdmFibHkgYmUgdXNlZCBvbiB0aGUgc2FtZQ0g ICBuZXR3b3JrIGFzIFNMQUFDLCBpdCBpcyBwb3NzaWJsZSBmb3IgdGhlIERlbGVnYXRlZC1JUHY2 LVByZWZpeC1Qb29sDSAgIGFuZCBGcmFtZWQtSVB2Ni1Qb29sIGF0dHJpYnV0ZXMgdG8gYmUgaW5j bHVkZWQgd2l0aGluIHRoZSBzYW1lDSAgIHBhY2tldC4gIFRvIGF2b2lkIGFtYmlndWl0eSBpbiB0 aGlzIHNjZW5hcmlvLCB1c2Ugb2YgdGhlIERlbGVnYXRlZC0NICAgSVB2Ni1QcmVmaXgtUG9vbCBh dHRyaWJ1dGUgc2hvdWxkIGJlIHJlc3RyaWN0ZWQgdG8gYXV0aG9yaXphdGlvbiBhbmQNICAgYWNj b3VudGluZyBvZiBwcmVmaXggcG9vbHMgdXNlZCBpbiBESENQdjYgUHJlZml4IERlbGVnYXRpb24g YW5kIHRoZQ0gICBGcmFtZWQtSVB2Ni1Qb29sIGF0dHJpYnV0ZSBzaG91bGQgYmUgdXNlZCBmb3Ig YXV0aG9yaXphdGlvbiBhbmQNDQ0NTG91cmRlbGV0LCBldCBhbC4gICAgICBFeHBpcmVzIFNlcHRl bWJlciAxNSwgMjAxMSAgICAgICAgICAgICAgIFtQYWdlIDZdDQwNSW50ZXJuZXQtRHJhZnQgICAg ICAgICAgICAgUkFESVVTIElQdjYgQWNjZXNzICAgICAgICAgICAgICAgICBNYXJjaCAyMDExDQ0N ICAgYWNjb3VudGluZyBvZiBwcmVmaXggcG9vbHMgdXNlZCBpbiBTTEFBQy4NDSAyLjUgSVB2NiBw b29sIGZvciBESENQdjYgYWRkcmVzcyBhc3NpZ25tZW50DSAgDSAgICBESENQdjYgW1JGQzMzMTVd IHByb3ZpZGVzIGEgbWVjaGFuaXNtIHRvIGFzc2lnbiBvbmUgb3IgbW9yZSBvciBub24tDSAgIHRl bXBvcmFyeSBJUHY2IGFkZHJlc3NlcyB0byBob3N0cy4gIFNlY3Rpb24gMi4xIGludHJvZHVjZXMg RnJhbWVkLUlQdjYtQWRkcmVzcyBBdHRyaWJ1dGUgdG8gYmUgdXNlZCBmb3IgcHJvdmlkaW5nIGEg REhDUHY2IHNlcnZlciByZXNpZGluZyBvbiBhIE5BUyB3aXRoIG9uZSBvciBtb3JlIElQdjYgYWRk cmVzc2VzIHRvIGJlIGFzc2lnbmVkIHRvIHRoZSBjbGllbnRzLiBBbiBhbHRlcm5hdGl2ZSB3YXkg dG8gYWNoaWV2ZSBhIHNpbWlsYXIgcmVzdWx0IGlzIHRvIGV4dHJhY3QgYW4gSVB2NiBhZGRyZXNz IHRvIGJlIGFzc2lnbmVkLCBmcm9tIGEgcG9vbCBsb2NhbGx5IGNvbmZpZ3VyZWQgb24gdGhlIE5B Uy4gVGhpcyBkb2N1bWVudCBzcGVjaWZpZXMgdGhlIERIQ1B2Ni1JUHY2LUFkZHJlc3MtUG9vbCBh dHRyaWJ1dGUgdG8gYWxsb3cgdGhlIFJBRElVUyBzZXJ2ZXIgdG8gY29udmV5IGEgcG9vbCBuYW1l IHRvIGJlIHVzZWQgZm9yIERIQ1B2NiBiYXNlZCBhZGRyZXNzaW5nLCB3aGVuIGEgc2luZ2xlIElQ djYgYWRkcmVzcyBuZWVkcyB0byBiZSBhc3NpZ25lZCB0byBhIGhvc3QsIHRvIGEgTkFTIGhvc3Rp bmcgYSBESENQdjYgc2VydmVyLg0NU2luY2UgREhDUHY2IGNhbiBjb25jZWl2YWJseSBiZSB1c2Vk IG9uIHRoZSBzYW1lIG5ldHdvcmsgYXMgREhDUHY2IFByZWZpeCBEZWxlZ2F0aW9uLCBpdCBpcyBw b3NzaWJsZSBmb3IgdGhlIERlbGVnYXRlZC1JUHY2LVByZWZpeC1Qb29sDSAgIGFuZCBESENQdjYt SVB2Ni1BZGRyZXNzLVBvb2wgYXR0cmlidXRlcyB0byBiZSBpbmNsdWRlZCB3aXRoaW4gdGhlIHNh bWUNICAgcGFja2V0LiAgVG8gYXZvaWQgYW1iaWd1aXR5IGluIHRoaXMgc2NlbmFyaW8sIHVzZSBv ZiB0aGUgRGVsZWdhdGVkLQ0gICBJUHY2LVByZWZpeC1Qb29sIGF0dHJpYnV0ZSBzaG91bGQgYmUg cmVzdHJpY3RlZCB0byBhdXRob3JpemF0aW9uIGFuZA0gICBhY2NvdW50aW5nIG9mIHByZWZpeCBw b29scyB1c2VkIGluIERIQ1B2NiBQcmVmaXggRGVsZWdhdGlvbiBhbmQgdGhlDSAgIERIQ1B2Ni1J UHY2LUFkZHJlc3MtUG9vbCBhdHRyaWJ1dGUgc2hvdWxkIGJlIHVzZWQgZm9yIGF1dGhvcml6YXRp b24gYW5kIGFjY291bnRpbmcgb2YgSVB2NiBhZGRyZXNzIHBvb2wgdXNlZCBmb3IgREhDUHY2IGJh c2VkIGFkZHJlc3Npbmcgd2hlbiBhIHNpbmdsZSBJUHY2IGFkZHJlc3MgbmVlZHMgdG8gYmUgYXNz aWduZWQgdG8gYSBsaW5rLg0NDQ0zLiAgQXR0cmlidXRlcw0NICAgVGhlIGZpZWxkcyBzaG93biBp biB0aGUgZGlhZ3JhbXMgYmVsb3cgYXJlIHRyYW5zbWl0dGVkIGZyb20gbGVmdCB0bw0gICByaWdo dC4NDTMuMS4gIEZyYW1lZC1JUHY2LUFkZHJlc3MNDSAgIFRoaXMgQXR0cmlidXRlIGluZGljYXRl cyBhbiBJUHY2IEFkZHJlc3MgdGhhdCBpcyBhc3NpZ25lZCB0byB0aGUgTkFTLQ0gICBmYWNpbmcg aW50ZXJmYWNlIG9mIHRoZSBSRy9ob3N0LiAgSXQgTUFZIGJlIHVzZWQgaW4gQWNjZXNzLUFjY2Vw dA0gICBwYWNrZXRzLCBhbmQgTUFZIGFwcGVhciBtdWx0aXBsZSB0aW1lcy4gIEl0IE1BWSBiZSB1 c2VkIGluIGFuIEFjY2Vzcy0NICAgUmVxdWVzdCBwYWNrZXQgYXMgYSBoaW50IGJ5IHRoZSBOQVMg dG8gdGhlIHNlcnZlciB0aGF0IGl0IHdvdWxkDSAgIHByZWZlciB0aGVzZSBJUHY2IGFkZHJlc3Mo ZXMpLCBidXQgdGhlIHNlcnZlciBpcyBub3QgcmVxdWlyZWQgdG8NICAgaG9ub3IgdGhlIGhpbnQu ICBTaW5jZSBpdCBpcyBhc3N1bWVkIHRoYXQgdGhlIE5BUyB3aWxsIGFkZCBhIHJvdXRlDSAgIGNv cnJlc3BvbmRpbmcgdG8gdGhlIGFkZHJlc3MsIGl0IGlzIG5vdCBuZWNlc3NhcnkgZm9yIHRoZSBz ZXJ2ZXIgdG8NICAgYWxzbyBzZW5kIGEgaG9zdCBGcmFtZWQtSVB2Ni1Sb3V0ZSBhdHRyaWJ1dGUg Zm9yIHRoZSBzYW1lIGFkZHJlc3MuDQ0gICBUaGlzIEF0dHJpYnV0ZSBjYW4gYmUgdXNlZCBieSBh IERIQ1B2NiBwcm9jZXNzIG9uIHRoZSBOQVMgdG8gYXNzaWduIGENICAgdW5pcXVlIElQdjYgYWRk cmVzcyB0byB0aGUgUkcvaG9zdC4NDSAgIEEgc3VtbWFyeSBvZiB0aGUgRnJhbWVkLUlQdjYtQWRk cmVzcyBBdHRyaWJ1dGUgZm9ybWF0IGlzIHNob3duIGJlbG93Lg0NICAgICAwICAgICAgICAgICAg ICAgICAgIDEgICAgICAgICAgICAgICAgICAgMiAgICAgICAgICAgICAgICAgICAzDSAgICAgMCAx IDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkg MCAxDSAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKw0gICAgfCAgICAgVHlwZSAgICAgIHwgICAgIExlbmd0aCAgICB8ICAg ICAgICAgICAgQWRkcmVzcw0gICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgQWRkcmVzcyAoY29udCkNICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDSAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIEFkZHJlc3MgKGNvbnQpDSAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBBZGRyZXNzIChjb250KQ0gICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNICAgICAgICAgICAgIEFkZHJlc3MgKGNv bnQuKSAgICAgICAgfA0gICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQ0gICBU eXBlDQ0gICAgICBUQkExIGZvciBGcmFtZWQtSVB2Ni1BZGRyZXNzDQ0gICBMZW5ndGgNDSAgICAg IDE4DQ0NDQ0NDUxvdXJkZWxldCwgZXQgYWwuICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMTUsIDIw MTEgICAgICAgICAgICAgICBbUGFnZSA3XQ0MDUludGVybmV0LURyYWZ0ICAgICAgICAgICAgIFJB RElVUyBJUHY2IEFjY2VzcyAgICAgICAgICAgICAgICAgTWFyY2ggMjAxMQ0NDSAgIEFkZHJlc3MN DSAgICAgIFRoZSBJUHY2IGFkZHJlc3MgZmllbGQgY29udGFpbnMgYSAxMjgtYml0IElQdjYgYWRk cmVzcy4NDTMuMi4gIEROUy1TZXJ2ZXItSVB2Ni1BZGRyZXNzDQ0gICBUaGUgRE5TLVNlcnZlci1J UHY2LUFkZHJlc3MgQXR0cmlidXRlIGNvbnRhaW5zIHRoZSBJUHY2IGFkZHJlc3Mgb2YgYQ0gICBy ZWN1cnNpdmUgRE5TIHNlcnZlci4gIFRoaXMgYXR0cmlidXRlIE1BWSBiZSBpbmNsdWRlZCBtdWx0 aXBsZSB0aW1lcw0gICBpbiBBY2Nlc3MtQWNjZXB0IHBhY2tldHMsIHdoZW4gdGhlIGludGVudGlv biBpcyBmb3IgYSBOQVMgdG8gYW5ub3VuY2UNICAgbW9yZSB0aGFuIG9uZSByZWN1cnNpdmUgRE5T IGFkZHJlc3MgdG8gYW4gUkcvaG9zdC4gIFRoZSBzYW1lIG9yZGVyIG9mDSAgIHRoZSBhdHRyaWJ1 dGVzIGlzIGV4cGVjdGVkIHRvIGJlIGZvbGxvd2VkIGluIHRoZSBhbm5vdW5jZW1lbnRzIHRvIHRo ZQ0gICBjbGllbnQuDQ0gICBUaGUgY29udGVudCBvZiB0aGlzIGF0dHJpYnV0ZSBjYW4gYmUgaW5z ZXJ0ZWQgaW4gYSBESENQdjYgb3B0aW9uIGFzDSAgIHNwZWNpZmllZCBpbiBbUkZDMzY0Nl0gb3Ig bWFwcGVkIG9wdGlvbi4NDSAgIEEgc3VtbWFyeSBvZiB0aGUgRE5TLVNlcnZlci1JUHY2LUFkZHJl c3MgQXR0cmlidXRlIGZvcm1hdCBpcyBnaXZlbg0gICBiZWxvdy4NDSAgICAgMCAgICAgICAgICAg ICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAgMw0gICAgIDAg MSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5 IDAgMQ0gICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSsNICAgIHwgICAgIFR5cGUgICAgICB8ICAgICBMZW5ndGggICAgfCAg ICAgICAgICAgIEFkZHJlc3MNICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDSAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIEFkZHJlc3MgKGNvbnQpDSAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBBZGRyZXNzIChjb250KQ0gICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgQWRkcmVzcyAoY29udCkNICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDSAgICAgICAgICAgICBBZGRyZXNzIChj b250LikgICAgICAgIHwNICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0NICAg VHlwZQ0NICAgICAgVEJBMiBmb3IgRE5TLVNlcnZlci1JUHY2LUFkZHJlc3MNDSAgIExlbmd0aA0N ICAgICAgMTgNDSAgIEFkZHJlc3MNDSAgICAgIFRoZSAxMjgtYml0IElQdjYgYWRkcmVzcyBvZiBh IEROUyBzZXJ2ZXIuDQ0NDQ0NDQ1Mb3VyZGVsZXQsIGV0IGFsLiAgICAgIEV4cGlyZXMgU2VwdGVt YmVyIDE1LCAyMDExICAgICAgICAgICAgICAgW1BhZ2UgOF0NDA1JbnRlcm5ldC1EcmFmdCAgICAg ICAgICAgICBSQURJVVMgSVB2NiBBY2Nlc3MgICAgICAgICAgICAgICAgIE1hcmNoIDIwMTENDQ0z LjMuICBSb3V0ZS1JUHY2LUluZm9ybWF0aW9uDQ0gICBUaGlzIEF0dHJpYnV0ZSBzcGVjaWZpZXMg YSBwcmVmaXggKGFuZCBjb3JyZXNwb25kaW5nIHJvdXRlKSB0byBiZQ0gICBhdXRob3JpemVkIGZv ciBhbm5vdW5jZW1lbnQgdG93YXJkcyB0aGUgdXNlciBieSB0aGUgTkFTLCB3aXRoIHRoZQ0gICBy ZWFjaGFibGUgYnkgbWVhbnMgb2Ygcm91dGluZyB0b3dhcmRzIHRoZSBOQVMuICBJdCBpcyB1c2Vk IGluIHRoZQ0gICBBY2Nlc3MtQWNjZXB0IHBhY2tldCBhbmQgY2FuIGFwcGVhciBtdWx0aXBsZSB0 aW1lcy4gIEl0IG1heSBhbHNvIGJlDSAgIHVzZWQgaW4gdGhlIEFjY2Vzcy1SZXF1ZXN0IHBhY2tl dCBhcyBoaW50IHRvIHRoZSBzZXJ2ZXIuDQ0gICBBIHN1bW1hcnkgb2YgdGhlIFJvdXRlLUlQdjYt SW5mb3JtYXRpb24gYXR0cmlidXRlIGZvcm1hdCBpcyBzaG93bg0gICBiZWxvdy4gIFRoZSByb3V0 ZSBpbmZvcm1hdGlvbiBvcHRpb24gZGVmaW5lZCBpbiBbUkZDNDE5MV0gaXMgY2FwdHVyZWQNICAg aW4gdGhpcyBhbmQgZm9sbG93aW5nIHR3byBhdHRyaWJ1dGVzLg0NDSAgICAgICAgMCAgICAgICAg ICAgICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAgMw0gICAg ICAgIDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2 IDcgOCA5IDAgMQ0gICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNICAgICAgIHwgICAgIFR5cGUgICAgICB8ICAgIExl bmd0aCAgICAgfCAgIFJlc2VydmVkICAgIHwgUHJlZml4LUxlbmd0aCB8DSAgICAgICArLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Kw0gICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIHwNICAgICAgIC4gICAgICAgICAgICAgICAgICAgICAgICBQcmVmaXgg KHZhcmlhYmxlKSAgICAgICAgICAgICAgICAgICAgICAuDSAgICAgICAuICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLg0gICAgICAg fCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIHwNICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rDQ0gICBUeXBlDQ0gICAgICBUQkEzIGZvciBSb3V0ZS1J UHY2LUluZm9ybWF0aW9uDQ0gICBMZW5ndGgNDSAgICAgIExlbmd0aCBpbiBieXRlcy4gIEF0IGxl YXN0IDQgYW5kIG5vIGxhcmdlciB0aGFuIDIwOyB0eXBpY2FsbHkgMTINICAgICAgb3IgbGVzcy4N DSAgIFByZWZpeCBMZW5ndGgNDSAgICAgIFRoZSBsZW5ndGggb2YgdGhlIHByZWZpeCwgaW4gYml0 czsgYXQgbGVhc3QgMCBhbmQgbm8gbW9yZSB0aGFuDSAgICAgIDEyODsgdHlwaWNhbGx5IDY0IG9y IGxlc3MuDQ0gICBQcmVmaXgNDSAgICAgIFZhcmlhYmxlLWxlbmd0aCBmaWVsZCBjb250YWluaW5n IGFuIElQIHByZWZpeC4gIFRoZSBQcmVmaXggTGVuZ3RoDSAgICAgIGZpZWxkIGNvbnRhaW5zIHRo ZSBudW1iZXIgb2YgdmFsaWQgbGVhZGluZyBiaXRzIGluIHRoZSBwcmVmaXguDSAgICAgIFRoZSBi aXRzIGluIHRoZSBwcmVmaXggYWZ0ZXIgdGhlIHByZWZpeCBsZW5ndGggKGlmIGFueSkgdXAgdG8g dGhlDSAgICAgIGJ5dGUgYm91bmRhcnkgYXJlIHJlc2VydmVkIGFuZCBNVVNUIGJlIGluaXRpYWxp emVkIHRvIHplcm8gYnkgdGhlDSAgICAgIHNlbmRlciBhbmQgaWdub3JlZCBieSB0aGUgcmVjZWl2 ZXIuDQ0NDQ0NDUxvdXJkZWxldCwgZXQgYWwuICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMTUsIDIw MTEgICAgICAgICAgICAgICBbUGFnZSA5XQ0MDUludGVybmV0LURyYWZ0ICAgICAgICAgICAgIFJB RElVUyBJUHY2IEFjY2VzcyAgICAgICAgICAgICAgICAgTWFyY2ggMjAxMQ0NDTMuNC4gIERlbGVn YXRlZC1JUHY2LVByZWZpeC1Qb29sDQ0gICBUaGlzIEF0dHJpYnV0ZSBjb250YWlucyB0aGUgbmFt ZSBvZiBhbiBhc3NpZ25lZCBwb29sIHRoYXQgU0hPVUxEIGJlDSAgIHVzZWQgdG8gc2VsZWN0IGFu IElQdjYgZGVsZWdhdGVkIHByZWZpeCBmb3IgdGhlIHVzZXIuICBJZiBhIE5BUyBkb2VzDSAgIG5v dCBzdXBwb3J0IG11bHRpcGxlIHByZWZpeCBwb29scywgdGhlIE5BUyBNVVNUIGlnbm9yZSB0aGlz DSAgIEF0dHJpYnV0ZS4NDSAgIEEgc3VtbWFyeSBvZiB0aGUgRGVsZWdhdGVkLUlQdjYtUHJlZml4 LVBvb2wgQXR0cmlidXRlIGZvcm1hdCBpcyBzaG93bg0gICBiZWxvdy4gIFRoZSBmaWVsZHMgYXJl IHRyYW5zbWl0dGVkIGZyb20gbGVmdCB0byByaWdodC4NICAgICAgIDAgICAgICAgICAgICAgICAg ICAgMSAgICAgICAgICAgICAgICAgICAyDSAgICAgICAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAy IDMgNCA1IDYgNyA4IDkgMCAxIDIgMw0gICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rDSAgICAgIHwgICAgIFR5cGUgICAgICB8ICAgIExlbmd0aCAg ICAgfCAgICAgU3RyaW5nLi4uDSAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSsNDQ0gICBUeXBlDQ0gICAgICBUQkE0IGZvciBEZWxlZ2F0ZWQtSVB2 Ni1QcmVmaXgtUG9vbA0NICAgTGVuZ3RoDQ0gICAgICBMZW5ndGggaW4gYnl0ZXMuICBBdCBsZWFz dCA0Lg0NICAgU3RyaW5nDQ0gICAgICBUaGUgc3RyaW5nIGZpZWxkIGNvbnRhaW5zIHRoZSBuYW1l IG9mIGFuIGFzc2lnbmVkIElQdjYgcHJlZml4IHBvb2wNICAgICAgY29uZmlndXJlZCBvbiB0aGUg TkFTLiAgVGhlIGZpZWxkIGlzIG5vdCBOVUxMIChoZXggMDApIHRlcm1pbmF0ZWQuDQ0NMy41LiAg REhDUHY2LUlQdjYtQWRkcmVzcy1Qb29sDQ0gICBUaGlzIEF0dHJpYnV0ZSBjb250YWlucyB0aGUg bmFtZSBvZiBhbiBhc3NpZ25lZCBwb29sIHRoYXQgU0hPVUxEIGJlDSAgIHVzZWQgdG8gc2VsZWN0 IGFuIElQdjYgYWRkcmVzcyBmb3IgdGhlIHVzZXIuICBJZiBhIE5BUyBkb2VzDSAgIG5vdCBzdXBw b3J0IG11bHRpcGxlIHByZWZpeCBwb29scywgdGhlIE5BUyBNVVNUIGlnbm9yZSB0aGlzDSAgIEF0 dHJpYnV0ZS4NDSAgIEEgc3VtbWFyeSBvZiB0aGUgREhDUHY2LUlQdjYtQWRkcmVzcy1Qb29sIEF0 dHJpYnV0ZSBmb3JtYXQgaXMgc2hvd24NICAgYmVsb3cuICBUaGUgZmllbGRzIGFyZSB0cmFuc21p dHRlZCBmcm9tIGxlZnQgdG8gcmlnaHQuDSAgICAgICAwICAgICAgICAgICAgICAgICAgIDEgICAg ICAgICAgICAgICAgICAgMg0gICAgICAgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2 IDcgOCA5IDAgMSAyIDMNICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKw0gICAgICB8ICAgICBUeXBlICAgICAgfCAgICBMZW5ndGggICAgIHwgICAg IFN0cmluZy4uLg0gICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rDQ0NICAgVHlwZQ0NICAgICAgVEJBNCBmb3IgREhDUHY2LUlQdjYtQWRkcmVzcy1Q b29sDQ0gICBMZW5ndGgNDSAgICAgIExlbmd0aCBpbiBieXRlcy4gIEF0IGxlYXN0IDQuDQ0gICBT dHJpbmcNDSAgICAgIFRoZSBzdHJpbmcgZmllbGQgY29udGFpbnMgdGhlIG5hbWUgb2YgYW4gYXNz aWduZWQgSVB2NiBhZGRyZXNzIHBvb2wNICAgICAgY29uZmlndXJlZCBvbiB0aGUgTkFTLiAgVGhl IGZpZWxkIGlzIG5vdCBOVUxMIChoZXggMDApIHRlcm1pbmF0ZWQuDQ0NMy41LiAgVGFibGUgb2Yg YXR0cmlidXRlcw0NICAgVGhlIGZvbGxvd2luZyB0YWJsZSBwcm92aWRlcyBhIGd1aWRlIHRvIHdo aWNoIGF0dHJpYnV0ZXMgbWF5IGJlIGZvdW5kDSAgIGluIHdoaWNoIGtpbmRzIG9mIHBhY2tldHMs IGFuZCBpbiB3aGF0IHF1YW50aXR5Lg0NDVJlcXVlc3QgQWNjZXB0IFJlamVjdCBDaGFsbGVuZ2Ug QWNjb3VudGluZyAgICAjICBBdHRyaWJ1dGUNICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBSZXF1ZXN0DTArICAgICAgMCsgICAgIDAgICAgICAwICAgICAgICAgMCsgICAgICBUQkEx ICBGcmFtZWQtSVB2Ni1BZGRyZXNzDTArICAgICAgMCsgICAgIDAgICAgICAwICAgICAgICAgMCsg ICAgICBUQkEyICBETlMtU2VydmVyLUlQdjYtQWRkcmVzcw0wICAgICAgIDArICAgICAwICAgICAg MCAgICAgICAgIDArICAgICAgVEJBMyAgUm91dGUtSVB2Ni1JbmZvcm1hdGlvbg0wICAgICAgMC0x ICAgICAwICAgICAgMCAgICAgICAgMC0xICAgICAgVEJBNCAgRGVsZWdhdGVkLUlQdjYtUHJlZml4 LVBvb2wNMCAgICAgIDAtMSAgICAgMCAgICAgIDAgICAgICAgIDAtMSAgICAgIFRCQTQgIERIQ1B2 Ni1JUHY2LUFkZHJlc3MtUG9vbA0NDTQuICBEaWFtZXRlciBDb25zaWRlcmF0aW9ucw0NICAgR2l2 ZW4gdGhhdCB0aGUgQXR0cmlidXRlcyBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgYXJlIGFsbG9j YXRlZCBmcm9tDSAgIHRoZSBzdGFuZGFyZCBSQURJVVMgdHlwZSBzcGFjZSAoc2VlIFNlY3Rpb24g NiksIG5vIHNwZWNpYWwgaGFuZGxpbmcNICAgaXMgcmVxdWlyZWQgYnkgRGlhbWV0ZXIgZW50aXRp ZXMuDQ0NDUxvdXJkZWxldCwgZXQgYWwuICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMTUsIDIwMTEg ICAgICAgICAgICAgIFtQYWdlIDEwXQ0MDUludGVybmV0LURyYWZ0ICAgICAgICAgICAgIFJBRElV UyBJUHY2IEFjY2VzcyAgICAgICAgICAgICAgICAgTWFyY2ggMjAxMQ0NDTUuICBTZWN1cml0eSBD b25zaWRlcmF0aW9ucw0NICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiBSQURJ VVMgZm9yIHRoZSBwdXJwb3NlcyBvZg0gICBhdXRoZW50aWNhdGlvbiwgYXV0aG9yaXphdGlvbiBh bmQgYWNjb3VudGluZyBpbiBJUHY2LWVuYWJsZWQNICAgbmV0d29ya3MuICBJbiBzdWNoIG5ldHdv cmtzLCB0aGUgUkFESVVTIHByb3RvY29sIG1heSBydW4gZWl0aGVyIG92ZXINICAgSVB2NCBvciBv dmVyIElQdjYuICBLbm93biBzZWN1cml0eSB2dWxuZXJhYmlsaXRpZXMgb2YgdGhlIFJBRElVUw0g ICBwcm90b2NvbCBhcHBseSB0byB0aGUgYXR0cmlidXRlcyBkZWZpbmVkIGluIHRoaXMgZG9jdW1l bnQuICBTaW5jZQ0gICBJUFNFQyBpcyBuYXRpdmVseSBkZWZpbmVkIGZvciBJUHY2LCBpdCBpcyBl eHBlY3RlZCB0aGF0IHJ1bm5pbmcNICAgUkFESVVTIGltcGxlbWVudGF0aW9ucyBzdXBwb3J0aW5n IElQdjYgbWF5IHdhbnQgdG8gcnVuIG92ZXIgSVBTRUMuDSAgIFdoZXJlIFJBRElVUyBpcyBydW4g b3ZlciBJUFNFQyBhbmQgd2hlcmUgY2VydGlmaWNhdGVzIGFyZSB1c2VkIGZvcg0gICBhdXRoZW50 aWNhdGlvbiwgaXQgbWF5IGJlIGRlc2lyYWJsZSB0byBhdm9pZCBtYW5hZ2VtZW50IG9mIFJBRElV Uw0gICBzaGFyZWQgc2VjcmV0cywgc28gYXMgdG8gbGV2ZXJhZ2UgdGhlIGltcHJvdmVkIHNjYWxh YmlsaXR5IG9mIHB1YmxpYw0gICBrZXkgaW5mcmFzdHJ1Y3R1cmUuDQ0NNi4gIElBTkEgQ29uc2lk ZXJhdGlvbnMNDSAgIFRoaXMgZG9jdW1lbnQgcmVxdWlyZXMgdGhlIGFzc2lnbm1lbnQgb2YgdGhy ZWUgbmV3IFJBRElVUyBBdHRyaWJ1dGUNICAgVHlwZXMgaW4gdGhlICJSYWRpdXMgVHlwZXMiIHJl Z2lzdHJ5IChjdXJyZW50bHkgbG9jYXRlZCBhdA0gICBodHRwOi8vd3d3LmlhbmEub3JnL2Fzc2ln bm1lbnRzL3JhZGl1cy10eXBlcyBmb3IgdGhlIGZvbGxvd2luZw0gICBhdHRyaWJ1dGVzOg0NICAg byAgRnJhbWVkLUlQdjYtQWRkcmVzcw0NICAgbyAgRE5TLVNlcnZlci1JUHY2LUFkZHJlc3MNDSAg IG8gIFJvdXRlLUlQdjYtSW5mb3JtYXRpb24NDSAgIG8gIERlbGVnYXRlZC1JUHY2LVByZWZpeC1Q b29sDURIQ1B2Ni1JUHY2LUFkZHJlc3MtUG9vbA0NDTcuICBBY2tub3dsZWRnZW1lbnRzDQ0gICBU aGUgYXV0aG9ycyB3b3VsZCBsaWtlIHRvIHRoYW5rIEJlcm5hcmQgQWJvYmEsIEFsZnJlZCBIaW5l cywgQWxhbg0gICBEZUtvaywgUGV0ZXIgRGVhY29uLCBhbmQgTWFyayBTbWl0aCBmb3IgdGhlaXIg aGVscCBhbmQgY29tbWVudHMgaW4NICAgcmV2aWV3aW5nIHRoaXMgZG9jdW1lbnQuDQ0NOC4gIFJl ZmVyZW5jZXMNDTguMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzDQ0gICBbUkZDMjExOV0gIEJyYWRu ZXIsIFMuLCAiS2V5IHdvcmRzIGZvciB1c2UgaW4gUkZDcyB0byBJbmRpY2F0ZQ0gICAgICAgICAg ICAgIFJlcXVpcmVtZW50IExldmVscyIsIEJDUCAxNCwgUkZDIDIxMTksIE1hcmNoIDE5OTcuDQ0g ICBbUkZDNDg2Ml0gIFRob21zb24sIFMuLCBOYXJ0ZW4sIFQuLCBhbmQgVC4gSmlubWVpLCAiSVB2 NiBTdGF0ZWxlc3MNICAgICAgICAgICAgICBBZGRyZXNzIEF1dG9jb25maWd1cmF0aW9uIiwgUkZD IDQ4NjIsIFNlcHRlbWJlciAyMDA3Lg0NDQ0NTG91cmRlbGV0LCBldCBhbC4gICAgICBFeHBpcmVz IFNlcHRlbWJlciAxNSwgMjAxMSAgICAgICAgICAgICAgW1BhZ2UgMTFdDQwNSW50ZXJuZXQtRHJh ZnQgICAgICAgICAgICAgUkFESVVTIElQdjYgQWNjZXNzICAgICAgICAgICAgICAgICBNYXJjaCAy MDExDQ0NOC4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcw0NICAgW1JGQzMxNjJdICBBYm9iYSwg Qi4sIFpvcm4sIEcuLCBhbmQgRC4gTWl0dG9uLCAiUkFESVVTIGFuZCBJUHY2IiwNICAgICAgICAg ICAgICBSRkMgMzE2MiwgQXVndXN0IDIwMDEuDQ0gICBbUkZDMzMxNV0gIERyb21zLCBSLiwgQm91 bmQsIEouLCBWb2x6LCBCLiwgTGVtb24sIFQuLCBQZXJraW5zLCBDLiwNICAgICAgICAgICAgICBh bmQgTS4gQ2FybmV5LCAiRHluYW1pYyBIb3N0IENvbmZpZ3VyYXRpb24gUHJvdG9jb2wgZm9yDSAg ICAgICAgICAgICAgSVB2NiAoREhDUHY2KSIsIFJGQyAzMzE1LCBKdWx5IDIwMDMuDQ0gICBbUkZD MzYzM10gIFRyb2FuLCBPLiBhbmQgUi4gRHJvbXMsICJJUHY2IFByZWZpeCBPcHRpb25zIGZvciBE eW5hbWljDSAgICAgICAgICAgICAgSG9zdCBDb25maWd1cmF0aW9uIFByb3RvY29sIChESENQKSB2 ZXJzaW9uIDYiLCBSRkMgMzYzMywNICAgICAgICAgICAgICBEZWNlbWJlciAyMDAzLg0NICAgW1JG QzM2NDZdICAiIi4NDSAgIFtSRkM0MTkxXSAgRHJhdmVzLCBSLiBhbmQgRC4gVGhhbGVyLCAiRGVm YXVsdCBSb3V0ZXIgUHJlZmVyZW5jZXMgYW5kDSAgICAgICAgICAgICAgTW9yZS1TcGVjaWZpYyBS b3V0ZXMiLCBSRkMgNDE5MSwgTm92ZW1iZXIgMjAwNS4NDSAgIFtSRkM0ODE4XSAgU2Fsb3dleSwg Si4gYW5kIFIuIERyb21zLCAiUkFESVVTIERlbGVnYXRlZC1JUHY2LVByZWZpeA0gICAgICAgICAg ICAgIEF0dHJpYnV0ZSIsIFJGQyA0ODE4LCBBcHJpbCAyMDA3Lg0NICAgW1JGQzQ4NjFdICBOYXJ0 ZW4sIFQuLCBOb3JkbWFyaywgRS4sIFNpbXBzb24sIFcuLCBhbmQgSC4gU29saW1hbiwNICAgICAg ICAgICAgICAiTmVpZ2hib3IgRGlzY292ZXJ5IGZvciBJUCB2ZXJzaW9uIDYgKElQdjYpIiwgUkZD IDQ4NjEsDSAgICAgICAgICAgICAgU2VwdGVtYmVyIDIwMDcuDQ0gICBbUkZDNTAwNl0gIEplb25n LCBKLiwgUGFyaywgUy4sIEJlbG9laWwsIEwuLCBhbmQgUy4gTWFkYW5hcGFsbGksDSAgICAgICAg ICAgICAgIklQdjYgUm91dGVyIEFkdmVydGlzZW1lbnQgT3B0aW9uIGZvciBETlMgQ29uZmlndXJh dGlvbiIsDSAgICAgICAgICAgICAgUkZDIDUwMDYsIFNlcHRlbWJlciAyMDA3Lg0NICAgW1JGQzUy MjZdICBOYXJ0ZW4sIFQuIGFuZCBILiBBbHZlc3RyYW5kLCAiR3VpZGVsaW5lcyBmb3IgV3JpdGlu ZyBhbg0gICAgICAgICAgICAgIElBTkEgQ29uc2lkZXJhdGlvbnMgU2VjdGlvbiBpbiBSRkNzIiwg QkNQIDI2LCBSRkMgNTIyNiwNICAgICAgICAgICAgICBNYXkgMjAwOC4NDQ1BdXRob3JzJyBBZGRy ZXNzZXMNDSAgIEJlbm9pdCBMb3VyZGVsZXQNICAgQ2lzY28gU3lzdGVtcywgSW5jLg0gICBWaWxs YWdlIGVudC4gR3JlZW5TaWRlLCBCYXQgVDMsDSAgIDQwMCwgQXYgZGUgUm91bWFuaWxsZSwNICAg MDY0MTAgQklPVCAtIFNvcGhpYS1BbnRpcG9saXMgQ2VkZXgNICAgRnJhbmNlDQ0gICBQaG9uZTog KzMzIDQgOTcgMjMgMjYgMjMNICAgRW1haWw6IGJsb3VyZGVsQGNpc2NvLmNvbQ0NDQ0NDQ1Mb3Vy ZGVsZXQsIGV0IGFsLiAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDE1LCAyMDExICAgICAgICAgICAg ICBbUGFnZSAxMl0NDA1JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICBSQURJVVMgSVB2NiBBY2Nl c3MgICAgICAgICAgICAgICAgIE1hcmNoIDIwMTENDQ0gICBXb2pjaWVjaCBEZWMgKGVkaXRvcikN ICAgQ2lzY28gU3lzdGVtcywgSW5jLg0gICBIYWFybGVyYmVyZ3dlZyAxMy0xOQ0gICBBbXN0ZXJk YW0gLCBOT09SRC1IT0xMQU5EIDExMDEgQ0gNICAgTmV0aGVybGFuZHMNDSAgIEVtYWlsOiB3ZGVj QGNpc2NvLmNvbQ0NDSAgIEJlaGNldCBTYXJpa2F5YQ0gICBIdWF3ZWkgVVNBDSAgIDE3MDAgQWxt YSBEci4gU3VpdGUgNTAwDSAgIFBsYW5vLCBUWA0gICBVUw0NICAgUGhvbmU6ICsxIDk3Mi01MDkt NTU5OQ0gICBFbWFpbDogc2FyaWtheWFAaWVlZS5vcmcNDQ0gICBHbGVuIFpvcm4NICAgTmV0d29y ayBaZW4NICAgMTMxMCBFYXN0IFRob21hcyBTdHJlZXQNICAgU2VhdHRsZSwgV0ENICAgVVMNDSAg IEVtYWlsOiBnd3pAbmV0LXplbi5uZXQNDQ0gICBEYXZpZCBNaWxlcw0gICBBbGNhdGVsLUx1Y2Vu dA0gICBMMyAvIDIxNSBTcHJpbmcgU3QNICAgTWVsYm91cm5lLCBWaWN0b3JpYSAzMDAwLA0gICBB dXN0cmFsaWENDSAgIFBob25lOg0gICBGYXg6DSAgIEVtYWlsOiBEYXZpZC5NaWxlc0BhbGNhdGVs LWx1Y2VudC5jb20NICAgVVJJOg0NDQ0NDQ0NDQ0NDQ0NTG91cmRlbGV0LCBldCBhbC4gICAgICBF eHBpcmVzIFNlcHRlbWJlciAxNSwgMjAxMSAgICAgICAgICAgICAgW1BhZ2UgMTNdDQwNDQ0AAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA BgAArAwAALAMAADjDAAA5wwAAOgMAADpDAAA9wwAAAMNAAASDQAAIw0AACQNAABeDQAAIxEAAE4R AACSIwAAmCMAANMjAADUIwAA9SMAAA4kAAAXJAAAHCQAACMkAABBJAAAQiQAAEMkAAAIJgAAbiYA AHgoAAD54/nZz9nF2c/Fu7H5pvmcj4V7cWexZ12PVvmmSwAUFWgCJ78AFmgHWtYAbUgdBHNIHQQA DBVoB1rWABZo02xeAAATAQiBBEgBAAVoYLr2hhZo02xeABMBCIEESAEABWhhuvaGFmjTbF4AEwEI gQRIAQAFaF+69oYWaNNsXgATAQiBBEgBAAVoXrr2hhZo02xeABMBCIEESAEABWh7uvaGFmi2Y+8A GQEIgQRIAQAFaF669oYVaNNsXgAWaNNsXgATAQiBBEgBAAVoXbr2hhZo02xeABQVaAInvwAWaAda 1gBtSAwEc0gMBAATAQiBBEgBAAVoc7r2hhZoYSnDABMBCIEESAEABWh7uvaGFmiPSBkAEwEIgQRI AQAFaFy69oYWaNNsXgATAQiBBEgBAAVoW7r2hhZo02xeABMBCIEESAEABWhauvaGFmjTbF4AKwAI gRVoB1rWABZoB1rWABdo02xeAGNIAQBkaAAAAABkaAAAAABkaFq69oYMFWgHWtYAFmgHWtYAHQAG AAABCAAAAggAAAMIAABMCAAAlQgAAN4IAAAnCQAAcAkAALkJAAACCgAASwoAAJQKAADdCgAA3goA AN8KAAAZCwAAUAsAAFELAABaCwAAWwsAAKILAADrCwAAMQwAAHoMAADADAAAYA0AAGENAAB3DQAA eA0AAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAdAAYA AItxAAD9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBAABAQF4DQAA vw0AAAcOAABNDgAATg4AAGIOAABjDgAApA4AAMgOAADJDgAADg8AAFAPAACYDwAA1Q8AANYPAAAf EAAAZxAAAKkQAADnEAAA6BAAACIRAAAjEQAANBEAADURAAA2EQAANxEAAIARAACCEQAAyxEAAMwR AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAAAAAAAEDwBnZAInvwAAHcwRAADN EQAAEBIAADsSAAA8EgAAfRIAAKYSAADpEgAAKRMAAHITAAC6EwAAABQAAEMUAABvFAAAcBQAALIU AAD4FAAAPhUAAIEVAADHFQAADxYAAFUWAACbFgAA4hYAACoXAAA7FwAAPBcAAD0XAAA+FwAAPxcA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAdPxcAAEAX AABBFwAAQhcAAEMXAABEFwAARRcAAEYXAABHFwAASBcAAEkXAABKFwAASxcAAEwXAABNFwAAThcA AE8XAABQFwAAURcAAFIXAABTFwAAVBcAAFUXAABWFwAAnxcAAKEXAADqFwAA6xcAAOwXAAD+FwAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAAAAAAABA8AZ2QCJ78AAB3+FwAA/xcA AEgYAACRGAAA2hgAACMZAABsGQAAtRkAAP4ZAABHGgAAkBoAANkaAAAiGwAAaxsAALQbAAD9GwAA RhwAAI8cAADYHAAAIR0AAGodAACzHQAAtB0AALUdAAC2HQAAtx0AALgdAAC5HQAAuh0AALsdAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAAAAAAAEDwBnZAInvwAAHbsdAAC8HQAA vR0AAL4dAAC/HQAAwB0AAMEdAADCHQAAwx0AAMQdAADFHQAAxh0AAMcdAADIHQAAyR0AAModAADL HQAAzB0AAM0dAADOHQAAzx0AANAdAAAZHgAAGx4AAGQeAABlHgAAZh4AAHceAAB4HgAAwR4AAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAdwR4AAAgfAABR HwAAmh8AAOIfAAArIAAAbiAAAJMgAACUIAAA2yAAACQhAABqIQAAsCEAAPUhAAA8IgAASyIAAEwi AACUIgAAlSIAANgiAAAeIwAAHyMAAGgjAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA8AZ2QCJ78AABZoIwAAkyMAAJQj AABDJAAAuQAAAAAAAAAAAAAAAHEAAAAAAAAAAAAAAAAmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAASw8ACiYAC0YDAEMkAUXGgAAAAQBduvaGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2TTbF4AAEcPAEMkAUXGgAAA AQBduvaGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAZ2TTbF4ARg8ARcaAAAACAF269oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZAInvwAAA0MkAABEJAAARSQA AF4kAABfJAAApiQAAO8kAAA2JQAAfiUAAMUlAAAFJgAAFSYAABYmAAAXJgAAGCYAABkmAAAaJgAA GyYAABwmAAAdJgAAHiYAAB8mAAAgJgAAISYAACImAAAjJgAAbCYAAG4mAAC3JgAAuCYAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAduCYAALkmAAD0JgAA LycAAGonAAClJwAA3ScAABUoAABVKAAAjSgAAMUoAAABKQAAPSkAAHkpAAC1KQAA8SkAAPIpAAAZ KgAAGioAAGMqAACsKgAA9CoAADQrAAB7KwAAxCsAAAssAABTLAAAYCwAAGEsAACmLAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAAAAAAABA8AZ2QCJ78AAB14KAAAuikAAD8wAACj MAAA7jAAAKU6AADwOgAAPjsAAGc7AABoOwAAizsAAJ07AAAIPAAAHzwAADw8AABLPAAAUjwAAFU8 AABlPAAAZjwAAIc8AACmPAAAtTwAAPE8AAD0PAAA9jwAAAg9AAASPQAAFD0AACA9AAAoPQAAOj0A AD89AAD17uP17uP17tnPxbiuoa7FrriuuMWXjYN5jW9ljVuNWwAAAAAAAAAAAAAAAAAAAAAAABMB CIEESAEABWhmuvaGFmjTbF4AEwEIgQRIAQAFaGm69oYWaGVHFwATAQiBBEgBAAVoZbr2hhZoZUcX ABMBCIEESAEABWiAuvaGFmi2Y+8AEwEIgQRIAQAFaGW69oYWaLZj7wATAQiBBEgBAAVoZbr2hhZo 02xeABMBCIEESAEABWhouvaGFmhlRxcAGQEIgQRIAQAFaGW69oYVaAda1gAWaNNsXgATAQiBBEgB AAVoZLr2hhZo02xeABkBCIEESAEABWhjuvaGFWgHWtYAFmjTbF4AEwEIgQRIAQAFaGO69oYWaNNs XgATAQiBBEgBAAVoYrr2hhZo02xeABMBCIEESAEABWhiuvaGFmgHWtYAFBVo02xeABZoB1rWAG1I DARzSAwEAAwVaAda1gAWaAda1gAAFBVo02xeABZoB1rWAG1IHQRzSB0EIKYsAACnLAAAxSwAAMYs AAANLQAATy0AAJQtAADSLQAA0y0AABsuAABfLgAApS4AAO0uAAAxLwAAdi8AALcvAAD3LwAAPDAA AFMwAABUMAAAVTAAAFYwAABXMAAAWDAAAKEwAACjMAAA7DAAAO0wAADuMAAACjEAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAdCjEAAAsxAABUMQAAlTEA AN0xAAAkMgAAbDIAALMyAADaMgAA2zIAAPgyAAD5MgAAQjMAAIkzAADPMwAAFjQAACM0AAAkNAAA aDQAAK80AAD3NAAAQDUAAEw1AABNNQAAljUAAN01AAAhNgAAZjYAAIY2AACHNgAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAAAAAAABA8AZ2QCJ78AAB2HNgAAqDYAAKk2AADsNgAA LjcAAHU3AAC8NwAABDgAAEk4AACNOAAAuTgAALo4AAAAOQAARzkAAIk5AADQOQAAGDoAAF86AACi OgAAozoAAKQ6AAClOgAA7joAAPA6AAA5OwAAOjsAADs7AABoOwAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDwBnZAInvwAAG2g7AABpOwAAljsAAJk7AADh OwAAtwAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAABvAAAAAAAAAAAAAAAAJwAAAAAAAAAAAAAAAAAA AAAAAABHDwBDJAFFxoAAAAEAY7r2hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdk02xeAABHDwBDJAFFxoAAAAEAY7r2hgAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AGdkAie/AABHDwBDJAFFxoAAAAEAYrr2hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdkAie/AAAEPz0AAFc9AABnPQAAbz0AAHM9 AAB9PQAAgD0AAIY9AACRPQAAkj0AAJg9AACbPQAApT0AAKs9AACvPQAAxT0AANU9AADWPQAAED4A ABM+AAAyPgAAMz4AADQ+AAA1PgAAZT4AAHE+AACJPgAAvT4AAMQ+AAD16+Hr1+vNwM3Azeuz66mc kqmIfqlxaVzhT1zhAAAAAAAAAAAAAAAAAAAZAQiBBEgBAAVobbr2hhVoB1rWABZoZUcXABkBCIEE SAEABWhsuvaGFWgHWtYAFmhlRxcADwAIgRZo02xeABdoZUcXABkBCIEESAEABWhjuvaGFWgHWtYA FmjTbF4AEwEIgQRIAQAFaHS69oYWaLZj7wATAQiBBEgBAAVodLr2hhZoYSnDABMBCIEESAEABWh1 uvaGFmhhKcMAGQEIgQRIAQAFaGq69oYVaNNsXgAWaGVHFwATAQiBBEgBAAVoarr2hhZoZUcXABkB CIEESAEABWhnuvaGFWgHWtYAFmhlRxcAGQEIgQRIAQAFaGm69oYVaAda1gAWaGVHFwATAQiBBEgB AAVoabr2hhZoZUcXABMBCIEESAEABWhouvaGFmhlRxcAEwEIgQRIAQAFaGy69oYWaGVHFwATAQiB BEgBAAVoZ7r2hhZoZUcXABMBCIEESAEABWhmuvaGFmhlRxcAABzhOwAAND4AADU+AAC9PgAABz8A ALcAAAAAAAAAAAAAAABvAAAAAAAAAAAAAAAAJwAAAAAAAAAAAAAAACcAAAAAAAAAAAAAAAAAAAAA AAAARw8AQyQBRcaAAAABAGy69oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZGVHFwAARw8AQyQBRcaAAAABAGy69oYAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn ZAInvwAARw8AQyQBRcaAAAABAGO69oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZGVHFwAABMQ+AADKPgAA0D4AANg+AADdPwAA 4D8AAOY/AADsPwAA9D8AACdAAAA2QAAAQkAAAElAAABNQAAAUUAAAFhAAABoQAAAokAAAKNAAACl QAAANEcAAJZHAADkRwAAA04AAE5OAACZTgAA/VUAAEhWAACTVgAAJVoAACZaAAArWgAALloAADpa AABBWgAAqVoAALBaAAAwWwAANlsAAPXo9eje9ej16N7U3srAyrPK6N6soZasoZasoZasjIJ1gt51 a3VhEwEIgQRIAQAFaHG69oYWaIh0JQATAQiBBEgBAAVocLr2hhZoiHQlABkBCIEESAEABWhruvaG FWgHWtYAFmhlRxcAEwEIgQRIAQAFaGu69oYWaGVHFwATAQiBBEgBAAVoa7r2hhZoB1rWABQVaNNs XgAWaAda1gBtSB0Ec0gdBAAUFWjTbF4AFmgHWtYAbUgMBHNIDAQADBVoB1rWABZoB1rWAAAZAQiB BEgBAAVob7r2hhVo02xeABZoZUcXABMBCIEESAEABWh1uvaGFmhhKcMAEwEIgQRIAQAFaG+69oYW aGVHFwATAQiBBEgBAAVobrr2hhZoZUcXABMBCIEESAEABWhsuvaGFmhlRxcAGQEIgQRIAQAFaGy6 9oYVaAda1gAWaGVHFwATAQiBBEgBAAVobbr2hhZoZUcXAAAmBz8AAE4/AACWPwAA3T8AAKRAAACl QAAApkAAAKdAAAC2QAAAt0AAAP5AAAAIQQAACUEAACNBAAAkQQAAbUEAALJBAAD7QQAAPkIAAIJC AADIQgAAtwAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAAC3AAAAAAAAAAAAAAAAtwAAAAAAAAAAAAAA ALcAAAAAAAAAAAAAAACyAAAAAAAAAAAAAAAAsgAAAAAAAAAAAAAAALIAAAAAAAAAAAAAAACyAAAA AAAAAAAAAAAAsgAAAAAAAAAAAAAAALIAAAAAAAAAAAAAAACyAAAAAAAAAAAAAAAAsgAAAAAAAAAA AAAAALIAAAAAAAAAAAAAAACyAAAAAAAAAAAAAAAAsgAAAAAAAAAAAAAAALIAAAAAAAAAAAAAAACy AAAAAAAAAAAAAAAAsgAAAAAAAAAAAAAAALIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA8AZ2QC J78AAEcPAEMkAUXGgAAAAQBsuvaGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2RlRxcAABTIQgAAD0MAAFVDAABWQwAAn0MAAMZD AADHQwAAEEQAABFEAABURAAAmUQAAN9EAAAYRQAAXkUAAItFAADRRQAA/kUAAERGAABxRgAAt0YA AN1GAAADRwAABEcAAAxHAAANRwAAMEcAADFHAAA7RwAAPEcAAEVHAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAAAAAAAEDwBnZAInvwAAHUVHAABGRwAAR0cAAEhHAABJRwAASkcA AEtHAACURwAAlkcAAN9HAADgRwAA4UcAAOxHAADtRwAAK0gAACxIAABKSAAAS0gAAJNIAADbSAAA JEkAAG1JAAC2SQAAwUkAAMJJAAAJSgAANUoAADZKAAB8SgAAhkoAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAdhkoAAIdKAADKSgAAD0sAAFVLAACOSwAA 1EsAAAFMAABHTAAAdEwAALpMAADnTAAALU0AAFNNAAB5TQAAek0AAIJNAACDTQAAqk0AAKtNAAC1 TQAAtk0AAL9NAADATQAAy00AAMxNAAD8TQAA/U0AAP5NAAD/TQAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAAAAAAABA8AZ2QCJ78AAB3/TQAAAE4AAAFOAAACTgAAA04AAExOAABO TgAAl04AAJhOAACZTgAAtk4AALdOAAD8TgAAQU8AAIZPAADNTwAACVAAAApQAABPUAAAmFAAAMFQ AADCUAAAw1AAAAlRAABRUQAAmlEAAONRAAAsUgAAdVIAAL5SAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAAAAAAAEDwBnZAInvwAAHb5SAAAHUwAAUFMAAJlTAACaUwAAolMAAKNT AADJUwAAylMAANRTAADVUwAAHFQAACtUAAAsVAAAPVQAAD5UAACDVAAApFQAAKVUAACvVAAAsFQA APhUAAA9VQAAhVUAAM1VAAD3VQAA+FUAAPlVAAD6VQAA+1UAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAd+1UAAPxVAAD9VQAARlYAAEhWAACRVgAAklYA AJNWAAC0VgAAtVYAAPxWAABEVwAAg1cAAJFXAACSVwAA21cAABVYAABGWAAAfVgAALVYAADrWAAA I1kAACRZAAAlWQAALVkAAC5ZAABYWQAAWVkAAGNZAABkWQAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAAAAAAABA8AZ2QCJ78AAB1kWQAAiFkAAIlZAACTWQAAlFkAAN1ZAAAmWgAA J1oAAChaAABHWgAASFoAAI9aAADOWgAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAsgAAAAAAAAAAAAAA ALIAAAAAAAAAAAAAAABqAAAAAAAAAAAAAAAAagAAAAAAAAAAAAAAAGoAAAAAAAAAAAAAAABqAAAA AAAAAAAAAAAAAAAAAABHDwBDJAFFxoAAAAEAa7r2hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdkZUcXAABHDwBDJAFFxoAAAAEA a7r2hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAGdkAie/AAAEDwBnZAInvwAADM5aAAANWwAAG1sAABxbAABjWwAAnVsAAM5bAAAF XAAAPVwAAHNcAACrXAAArFwAAK1cAAC1XAAAtlwAAN5cAADfXAAA6VwAAOpcAAAOXQAAD10AABld AAC3AAAAAAAAAAAAAAAAtwAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAAC3AAAAAAAAAAAAAAAAtwAA AAAAAAAAAAAAALcAAAAAAAAAAAAAAAC3AAAAAAAAAAAAAAAAtwAAAAAAAAAAAAAAALcAAAAAAAAA AAAAAAC3AAAAAAAAAAAAAAAAtwAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAAC3AAAAAAAAAAAAAAAA twAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAAC3AAAAAAAAAAAAAAAAtwAAAAAAAAAAAAAAALcAAAAA AAAAAAAAAAC3AAAAAAAAAAAAAAAAtwAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAAAAAAAAAABHDwBD JAFFxoAAAAEAa7r2hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAGdkZUcXAAAVNlsAADxbAABDWwAAtlwAAMZcAADLXAAA0VwAANhc AAA9XQAAV10AAF5dAACtXQAArl0AAMVfAADcXwAA9F8AAPlfAAD/XwAABmAAAAxgAADjYAAALmEA AHlhAAClZQAAq2UAAMVlAADGZQAA2WUAAN5lAADfZQAA3mcAACloAAB0aAAAwm0AAOVtAAAmbgAA uG4AAAZvAAA2bwAA9eve9ev16971697X0MPrueu5w9Cuo9CL0IG5dG3QrqPQrqOuo9AAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAMFWgHWtYAFmiIdCUAABkBCIEESAEABWhyuvaGFWgHWtYAFmiIdCUA EwEIgQRIAQAFaHK69oYWaAda1gAvAAiBFWgHWtYAFmgHWtYAF2iIdCUAY0gBAGRoAAAAAGRoAAAA AGRocrr2hmdIBgAUFWjTbF4AFmgHWtYAbUgdBHNIHQQAFBVo02xeABZoB1rWAG1IDARzSAwEABMB CIEESAEABWhyuvaGFmiIdCUAGQEIgQRIAQAFaHG69oYVaAda1gAWaIh0JQAMFWgHWtYAFmgHWtYA AAwVaAda1gAWaGVHFwAAGQEIgQRIAQAFaGu69oYVaAda1gAWaGVHFwATAQiBBEgBAAVocbr2hhZo iHQlABMBCIEESAEABWhruvaGFmiIdCUAACYZXQAAGl0AAGRdAACtXQAArl0AAK9dAADJXQAAyl0A ABNeAABHXgAASF4AAEleAACEXgAAtwAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAAC3AAAAAAAAAAAA AAAAbwAAAAAAAAAAAAAAAGoAAAAAAAAAAAAAAABqAAAAAAAAAAAAAAAAagAAAAAAAAAAAAAAAGoA AAAAAAAAAAAAAABqAAAAAAAAAAAAAAAAagAAAAAAAAAAAAAAAGoAAAAAAAAAAAAAAABqAAAAAAAA AAAAAAAAAAAAAAAEDwBnZAInvwAARw8AQyQBRcaAAAABAGu69oYAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZAInvwAARw8AQyQB RcaAAAABAGu69oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAABnZGVHFwAADIReAACvXgAA8V4AADdfAAB8XwAAxV8AAAxgAAANYAAA DmAAACpgAAArYAAAdGAAALtgAADgYAAA4WAAAOJgAADjYAAALGEAAC5hAAB3YQAAeGEAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAAsgAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEcPAEMkAUXGgAAAAQBxuvaG AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAZ2SIdCUAAAQPAGdkAie/AAAUeGEAAHlhAACVYQAAlmEAANdhAAAXYgAAX2IAAKNiAADo YgAAK2MAAHFjAAC3YwAA/GMAAERkAABbZAAAXGQAAF1kAAB1ZAAAdmQAAL1kAAD7ZAAAPWUAAExl AABNZQAAZ2UAAGhlAACGZQAAh2UAAKRlAAClZQAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAAAAAAABA8AZ2QCJ78AAB2lZQAAxmUAAN9lAADgZQAA4WUAAPZlAAD3ZQAAPGYAAIJm AACeZgAAn2YAAKBmAACvZgAAsGYAAMtmAADMZgAADmcAAE9nAABQZwAAlmcAANpnAAC0AAAAAAAA AAAAAAAAtAAAAAAAAAAAAAAAAK8AAAAAAAAAAAAAAACvAAAAAAAAAAAAAAAArwAAAAAAAAAAAAAA AK8AAAAAAAAAAAAAAACvAAAAAAAAAAAAAAAArwAAAAAAAAAAAAAAAK8AAAAAAAAAAAAAAACvAAAA AAAAAAAAAAAArwAAAAAAAAAAAAAAAK8AAAAAAAAAAAAAAACvAAAAAAAAAAAAAAAArwAAAAAAAAAA AAAAAK8AAAAAAAAAAAAAAACvAAAAAAAAAAAAAAAArwAAAAAAAAAAAAAAAK8AAAAAAAAAAAAAAACv AAAAAAAAAAAAAAAArwAAAAAAAAAAAAAAAAAAAAAAAAAEDwBnZAInvwBLDwAKJgALRgQAQyQBRcaA AAABAHK69oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAABnZIh0JQAAFNpnAADbZwAA3GcAAN1nAADeZwAAJ2gAACloAAByaAAAc2gA AHRoAACRaAAAkmgAANdoAAD8aAAA/WgAAENpAACJaQAAvGkAAL1pAAAEagAAS2oAAGhqAABpagAA e2oAAHxqAADEagAAAmsAAANrAABJawAAeWsAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAAAAAAAAQPAGdkAie/AAAdeWsAAHprAAC/awAABWwAACNsAAAkbAAAaGwAALBsAADYbAAA 2WwAACBtAABmbQAAfm0AAH9tAACAbQAAk20AAJRtAACobQAAv20AAOJtAAD8bQAAI24AAC1uAAAu bgAASm4AAGduAABobgAAaW4AAGpuAABrbgAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAAAAAAABA8AZ2QCJ78AAB1rbgAAbG4AAG1uAAC2bgAAuG4AAAFvAAACbwAAA28AABxvAAAz bwAAS28AAHBvAAB/bwAAgG8AAJlvAACabwAAm28AAK5vAAC8bwAA128AAORvAADqbwAA628AAAVw AAAhcAAAInAAACNwAAAwcAAAP3AAAFpwAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAAAAAAAEDwBnZAInvwAAHTZvAAC/bwAA7m8AAONwAABVcQAAi3EAAPXq49jjAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQVaNNs XgAWaAda1gBtSAwEc0gMBAAMFWgHWtYAFmgHWtYAABQVaNNsXgAWaAda1gBtSBYEc0gWBAAUFWjT bF4AFmgHWtYAbUgTBHNIEwQFWnAAAGlwAABvcAAAcHAAAIpwAACLcAAAjHAAAJtwAACtcAAAw3AA AOBwAADtcAAA7nAAAPhwAAAAcQAAKXEAADFxAAAycQAAM3EAADRxAAA1cQAANnEAADdxAAA4cQAA OXEAADpxAAA7cQAAPHEAAD1xAAA+cQAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAAAAAAABA8AZ2QCJ78AAB0+cQAAh3EAAIlxAACKcQAAi3EAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAEDwBnZAInvwAABDIAMZBoATpwAie/AB+w0C8gsOA9IbAnBSKwJwUjkIkFJJBuBCWwAAAX sMQCGLDEAgyQxAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAhgIRABIAAQCcAA8ABAAAAAMAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARAAAQPH/AgBEAAwEAAAAAAAAAAAG AE4AbwByAG0AYQBsAAAAAgAAABwAQ0oYAF9IAQRhShgAbUgJBG5IEQRzSAkEdEgRBAAAAAAAAAAA AAAAAAAAAAAAAEQAQQDy/6EARAAMBQAAAAAAAAAAFgBEAGUAZgBhAHUAbAB0ACAAUABhAHIAYQBn AHIAYQBwAGgAIABGAG8AbgB0AAAAAABSAGkA8/+zAFIADAUAAAAAAAAAAAwAVABhAGIAbABlACAA TgBvAHIAbQBhAGwAAAAcABf2AwAANNYGAAEKA2wANNYGAAEFAwAAYfYDAAACAAsAAAAoAGsA9P/B ACgAAAUAAAAAAAAAAAcATgBvACAATABpAHMAdAAAAAIAAAAAAAAARABaQAEA8gBEAAwEAADQFtEA AAAKAFAAbABhAGkAbgAgAFQAZQB4AHQAAAACAA8AFABDShQAT0oEAFFKBABeSgQAYUoUAEgAmUAB AAIBSAAMBQAA02xeAAAADABCAGEAbABsAG8AbwBuACAAVABlAHgAdAAAAAIAEAAUAENKEABPSgUA UUoFAF5KBQBhShAAAAAAAItpAAALAADCAAAIAP////8RAAAABCABAP//AQCgepkAAAAAAAAgAAD/ /wIAoHqZAAAAAAAEIAAA//8DAKB6mQAAAAAAACABAP//BACgepkAAAAAAAQgAAD//wUAoHqZAAAA AAAAIAAA//8GAKB6mQAAAAAABCAAAP//BwCgepkAAAAAAAAgAQD//wgAoHqZAAAAAAAEIAAA//8J AKB6mQAAAAAAACAAAP//CgCgepkAAAAAAAQgAAD//wsAoHqZAAAAAAAAIAAA//8MAKB6mQAAAAAA BCAAAP//DQCgepkAAAAAAAAgAQD//w4AoHqZAAAAAAAEIAAA//8PAKB6mQAAAAAAACAAAP//EACg epkAAAAAAAQgAAD//xEAoHqZAAAAAAAAAAAAgQkAAKAPAAAaFgAAIh4AAG0eAACiKAAA7zIAAP49 AACVPwAATUYAAEdOAAAPVQAALVkAAChgAAC3ZgAAiGkAAItpAAAAABAAAAABAAEAAAACAAEAAAAD AAEAAAAEAAEAAAAFAAEAAAAGAAEAAAAHAIgAAAAIAAEAAAAJAAEAAAAKAAEAAAALAAoAAAAMAAEA AAANABsAAAAOAAEAAAAPAAEAAAAQAAAAAAAAAAAAAAAAAAEAAAACAAAAAwAAAEwAAACVAAAA3gAA ACcBAABwAQAAuQEAAAICAABLAgAAlAIAAN0CAADeAgAA3wIAABkDAABQAwAAUQMAAFoDAABbAwAA ogMAAOsDAAAxBAAAwAQAAGAFAABhBQAAdwUAAHgFAAC/BQAABwYAAE0GAABOBgAAYgYAAGMGAACk BgAAyAYAAMkGAAAOBwAAUAcAAJgHAADVBwAA1gcAAB8IAABnCAAAqQgAAOcIAADoCAAAIgkAACMJ AAA0CQAANQkAADYJAAA3CQAAggkAAMsJAADMCQAAzQkAABAKAAA7CgAAPAoAAH0KAACmCgAA6QoA ACkLAAByCwAAugsAAAAMAABDDAAAbwwAAHAMAACyDAAA+AwAAD4NAACBDQAAxw0AAA8OAABVDgAA mw4AAOIOAAAqDwAAOw8AADwPAAA9DwAAPg8AAD8PAABADwAAQQ8AAEIPAABDDwAARA8AAEUPAABG DwAARw8AAEgPAABJDwAASg8AAEsPAABMDwAATQ8AAE4PAABPDwAAUA8AAFEPAABSDwAAUw8AAFQP AABVDwAAVg8AAKEPAADqDwAA6w8AAOwPAAD+DwAA/w8AAEgQAACREAAA2hAAACMRAABsEQAAtREA AP4RAABHEgAAkBIAANkSAAAiEwAAaxMAALQTAAD9EwAARhQAAI8UAADYFAAAIRUAAGoVAACzFQAA tBUAALUVAAC2FQAAtxUAALgVAAC5FQAAuhUAALsVAAC8FQAAvRUAAL4VAAC/FQAAwBUAAMEVAADC FQAAwxUAAMQVAADFFQAAxhUAAMcVAADIFQAAyRUAAMoVAADLFQAAzBUAAM0VAADOFQAAzxUAANAV AAAbFgAAZBYAAGUWAABmFgAAdxYAAHgWAADBFgAACBcAAFEXAACaFwAA4hcAACsYAABuGAAAkxgA AJQYAADbGAAAJBkAAGoZAACwGQAA9RkAADwaAABLGgAATBoAAJQaAACVGgAA2BoAAB4bAAAfGwAA aBsAAJMbAABDHAAARBwAAEUcAABeHAAAXxwAAKYcAADvHAAANh0AAH4dAADFHQAABR4AABUeAAAW HgAAFx4AABgeAAAZHgAAGh4AABseAAAcHgAAHR4AAB4eAAAfHgAAIB4AACEeAAAiHgAAIx4AAG4e AAC3HgAAuB4AALkeAAD0HgAALx8AAGofAAClHwAA3R8AABUgAABVIAAAjSAAAMUgAAABIQAAPSEA AHkhAAC1IQAA8SEAAPIhAAAZIgAAGiIAAGMiAACsIgAA9CIAADQjAAB7IwAAxCMAAAskAABTJAAA YCQAAGEkAACmJAAApyQAAMUkAADGJAAADSUAAE8lAACUJQAA0iUAANMlAAAbJgAAXyYAAKUmAADt JgAAMScAAHYnAAC3JwAA9ycAADwoAABTKAAAVCgAAFUoAABWKAAAVygAAFgoAACjKAAA7CgAAO0o AADuKAAACikAAAspAABUKQAAlSkAAN0pAAAkKgAAbCoAALMqAADaKgAA2yoAAPgqAAD5KgAAQisA AIkrAADPKwAAFiwAACMsAAAkLAAAaCwAAK8sAAD3LAAAQC0AAEwtAABNLQAAli0AAN0tAAAhLgAA Zi4AAIYuAACHLgAAqC4AAKkuAADsLgAALi8AAHUvAAC8LwAABDAAAEkwAACNMAAAuTAAALowAAAA MQAARzEAAIkxAADQMQAAGDIAAF8yAACiMgAAozIAAKQyAAClMgAA8DIAADkzAAA6MwAAOzMAAGgz AABpMwAAljMAAJkzAADhMwAAvTYAAAc3AABONwAAljcAAN03AACkOAAApTgAAKY4AACnOAAAtjgA ALc4AAD+OAAACDkAAAk5AAAjOQAAJDkAAG05AACyOQAA+zkAAD46AACCOgAAyDoAAA87AABVOwAA VjsAAJ87AADGOwAAxzsAABA8AAARPAAAVDwAAJk8AADfPAAAGD0AAF49AACLPQAA0T0AAP49AABE PgAAcT4AALc+AADdPgAAAz8AAAQ/AAAMPwAADT8AADA/AAAxPwAAOz8AADw/AABFPwAARj8AAEc/ AABIPwAAST8AAEo/AABLPwAAlj8AAN8/AADgPwAA4T8AAOw/AADtPwAAK0AAACxAAABKQAAAS0AA AJNAAADbQAAAJEEAAG1BAAC2QQAAwUEAAMJBAAAJQgAANUIAADZCAAB8QgAAhkIAAIdCAADKQgAA D0MAAFVDAACOQwAA1EMAAAFEAABHRAAAdEQAALpEAADnRAAALUUAAFNFAAB5RQAAekUAAIJFAACD RQAAqkUAAKtFAAC1RQAAtkUAAL9FAADARQAAy0UAAMxFAAD8RQAA/UUAAP5FAAD/RQAAAEYAAAFG AAACRgAAA0YAAE5GAACXRgAAmEYAAJlGAAC2RgAAt0YAAPxGAABBRwAAhkcAAM1HAAAJSAAACkgA AE9IAACYSAAAwUgAAMJIAADDSAAACUkAAFFJAACaSQAA40kAACxKAAB1SgAAvkoAAAdLAABQSwAA mUsAAJpLAACiSwAAo0sAAMlLAADKSwAA1EsAANVLAAAcTAAAK0wAACxMAAA9TAAAPkwAAINMAACk TAAApUwAAK9MAACwTAAA+EwAAD1NAACFTQAAzU0AAPdNAAD4TQAA+U0AAPpNAAD7TQAA/E0AAP1N AABITgAAkU4AAJJOAACTTgAAtE4AALVOAAD8TgAARE8AAINPAACRTwAAkk8AANtPAAAVUAAARlAA AH1QAAC1UAAA61AAACNRAAAkUQAAJVEAAC1RAAAuUQAAWFEAAFlRAABjUQAAZFEAAIhRAACJUQAA k1EAAJRRAADdUQAAJlIAACdSAAAoUgAAR1IAAEhSAACPUgAAzlIAAA1TAAAbUwAAHFMAAGNTAACd UwAAzlMAAAVUAAA9VAAAc1QAAKtUAACsVAAArVQAALVUAAC2VAAA3lQAAN9UAADpVAAA6lQAAA5V AAAPVQAAGVUAABpVAABkVQAArVUAAK5VAACvVQAAyVUAAMpVAAATVgAAR1YAAEhWAABJVgAAhFYA AK9WAADxVgAAN1cAAHxXAADFVwAADFgAAA1YAAAOWAAAKlgAACtYAAB0WAAAu1gAAOBYAADhWAAA 4lgAAONYAAAuWQAAd1kAAHhZAAB5WQAAlVkAAJZZAADXWQAAF1oAAF9aAACjWgAA6FoAACtbAABx WwAAt1sAAPxbAABEXAAAW1wAAFxcAABdXAAAdVwAAHZcAAC9XAAA+1wAAD1dAABMXQAATV0AAGdd AABoXQAAhl0AAIddAACkXQAAxl0AAN9dAADgXQAA4V0AAPZdAAD3XQAAPF4AAIJeAACeXgAAn14A AKBeAACvXgAAsF4AAMteAADMXgAADl8AAE9fAABQXwAAll8AANpfAADbXwAA3F8AAN1fAADeXwAA KWAAAHJgAABzYAAAdGAAAJFgAACSYAAA12AAAPxgAAD9YAAAQ2EAAIlhAAC8YQAAvWEAAARiAABL YgAAaGIAAGliAAB7YgAAfGIAAMRiAAACYwAAA2MAAEljAAB5YwAAemMAAL9jAAAFZAAAI2QAACRk AABoZAAAsGQAANhkAADZZAAAIGUAAGZlAAB+ZQAAf2UAAIBlAACTZQAAlGUAAKhlAAC/ZQAA4mUA APxlAAAjZgAALWYAAC5mAABKZgAAZ2YAAGhmAABpZgAAamYAAGtmAABsZgAAbWYAALhmAAABZwAA AmcAAANnAAAcZwAAM2cAAEtnAABwZwAAf2cAAIBnAACZZwAAmmcAAJtnAACuZwAAvGcAANdnAADk ZwAA6mcAAOtnAAAFaAAAIWgAACJoAAAjaAAAMGgAAD9oAABaaAAAaWgAAG9oAABwaAAAimgAAIto AACMaAAAm2gAAK1oAADDaAAA4GgAAO1oAADuaAAA+GgAAABpAAApaQAAMWkAADJpAAAzaQAANGkA ADVpAAA2aQAAN2kAADhpAAA5aQAAOmkAADtpAAA8aQAAPWkAAD5pAACJaQAAimkAAI1pAAAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AwAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAACAAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAwAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAALuHAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAAAA AQAAAAIAAAADAAAATAAAAJUAAADeAAAAJwEAAHABAAC5AQAAAgIAAEsCAACUAgAA3QIAAN4CAADf AgAAGQMAAFADAABRAwAAWgMAAFsDAACiAwAA6wMAADEEAAB6BAAAwAQAAGAFAABhBQAAdwUAAHgF AAC/BQAABwYAAE0GAABOBgAAYgYAAGMGAACkBgAAyAYAAMkGAAAOBwAAUAcAAJgHAADVBwAA1gcA AB8IAABnCAAAqQgAAOcIAADoCAAAIgkAACMJAAA0CQAANQkAADYJAAA3CQAAgAkAAIIJAADLCQAA zAkAAM0JAAAQCgAAOwoAADwKAAB9CgAApgoAAOkKAAApCwAAcgsAALoLAAAADAAAQwwAAG8MAABw DAAAsgwAAPgMAAA+DQAAgQ0AAMcNAAAPDgAAVQ4AAJsOAADiDgAAKg8AADsPAAA8DwAAPQ8AAD4P AAA/DwAAQA8AAEEPAABCDwAAQw8AAEQPAABFDwAARg8AAEcPAABIDwAASQ8AAEoPAABLDwAATA8A AE0PAABODwAATw8AAFAPAABRDwAAUg8AAFMPAABUDwAAVQ8AAFYPAACfDwAAoQ8AAOoPAADrDwAA 7A8AAP4PAAD/DwAASBAAAJEQAADaEAAAIxEAAGwRAAC1EQAA/hEAAEcSAACQEgAA2RIAACITAABr EwAAtBMAAP0TAABGFAAAjxQAANgUAAAhFQAAahUAALMVAAC0FQAAtRUAALYVAAC3FQAAuBUAALkV AAC6FQAAuxUAALwVAAC9FQAAvhUAAL8VAADAFQAAwRUAAMIVAADDFQAAxBUAAMUVAADGFQAAxxUA AMgVAADJFQAAyhUAAMsVAADMFQAAzRUAAM4VAADPFQAA0BUAABkWAAAbFgAAZBYAAGUWAABmFgAA dxYAAHgWAADBFgAACBcAAFEXAACaFwAA4hcAACsYAABuGAAAkxgAAJQYAADbGAAAJBkAAGoZAACw GQAA9RkAADwaAABLGgAATBoAAJQaAACVGgAA2BoAAB4bAAAfGwAAaBsAAJMbAACUGwAAQxwAAEQc AABFHAAAXhwAAF8cAACmHAAA7xwAADYdAAB+HQAAxR0AAAUeAAAVHgAAFh4AABceAAAYHgAAGR4A ABoeAAAbHgAAHB4AAB0eAAAeHgAAHx4AACAeAAAhHgAAIh4AACMeAABsHgAAbh4AALceAAC4HgAA uR4AAPQeAAAvHwAAah8AAKUfAADdHwAAFSAAAFUgAACNIAAAxSAAAAEhAAA9IQAAeSEAALUhAADx IQAA8iEAABkiAAAaIgAAYyIAAKwiAAD0IgAANCMAAHsjAADEIwAACyQAAFMkAABgJAAAYSQAAKYk AACnJAAAxSQAAMYkAAANJQAATyUAAJQlAADSJQAA0yUAABsmAABfJgAApSYAAO0mAAAxJwAAdicA ALcnAAD3JwAAPCgAAFMoAABUKAAAVSgAAFYoAABXKAAAWCgAAKEoAACjKAAA7CgAAO0oAADuKAAA CikAAAspAABUKQAAlSkAAN0pAAAkKgAAbCoAALMqAADaKgAA2yoAAPgqAAD5KgAAQisAAIkrAADP KwAAFiwAACMsAAAkLAAAaCwAAK8sAAD3LAAAQC0AAEwtAABNLQAAli0AAN0tAAAhLgAAZi4AAIYu AACHLgAAqC4AAKkuAADsLgAALi8AAHUvAAC8LwAABDAAAEkwAACNMAAAuTAAALowAAAAMQAARzEA AIkxAADQMQAAGDIAAF8yAACiMgAAozIAAKQyAAClMgAA7jIAAPAyAAA5MwAAOjMAADszAABoMwAA aTMAAJYzAACZMwAA4TMAADQ2AAA1NgAAvTYAAAc3AABONwAAljcAAN03AACkOAAApTgAAKY4AACn OAAAtjgAALc4AAD+OAAACDkAAAk5AAAjOQAAJDkAAG05AACyOQAA+zkAAD46AACCOgAAyDoAAA87 AABVOwAAVjsAAJ87AADGOwAAxzsAABA8AAARPAAAVDwAAJk8AADfPAAAGD0AAF49AACLPQAA0T0A AP49AABEPgAAcT4AALc+AADdPgAAAz8AAAQ/AAAMPwAADT8AADA/AAAxPwAAOz8AADw/AABFPwAA Rj8AAEc/AABIPwAAST8AAEo/AABLPwAAlD8AAJY/AADfPwAA4D8AAOE/AADsPwAA7T8AACtAAAAs QAAASkAAAEtAAACTQAAA20AAACRBAABtQQAAtkEAAMFBAADCQQAACUIAADVCAAA2QgAAfEIAAIZC AACHQgAAykIAAA9DAABVQwAAjkMAANRDAAABRAAAR0QAAHREAAC6RAAA50QAAC1FAABTRQAAeUUA AHpFAACCRQAAg0UAAKpFAACrRQAAtUUAALZFAAC/RQAAwEUAAMtFAADMRQAA/EUAAP1FAAD+RQAA /0UAAABGAAABRgAAAkYAAANGAABMRgAATkYAAJdGAACYRgAAmUYAALZGAAC3RgAA/EYAAEFHAACG RwAAzUcAAAlIAAAKSAAAT0gAAJhIAADBSAAAwkgAAMNIAAAJSQAAUUkAAJpJAADjSQAALEoAAHVK AAC+SgAAB0sAAFBLAACZSwAAmksAAKJLAACjSwAAyUsAAMpLAADUSwAA1UsAABxMAAArTAAALEwA AD1MAAA+TAAAg0wAAKRMAAClTAAAr0wAALBMAAD4TAAAPU0AAIVNAADNTQAA900AAPhNAAD5TQAA +k0AAPtNAAD8TQAA/U0AAEZOAABITgAAkU4AAJJOAACTTgAAtE4AALVOAAD8TgAARE8AAINPAACR TwAAkk8AANtPAAAVUAAARlAAAH1QAAC1UAAA61AAACNRAAAkUQAAJVEAAC1RAAAuUQAAWFEAAFlR AABjUQAAZFEAAIhRAACJUQAAk1EAAJRRAADdUQAAJlIAACdSAAAoUgAAR1IAAEhSAACPUgAAzlIA AA1TAAAbUwAAHFMAAGNTAACdUwAAzlMAAAVUAAA9VAAAc1QAAKtUAACsVAAArVQAALVUAAC2VAAA 3lQAAN9UAADpVAAA6lQAAA5VAAAPVQAAGVUAABpVAABkVQAArVUAAK5VAACvVQAAyVUAAMpVAAAT VgAAR1YAAEhWAABJVgAAhFYAAK9WAADxVgAAN1cAAHxXAADFVwAADFgAAA1YAAAOWAAAKlgAACtY AAB0WAAAu1gAAOBYAADhWAAA4lgAAONYAAAsWQAALlkAAHdZAAB4WQAAeVkAAJVZAACWWQAA11kA ABdaAABfWgAAo1oAAOhaAAArWwAAcVsAALdbAAD8WwAARFwAAFtcAABcXAAAXVwAAHVcAAB2XAAA vVwAAPtcAAA9XQAATF0AAE1dAABnXQAAaF0AAIZdAACHXQAApF0AAKVdAADGXQAA310AAOBdAADh XQAA9l0AAPddAAA8XgAAgl4AAJ5eAACfXgAAoF4AAK9eAACwXgAAy14AAMxeAAAOXwAAT18AAFBf AACWXwAA2l8AANtfAADcXwAA3V8AAN5fAAAnYAAAKWAAAHJgAABzYAAAdGAAAJFgAACSYAAA12AA APxgAAD9YAAAQ2EAAIlhAAC8YQAAvWEAAARiAABLYgAAaGIAAGliAAB7YgAAfGIAAMRiAAACYwAA A2MAAEljAAB5YwAAemMAAL9jAAAFZAAAI2QAACRkAABoZAAAsGQAANhkAADZZAAAIGUAAGZlAAB+ ZQAAf2UAAIBlAACTZQAAlGUAAKhlAAC/ZQAA4mUAAPxlAAAjZgAALWYAAC5mAABKZgAAZ2YAAGhm AABpZgAAamYAAGtmAABsZgAAbWYAALZmAAC4ZgAAAWcAAAJnAAADZwAAHGcAADNnAABLZwAAcGcA AH9nAACAZwAAmWcAAJpnAACbZwAArmcAALxnAADXZwAA5GcAAOpnAADrZwAABWgAACFoAAAiaAAA I2gAADBoAAA/aAAAWmgAAGloAABvaAAAcGgAAIpoAACLaAAAjGgAAJtoAACtaAAAw2gAAOBoAADt aAAA7mgAAPhoAAAAaQAAKWkAADFpAAAyaQAAM2kAADRpAAA1aQAANmkAADdpAAA4aQAAOWkAADpp AAA7aQAAPGkAAD1pAAA+aQAAh2kAAIlpAACKaQAAjWkAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAyAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA ABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAIAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA EAGYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQ AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA ABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA EACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQ AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mIAEIA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgABCAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAD AAAATAAAAJUAAADeAAAAJwEAAHABAAC5AQAAAgIAAEsCAACUAgAA3QIAAN4CAADfAgAAGQMAAFAD AABRAwAAWgMAAFsDAACiAwAA6wMAADEEAAB6BAAAwAQAAGAFAABhBQAAdwUAAHgFAAC/BQAABwYA AE0GAABOBgAAYgYAAGMGAACkBgAAyAYAAMkGAAAOBwAAUAcAAJgHAADVBwAA1gcAAB8IAABnCAAA qQgAAOcIAADoCAAAIgkAACMJAAA0CQAANQkAADYJAAA3CQAAgAkAAIIJAADLCQAAzAkAAM0JAAAQ CgAAOwoAADwKAAB9CgAApgoAAOkKAAApCwAAcgsAALoLAAAADAAAQwwAAG8MAABwDAAAsgwAAPgM AAA+DQAAgQ0AAMcNAAAPDgAAVQ4AAJsOAADiDgAAKg8AADsPAAA8DwAAPQ8AAD4PAAA/DwAAQA8A AEEPAABCDwAAQw8AAEQPAABFDwAARg8AAEcPAABIDwAASQ8AAEoPAABLDwAATA8AAE0PAABODwAA Tw8AAFAPAABRDwAAUg8AAFMPAABUDwAAVQ8AAFYPAACfDwAAoQ8AAOoPAADrDwAA7A8AAP4PAAD/ DwAASBAAAJEQAADaEAAAIxEAAGwRAAC1EQAA/hEAAEcSAACQEgAA2RIAACITAABrEwAAtBMAAP0T AABGFAAAjxQAANgUAAAhFQAAahUAALMVAAC0FQAAtRUAALYVAAC3FQAAuBUAALkVAAC6FQAAuxUA ALwVAAC9FQAAvhUAAL8VAADAFQAAwRUAAMIVAADDFQAAxBUAAMUVAADGFQAAxxUAAMgVAADJFQAA yhUAAMsVAADMFQAAzRUAAM4VAADPFQAA0BUAABkWAAAbFgAAZBYAAGUWAABmFgAAdxYAAHgWAADB FgAACBcAAFEXAACaFwAA4hcAACsYAABuGAAAkxgAAJQYAADbGAAAJBkAAGoZAACwGQAA9RkAADwa AABLGgAATBoAAJQaAACVGgAA2BoAAB4bAAAfGwAAaBsAAJMbAACUGwAAQxwAAEQcAABFHAAAXhwA AF8cAACmHAAA7xwAADYdAAB+HQAAxR0AAAUeAAAVHgAAFh4AABceAAAYHgAAGR4AABoeAAAbHgAA HB4AAB0eAAAeHgAAHx4AACAeAAAhHgAAIh4AACMeAABsHgAAbh4AALceAAC4HgAAuR4AAPQeAAAv HwAAah8AAKUfAADdHwAAFSAAAFUgAACNIAAAxSAAAAEhAAA9IQAAeSEAALUhAADxIQAA8iEAABki AAAaIgAAYyIAAKwiAAD0IgAANCMAAHsjAADEIwAACyQAAFMkAABgJAAAYSQAAKYkAACnJAAAxSQA AMYkAAANJQAATyUAAJQlAADSJQAA0yUAABsmAABfJgAApSYAAO0mAAAxJwAAdicAALcnAAD3JwAA PCgAAFMoAABUKAAAVSgAAFYoAABXKAAAWCgAAKEoAACjKAAA7CgAAO0oAADuKAAACikAAAspAABU KQAAlSkAAN0pAAAkKgAAbCoAALMqAADaKgAA2yoAAPgqAAD5KgAAQisAAIkrAADPKwAAFiwAACMs AAAkLAAAaCwAAK8sAAD3LAAAQC0AAEwtAABNLQAAli0AAN0tAAAhLgAAZi4AAIYuAACHLgAAqC4A AKkuAADsLgAALi8AAHUvAAC8LwAABDAAAEkwAACNMAAAuTAAALowAAAAMQAARzEAAIkxAADQMQAA GDIAAF8yAACiMgAAozIAAKQyAAClMgAA7jIAAPAyAAA5MwAAOjMAADszAABoMwAAaTMAAJYzAACZ MwAA4TMAADQ2AAA1NgAAvTYAAAc3AABONwAAljcAAN03AACkOAAApTgAAKY4AACnOAAAtjgAALc4 AAD+OAAACDkAAAk5AAAjOQAAJDkAAG05AACyOQAA+zkAAD46AACCOgAAyDoAAA87AABVOwAAVjsA AJ87AADGOwAAxzsAABA8AAARPAAAVDwAAJk8AADfPAAAGD0AAF49AACLPQAA0T0AAP49AABEPgAA cT4AALc+AADdPgAAAz8AAAQ/AAAMPwAADT8AADA/AAAxPwAAOz8AADw/AABFPwAARj8AAEc/AABI PwAAST8AAEo/AABLPwAAlD8AAJY/AADfPwAA4D8AAOE/AADsPwAA7T8AACtAAAAsQAAASkAAAEtA AACTQAAA20AAACRBAABtQQAAtkEAAMFBAADCQQAACUIAADVCAAA2QgAAfEIAAIZCAACHQgAAykIA AA9DAABVQwAAjkMAANRDAAABRAAAR0QAAHREAAC6RAAA50QAAC1FAABTRQAAeUUAAHpFAACCRQAA g0UAAKpFAACrRQAAtUUAALZFAAC/RQAAwEUAAMtFAADMRQAA/EUAAP1FAAD+RQAA/0UAAABGAAAB RgAAAkYAAANGAABMRgAATkYAAJdGAACYRgAAmUYAALZGAAC3RgAA/EYAAEFHAACGRwAAzUcAAAlI AAAKSAAAT0gAAJhIAADBSAAAwkgAAMNIAAAJSQAAUUkAAJpJAADjSQAALEoAAHVKAAC+SgAAB0sA AFBLAACZSwAAmksAAKJLAACjSwAAyUsAAMpLAADUSwAA1UsAABxMAAArTAAALEwAAD1MAAA+TAAA g0wAAKRMAAClTAAAr0wAALBMAAD4TAAAPU0AAIVNAADNTQAA900AAPhNAAD5TQAA+k0AAPtNAAD8 TQAA/U0AAEZOAABITgAAkU4AAJJOAACTTgAAtE4AALVOAAD8TgAARE8AAINPAACRTwAAkk8AANtP AAAVUAAARlAAAH1QAAC1UAAA61AAACNRAAAkUQAAJVEAAC1RAAAuUQAAWFEAAFlRAABjUQAAZFEA AIhRAACJUQAAk1EAAJRRAADdUQAAJlIAACdSAAAoUgAAR1IAAEhSAACPUgAAzlIAAA1TAAAbUwAA HFMAAGNTAACdUwAAzlMAAAVUAAA9VAAAc1QAAKtUAACsVAAArVQAALVUAAC2VAAA3lQAAN9UAADp VAAA6lQAAA5VAAAPVQAAGVUAABpVAABkVQAArVUAAK5VAACvVQAAyVUAAMpVAAATVgAAR1YAAEhW AABJVgAAhFYAAK9WAADxVgAAN1cAAHxXAADFVwAADFgAAA1YAAAOWAAAKlgAACtYAAB0WAAAu1gA AOBYAADhWAAA4lgAAONYAAAsWQAALlkAAHdZAAB4WQAAeVkAAJVZAACWWQAA11kAABdaAABfWgAA o1oAAOhaAAArWwAAcVsAALdbAAD8WwAARFwAAFtcAABcXAAAXVwAAHVcAAB2XAAAvVwAAPtcAAA9 XQAATF0AAE1dAABnXQAAaF0AAIZdAACHXQAApF0AAKVdAADGXQAA310AAOBdAADhXQAA9l0AAPdd AAA8XgAAgl4AAJ5eAACfXgAAoF4AAK9eAACwXgAAy14AAMxeAAAOXwAAT18AAFBfAACWXwAA2l8A ANtfAADcXwAA3V8AAN5fAAAnYAAAKWAAAHJgAABzYAAAdGAAAJFgAACSYAAA12AAAPxgAAD9YAAA Q2EAAIlhAAC8YQAAvWEAAARiAABLYgAAaGIAAGliAAB7YgAAfGIAAMRiAAACYwAAA2MAAEljAAB5 YwAAemMAAL9jAAAFZAAAI2QAACRkAABoZAAAsGQAANhkAADZZAAAIGUAAGZlAAB+ZQAAf2UAAIBl AACTZQAAlGUAAKhlAAC/ZQAA4mUAAPxlAAAjZgAALWYAAC5mAABKZgAAZ2YAAGhmAABpZgAAamYA AGtmAABsZgAAbWYAALZmAAC4ZgAAAWcAAAJnAAADZwAAHGcAADNnAABLZwAAcGcAAH9nAACAZwAA mWcAAJpnAACbZwAArmcAALxnAADXZwAA5GcAAOpnAADrZwAABWgAACFoAAAiaAAAI2gAADBoAAA/ aAAAWmgAAGloAABvaAAAcGgAAIpoAACLaAAAjGgAAJtoAACtaAAAw2gAAOBoAADtaAAA7mgAAPho AAAAaQAAKWkAADFpAAAyaQAAM2kAADRpAAA1aQAANmkAADdpAAA4aQAAOWkAADppAAA7aQAAPGkA AD1pAAA+aQAAh2kAAIlpAACKaQAAjWkAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACQAJgAAyAPMAAAAAAAAACAAAAA gAAAAAAAAAAAgAGYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAACQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAkACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACQAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJABmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAACIAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAACQAZgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACQAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA kACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQ AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmIAEIA8wAAAA AAAAAIAAAACAAAAAAAAAAACQAJgABCAPMAEAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANIC mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAADSApgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgAAABgAAeCgAAD89AADEPgAANlsAADZv AACLcQAAOQAAAEUAAABKAAAATAAAAFYAAABeAAAAAAYAAHgNAADMEQAAPxcAAP4XAAC7HQAAwR4A AGgjAABDJAAAuCYAAKYsAAAKMQAAhzYAAGg7AADhOwAABz8AAMhCAABFRwAAhkoAAP9NAAC+UgAA +1UAAGRZAADOWgAAGV0AAIReAAB4YQAApWUAANpnAAB5awAAa24AAFpwAAA+cQAAi3EAADoAAAA8 AAAAPQAAAD4AAAA/AAAAQAAAAEEAAABCAAAAQwAAAEQAAABGAAAARwAAAEgAAABJAAAASwAAAE0A AABOAAAATwAAAFAAAABRAAAAUgAAAFMAAABUAAAAVQAAAFcAAABYAAAAWQAAAFoAAABbAAAAXAAA AF0AAABfAAAAYAAAAAAGAACLcQAAOwAAAA8AAPA4AAAAAAAG8BgAAAACBAAAAgAAAAEAAAABAAAA AQAAAAIAAABAAB7xEAAAAP//AAAAAP8AgICAAPcAABAADwAC8JIAAAAQAAjwCAAAAAEAAAABBAAA DwAD8DAAAAAPAATwKAAAAAEACfAQAAAAAAAAAAAAAAAAAAAAAAAAAAIACvAIAAAAAAQAAAUAAAAP AATwQgAAABIACvAIAAAAAQQAAAAOAABTAAvwHgAAAL8BAAAQAMsBAAAAAP8BAAAIAAQDCQAAAD8D AQABAAAAEfAEAAAAAQAAAP//FAAAAAYAfKAkABAAAQA0FWQCBgB9oCQAEQABALRvJQUGAGygJAAI AAEAhFwwBQYAbaAkABEAAQCEQCcFBgBuoCQACAABAHTIeggGAG+gJAARAAEA3LZjAgYAcKAkAAgA AQDk7l4CBgBxoCQAEQABAIS6HQUGAGqgJAAIAAIAHLwdBQYAcqAkABAAAQAsth0FBgBzoCQAEQAB APwZNAUGAGugJAAIAAIAJPUwBQYAdKAkAAgAAQCktDAFBgB1oCQAEQABAESSKwUGAHagJAAQAAEA lLcdBQYAd6AkABEAAQAEkisFBgB4oCQAEQABANRTKQUGAHmgJAAQAAEAbBwbBQYAeqAkABEAAQCU ESwFBgB7oCQAEQABAEQSLAVsAQAAbAEAACgRAAAoEQAA2yoAANsqAAA3VwAAN1cAAFheAABHZAAA R2QAAIpnAABCaAAAQmgAAF1oAABdaAAAZmgAAMZoAADGaAAA0WgAAI1pAAAAAAAAAgABAAAAAgAC AAAAAgADAAAAAgAEAAAAAgAFAAAAAgAGAAAAAgAHAAAAAgAIAAAAAQAJAAAAAgAKAAAAAgALAAAA AQAMAAAAAgANAAAAAgAPAAAAAgAOAAAAAgAQAAAAAgASAAAAAgARAAAAAgATAAAAAgBvAQAAbwEA ADgRAAA4EQAA6yoAAOsqAABqVwAAalcAAGJeAABOZAAATmQAAJhnAABZaAAAWWgAAGRoAABoaAAA aGgAAM9oAADZaAAA2WgAAI1pAAAAAAAAAQAAAAIAAAADAAAABAAAAAUAAAAGAAcABwAHAAgABwAJ AAcACgAHAAsABwAMAAcADQAHAA8ABwAOAAcAEAAHABIABwARAAcAEwAHAAcAAABCAAAAEwAAACqA dXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6c21hcnR0YWdzDoBjb3VudHJ5LXJlZ2lv bgCAOQAAAAQAAAAqgHVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOnNtYXJ0dGFncwWA U3RhdGUAgDgAAAAKAAAAKoB1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpzbWFydHRh Z3MEgENpdHkAgDkAAAAUAAAAKoB1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpzbWFy dHRhZ3MFgHBsYWNlAIA6AAAAEQAAACqAdXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6 c21hcnR0YWdzBoBTdHJlZXQAgDsAAAASAAAAKoB1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9m ZmljZTpzbWFydHRhZ3MHgGFkZHJlc3MAgD4AAAAMAAAAKoB1cm46c2NoZW1hcy1taWNyb3NvZnQt Y29tOm9mZmljZTpzbWFydHRhZ3MKgFBlcnNvbk5hbWUAgAwAAAGwUKMFAAAAABQAAAAAABMAAAAA ABIAAAAAABEAAAAAABIAAAAAABEAAAAAABIAAAAAABEAAAAAAAwAAAAAABQAAAAAAAoAAAAAAAwA AAAAABIAAAAAABEAAAAAABQAAAAAAAoAAAAAAAQAAAAAABQAAAAAAAoAAAAAAAQAAAAAAAAAAABC AAAASwAAAB4BAAAmAQAAZQEAAGsBAABDCAAATAgAADcJAABACQAAVg8AAF8PAADQFQAA2RUAABMb AAAVGwAAOh0AAD8dAACPHQAAlB0AANodAADfHQAACB4AABMeAAAjHgAALB4AAEIeAABLHgAAbh4A ALceAADtHgAA9B4AAB0fAAAvHwAAnh8AAKUfAADMHwAA3R8AAAEgAAAVIAAAOyAAAFUgAACxIAAA xSAAANogAAABIQAAByEAACshAAA2IQAAPSEAAEUhAAB5IQAAgCEAALUhAAAyIgAANyIAAHkiAAB8 IgAAYiYAAGomAAA/KAAARygAAFgoAABhKAAAdygAAIAoAACjKAAA7CgAAAQsAAAJLAAApTIAAK4y AADEMgAAzTIAAPAyAAArMwAALjMAADkzAABbOgAAXToAADQ/AAA6PwAASz8AAFQ/AABqPwAAcz8A AJY/AADfPwAAA0YAAAxGAAAiRgAAK0YAAE5GAABoRgAAaUYAAJdGAAD9TQAABk4AABxOAAAlTgAA SE4AAJFOAADFVgAAxlYAAM9WAADQVgAAB1cAAAhXAAARVwAAElcAAD9XAABAVwAATVcAAE5XAABX VwAAWFcAAJJXAACTVwAA21cAANxXAADjWAAA7FgAAAJZAAALWQAALlkAAHZZAAA/XgAARF4AANpe AADhXgAA/V4AAAFfAABrXwAAcV8AAH5fAACEXwAArF8AAL1fAADeXwAA518AAP1fAAAGYAAAKWAA AHFgAAC8YAAAwmAAAIpiAACQYgAAEWMAABhjAACIYwAAjmMAAJRjAACcYwAAtmMAAL1jAAAyZAAA N2QAAEdkAABOZAAAW2QAAGZkAADnZAAA7WQAAPlkAAADZQAATWUAAFFlAACeZQAAp2UAAMplAADN ZQAAz2UAANhlAADlZQAA/GUAAP9lAAAjZgAAbWYAAHZmAACMZgAAlWYAALhmAAABZwAANmcAAEtn AABOZwAAb2cAAHNnAAB/ZwAAg2cAAJlnAACeZwAArmcAALFnAAC8ZwAAv2cAANdnAADaZwAA5GcA AOdnAADqZwAA42gAAOxoAAA+aQAAR2kAAI1pAAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAH AAUABwAFAAcABQAHAAUABwAFAAcABQAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHAAUABwAcAAcA HAAHABwABwAFAAcABQAHABwABwAcAAcAHAAHABwABwAFAAcAHAAHABwABwAFAAcABQAHABwABwAc AAcABQAHABsABwAbAAcAGwAHABsABwAbAAcAGwAHABsABwAbAAcAGwAHABwABwAcAAcABQAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcABQAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHAAUABwAFAAcAHAAHABwABwAFAAcA BQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcAHAAHABwABwAAAAAATAAAAJQAAACV AAAA3QAAACsDAABPAwAApQMAALADAADuAwAA8gMAAMMEAADIBAAACgYAABIGAACnBgAAsQYAAFMH AABaBwAAmwcAAKQHAAAiCAAAJQgAAGoIAABuCAAArAgAALQIAAATCgAAGwoAAOwKAAD3CgAALAsA ADULAAB1CwAAdwsAAL0LAADECwAAAwwAAAYMAABGDAAATwwAAPsMAAAEDQAAQQ0AAEkNAACEDQAA kQ0AABIOAAAVDgAAWA4AAF8OAACeDgAAoQ4AAOUOAADnDgAALQ8AADEPAABWDwAAZw8AAJkQAACg EAAA4hAAAO4QAAArEQAAMhEAAHQRAACAEQAABhIAAA8SAABPEgAAVRIAAJgSAACgEgAA4RIAAO0S AAAqEwAAMhMAAOAUAADsFAAAKRUAADcVAADQFQAA4RUAAMQWAADIFgAACxcAABAXAABUFwAAVxcA AOUXAADyFwAAlxgAAJ0YAADhGAAA4xgAACoZAAAtGQAAQhoAAEkaAABPGgAAXBoAAJgaAACoGgAA IhsAACgbAACpHAAAqxwAADkdAABUHQAAgR0AAIYdAADIHQAAyx0AAAgeAAATHgAAbh4AALYeAADs HgAA8x4AABwfAAAuHwAAVh8AAGofAACRHwAApB8AAMwfAADcHwAAACAAABQgAAA4IAAAVCAAAHgg AACMIAAAsCAAAMQgAADZIAAAACEAAAYhAAA8IQAAQiEAAHghAAB+IQAAtCEAAGYiAABuIgAAryIA AMUiAAD3IgAA+iIAADcjAABBIwAAfiMAAIgjAADHIwAAyiMAAA4kAAASJAAAViQAAFkkAACqJAAA sSQAABAlAAAZJQAAUiUAAFolAACXJQAAmyUAAGImAABqJgAAqCYAALAmAAA0JwAAOicAAHknAAB9 JwAAuicAAMMnAAD6JwAABCgAAD8oAABHKAAAoygAAOsoAADxKAAA/SgAAJgpAACpKQAA4CkAAOMp AAAnKgAALyoAALYqAAC5KgAA3ioAAOUqAABFKwAARysAAIwrAACOKwAA0isAANcrAAAZLAAAIiwA AGssAABxLAAAsiwAANosAAD6LAAA/ywAAEMtAABKLQAA4C0AAOItAAAkLgAAKi4AAGkuAABxLgAA ii4AAJYuAADvLgAA+C4AADEvAAA7LwAAeC8AAIIvAAC/LwAAyS8AAAcwAAALMAAATDAAAFIwAACQ MAAAljAAAAMxAAAKMQAASjEAAE0xAACMMQAAkjEAABsyAAAlMgAA8DIAADgzAAA+MwAASDMAAOQz AADtMwAAwDYAAMM2AAAKNwAAEDcAAJk3AACjNwAAATkAAAY5AAAMOQAAFTkAAHA5AAB2OQAAtTkA ALw5AABBOgAARzoAAIU6AACKOgAAyzoAANg6AAASOwAAFjsAAKI7AACoOwAAlj8AAN4/AAAvQAAA NUAAAJZAAACfQAAA3kAAAOBAAAAnQQAAK0EAAHBBAABzQQAAuUEAAL9BAAAMQgAAFUIAAH9CAACE QgAA0kUAAPtFAABORgAAlkYAAJxGAACkRgAA/0YAAAlHAABERwAATUcAANBHAADURwAAUkgAAFdI AACbSAAAnUgAANtLAADrSwAAIkwAACRMAACJTAAAo0wAALZMAADkTAAA/kwAAANNAACLTQAAj00A ANNNAADZTQAASE4AAJBOAACWTgAAok4AAP9OAAADTwAAR08AAEpPAADeTwAA408AAGpRAAB6UQAA fFEAAIdRAADjUQAA7VEAACtSAAA0UgAAklIAAJZSAADRUgAA1FIAAGZTAABrUwAA8FQAAABVAAAC VQAADVUAAGpVAAB0VQAAslUAALpVAAAWVgAAGFYAAHdWAACDVgAA11YAAONWAAAZVwAAIlcAAF9X AABqVwAApFcAALNXAADtVwAA+VcAAHdYAAB6WAAAvlgAAMBYAAAuWQAAdlkAANpZAADoWQAAGloA ACJaAABiWgAAdFoAAKZaAACuWgAAulsAAMhbAAD/WwAABVwAAEdcAABKXAAAQF0AAEpdAABQXQAA WV0AAGtdAABxXQAAil0AAJJdAAA3XgAAO14AAIVeAACOXgAAs14AAL9eAAApYAAAcWAAAHdgAACF YAAAUWEAAFRhAADlZQAA+2UAAP9lAAAiZgAAuGYAAABnAAA2ZwAASmcAAE5nAABvZwAAc2cAAH5n AACDZwAAmGcAAJ5nAACtZwAAsWcAALtnAAC/ZwAA1mcAANpnAADjZwAA52cAAOlnAAC5aAAAv2gA AI1pAAAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoA BwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAH ADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcA OgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6 AAcAOgAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUA BwAFAAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAH ADoABwA6AAcAOgAHADoABwA6AAcAOgAHAAUABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcA OgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6 AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHAAUABwA6AAcAOgAHADoABwA6AAcAOgAHADoA BwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHAAUABwA6AAcAOgAHADoABwA6AAcAOgAH ADoABwA6AAcAOgAHADoABwAFAAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcA OgAHADoABwA6AAcAOgAHAAUABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6 AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoA BwAFAAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAH ADoABwAFAAcAOgAHADoABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcA BQAHAAUABwA6AAcAAAAAAChSAABLUgAAxVcAAA5YAADGXQAA4V0AAFVpAACKaQAAjWkAAAcABQAH AAUABwAFAAcABQAHAAAAAACNaQAABwAEAHZ9gFjG4ALB/w//D/8P/w//D/8P/w//D/8PEACuMUJb mDFmWf8P/w//D/8P/w//D/8P/w//DxAAHw2NZbCUsCn/D/8P/w//D/8P/w//D/8P/w8QAJQsRnoY FbC5/w//D/8P/w//D/8P/w//D/8PEAABAAAAFxAAAAAAAAAAAAAAaAEAAAAAAAAVGAAAD4TQAhGE mP4VxgUAAdACBl6E0AJghJj+T0oGAFFKBgBvKACHaAAAAACISAAAAQCn8AEAAAAXkAAAAAAAAAAA AABoAQAAAAAAABkYAAAPhKAFEYSY/hXGBQABoAUGXoSgBWCEmP5PSgQAUUoEAF5KBABvKACHaAAA AACISAAAAQBvAAEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAPhHAIEYSY/hXGBQABcAgGXoRw CGCEmP5PSgYAUUoGAG8oAIdoAAAAAIhIAAABAKfwAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAFRgA AA+EQAsRhJj+FcYFAAFACwZehEALYISY/k9KAQBRSgEAbygAh2gAAAAAiEgAAAEAt/ABAAAAF5AA AAAAAAAAAAAAaAEAAAAAAAAZGAAAD4QQDhGEmP4VxgUAARAOBl6EEA5ghJj+T0oEAFFKBABeSgQA bygAh2gAAAAAiEgAAAEAbwABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAVGAAAD4TgEBGEmP4VxgUA AeAQBl6E4BBghJj+T0oGAFFKBgBvKACHaAAAAACISAAAAQCn8AEAAAAXkAAAAAAAAAAAAABoAQAA AAAAABUYAAAPhLATEYSY/hXGBQABsBMGXoSwE2CEmP5PSgEAUUoBAG8oAIdoAAAAAIhIAAABALfw AQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAGRgAAA+EgBYRhJj+FcYFAAGAFgZehIAWYISY/k9KBABR SgQAXkoEAG8oAIdoAAAAAIhIAAABAG8AAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+EUBkR hJj+FcYFAAFQGQZehFAZYISY/k9KBgBRSgYAbygAh2gAAAAAiEgAAAEAp/AAAAAAFwAAAAAAAAAA AAAAAAAAAAAAAAATGAAAD4TQAhGEmP4VxgUAAdACBl6E0AJghJj+T0oBAFBKAwBRSgEAXkoEAG8o AAEAt/ABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAZGAAAD4SgBRGEmP4VxgUAAaAFBl6EoAVghJj+ T0oEAFFKBABeSgQAbygAh2gAAAAAiEgAAAEAbwABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAVGAAA D4RwCBGEmP4VxgUAAXAIBl6EcAhghJj+T0oGAFFKBgBvKACHaAAAAACISAAAAQCn8AEAAAAXgAAA AAAAAAAAAAAAAAAAAAAAABUYAAAPhEALEYSY/hXGBQABQAsGXoRAC2CEmP5PSgEAUUoBAG8oAIdo AAAAAIhIAAABALfwAQAAABeAAAAAAAAAAAAAAAAAAAAAAAAAGRgAAA+EEA4RhJj+FcYFAAEQDgZe hBAOYISY/k9KBABRSgQAXkoEAG8oAIdoAAAAAIhIAAABAG8AAQAAABeAAAAAAAAAAAAAAAAAAAAA AAAAFRgAAA+E4BARhJj+FcYFAAHgEAZehOAQYISY/k9KBgBRSgYAbygAh2gAAAAAiEgAAAEAp/AB AAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4SwExGEmP4VxgUAAbATBl6EsBNghJj+T0oBAFFK AQBvKACHaAAAAACISAAAAQC38AEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAABkYAAAPhIAWEYSY/hXG BQABgBYGXoSAFmCEmP5PSgQAUUoEAF5KBABvKACHaAAAAACISAAAAQBvAAEAAAAXgAAAAAAAAAAA AAAAAAAAAAAAABUYAAAPhFAZEYSY/hXGBQABUBkGXoRQGWCEmP5PSgYAUUoGAG8oAIdoAAAAAIhI AAABAKfwAQAAABcQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+E0AIRhJj+FcYFAAHQAgZehNACYISY /k9KBgBRSgYAbygAh2gAAAAAiEgAAAEAp/ABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAZGAAAD4Sg BRGEmP4VxgUAAaAFBl6EoAVghJj+T0oEAFFKBABeSgQAbygAh2gAAAAAiEgAAAEAbwABAAAAF5AA AAAAAAAAAAAAaAEAAAAAAAAVGAAAD4RwCBGEmP4VxgUAAXAIBl6EcAhghJj+T0oGAFFKBgBvKACH aAAAAACISAAAAQCn8AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAPhEALEYSY/hXGBQABQAsG XoRAC2CEmP5PSgEAUUoBAG8oAIdoAAAAAIhIAAABALfwAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAA GRgAAA+EEA4RhJj+FcYFAAEQDgZehBAOYISY/k9KBABRSgQAXkoEAG8oAIdoAAAAAIhIAAABAG8A AQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+E4BARhJj+FcYFAAHgEAZehOAQYISY/k9KBgBR SgYAbygAh2gAAAAAiEgAAAEAp/ABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAVGAAAD4SwExGEmP4V xgUAAbATBl6EsBNghJj+T0oBAFFKAQBvKACHaAAAAACISAAAAQC38AEAAAAXkAAAAAAAAAAAAABo AQAAAAAAABkYAAAPhIAWEYSY/hXGBQABgBYGXoSAFmCEmP5PSgQAUUoEAF5KBABvKACHaAAAAACI SAAAAQBvAAEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAPhFAZEYSY/hXGBQABUBkGXoRQGWCE mP5PSgYAUUoGAG8oAIdoAAAAAIhIAAABAKfwAQAAABcQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+E aAERhJj+FcYFAAFoAQZehGgBYISY/k9KBgBRSgYAbygAh2gAAAAAiEgAAAEAp/ABAAAAF5AAAAAA AAAAAAAAaAEAAAAAAAAZGAAAD4Q4BBGEmP4VxgUAATgEBl6EOARghJj+T0oEAFFKBABeSgQAbygA h2gAAAAAiEgAAAEAbwABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAVGAAAD4QIBxGEmP4VxgUAAQgH Bl6ECAdghJj+T0oGAFFKBgBvKACHaAAAAACISAAAAQCn8AEAAAAXkAAAAAAAAAAAAABoAQAAAAAA ABUYAAAPhNgJEYSY/hXGBQAB2AkGXoTYCWCEmP5PSgEAUUoBAG8oAIdoAAAAAIhIAAABALfwAQAA ABeQAAAAAAAAAAAAAGgBAAAAAAAAGRgAAA+EqAwRhJj+FcYFAAGoDAZehKgMYISY/k9KBABRSgQA XkoEAG8oAIdoAAAAAIhIAAABAG8AAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+EeA8RhJj+ FcYFAAF4DwZehHgPYISY/k9KBgBRSgYAbygAh2gAAAAAiEgAAAEAp/ABAAAAF5AAAAAAAAAAAAAA aAEAAAAAAAAVGAAAD4RIEhGEmP4VxgUAAUgSBl6ESBJghJj+T0oBAFFKAQBvKACHaAAAAACISAAA AQC38AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABkYAAAPhBgVEYSY/hXGBQABGBUGXoQYFWCEmP5P SgQAUUoEAF5KBABvKACHaAAAAACISAAAAQBvAAEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAP hOgXEYSY/hXGBQAB6BcGXoToF2CEmP5PSgYAUUoGAG8oAIdoAAAAAIhIAAABAKfwBAAAAJQsRnoA AAAAAAAAAAAAAAB2fYBYAAAAAAAAAAAAAAAAHw2NZQAAAAAAAAAAAAAAAK4xQlsAAAAAAAAAAAAA AAD///////////////////////8EAAAAAAAAAAAAAAD//wQAAAASAAUACQQDAAkEBQAJBAEACQQD AAkEBQAJBAEACQQDAAkEBQAJBBIApFYa2QMACQQFAAkEAQAJBAMACQQFAAkEAQAJBAMACQQFAAkE EgAFAAkEAwAJBAUACQQBAAkEAwAJBAUACQQBAAkEAwAJBAUACQQSAAUACQQDAAkEBQAJBAEACQQD AAkEBQAJBAEACQQDAAkEBQAJBE0GAAAEAAAACAAAAOUAAAAAAAAATAYAAFsUAACVIwAAPQQBAKMN AQAELQEAEC4BABMvAQApPgEAe0QBAHBSAQDrZAEAxQ4CAGdgAgAFYQIAHWQCAFZ2AgAsdwIAl3oC AC08AwC7SQMAzFEDACh1AwD6fAMAECAEAIswBACjdgQA6HgEAOISBQCrFQUAASoFAPw7BQBsawUA twMGACAKBgC3DwYAiRsGAPIiBgC6OAYARkIGADZoBgAaawYAcnAGAEYIBwAeFwcAfRwHAL4+BwDK CwgAvyMIAEM7CACnVggA92AIAMxnCAA0awgAJgQJAFIRCQC5IAkAczIJAAM0CQALNQkAlUYJAB4M CgDEEQoA7CoKAGA2CgA4UQoA8VYKAD1aCgBBXwoAGWAKAHRiCgAgZwoA3w4LAFUQCwB8EwsAxCgL ADMqCwD9NgsAMjgLANFACwAYQgsAD0cLACphCwBGYgsA7XcLAC0dDAD+dAwAVwANALswDQCIRg0A vlsNAFRsDQCCbQ0AbQEOAHksDgB9LQ4AXXAOAKN9DgAJKQ8AcTsPAMAPEAAPFBAAeRwQADsqEACx OBAAfVUQADFdEADTehAAKQgRAEYgEQAFNBEAHU0RAORbEQC/bxEAzTESADx9EgC4fhIABT0TABxG EwDmSRMAHGATAHolFADyLRQALTEUAJgyFAC+VhQAblwUAORnFADKcxQAS3QUANl2FAAFBBUArRIV ACIkFQAMLRUAVzAVAA85FQBcSBUAuV0VACRhFQCFbRUAb3gVAHJ6FQC4DBYAnzQWANdKFgDCSxYA zgEXAN0MFwBGFBcAkiYXAPQpFwAPKxcAojwXAGVHFwCtSRcAXU8XAOt1FwD7AhgAGgkYAGgMGABJ IRgACS4YAEk+GAAVUBgAPAgZAMEWGQD/GxkAMC4ZAI9IGQC4UhkA1HYZAFB3GQDoexkAO30ZAEwD GgDbbxoAnXMaAEQoGwBXLRsAhzQbAFhcGwBJAhwA9W8cAMYFHQB4GB0AXxodAE0fHQAzSR0AIFMd AKgYHgARKB4AVmweAPUEHwDWDh8AIEcfAINaHwAIbB8Ax20fAH9CIADhSSAAEAohADUQIQD0IyEA DS0hAE1KIQAABSIAgSciAKxkIgCmciIA/Q0jAMQSIwBHPiMA6lwjAPBiIwA5ZiMA9xkkAJkcJADW PCQAmz8kAIVdJABDbiQALX0kAJoHJQDyPyUAi0clAHtiJQBzZCUAiHQlAPV2JQA0AiYA2AsmAFgh JgDmLSYAmi8mANU9JgAySCYAsEwmACtRJgAEXyYAPGYmAD1tJgC6ACcAMAgnAKYJJwBPDCcAXx0n ANhtJwCEMygAiVEoAG0PKQDtJSkAvEwpADxoKQCAeikA8gkqAHcfKgDlbCoAnm4qAKcMKwD5MisA kTYrAJpCKwA9QysAQFErAMpZKwDnGywAMS4sACdVLADzcSwApQ0tALE9LQAKSS0AAVUtAOF8LQCf AS4AsQEuAK8LLgCHIi4A8EYuADFKLgBmdC4AI3UuAIAELwCABi8ADAsvALE5LwCiSC8AKFovAApf LwB6ZS8AfnkvAFYJMAD/HDAAPSkwAPAyMAALXTAAQF0wADBgMABYaTAAq3AwAA8QMQBfITEAPzQx ACNkMQD5BzIAIzsyAB5MMgB2TjIAN3QyABh3MgDbOjMAjk8zANRRMwBTWTMACGQzANlnMwABIjQA 3Tc0AFc6NADtQzQAT200AP1zNAC0BTUAZws1ANUWNQCgHzUAXiE1AJduNQA2eDUAJQU2ANwXNgC8 JDYAJDI2AMI0NgCzPTYADFE2AOVpNgBNCzcALgw3ALQRNwDCKjcALFM3AP5mNwCDcjcAgwM4ADkF OACODDgAdBA4AJkgOADIJjgARis4AAxTOADlVjgAmgU5ALlFOQC1aDkAc245AF4EOgDMDDoA4Sw6 AOtMOgAxTzoAtFY6AHJXOgDLezoAMwo7ANcgOwDWIjsARzo7AF9IOwDpaDsAtgg8ADo5PAAePDwA Gkc8AAlPPADwajwA5Hs8AMR8PAANAz0AQiE9AMsjPQBkOz0AzVI9ABlyPQB1cj0ADX89ABsUPgAk Gj4AiVs+AENtPwBeej8AGAFAAFoDQABzB0AAXxZAAAtRQAC1UUAAO2dAAHBzQAA8e0AALwlBABEs QQChWEEAwRlCAGwlQgCcJUIAIyBDAKRFQwCZVkMAEwtEAIMlRAAkUUQAyV5EAEN4RAAdVUUA8lVF AI5zRQBhdUUAVyNGAFwvRgA8M0YAByFHABtERwBjS0cAOHBHAIV6RwAUfEcA7RtIAABFSACBSUgA rVtIAOMISQDiCUkApRhJAOwfSQCcMkkAZUpJANVgSQBJDEoAfhxKAEEdSgBrOUoAAENKAKdWSgDV VkoA92NKAGkFSwB6LksAbDBLAKE3SwCSPEsAwjxLANxeSwDDa0sAJHVLAJB3SwBaJ0wAHklMAGMM TQC2JU0AQzJNAFQ8TQDPRU0Am01NABBPTQDCXU0A2G9NAPdyTQA+f00AMRlOAOkeTgDeH04AcVBO APRqTgCEbE4A7iFPAFwuTwCTVE8AiGtPACV2TwDZeE8AchFQAFs9UAA0T1AAzAJRAJxCUQDVQ1EA l11RAItqUQBJb1EA3wxSAJQlUgBmUFIA1gJTAH8PUwBHFlMA/j1TALxAUwAdTFMA2m5TAOMTVADh N1QAikZUAMZTVABaVVQAG2lUALF9VADdA1UAfgdVAKFEVQBlTVUAPWFVAG9oVQBKDFYA9Q9WAFoX VgAMG1YA6x5WALMuVgDuOVYA/zxWAIBQVgAiV1YA1HxWAHoNVwDaIVcA5DNXAOZLVwBMUlcAGVVX ALNbVwA5ZFcAIGhXAO5qVwBWeVcArytYAARjWABOdFgAun9YABAMWQD3KFkAu2RZAF10WQCfEFoA XRJaAJVPWgDPVVoA5gBbAOgEWwBhClsAmi9bAB8wWwABPFsAMktbALdTWwCIbFsASm9bAG12WwC+ BlwAOg1cAEsQXAAjKVwACTZcACA6XAAUPFwAKz5cAGFEXAA/SVwAH1BcAC1VXADwWFwAwGBcANho XADCflwAHhldANYfXQCPVl0AjVZeAABoXgDTbF4AGHleAHcKXwD1EF8ArhhfAK0cXwCWSV8AwlRf AF5eXwBrF2AAw1xgAGMNYQA1J2EAzEZhAKNWYQAGb2EAQXRhADQPYgD4FGIAVzZiAEo/YgCFfGIA zAtjAJ4tYwDuNWMAVFBjAMJiYwBUc2MA0AhkAPsPZADBF2QAHDRkAFU0ZAB1PGQAn0JkAOdEZABl CWUAgxNlAFNXZQAMCmYADDdmADVBZgBGRmYAM3hmADsJZwDTKmcAxVdnABxrZwA8bGcAmxZoAJo1 aAC1PmgAeT9oAC9GaAAkaWgAbXZoAIkLaQCyTWkATyFqALwoagBjM2oAXzlqAEc/agBnS2oAyltq ADxeagDffWoATw1rAC0XawDzRWsAmUlrAEhPawBZVmsAK3xrAMQCbAAYBWwAbxZsADFGbADYUmwA LVZsAPxXbACXXGwAhx1tAHg7bQCXVG0AiFVtAIx0bQCZUm4APVxuAKthbgAGbW4A/gFvABcabwAw KW8AVDZvAIU+bwDDAHAA3wVwABEucAD3YnAAnQtxAKcMcQCpHXEAsg5yAHY4cgAnQnIAMV1yAA0R cwB/EXMADRhzAGIrcwDkPXMArVBzAPtVcwAsbHMAax50AM0xdAA1YHQA3Wh0AEV6dADFBXUAuR11 ACwtdQDfXnUAJ3x1ANUZdgA2KHYAT0Z2AFNRdgCjXHYAtV52AA1idgDhc3YA3H52ABETdwCtFXcA bRh3APgodwAeL3cAVTB3AOFYdwDud3cAhnt3APQUeACDQ3gA+kN4ADdNeAAHU3gAdVd4AOBoeAAB dXgA0Ap5AHgQeQDBEnkA8mF5AJRjeQBeBXoA/xl6AAocegAhMnoAyTd6ALM5egCqUHoA3HR6AIAD ewBKC3sAHRp7AAAzewDhO3sAO0N7AI96ewCRGnwA9x18APoffABPP3wAGEt8AJhOfABrc3wAeRd9 AM8bfQDxMn0A00Z9ABhOfQCfU34A0GB+AERkfgD2fn4AcSd/AAYxfwCxQX8A83x/ABQ7gABuYYAA VmiAAE1qgADdboAAt3KAAK12gABhd4AALnuAADN/gAAaDoEAHhOBABMfgQBUH4EAoimBAIswgQAk OoEAtlSBAEJwgQBOcYEAgXyBAK8AggDcBIIApwuCADYcggD/KIIAui6CAIE2ggCaR4IAFluCAN9f ggCEE4MAEBmDAD5AgwAXQYMA4EGDAN1KgwCEZ4MAFwKEAJwMhADVL4QAgz+EAD9RhACsAIUABgGF ANgBhQCaDYUA6B6FAJsfhQAsMYUAmUOFALtZhQBCZ4UAyW2FALRvhQC5b4UAziOGAJs5hgBLSIYA rRSHAMA0hwDRQYcAxE6HALZchwDIYocAIReIAMgniABFOIgArz+IAEFBiAAsRogAllaIAI5wiADY EYkAvxWJAJQXiQCiF4kAtSSJAOAuiQBrMYkA4kGJAJ9SiQDNaYkA8muJAGh5iQBxEooA3iWKACtC igBQRIoA6VKKAIpiigAwbooA8R2LADUiiwCfJosAwEuLAMhYiwDRXIsAq2SLAAcdjAAVKIwATTeM AKFAjADUTIwAqGSMAPlzjADmC40ARj6NAHFPjQCRVY0AGGONAK15jQCCe40AW0SOAGZXjgCtcI4A GX2OAK0JjwD9F48AZR6PAE0ijwCgJY8AnFGPAOtXjwDPIZAARzyQAARRkAC1DZEArRyRAGMvkQCg VJEAXleRAAlfkQDSdJEAEyuSAMRCkgCSSJIAdxSTAP0JlABzLpQAMDiUADA9lADVS5QAZlCUALBj lAC8dJQA+3iUAPsvlQAeR5UAzVaVAHRclQAaZpUAhgyWANxKlgDlVJYAuHyWAMkJlwALTJcA/FmX ALcJmACxG5gA4iKYAL5pmAD0bZgA83KYAOYjmQB2LZkAYT+ZAIBVmQCnVZkAkWCZAHBlmQBIZpkA HHmZAG4JmgBdGZoAfxyaAHslmgDEMJoA4zGaAGtEmgCFe5oAUn2aAHIFmwDPB5sA1QibADYhmwA7 JJsAHTqbAIRImwC9S5sAPk+bANhUmwDpZZsAX26bAD52mwAxBpwAvk2cAFxbnACnfZwAsg6dAGAc nQA4IJ0AVS+dAAc+nQC2Rp0Ar1WdAP1unQArFZ4ACB6eABcungCSMJ4A3WaeAKZ+ngDbJJ8A/0Wf AAlenwCkA6AAmBagAB4foABPPKAAEmmgAPweoQCWNKEAJVChAH1UoQAeZqEARWmhAFF0oQAIeKEA 8BCiAMFiogDncKIAFXSiAJkaowAtQKMAJEajANACpAAhBaQAJS+kAE84pAC7RqQAGkikAJVOpADJ cqQAVXekANkSpQChM6UA41SlAB52pQDEfKUA3RymAGsgpgB5F6cAbyunAA8wpwA7OKcAsmGnADQF qABFDKgAfgyoAMsrqADrNagAEEKoAMNEqACLYagA9X+oAAoRqQBdFqkAdS2pALw5qQBrUKkAwlGp AEVYqQDqZ6kABQaqAO5FqgAKUaoA/VuqAE9zqgBjEKsACSKrAEEvqwB3W6sAe2OrAJVnqwDHa6sA rh2sAHc0rAAAQ6wA5ESsADhfrACwZawAz3asAJQIrQBeCa0AchatAMYZrQAcOK0AbUWtAMVRrQDa Xa0AUmOtAMF7rQDpB68AGA2vANU5rwA/PK8A/0GvAD1KrwBzY68AtW2vAB8psAD1QrAARkmwACNV sAB3W7AAemGwABJlsAAKALEAwR+xACMgsQBTLbEAmDKxALVEsQDORrEA2U2xAEFXsQAYXrEA9HGx AOcGsgAgGrIAuFSyAPlfsgA7Y7IAHXayANl4sgDnerIApH+yAMQjswAANrMAC1uzAD5uswA/CbQA ewy0AEUVtACiI7QA+Ti0AN09tACmPrQA3kG0AFM+tQAqRbUAtkm1AFZftQCVY7UAEXK1AJx4tQDN ILYAQjW2AEVhtgAldLYANnq2ADAXtwCWLLcAUmu3AHFrtwCYdbcAZBW4ABwXuADQGbgAoyq4AK8y uAD3NrgAHFW4AKBluABxB7kAsRa5AFo3uQBHeLkAPAe6ACkjugCdRLoAfV+6ANEouwCQNbsAg0i7 AC5cuwBnXbsATne7AEMgvADeKrwAyiu8AMswvAA6OrwAAD+8ANlBvAAeR7wA+WK8AHNpvACeb7wA uRO9AP02vQBqU70AqWi9ACh4vQCgfr0A2xe+AJ4ivgCVVb4AyVe+ACR0vgAsd74AAH++AAInvwBU RL8AD1q/AB9avwCtAMAAHQLAAM0gwAB9ZMAA1mnAACt8wABLBcEASgfBAJUKwQDRDcEAUhLBAPEd wQBVIsEAIC3BAL01wQBtRMEAYWLBAEl0wgCSeMIAYSnDAMUwwwANSsMAQlLDAB5TwwBfVcMAQ2LD AKR2wwB0CsQAeQzEABoQxACWd8QAHX3EAGs6xQBUXsUACXLFAKIBxgDcAsYAHAXGAAUTxgCQE8YA 6TLGAPUIxwDFCccAiBDHAJEZxwBuGscAMknHALddxwCoZccAm3nHAGB9xwCSNcgAV2fIABJryADS ccgAZnfIAAZ8yABLBMkAWxHJAKEsyQDjLskAHUPJAFxEyQDJR8kAPmTJAHN3yQCFeMkAoxXKAHEY ygBcJsoAfijKAGA0ygACXsoAKGDKACRzygC4dMoAjy/LAOs0ywARO8sAHUnLANFeywDHYMsAqHLL AN0LzACXFswAOivMAFFGzADgdswAXhTNAP0mzQBtPc0Ap0HNAFJHzQDbR80AhUzNAINNzQCWdc0A YQDOAMwKzgC9DM4AKxXOAJIWzgAkGM4Am13OACF5zgBzf84AVAXPAOAIzwAyMc8Adz/PAM1MzwCP Ws8A5XDPALcQ0AA9GtAAZC7QALg/0AAaR9AAfFfQAMle0AAdZtAAknjQAKwQ0QD8JtEAakLRAARh 0QB6FNIA9ivSAD020gDFRtIANnTSAFUf0wDeN9MAU0fTAOxm0wBSb9MAzQ3UAHAO1ABJENQALD3U ABJl1AD+c9QAqn/UAKxi1QBjctUAFH7VADQI1gCACNYAKRPWAMYp1gDENdYALjvWAEU91gAHWtYA An3WAN451wA3QtcACFrXAMNi1wAWetcACiDYAA0k2ACSMNgABTvYAJFS2ACgXNgAnl/YAOpo2AAL ctgA3XfYAPEv2QB5PtkAHVnZAIgD2gDpB9oA1yLaAO0t2gAVUtoAR17aAIxs2gD2DtsAsSXbANBj 2wAcaNsA+nzbABd+2wDEF9wAribcAI4w3AC/PdwAwkfcABBP3AD4EN0AOhrdAEEl3QDFKN0ABind ABdH3QC2dd0AGB3eACck3gDjJ94A8yjeAJ1F3gBsSN4A31TeAL9m3gDpZ94AoXfeAOF33gBIC98A +yLfAGMo3wD0R98AI1TfAFxU3wBwaN8AVWnfADV43wDcF+AARD7gAHVX4AD0WuAAw1/gALcl4QDx KOEAYirhABos4QDvWOEApnDhAAcL4gCgUOIA0lfiACtb4gCbfuIAfETjABZa4wA9ZeMAK27jADJz 4wBRVuQApljkANpi5ABTZeQAQnXkAEIR5QBvIOUA6zXlAAdT5QAmV+UA933lABEG5gAdFuYAkWHm AMQB5wDeA+cAWw/nAC4S5wD+FecAcCnnAB9d5wCFducAFHjnAHN55wCweecAgQjoAEok6ABYUugA NmLoAIN/6ADPFukANRvpAKUs6QC+MekAZjXpANBU6QDRWukA+3XpACN76QDBNeoA30nqAPlQ6gBe VOoAYljqAONr6gCPb+oA4AXrAPZi6wDyaOsAe3TrACF+6wBRAewAfxXsANkY7AAaNewANDXsAMg7 7ABEW+wAH2jsAOFv7AD4He0AESztAHZO7QArZu0A/mjtACYK7gD6H+4ARTHuAPZQ7gAaV+4A0Fzu AA107gBHA+8ATATvAGoH7wC2Hu8A0lzvACpe7wAZX+8AtmPvAGYH8AAWL/AAJjzwABZB8ADrS/AA q2LwAGht8ABHFPEAThjxAGYg8QBUNvEAKVnxANQA8gB1L/IAu1DyALhu8gBacfIAWAPzACAs8wBx O/MAk0rzAHdr8wCQcfMAjH7zADwD9ADhCvQAaAv0AMIR9ACNI/QAyCX0AKc59ADhY/QApn30ACIC 9QBOBPUA/hD1ADkl9QC5JfUAw2H1ABNl9QDkHfYAoSz2AEY79gBAQvYAEUP2AKpF9gC1RvYAkEv2 AGdO9gCTXvYALF/2ABZI9wCVJvgACjX4AHw5+ACXQfgAqmL4AL4D+QDjJPkAbir5ALdD+QBbTPkA AV35AK1w+QDeePkA1Hz5AJcM+gCoFfoA3xz6AFkg+gDbIfoAgjL6AJ1H+gAESPoASXb6AJN6+gDY KPsAqS37ANIw+wA/PPsA12n7ANx6+wBXAfwAyRb8AEwZ/ADrP/wApFX8AB9g/ABaAP0AnRP9ACEd /QCVMf0A6jv9AFVL/QC3bf0ARHL9AFkx/gCGav4Ay27+ANlw/gDhdP4AlHj+ABtP/wDUfv8A/0AD gAEAWgMAAFoDAAAgs/oLAQABAFoDAAAAAAAAWgMAAAAAAAACEAAAAAAAAACLaQAAsAAAEABAAAD/ /wQAAAAHAFUAbgBrAG4AbwB3AG4AEABSAG8AYgBlAHIAdABhACAATQBhAGcAbABpAG8AbgBlAAcA VQBuAGsAbgBvAHcAbgAQAFIAbwBiAGUAcgB0AGEAIABNAGEAZwBsAGkAbwBuAGUA//8EAAgAAAAA AAAAAAAAAAAAAAAAAAAAAwAZAFUAbgBrAG4AbwB3AG4AMgAwADEAMQAwADYAMgAzAFQAMAA5ADEA NwAxADIAMAA0ADMAUbr2hgAAAAAhAFIAbwBiAGUAcgB0AGEAIABNAGEAZwBsAGkAbwBuAGUAMgAw ADEAMQAwADYAMgAzAFQAMAA5ADEANwA4ADYAMAA1AFG69oYAAAMA//8EAAAAAAAAAAAAEABSAG8A YgBlAHIAdABhACAATQBhAGcAbABpAG8AbgBlAP//AAACAP//AAAAAP//AAACAP//AAAAAAcAAABH FpABAAACAgYDBQQFAgMEh3oAIAAAAIAIAAAAAAAAAP8BAAAAAAAAVABpAG0AZQBzACAATgBlAHcA IABSAG8AbQBhAG4AAAA1FpABAgAFBQECAQcGAgUHAAAAAAAAABAAAAAAAAAAAAAAAIAAAAAAUwB5 AG0AYgBvAGwAAAAzJpABAAACCwYEAgICAgIEh3oAIAAAAIAIAAAAAAAAAP8BAAAAAAAAQQByAGkA YQBsAAAAXRGQAYAKAgIGCQQCBQgDBAEAAAAAAAcIEAAAAAAAAAAAAAIAAAAAAE0AUwAgAE0AaQBu AGMAaABvAAAAQQByAGkAYQBsACAAVQBuAGkAYwBvAGQAZQAgAE0AUwAAAD81kAEAAAIHAwkCAgUC BASHegAgAAAAgAgAAAAAAAAA/wEAAAAAAABDAG8AdQByAGkAZQByACAATgBlAHcAAAA1JpABAAAC CwYEAwUEBAIEh3oAYQAAAIAIAAAAAAAAAP8BAQAAAAAAVABhAGgAbwBtAGEAAAA7BpABAgAFAAAA AAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAIAAAAAAVwBpAG4AZwBkAGkAbgBnAHMAAAAiAAQAcYiI GADw0AIAAGgBAAAAAFq69oaCuvaGAAAAAAYAIAAAAMAPAADLWQAAEQA1AAAABAADEL8AAADADwAA y1kAABEANQAAAL8AAAAAAAAA1AIA8BAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApQbAB7QA tACBgT40AAARABkAZAAAABkAAABWaQAAVmkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAFM4NRAPAQAAgAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhQAAAAACzw/w8BAAE/AAAAAAAArAQAAP///3////9///// f////3////9/////f/tVcwAAAAAAMgAAAAAAAAAAAAAAAAABAAAA//8SAAAAAAAAAD0ATgBlAHQA dwBvAHIAawAgAFcAbwByAGsAaQBuAGcAIABHAHIAbwB1AHAAIAAgACAAIAAgACAAIAAgACAAIAAg ACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAA QgAAAAAAAAAQAFIAbwBiAGUAcgB0AGEAIABNAGEAZwBsAGkAbwBuAGUAEABSAG8AYgBlAHIAdABh ACAATQBhAGcAbABpAG8AbgBlAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAAAAAYAAAAEAAAAAAAMAAEA DAACAAwAAwAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7/AAAFAQIAAAAAAAAAAAAAAAAAAAAAAAEAAADg hZ/y+U9oEKuRCAArJ7PZMAAAALwBAAARAAAAAQAAAJAAAAACAAAAmAAAAAMAAADgAAAABAAAAOwA AAAFAAAACAEAAAYAAAAUAQAABwAAACABAAAIAAAAMAEAAAkAAABMAQAAEgAAAFgBAAAKAAAAeAEA AAwAAACEAQAADQAAAJABAAAOAAAAnAEAAA8AAACkAQAAEAAAAKwBAAATAAAAtAEAAAIAAADkBAAA HgAAAEAAAABOZXR3b3JrIFdvcmtpbmcgR3JvdXAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBCAAAAHgAAAAQAAAAAAAAAHgAAABQAAABSb2JlcnRhIE1hZ2xpb25lAAAAAB4A AAAEAAAAAAAAAB4AAAAEAAAAAAAAAB4AAAAIAAAATm9ybWFsAAAeAAAAFAAAAFJvYmVydGEgTWFn bGlvbmUAAAAAHgAAAAQAAAA2AAAAHgAAABgAAABNaWNyb3NvZnQgT2ZmaWNlIFdvcmQAAABAAAAA AMBoeAQAAABAAAAAAHTfzHYxzAFAAAAAAExV1HsxzAEDAAAAEQAAAAMAAADADwAAAwAAAMtZAAAD AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAD+/wAABQECAAAAAAAAAAAAAAAAAAAAAAABAAAAAtXN1ZwuGxCT lwgAKyz5rjAAAAAsAQAADAAAAAEAAABoAAAADwAAAHAAAAAFAAAAhAAAAAYAAACMAAAAEQAAAJQA AAAXAAAAnAAAAAsAAACkAAAAEAAAAKwAAAATAAAAtAAAABYAAAC8AAAADQAAAMQAAAAMAAAADgEA AAIAAADkBAAAHgAAAAwAAABJVCBUZWxlY29tAAADAAAAvwAAAAMAAAA1AAAAAwAAAFZpAAADAAAA DycLAAsAAAAAAAAACwAAAAAAAAALAAAAAAAAAAsAAAAAAAAAHhAAAAEAAAA+AAAATmV0d29yayBX b3JraW5nIEdyb3VwICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQgAMEAAA AgAAAB4AAAAGAAAAVGl0bGUAAwAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAQAAAAIAAAADAAAABAAAAAUAAAAGAAAABwAAAAgAAAAJAAAACgAAAAsAAAAM AAAADQAAAA4AAAAPAAAAEAAAABEAAAASAAAAEwAAABQAAAAVAAAAFgAAABcAAAAYAAAAGQAAABoA AAAbAAAAHAAAAB0AAAAeAAAAHwAAACAAAAAhAAAAIgAAACMAAAAkAAAAJQAAACYAAAAnAAAAKAAA ACkAAAAqAAAAKwAAACwAAAAtAAAALgAAAC8AAAAwAAAAMQAAADIAAAAzAAAANAAAADUAAAA2AAAA NwAAADgAAAA5AAAAOgAAADsAAAA8AAAAPQAAAD4AAAA/AAAAQAAAAEEAAABCAAAAQwAAAEQAAABF AAAARgAAAEcAAABIAAAASQAAAEoAAABLAAAATAAAAE0AAABOAAAATwAAAFAAAABRAAAAUgAAAFMA AABUAAAAVQAAAFYAAABXAAAAWAAAAFkAAABaAAAAWwAAAFwAAABdAAAAXgAAAF8AAABgAAAAYQAA AP7///9jAAAAZAAAAGUAAABmAAAAZwAAAGgAAABpAAAAagAAAGsAAABsAAAAbQAAAG4AAABvAAAA cAAAAHEAAAByAAAAcwAAAHQAAAB1AAAAdgAAAHcAAAB4AAAAeQAAAHoAAAB7AAAAfAAAAH0AAAB+ AAAAfwAAAIAAAACBAAAAggAAAIMAAACEAAAAhQAAAIYAAACHAAAAiAAAAIkAAACKAAAAiwAAAIwA AACNAAAAjgAAAI8AAACQAAAAkQAAAJIAAACTAAAAlAAAAJUAAACWAAAAlwAAAJgAAACZAAAAmgAA AJsAAACcAAAAnQAAAJ4AAACfAAAAoAAAAKEAAACiAAAAowAAAKQAAAClAAAApgAAAKcAAACoAAAA qQAAAKoAAACrAAAArAAAAK0AAACuAAAArwAAALAAAACxAAAAsgAAALMAAAC0AAAAtQAAALYAAAC3 AAAAuAAAALkAAAC6AAAAuwAAALwAAAC9AAAAvgAAAL8AAADAAAAAwQAAAMIAAADDAAAAxAAAAMUA AADGAAAAxwAAAMgAAADJAAAAygAAAMsAAADMAAAAzQAAAM4AAADPAAAA0AAAANEAAADSAAAA0wAA ANQAAADVAAAA1gAAANcAAADYAAAA2QAAANoAAADbAAAA3AAAAN0AAADeAAAA3wAAAOAAAADhAAAA 4gAAAOMAAADkAAAA5QAAAOYAAADnAAAA6AAAAOkAAADqAAAA6wAAAOwAAADtAAAA7gAAAO8AAADw AAAA8QAAAPIAAADzAAAA9AAAAPUAAAD2AAAA9wAAAPgAAAD5AAAA+gAAAPsAAAD8AAAA/QAAAP4A AAD/AAAA/v///wEBAAACAQAAAwEAAAQBAAAFAQAABgEAAAcBAAD+////CQEAAAoBAAALAQAADAEA AA0BAAAOAQAADwEAAP7////9/////f////3///8UAQAA/v////7////+//////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////////UgBvAG8AdAAgAEUAbgB0AHIAeQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAABYABQH//////////wMAAAAGCQIAAAAAAMAAAAAAAABGAAAAAAAAAAAA AAAAoB6L5XsxzAEWAQAAgAAAAAAAAAAxAFQAYQBiAGwAZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgACAf////8FAAAA/////wAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGIAAADROgEAAAAAAFcAbwByAGQARABvAGMAdQBtAGUA bgB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaAAIBAQAAAP////// ////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADTCAAAAAAAABQBTAHUA bQBtAGEAcgB5AEkAbgBmAG8AcgBtAGEAdABpAG8AbgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA ACgAAgECAAAABAAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAA ABAAAAAAAAAFAEQAbwBjAHUAbQBlAG4AdABTAHUAbQBtAGEAcgB5AEkAbgBmAG8AcgBtAGEAdABp AG8AbgAAAAAAAAAAAAAAOAACAf///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAgBAAAAEAAAAAAAAAEAQwBvAG0AcABPAGIAagAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASAAIA////////////////AAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD///////////// //8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAEAAAD+//////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////AQD+/wMKAAD/////BgkCAAAAAADAAAAAAAAARh8AAABNaWNyb3NvZnQgT2ZmaWNlIFdv cmQgRG9jdW1lbnQACgAAAE1TV29yZERvYwAQAAAAV29yZC5Eb2N1bWVudC44APQ5snEAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAA= --_002_282BBE8A501E1F4DA9C775F964BB21FE3EB35BEC73GRFMBX704BA02_-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Mon, 27 Jun 2011 07:28:27 +0000 From: Maglione Roberta To: "'radiusext@ops.ietf.org'" CC: Ullio Mario Date: Mon, 27 Jun 2011 09:27:53 +0200 Subject: Comments on draft-ietf-radext-ipv6-access-04 Thread-Topic: Comments on draft-ietf-radext-ipv6-access-04 Thread-Index: Acw0m7lJraVtFYOuSsK429Ac/B2j9A== Message-ID: <282BBE8A501E1F4DA9C775F964BB21FE3EB35BEC73@GRFMBX704BA020.griffon.local> Accept-Language: en-US, it-IT Content-Language: en-US acceptlanguage: en-US, it-IT Content-Type: multipart/mixed; boundary="_002_282BBE8A501E1F4DA9C775F964BB21FE3EB35BEC73GRFMBX704BA02_" MIME-Version: 1.0 --_002_282BBE8A501E1F4DA9C775F964BB21FE3EB35BEC73GRFMBX704BA02_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello, I read this document and I have some comments. This draft, in section 2.1, introduces Framed-IPv6-Address Attribute to be = used for providing a DHCPv6 server residing on a NAS with one or more IPv6 = addresses to be assigned to the clients. An alternative way to achieve a similar result is to extract an IPv6 addres= s to be assigned, from a pool of addresses locally configured on the NAS. In my opinion it would be useful to add in this document a new attribute to= allow the RADIUS server to convey a pool name to be used for DHCPv6 based = addressing, when a single IPv6 address needs to be assigned to a host, to a= NAS hosting a DHCPv6 server. I wrote an initial proposal in order to add the new attribute in the curren= t draft, please see attached file. Any comments or feedback from the authors and from the group are welcome. Thanks, Best regards, Roberta Questo messaggio e i suoi allegati sono indirizzati esclusivamente alle per= sone indicate. La diffusione, copia o qualsiasi altra azione derivante dall= a conoscenza di queste informazioni sono rigorosamente vietate. Qualora abb= iate ricevuto questo documento per errore siete cortesemente pregati di dar= ne immediata comunicazione al mittente e di provvedere alla sua distruzione= , Grazie. This e-mail and any attachments is confidential and may contain privileged = information intended for the addressee(s) only. Dissemination, copying, pri= nting or use by anybody else is unauthorised. If you are not the intended r= ecipient, please delete this message and any attachments and advise the sen= der by return e-mail, Thanks. --_002_282BBE8A501E1F4DA9C775F964BB21FE3EB35BEC73GRFMBX704BA02_ Content-Type: application/msword; name="draft-ietf-radext-ipv6-access-04-RM.doc" Content-Description: draft-ietf-radext-ipv6-access-04-RM.doc Content-Disposition: attachment; filename="draft-ietf-radext-ipv6-access-04-RM.doc"; size=143360; creation-date="Thu, 23 Jun 2011 09:26:09 GMT"; modification-date="Mon, 27 Jun 2011 09:27:52 GMT" Content-Transfer-Encoding: base64 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAADAAAAEwEAAAAAAAAA EAAAFQEAAAEAAAD+////AAAAABABAAARAQAAEgEAAP////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ///////////////////////////////////////////////////////////////////////////s pcEAJ2AJBAAA8BK/AAAAAAAAEAAAAAAABgAAi3EAAA4AYmpiakxVTFUAAAAAAAAAAAAAAAAAAAAA AAAJBBYANMIAAC4/AQAuPwEAi2kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD//w8AAAAA AAAAAAD//w8AAAAAAAAAAAD//w8AAAAAAAAAAAAAAAAAAAAAAKQAAAAAADgEAAAAAAAAOAQAADgE AAAAAAAAOAQAAAAAAAA4BAAAAAAAADgEAAAAAAAAOAQAABQAAAAAAAAAAAAAABIGAACELwAAHvgA AAAAAAAe+AAAAAAAAB74AAAAAAAAHvgAADQAAABS+AAADAEAAJY1AAAAAAAAozUBAMYBAABq+QAA AAAAAGr5AAAAAAAAavkAAAAAAABq+QAAAAAAAGr5AAAAAAAARfoAAAAAAABF+gAAAAAAAEX6AAAA AAAAFjQBAAIAAAAYNAEAAAAAABg0AQAAAAAAGDQBAAAAAAAYNAEAAAAAABg0AQAAAAAAGDQBACQA AABpNwEAaAIAANE5AQDkAAAAPDQBABUAAAAAAAAAAAAAAAAAAAAAAAAAOAQAAAAAAAAW/wAAAAAA AAAAAAAAAAAAAAAAAAAAAABF+gAAAAAAAEX6AAAAAAAAFv8AAAAAAAAW/wAAAAAAADw0AQAAAAAA AAAAAAAAAAA4BAAAAAAAADgEAAAAAAAAavkAAAAAAAAAAAAAAAAAAGr5AADbAAAAUTQBAGoAAABW DgEAAAAAAFYOAQAAAAAAVg4BAAAAAAAW/wAA3gQAADgEAAAAAAAAavkAAAAAAAA4BAAAAAAAAGr5 AAAAAAAAFjQBAAAAAAAAAAAAAAAAAFYOAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAFv8AAAAAAAAWNAEAAAAAAAAAAAAAAAAAVg4BAAAAAABWDgEA cgAAAMoZAQBUAAAAOAQAAAAAAAA4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyhoBAAAAAABq+QAAAAAAAF75AAAMAAAAsNSI5Xsx zAEAAAAAAAAAAB74AAAAAAAA9AMBAB4KAAAeGgEADgAAAAAAAAAAAAAAFjQBAAAAAAC7NAEA6AAA AKM1AQAAAAAALBoBAJ4AAAC1OgEAAAAAABIOAQA6AAAAtToBABwAAADKGgEAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAALU6AQAAAAAAAAAAAAAAAAA4BAAAAAAAAMoaAQBMGQAARfoAAB4BAABj+wAAzAAAAFYO AQAAAAAAL/wAAKQAAADT/AAAQwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARfoA AAAAAABF+gAAAAAAAEX6AAAAAAAAPDQBAAAAAAA8NAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAATA4BAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEX6AAAA AAAARfoAAAAAAABF+gAAAAAAAKM1AQAAAAAAFv8AAAAAAAAW/wAAAAAAABb/AAAAAAAAFv8AAAAA AAAAAAAAAAAAAJY1AAAAAAAAljUAAAAAAACWNQAARGEAANqWAABEYQAAljUAAAAAAACWNQAAAAAA AJY1AAAAAAAA2pYAAAAAAABMBAAAFAEAAGAFAACuAAAADgYAAAQAAAA4BAAAAAAAADgEAAAAAAAA OAQAAAAAAAA4BAAAAAAAADgEAAAAAAAAOAQAAAAAAAD/////AAAAAAIADAEAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0NDU5l dHdvcmsgV29ya2luZyBHcm91cCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IEIuIExvdXJkZWxldA1JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgVy4gRGVjLCBFZC4NSW50ZW5kZWQgc3RhdHVzOiBTdGFuZGFyZHMg VHJhY2sgICAgICAgICAgICAgICAgICAgICBDaXNjbyBTeXN0ZW1zLCBJbmMuDUV4cGlyZXM6IFNl cHRlbWJlciAxNSwgMjAxMSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBCLiBTYXJp a2F5YQ0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIEh1YXdlaSBVU0ENICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBHLiBab3JuDSAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBOZXR3b3JrIFplbg0gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgRC4gTWlsZXMNICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIEFsY2F0ZWwtTHVjZW50DSAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNYXJjaCAxNCwgMjAxMQ0NDSAgICAgICAgICAg ICAgIFJBRElVUyBhdHRyaWJ1dGVzIGZvciBJUHY2IEFjY2VzcyBOZXR3b3Jrcw0gICAgICAgICAg ICAgICAgICBkcmFmdC1pZXRmLXJhZGV4dC1pcHY2LWFjY2Vzcy0wNC50eHQNDUFic3RyYWN0DQ0g ICBUaGlzIGRvY3VtZW50IHNwZWNpZmllcyBhZGRpdGlvbmFsIElQdjYgUkFESVVTIGF0dHJpYnV0 ZXMgdXNlZnVsIGluDSAgIHJlc2lkZW50aWFsIGJyb2FkYmFuZCBuZXR3b3JrIGRlcGxveW1lbnRz LiAgVGhlIGF0dHJpYnV0ZXMsIHdoaWNoIGFyZQ0gICB1c2VkIGZvciBhdXRob3JpemF0aW9uIGFu ZCBhY2NvdW50aW5nLCBlbmFibGUgYXNzaWdubWVudCBvZiBhIGhvc3QNICAgSVB2NiBhZGRyZXNz IGFuZCBJUHY2IEROUyBzZXJ2ZXIgYWRkcmVzcyB2aWEgREhDUHY2OyBhc3NpZ25tZW50IG9mIGFu DSAgIElQdjYgcm91dGUgYW5ub3VuY2VkIHZpYSByb3V0ZXIgYWR2ZXJ0aXNlbWVudCwgYW5kIGFz c2lnbm1lbnQgb2YgYQ0gICBuYW1lZCBJUHY2IGRlbGVnYXRlZCBwcmVmaXggcG9vbCBhbmQgYXNz aWdubWVudCBvZiBhIG5hbWVkIElQdjYgcG9vbCBmb3IgREhDUHY2IGJhc2VkIGFkZHJlc3Npbmcs IHdoZW4gYSBzaW5nbGUgSVB2NiBhZGRyZXNzIG5lZWRzIHRvIGJlIGFzc2lnbmVkIHRvIGEgaG9z dC4NDVJlcXVpcmVtZW50cyBMYW5ndWFnZQ0NICAgVGhlIGtleSB3b3JkcyAiTVVTVCIsICJNVVNU IE5PVCIsICJSRVFVSVJFRCIsICJTSEFMTCIsICJTSEFMTCBOT1QiLA0gICAiU0hPVUxEIiwgIlNI T1VMRCBOT1QiLCAiUkVDT01NRU5ERUQiLCAiTUFZIiwgYW5kICJPUFRJT05BTCIgaW4gdGhpcw0g ICBkb2N1bWVudCBhcmUgdG8gYmUgaW50ZXJwcmV0ZWQgYXMgZGVzY3JpYmVkIGluIFJGQyAyMTE5 IFtSRkMyMTE5XS4NDVN0YXR1cyBvZiB0aGlzIE1lbW8NDSAgIFRoaXMgSW50ZXJuZXQtRHJhZnQg aXMgc3VibWl0dGVkIGluIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGUNICAgcHJvdmlzaW9ucyBv ZiBCQ1AgNzggYW5kIEJDUCA3OS4NDSAgIEludGVybmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1 bWVudHMgb2YgdGhlIEludGVybmV0IEVuZ2luZWVyaW5nDSAgIFRhc2sgRm9yY2UgKElFVEYpLiAg Tm90ZSB0aGF0IG90aGVyIGdyb3VwcyBtYXkgYWxzbyBkaXN0cmlidXRlDSAgIHdvcmtpbmcgZG9j dW1lbnRzIGFzIEludGVybmV0LURyYWZ0cy4gIFRoZSBsaXN0IG9mIGN1cnJlbnQgSW50ZXJuZXQt DSAgIERyYWZ0cyBpcyBhdCBodHRwOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZHJhZnRzL2N1cnJl bnQvLg0NICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQgZm9yIGEg bWF4aW11bSBvZiBzaXggbW9udGhzDSAgIGFuZCBtYXkgYmUgdXBkYXRlZCwgcmVwbGFjZWQsIG9y IG9ic29sZXRlZCBieSBvdGhlciBkb2N1bWVudHMgYXQgYW55DSAgIHRpbWUuICBJdCBpcyBpbmFw cHJvcHJpYXRlIHRvIHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlDSAgIG1hdGVyaWFs IG9yIHRvIGNpdGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHByb2dyZXNzLiINDSAgIFRo aXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gU2VwdGVtYmVyIDE1LCAyMDExLg0NQ29w eXJpZ2h0IE5vdGljZQ0NDQ1Mb3VyZGVsZXQsIGV0IGFsLiAgICAgIEV4cGlyZXMgU2VwdGVtYmVy IDE1LCAyMDExICAgICAgICAgICAgICAgW1BhZ2UgMV0NDA1JbnRlcm5ldC1EcmFmdCAgICAgICAg ICAgICBSQURJVVMgSVB2NiBBY2Nlc3MgICAgICAgICAgICAgICAgIE1hcmNoIDIwMTENDQ0gICBD b3B5cmlnaHQgKGMpIDIwMTEgSUVURiBUcnVzdCBhbmQgdGhlIHBlcnNvbnMgaWRlbnRpZmllZCBh cyB0aGUNICAgZG9jdW1lbnQgYXV0aG9ycy4gIEFsbCByaWdodHMgcmVzZXJ2ZWQuDQ0gICBUaGlz IGRvY3VtZW50IGlzIHN1YmplY3QgdG8gQkNQIDc4IGFuZCB0aGUgSUVURiBUcnVzdCdzIExlZ2Fs DSAgIFByb3Zpc2lvbnMgUmVsYXRpbmcgdG8gSUVURiBEb2N1bWVudHMNICAgKGh0dHA6Ly90cnVz dGVlLmlldGYub3JnL2xpY2Vuc2UtaW5mbykgaW4gZWZmZWN0IG9uIHRoZSBkYXRlIG9mDSAgIHB1 YmxpY2F0aW9uIG9mIHRoaXMgZG9jdW1lbnQuICBQbGVhc2UgcmV2aWV3IHRoZXNlIGRvY3VtZW50 cw0gICBjYXJlZnVsbHksIGFzIHRoZXkgZGVzY3JpYmUgeW91ciByaWdodHMgYW5kIHJlc3RyaWN0 aW9ucyB3aXRoIHJlc3BlY3QNICAgdG8gdGhpcyBkb2N1bWVudC4gIENvZGUgQ29tcG9uZW50cyBl eHRyYWN0ZWQgZnJvbSB0aGlzIGRvY3VtZW50IG11c3QNICAgaW5jbHVkZSBTaW1wbGlmaWVkIEJT RCBMaWNlbnNlIHRleHQgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gNC5lIG9mDSAgIHRoZSBUcnVz dCBMZWdhbCBQcm92aXNpb25zIGFuZCBhcmUgcHJvdmlkZWQgd2l0aG91dCB3YXJyYW50eSBhcw0g ICBkZXNjcmliZWQgaW4gdGhlIFNpbXBsaWZpZWQgQlNEIExpY2Vuc2UuDQ0gICBUaGlzIGRvY3Vt ZW50IG1heSBjb250YWluIG1hdGVyaWFsIGZyb20gSUVURiBEb2N1bWVudHMgb3IgSUVURg0gICBD b250cmlidXRpb25zIHB1Ymxpc2hlZCBvciBtYWRlIHB1YmxpY2x5IGF2YWlsYWJsZSBiZWZvcmUg Tm92ZW1iZXINICAgMTAsIDIwMDguICBUaGUgcGVyc29uKHMpIGNvbnRyb2xsaW5nIHRoZSBjb3B5 cmlnaHQgaW4gc29tZSBvZiB0aGlzDSAgIG1hdGVyaWFsIG1heSBub3QgaGF2ZSBncmFudGVkIHRo ZSBJRVRGIFRydXN0IHRoZSByaWdodCB0byBhbGxvdw0gICBtb2RpZmljYXRpb25zIG9mIHN1Y2gg bWF0ZXJpYWwgb3V0c2lkZSB0aGUgSUVURiBTdGFuZGFyZHMgUHJvY2Vzcy4NICAgV2l0aG91dCBv YnRhaW5pbmcgYW4gYWRlcXVhdGUgbGljZW5zZSBmcm9tIHRoZSBwZXJzb24ocykgY29udHJvbGxp bmcNICAgdGhlIGNvcHlyaWdodCBpbiBzdWNoIG1hdGVyaWFscywgdGhpcyBkb2N1bWVudCBtYXkg bm90IGJlIG1vZGlmaWVkDSAgIG91dHNpZGUgdGhlIElFVEYgU3RhbmRhcmRzIFByb2Nlc3MsIGFu ZCBkZXJpdmF0aXZlIHdvcmtzIG9mIGl0IG1heQ0gICBub3QgYmUgY3JlYXRlZCBvdXRzaWRlIHRo ZSBJRVRGIFN0YW5kYXJkcyBQcm9jZXNzLCBleGNlcHQgdG8gZm9ybWF0DSAgIGl0IGZvciBwdWJs aWNhdGlvbiBhcyBhbiBSRkMgb3IgdG8gdHJhbnNsYXRlIGl0IGludG8gbGFuZ3VhZ2VzIG90aGVy DSAgIHRoYW4gRW5nbGlzaC4NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NTG91cmRlbGV0LCBl dCBhbC4gICAgICBFeHBpcmVzIFNlcHRlbWJlciAxNSwgMjAxMSAgICAgICAgICAgICAgIFtQYWdl IDJdDQwNSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgUkFESVVTIElQdjYgQWNjZXNzICAgICAg ICAgICAgICAgICBNYXJjaCAyMDExDQ0NVGFibGUgb2YgQ29udGVudHMNDSAgIDEuICBJbnRyb2R1 Y3Rpb24gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg NA0gICAyLiAgRGVwbG95bWVudCBTY2VuYXJpb3MgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gIDQNICAgICAyLjEuICBJUHY2IEFkZHJlc3MgQXNzaWdubWVudCAgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1DSAgICAgMi4yLiAgUmVjdXJzaXZlIERO UyBTZXJ2ZXJzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNg0gICAgIDIu My4gIElQdjYgUm91dGUgSW5mb3JtYXRpb24gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDYNICAgICAyLjQuICBEZWxlZ2F0ZWQgSVB2NiBQcmVmaXggUG9vbCAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2DSAgIDMuICBBdHRyaWJ1dGVzIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNw0gICAgIDMuMS4gIEZyYW1l ZC1JUHY2LUFkZHJlc3MgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDcN ICAgICAzLjIuICBETlMtU2VydmVyLUlQdjYtQWRkcmVzcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICA4DSAgICAgMy4zLiAgUm91dGUtSVB2Ni1JbmZvcm1hdGlvbiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgOQ0gICAgIDMuNC4gIERlbGVnYXRlZC1JUHY2 LVByZWZpeC1Qb29sIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTANICAgICAzLjUu ICBUYWJsZSBvZiBhdHRyaWJ1dGVzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIDEwDSAgIDQuICBEaWFtZXRlciBDb25zaWRlcmF0aW9ucyAgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAxMA0gICA1LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTENICAgNi4gIElBTkEgQ29uc2lk ZXJhdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDExDSAg IDcuICBBY2tub3dsZWRnZW1lbnRzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAxMQ0gICA4LiAgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTENICAgICA4LjEuICBOb3JtYXRpdmUgUmVmZXJl bmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDExDSAgICAgOC4yLiAg SW5mb3JtYXRpdmUgUmVmZXJlbmNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAxMg0gICBBdXRob3JzJyBBZGRyZXNzZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gMTINDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ0NDQ1Mb3VyZGVs ZXQsIGV0IGFsLiAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDE1LCAyMDExICAgICAgICAgICAgICAg W1BhZ2UgM10NDA1JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICBSQURJVVMgSVB2NiBBY2Nlc3Mg ICAgICAgICAgICAgICAgIE1hcmNoIDIwMTENDQ0xLiAgSW50cm9kdWN0aW9uDQ0gICBJbiBJUHY2 IGRlcGxveW1lbnRzIERIQ1B2NiBhbmQvb3IgSUNNUHY2IFJvdXRlciBBZHZlcnRpc2VtZW50cyBj YW4gYmUNICAgdXNlZCB0byBjb252ZXkgY29uZmlndXJhdGlvbiBpbmZvcm1hdGlvbiBieSBhIE5B UyB0b3dhcmRzIGFjY2Vzc2luZw0gICBob3N0cy4gIFN1Y2ggaW5mb3JtYXRpb24gdHlwaWNhbGx5 IG5lZWRzIHRvIGJlIHByb3Zpc2lvbmVkIG9uIHRoZSBOQVMNICAgYW5kIG1heSBiZSBkb25lIHNv IG9uIGEgcGVyIGhvc3Qgb3IgdXNlciBiYXNpcyB1c2luZyB0aGUgQUFBIHByb2Nlc3MuDSAgIFRo aXMgZG9jdW1lbnQgc3BlY2lmaWVzIGFkZGl0aW9uYWwgUkFESVVTIGF0dHJpYnV0ZXMgdXNlZCB0 byBzdXBwb3J0DSAgIGNvbmZpZ3VyYXRpb24gb2YgREhDUHY2IGFuZC9vciBJQ01QdjYgcGFyYW1l dGVycyBvbiBhIHBlci11c2VyIGJhc2lzLg0gICBUaGUgYXR0cmlidXRlcywgd2hpY2ggY29tcGxl bWVudCB0aG9zZSBkZWZpbmVkIGluIFtSRkMzMTYyXSBhbmQNICAgW1JGQzQ4MThdLCBzdXBwb3J0 IHRoZSBmb2xsb3dpbmc6DQ0gICBvICBUaGUgYXNzaWdubWVudCBvciBhY2NvdW50aW5nIG9mIHNw ZWNpZmljIElQdjYgYWRkcmVzc2VzIGFzc2lnbmVkDSAgICAgIHRvIGhvc3RzLiAgV2hpbGUgW1JG QzMxNjJdIHBlcm1pdHMgYW4gSVB2NiBhZGRyZXNzIHRvIGJlIHNwZWNpZmllZA0gICAgICB2aWEg dGhlIGNvbWJpbmF0aW9uIG9mIHRoZSBGcmFtZWQtSW50ZXJmYWNlLUlkIGFuZCBGcmFtZWQtSVB2 Ni0NICAgICAgUHJlZml4IGF0dHJpYnV0ZXMsIHRoaXMgc2VwYXJhdGlvbiBpcyBtb3JlIG5hdHVy YWwgZm9yIHVzZSB3aXRoDSAgICAgIElQdjZDUCB0aGFuIGl0IGlzIGZvciB1c2Ugd2l0aCBESENQ djYsIGFuZCB0aGUgdXNlIG9mIGEgc2luZ2xlDSAgICAgIElQdjYgYWRkcmVzcyBhdHRyaWJ1dGUg bWFrZXMgZm9yIGVhc2llciBwcm9jZXNzaW5nIG9mIGFjY291bnRpbmcNICAgICAgcmVjb3Jkcy4N DSAgIG8gIEFzc2lnbm1lbnQgb2YgYW4gSVB2NiBETlMgc2VydmVyIGFkZHJlc3MsIHZpYSBESENQ djYgb3IgW1JGQzUwMDZdDQ0gICBvICBDb25maWd1cmF0aW9uIG9mIGEgcm91dGUgdG8gYmUgcGFz c2VkIHRvIHRoZSBob3N0IHZpYSBSb3V0ZXINICAgICAgQWR2ZXJ0aXNlbWVudCBbUkZDNDE5MV0g b3Igb3RoZXIgc2ltaWxhciBtZWNoYW5pc21zIChlZyBESENQdjYpDQ0gICBvICBUaGUgYXNzaWdu bWVudCBvZiBhIG5hbWVkIGRlbGVnYXRlZCBwcmVmaXggcG9vbCBmb3IgdXNlIHdpdGggIklQdjYN ICAgICAgUHJlZml4IE9wdGlvbnMgZm9yIERIQ1B2NiIgW1JGQzM2MzNdDQ1UaGUgYXNzaWdubWVu dCBvZiBhIG5hbWVkIElQdjYgcG9vbCBmb3IgREhDUHY2IGJhc2VkIGFkZHJlc3NpbmcsIHdoZW4g YSBzaW5nbGUgSVB2NiBhZGRyZXNzIG5lZWRzIHRvIGJlIGFzc2lnbmVkIHRvIGEgaG9zdCBmb3Ig dGhlIHNhbWUgcmVhc29ucyBkZXNjcmliZWQgaW4gdGhlIGZpcnN0IGJ1bGxldC4NDQ0yLiAgRGVw bG95bWVudCBTY2VuYXJpb3MNDSAgIEEgY29tbW9uIGJyb2FkYmFuZCBuZXR3b3JrIHNjZW5hcmlv IGlzIGlsbHVzdHJhdGVkIGluIEZpZ3VyZSAxLiAgSXQNICAgaXMgY29tcG9zZWQgb2YgYSBJUCBS b3V0aW5nIFJlc2lkZW50aWFsIEdhdGV3YXkgKFJHKSBvciBob3N0LCBhIExheWVyDSAgIDIgQWNj ZXNzLU5vZGUgKGUuZy4gYSBEU0xBTSksIG9uZSBvciBtb3JlIElQIE5ldHdvcmsgQWNjZXNzIFNl cnZlcnMNICAgKE5BU2VzKSwgYW5kIGFuIEFBQSBzZXJ2ZXIuICBUaGUgUkcgb3IgaG9zdCBhcmUg ZXhwZWN0ZWQgdG8gYmUgbXVsdGkNICAgaG9tZWQgdG8gYm90aCBOQVNlcy4gIExheWVyIDIgQ29u bmVjdGl2aXR5IGJldHdlZW4gdGhlIGhvc3QgYW5kIE5BUw0gICBjYW4gYmUgZWl0aGVyIHZpYSBQ UFBvRSBvciBJUCBvdmVyIEV0aGVybmV0LCBhbmQgZXN0YWJsaXNoZWQNICAgZHluYW1pY2FsbHku DQ0NDQ0NDQ0NDQ0NDQ0NTG91cmRlbGV0LCBldCBhbC4gICAgICBFeHBpcmVzIFNlcHRlbWJlciAx NSwgMjAxMSAgICAgICAgICAgICAgIFtQYWdlIDRdDQwNSW50ZXJuZXQtRHJhZnQgICAgICAgICAg ICAgUkFESVVTIElQdjYgQWNjZXNzICAgICAgICAgICAgICAgICBNYXJjaCAyMDExDQ0NICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLS0tKw0gICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKFJhZGl1cykgICB8IEFBQSB8DSAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC4uLi4uLi4uLi4uPnwgICAgIHwN ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLiAgICAgICAgICAgKy0tKy0t Kw0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB2ICAgICAgICAgICAgICBe DSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKy0tLSstLS0rICAgICAgICAgIC4N ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICBOQVMgIHwgICAgICAgICAgLihS YWRpdXMpDSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICB8ICAgICAg ICAgIC4NICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICArLS0tKy0tLSsgICAgICAg ICAgdg0gICAgICAgICAgICAgICAgICAgICstLS0tLS0rICAgICAgICAgICB8ICAgICAgICAgICst LS0rLS0tKw0gICAgICstLS0tLS0rICAgICAgIHwgIEFOICB8ICAgICAgICAgICB8ICAgICAgICAg IHwgIE5BUyAgfA0gICAgIHwgIFJHLyArLS0tLS0tLXwgICAgICArLS0tLS0tLS0tLS0rLS0tLS0t LS0tLSsgICAgICAgfA0gICAgIHwgaG9zdCB8ICAgICAgIHwgICAgICB8ICAgICAgICAgICAgICAg ICAgICAgIHwgICAgICAgfA0gICAgICstLS0tLS0rIChEU0wpICstLS0tLS0rICAgICAgKEV0aGVy bmV0KSAgICAgICstLS0tLS0tKw0NICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRmlndXJl IDENDSAgIEluIHRoaXMgc2NlbmFyaW8gdGhlIE5BU2VzIG1heSBlbWJlZCBhIERIQ1B2NiBzZXJ2 ZXIgdG8gaGFuZGxlIERIQ1B2Ng0gICByZXF1ZXN0cyBpc3N1ZWQgYnkgUkdzL2hvc3RzLCBhcyB3 ZWxsIGFzIGFjdGluZyBhcyBhIHJvdXRlciBwcm92aWRpbmcNICAgUm91dGVyIEFkdmVydGlzZW1l bnRzLiAgVGhlIFJBRElVUyBzZXJ2ZXIgYXV0aGVudGljYXRlcyBlYWNoIFJHL2hvc3QNICAgYW5k IHJldHVybnMgdG8gdGhlIE5BUyBhdHRyaWJ1dGVzIHVzZWQgZm9yIGF1dGhvcml6YXRpb24gYW5k DSAgIGFjY291bnRpbmcuICBUaGVzZSBhdHRyaWJ1dGVzIGNhbiBpbmNsdWRlIGEgaG9zdCBJUHY2 IGFkZHJlc3MgdG8gYmUNICAgY29uZmlndXJlZCB2aWEgREhDUHY2OyB0aGUgSVB2NiBhZGRyZXNz IG9mIGEgRE5TIHNlcnZlciB0byBjb25maWd1cmVkDSAgIHZpYSBESENQdjYgb3Igcm91dGVyIGFk dmVydGlzZW1lbnQ7IHRoZSBuYW1lIG9mIGEgcHJlZml4IHBvb2wgdG8gYmUNICAgdXNlZCBmb3Ig REhDUHY2IFByZWZpeCBEZWxlZ2F0aW9uOyBvciBJUHY2IHJvdXRlcyB0byBiZSBhbm5vdW5jZWQg dG8NICAgdGhlIGhvc3QuDQ0gICBUaGUgZm9sbG93aW5nIHN1Yi1zZWN0aW9ucyBkaXNjdXNzIGhv dyB0aGVzZSB1c2VzIGluIG1vcmUgZGV0YWlsLg0NMi4xLiAgSVB2NiBBZGRyZXNzIEFzc2lnbm1l bnQNDSAgIERIQ1B2NiBbUkZDMzMxNV0gcHJvdmlkZXMgYSBtZWNoYW5pc20gdG8gYXNzaWduIG9u ZSBvciBtb3JlIG9yIG5vbi0NICAgdGVtcG9yYXJ5IElQdjYgYWRkcmVzc2VzIHRvIGhvc3RzLiAg VG8gcHJvdmlkZSBhIERIQ1B2NiBzZXJ2ZXINICAgcmVzaWRpbmcgb24gYSBOQVMgd2l0aCBvbmUg b3IgbW9yZSBJUHY2IGFkZHJlc3NlcyB0byBiZSBhc3NpZ25lZCwNICAgdGhpcyBkb2N1bWVudCBz cGVjaWZpZXMgdGhlIEZyYW1lZC1JUHY2LUFkZHJlc3MgQXR0cmlidXRlLg0NICAgU2luY2UgREhD UHY2IGNhbiBiZSBkZXBsb3llZCBvbiB0aGUgc2FtZSBuZXR3b3JrIGFzIElDTVB2NiBzdGF0ZWxl c3MNICAgKFNMQUFDKSBbUkZDNDg2Ml0sIGl0IGlzIHBvc3NpYmxlIHRoYXQgdGhlIE5BUyB3aWxs IHJlcXVpcmUgYm90aA0gICBzdGF0ZWZ1bCBhbmQgc3RhdGVsZXNzIGNvbmZpZ3VyYXRpb24gaW5m b3JtYXRpb24uICBUaGVyZWZvcmUgaXQgaXMNICAgcG9zc2libGUgZm9yIHRoZSBGcmFtZWQtSVB2 Ni1BZGRyZXNzLCBGcmFtZWQtSVB2Ni1QcmVmaXggYW5kIEZyYW1lZC0NICAgSW50ZXJmYWNlLUlk IGF0dHJpYnV0ZXMgW1JGQzMxNjJdIHRvIGJlIGluY2x1ZGVkIHdpdGhpbiB0aGUgc2FtZQ0gICBw YWNrZXQuICBUbyBhdm9pZCBhbWJpZ3VpdHksIHRoZSBGcmFtZWQtSVB2Ni1BZGRyZXNzIGF0dHJp YnV0ZSBpcw0gICBvbmx5IHVzZWQgZm9yIGF1dGhvcml6YXRpb24gYW5kIGFjY291bnRpbmcgb2Yg REhDUHY2LWFzc2lnbmVkDSAgIGFkZHJlc3NlcyBhbmQgdGhlIEZyYW1lZC1JUHY2LVByZWZpeCBh bmQgRnJhbWVkLUludGVyZmFjZS1JZA0gICBhdHRyaWJ1dGVzIGFyZSB1c2VkIGZvciBhdXRob3Jp emF0aW9uIGFuZCBhY2NvdW50aW5nIG9mIGFkZHJlc3Nlcw0gICBhc3NpZ25lZCB2aWEgU0xBQUMu DQ0NDQ0NTG91cmRlbGV0LCBldCBhbC4gICAgICBFeHBpcmVzIFNlcHRlbWJlciAxNSwgMjAxMSAg ICAgICAgICAgICAgIFtQYWdlIDVdDQwNSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgUkFESVVT IElQdjYgQWNjZXNzICAgICAgICAgICAgICAgICBNYXJjaCAyMDExDQ0NMi4yLiAgUmVjdXJzaXZl IEROUyBTZXJ2ZXJzDQ0gICBESENQdjYgcHJvdmlkZXMgYW4gb3B0aW9uIGZvciByZWN1cnNpdmUg RE5TIHNlcnZlcnMgdG8gaG9zdHMsIGFzIGRvZXMNICAgSUNNUHY2IHdpdGggUm91dGVyIEFkdmVy dGlzZW1lbnRzIHN1cHBvcnRpbmcgdGhlIGV4cGVyaW1lbnRhbA0gICBbUkZDNTAwNl0gb3B0aW9u LiAgRXhpc3RpbmcgSUVURiBSQURJVVMgYXR0cmlidXRlcyBjb252ZXkgRE5TIGFzIDMyLQ0gICBi aXQgSVB2NCBhZGRyZXNzZXMgYW5kIGNhbm5vdCBzdXBwb3J0IGEgMTI4LWJpdCBJUHY2IGFkZHJl c3MuICBUaGlzDSAgIGRvY3VtZW50IHNwZWNpZmllcyB0aGUgUkFESVVTIGF0dHJpYnV0ZSB0byBj b252ZXkgYSBsaXN0IG9mIElQdjYgRE5TDSAgIFJlY3Vyc2l2ZSBuYW1lIHNlcnZlciBhZGRyZXNz ZXMsIGZyb20gYW4gQUFBIHNlcnZlciwgd2hpY2ggY2FuIHRoYXQNICAgY2FuIGJlIGNvbnZleWVk IGJ5IGEgTkFTIHRvIGEgaG9zdC4NDTIuMy4gIElQdjYgUm91dGUgSW5mb3JtYXRpb24NDSAgIEFu IElQdjYgUm91dGUgSW5mb3JtYXRpb24gb3B0aW9uLCBkZWZpbmVkIGluIFtSRkM0MTkxXSBpcyBp bnRlbmRlZCB0bw0gICBiZSB1c2VkIHRvIGluZm9ybSBhIGhvc3QgY29ubmVjdGVkIHRvIHRoZSBO QVMgdGhhdCBhIHNwZWNpZmljIHJvdXRlDSAgIGlzIHJlYWNoYWJsZSB2aWEgdGhlIE5BUy4gIFRo aXMgaXMgcGFydGljdWxhcmx5IGRlc2lyYWJsZSBpbiBjYXNlcw0gICB3aGVyZSB0aGUgUkcgb3Ig aG9zdCBhcmUgbXVsdGktaG9tZWQgdG8gZGlmZmVyZW50IE5BU2VzIGFzIHNob3duIGluDSAgIEZp Z3VyZSAxLg0NICAgVGhpcyBkb2N1bWVudCBzcGVjaWZpZXMgdGhlIFJBRElVUyBhdHRyaWJ1dGUg dGhhdCBhbGxvd3MgdGhlIEFBQQ0gICBzeXN0ZW0gdG8gcHJvdmlzaW9uIHRoZSBhbm5vdW5jZW1l bnQgYnkgdGhlIE5BUyBvZiBhIHNwZWNpZmljIFJvdXRlDSAgIEluZm9ybWF0aW9uIE9wdGlvbiB0 byBhbiBhY2Nlc3NpbmcgaG9zdC4gIFRoZSBOQVMgbWF5IGFkdmVydGlzZSB0aGlzDSAgIHJvdXRl IHVzaW5nIHRoZSBtZXRob2QgZGVmaW5lZCBpbiBbUkZDNDE5MV0gb3IgdXNpbmcgb3RoZXIgZXF1 aXZhbGVudA0gICBtZXRob2RzLg0NICAgVGhlIGRpc3RpbmN0aW9uIGFuZCBzZXBhcmF0aW9uIGJl dHdlZW4gdGhpcyBhdHRyaWJ1dGUgYW5kIHRoZSBGcmFtZWQtDSAgIElQdjYtUm91dGUgYXR0cmli dXRlIGRlZmluZWQgaW4gW1JGQzMxNjJdIGlzIG5lZWRlZCBkdWUgdG8gdGhlIG5lZWQNICAgdG8g aGF2ZSB0aGUgaW5mb3JtYXRpb24gY2FycmllZCBieSB0aGlzIGF0dHJpYnV0ZSBhZHZlcnRpc2Vk IChpbg0gICBiaW5hcnkgZm9ybWF0IGFzIHBlciBSRkM0MTkxKSB0byBhbiBhdHRhY2hpbmcgY2xp ZW50LCByYXRoZXIgdGhhbg0gICBpbnRlbmRlZCBmb3IgdGhlIE5BUyBpdHNlbGYuDQ0yLjQuICBE ZWxlZ2F0ZWQgSVB2NiBQcmVmaXggUG9vbA0NICAgREhDUHY2IFByZWZpeCBEZWxlZ2F0aW9uIFtS RkMzNjMzXSBpbnZvbHZlcyBhIGRlbGVnYXRpbmcgcm91dGVyDSAgIHNlbGVjdGluZyBhIHByZWZp eCBhbmQgZGVsZWdhdGluZyBpdCBvbiBhIHRlbXBvcmFyeSBiYXNpcyB0byBhDSAgIHJlcXVlc3Rp bmcgcm91dGVyLiAgVGhlIGRlbGVnYXRpbmcgcm91dGVyIG1heSBpbXBsZW1lbnQgYSBudW1iZXIg b2YNICAgc3RyYXRlZ2llcyBhcyB0byBob3cgaXQgY2hvb3NlcyB3aGF0IHByZWZpeCBpcyB0byBi ZSBkZWxlZ2F0ZWQgdG8gYQ0gICByZXF1ZXN0aW5nIHJvdXRlciwgb25lIG9mIHRoZW0gYmVpbmcg dGhlIHVzZSBvZiBhIGxvY2FsIG5hbWVkIHByZWZpeA0gICBwb29sLiAgVGhlIERlbGVnYXRlZC1J UHY2LVByZWZpeC1Qb29sIEF0dHJpYnV0ZSBhbGxvd3MgdGhlIFJBRElVUw0gICBzZXJ2ZXIgdG8g Y29udmV5IGEgcHJlZml4IHBvb2wgbmFtZSB0byBhIE5BUyBob3N0aW5nIGEgREhDUHY2LVBEDSAg IHNlcnZlciBhbmQgYWN0aW5nIGFzIGEgZGVsZWdhdGVkIHJvdXRlci4NDSAgIFNpbmNlIERIQ1B2 NiBQcmVmaXggRGVsZWdhdGlvbiBjYW4gY29uY2VpdmFibHkgYmUgdXNlZCBvbiB0aGUgc2FtZQ0g ICBuZXR3b3JrIGFzIFNMQUFDLCBpdCBpcyBwb3NzaWJsZSBmb3IgdGhlIERlbGVnYXRlZC1JUHY2 LVByZWZpeC1Qb29sDSAgIGFuZCBGcmFtZWQtSVB2Ni1Qb29sIGF0dHJpYnV0ZXMgdG8gYmUgaW5j bHVkZWQgd2l0aGluIHRoZSBzYW1lDSAgIHBhY2tldC4gIFRvIGF2b2lkIGFtYmlndWl0eSBpbiB0 aGlzIHNjZW5hcmlvLCB1c2Ugb2YgdGhlIERlbGVnYXRlZC0NICAgSVB2Ni1QcmVmaXgtUG9vbCBh dHRyaWJ1dGUgc2hvdWxkIGJlIHJlc3RyaWN0ZWQgdG8gYXV0aG9yaXphdGlvbiBhbmQNICAgYWNj b3VudGluZyBvZiBwcmVmaXggcG9vbHMgdXNlZCBpbiBESENQdjYgUHJlZml4IERlbGVnYXRpb24g YW5kIHRoZQ0gICBGcmFtZWQtSVB2Ni1Qb29sIGF0dHJpYnV0ZSBzaG91bGQgYmUgdXNlZCBmb3Ig YXV0aG9yaXphdGlvbiBhbmQNDQ0NTG91cmRlbGV0LCBldCBhbC4gICAgICBFeHBpcmVzIFNlcHRl bWJlciAxNSwgMjAxMSAgICAgICAgICAgICAgIFtQYWdlIDZdDQwNSW50ZXJuZXQtRHJhZnQgICAg ICAgICAgICAgUkFESVVTIElQdjYgQWNjZXNzICAgICAgICAgICAgICAgICBNYXJjaCAyMDExDQ0N ICAgYWNjb3VudGluZyBvZiBwcmVmaXggcG9vbHMgdXNlZCBpbiBTTEFBQy4NDSAyLjUgSVB2NiBw b29sIGZvciBESENQdjYgYWRkcmVzcyBhc3NpZ25tZW50DSAgDSAgICBESENQdjYgW1JGQzMzMTVd IHByb3ZpZGVzIGEgbWVjaGFuaXNtIHRvIGFzc2lnbiBvbmUgb3IgbW9yZSBvciBub24tDSAgIHRl bXBvcmFyeSBJUHY2IGFkZHJlc3NlcyB0byBob3N0cy4gIFNlY3Rpb24gMi4xIGludHJvZHVjZXMg RnJhbWVkLUlQdjYtQWRkcmVzcyBBdHRyaWJ1dGUgdG8gYmUgdXNlZCBmb3IgcHJvdmlkaW5nIGEg REhDUHY2IHNlcnZlciByZXNpZGluZyBvbiBhIE5BUyB3aXRoIG9uZSBvciBtb3JlIElQdjYgYWRk cmVzc2VzIHRvIGJlIGFzc2lnbmVkIHRvIHRoZSBjbGllbnRzLiBBbiBhbHRlcm5hdGl2ZSB3YXkg dG8gYWNoaWV2ZSBhIHNpbWlsYXIgcmVzdWx0IGlzIHRvIGV4dHJhY3QgYW4gSVB2NiBhZGRyZXNz IHRvIGJlIGFzc2lnbmVkLCBmcm9tIGEgcG9vbCBsb2NhbGx5IGNvbmZpZ3VyZWQgb24gdGhlIE5B Uy4gVGhpcyBkb2N1bWVudCBzcGVjaWZpZXMgdGhlIERIQ1B2Ni1JUHY2LUFkZHJlc3MtUG9vbCBh dHRyaWJ1dGUgdG8gYWxsb3cgdGhlIFJBRElVUyBzZXJ2ZXIgdG8gY29udmV5IGEgcG9vbCBuYW1l IHRvIGJlIHVzZWQgZm9yIERIQ1B2NiBiYXNlZCBhZGRyZXNzaW5nLCB3aGVuIGEgc2luZ2xlIElQ djYgYWRkcmVzcyBuZWVkcyB0byBiZSBhc3NpZ25lZCB0byBhIGhvc3QsIHRvIGEgTkFTIGhvc3Rp bmcgYSBESENQdjYgc2VydmVyLg0NU2luY2UgREhDUHY2IGNhbiBjb25jZWl2YWJseSBiZSB1c2Vk IG9uIHRoZSBzYW1lIG5ldHdvcmsgYXMgREhDUHY2IFByZWZpeCBEZWxlZ2F0aW9uLCBpdCBpcyBw b3NzaWJsZSBmb3IgdGhlIERlbGVnYXRlZC1JUHY2LVByZWZpeC1Qb29sDSAgIGFuZCBESENQdjYt SVB2Ni1BZGRyZXNzLVBvb2wgYXR0cmlidXRlcyB0byBiZSBpbmNsdWRlZCB3aXRoaW4gdGhlIHNh bWUNICAgcGFja2V0LiAgVG8gYXZvaWQgYW1iaWd1aXR5IGluIHRoaXMgc2NlbmFyaW8sIHVzZSBv ZiB0aGUgRGVsZWdhdGVkLQ0gICBJUHY2LVByZWZpeC1Qb29sIGF0dHJpYnV0ZSBzaG91bGQgYmUg cmVzdHJpY3RlZCB0byBhdXRob3JpemF0aW9uIGFuZA0gICBhY2NvdW50aW5nIG9mIHByZWZpeCBw b29scyB1c2VkIGluIERIQ1B2NiBQcmVmaXggRGVsZWdhdGlvbiBhbmQgdGhlDSAgIERIQ1B2Ni1J UHY2LUFkZHJlc3MtUG9vbCBhdHRyaWJ1dGUgc2hvdWxkIGJlIHVzZWQgZm9yIGF1dGhvcml6YXRp b24gYW5kIGFjY291bnRpbmcgb2YgSVB2NiBhZGRyZXNzIHBvb2wgdXNlZCBmb3IgREhDUHY2IGJh c2VkIGFkZHJlc3Npbmcgd2hlbiBhIHNpbmdsZSBJUHY2IGFkZHJlc3MgbmVlZHMgdG8gYmUgYXNz aWduZWQgdG8gYSBsaW5rLg0NDQ0zLiAgQXR0cmlidXRlcw0NICAgVGhlIGZpZWxkcyBzaG93biBp biB0aGUgZGlhZ3JhbXMgYmVsb3cgYXJlIHRyYW5zbWl0dGVkIGZyb20gbGVmdCB0bw0gICByaWdo dC4NDTMuMS4gIEZyYW1lZC1JUHY2LUFkZHJlc3MNDSAgIFRoaXMgQXR0cmlidXRlIGluZGljYXRl cyBhbiBJUHY2IEFkZHJlc3MgdGhhdCBpcyBhc3NpZ25lZCB0byB0aGUgTkFTLQ0gICBmYWNpbmcg aW50ZXJmYWNlIG9mIHRoZSBSRy9ob3N0LiAgSXQgTUFZIGJlIHVzZWQgaW4gQWNjZXNzLUFjY2Vw dA0gICBwYWNrZXRzLCBhbmQgTUFZIGFwcGVhciBtdWx0aXBsZSB0aW1lcy4gIEl0IE1BWSBiZSB1 c2VkIGluIGFuIEFjY2Vzcy0NICAgUmVxdWVzdCBwYWNrZXQgYXMgYSBoaW50IGJ5IHRoZSBOQVMg dG8gdGhlIHNlcnZlciB0aGF0IGl0IHdvdWxkDSAgIHByZWZlciB0aGVzZSBJUHY2IGFkZHJlc3Mo ZXMpLCBidXQgdGhlIHNlcnZlciBpcyBub3QgcmVxdWlyZWQgdG8NICAgaG9ub3IgdGhlIGhpbnQu ICBTaW5jZSBpdCBpcyBhc3N1bWVkIHRoYXQgdGhlIE5BUyB3aWxsIGFkZCBhIHJvdXRlDSAgIGNv cnJlc3BvbmRpbmcgdG8gdGhlIGFkZHJlc3MsIGl0IGlzIG5vdCBuZWNlc3NhcnkgZm9yIHRoZSBz ZXJ2ZXIgdG8NICAgYWxzbyBzZW5kIGEgaG9zdCBGcmFtZWQtSVB2Ni1Sb3V0ZSBhdHRyaWJ1dGUg Zm9yIHRoZSBzYW1lIGFkZHJlc3MuDQ0gICBUaGlzIEF0dHJpYnV0ZSBjYW4gYmUgdXNlZCBieSBh IERIQ1B2NiBwcm9jZXNzIG9uIHRoZSBOQVMgdG8gYXNzaWduIGENICAgdW5pcXVlIElQdjYgYWRk cmVzcyB0byB0aGUgUkcvaG9zdC4NDSAgIEEgc3VtbWFyeSBvZiB0aGUgRnJhbWVkLUlQdjYtQWRk cmVzcyBBdHRyaWJ1dGUgZm9ybWF0IGlzIHNob3duIGJlbG93Lg0NICAgICAwICAgICAgICAgICAg ICAgICAgIDEgICAgICAgICAgICAgICAgICAgMiAgICAgICAgICAgICAgICAgICAzDSAgICAgMCAx IDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAyIDMgNCA1IDYgNyA4IDkg MCAxDSAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKw0gICAgfCAgICAgVHlwZSAgICAgIHwgICAgIExlbmd0aCAgICB8ICAg ICAgICAgICAgQWRkcmVzcw0gICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgQWRkcmVzcyAoY29udCkNICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDSAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIEFkZHJlc3MgKGNvbnQpDSAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBBZGRyZXNzIChjb250KQ0gICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNICAgICAgICAgICAgIEFkZHJlc3MgKGNv bnQuKSAgICAgICAgfA0gICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDQ0gICBU eXBlDQ0gICAgICBUQkExIGZvciBGcmFtZWQtSVB2Ni1BZGRyZXNzDQ0gICBMZW5ndGgNDSAgICAg IDE4DQ0NDQ0NDUxvdXJkZWxldCwgZXQgYWwuICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMTUsIDIw MTEgICAgICAgICAgICAgICBbUGFnZSA3XQ0MDUludGVybmV0LURyYWZ0ICAgICAgICAgICAgIFJB RElVUyBJUHY2IEFjY2VzcyAgICAgICAgICAgICAgICAgTWFyY2ggMjAxMQ0NDSAgIEFkZHJlc3MN DSAgICAgIFRoZSBJUHY2IGFkZHJlc3MgZmllbGQgY29udGFpbnMgYSAxMjgtYml0IElQdjYgYWRk cmVzcy4NDTMuMi4gIEROUy1TZXJ2ZXItSVB2Ni1BZGRyZXNzDQ0gICBUaGUgRE5TLVNlcnZlci1J UHY2LUFkZHJlc3MgQXR0cmlidXRlIGNvbnRhaW5zIHRoZSBJUHY2IGFkZHJlc3Mgb2YgYQ0gICBy ZWN1cnNpdmUgRE5TIHNlcnZlci4gIFRoaXMgYXR0cmlidXRlIE1BWSBiZSBpbmNsdWRlZCBtdWx0 aXBsZSB0aW1lcw0gICBpbiBBY2Nlc3MtQWNjZXB0IHBhY2tldHMsIHdoZW4gdGhlIGludGVudGlv biBpcyBmb3IgYSBOQVMgdG8gYW5ub3VuY2UNICAgbW9yZSB0aGFuIG9uZSByZWN1cnNpdmUgRE5T IGFkZHJlc3MgdG8gYW4gUkcvaG9zdC4gIFRoZSBzYW1lIG9yZGVyIG9mDSAgIHRoZSBhdHRyaWJ1 dGVzIGlzIGV4cGVjdGVkIHRvIGJlIGZvbGxvd2VkIGluIHRoZSBhbm5vdW5jZW1lbnRzIHRvIHRo ZQ0gICBjbGllbnQuDQ0gICBUaGUgY29udGVudCBvZiB0aGlzIGF0dHJpYnV0ZSBjYW4gYmUgaW5z ZXJ0ZWQgaW4gYSBESENQdjYgb3B0aW9uIGFzDSAgIHNwZWNpZmllZCBpbiBbUkZDMzY0Nl0gb3Ig bWFwcGVkIG9wdGlvbi4NDSAgIEEgc3VtbWFyeSBvZiB0aGUgRE5TLVNlcnZlci1JUHY2LUFkZHJl c3MgQXR0cmlidXRlIGZvcm1hdCBpcyBnaXZlbg0gICBiZWxvdy4NDSAgICAgMCAgICAgICAgICAg ICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAgMw0gICAgIDAg MSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2IDcgOCA5 IDAgMQ0gICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSsNICAgIHwgICAgIFR5cGUgICAgICB8ICAgICBMZW5ndGggICAgfCAg ICAgICAgICAgIEFkZHJlc3MNICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDSAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIEFkZHJlc3MgKGNvbnQpDSAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBBZGRyZXNzIChjb250KQ0gICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgQWRkcmVzcyAoY29udCkNICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rDSAgICAgICAgICAgICBBZGRyZXNzIChj b250LikgICAgICAgIHwNICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKw0NICAg VHlwZQ0NICAgICAgVEJBMiBmb3IgRE5TLVNlcnZlci1JUHY2LUFkZHJlc3MNDSAgIExlbmd0aA0N ICAgICAgMTgNDSAgIEFkZHJlc3MNDSAgICAgIFRoZSAxMjgtYml0IElQdjYgYWRkcmVzcyBvZiBh IEROUyBzZXJ2ZXIuDQ0NDQ0NDQ1Mb3VyZGVsZXQsIGV0IGFsLiAgICAgIEV4cGlyZXMgU2VwdGVt YmVyIDE1LCAyMDExICAgICAgICAgICAgICAgW1BhZ2UgOF0NDA1JbnRlcm5ldC1EcmFmdCAgICAg ICAgICAgICBSQURJVVMgSVB2NiBBY2Nlc3MgICAgICAgICAgICAgICAgIE1hcmNoIDIwMTENDQ0z LjMuICBSb3V0ZS1JUHY2LUluZm9ybWF0aW9uDQ0gICBUaGlzIEF0dHJpYnV0ZSBzcGVjaWZpZXMg YSBwcmVmaXggKGFuZCBjb3JyZXNwb25kaW5nIHJvdXRlKSB0byBiZQ0gICBhdXRob3JpemVkIGZv ciBhbm5vdW5jZW1lbnQgdG93YXJkcyB0aGUgdXNlciBieSB0aGUgTkFTLCB3aXRoIHRoZQ0gICBy ZWFjaGFibGUgYnkgbWVhbnMgb2Ygcm91dGluZyB0b3dhcmRzIHRoZSBOQVMuICBJdCBpcyB1c2Vk IGluIHRoZQ0gICBBY2Nlc3MtQWNjZXB0IHBhY2tldCBhbmQgY2FuIGFwcGVhciBtdWx0aXBsZSB0 aW1lcy4gIEl0IG1heSBhbHNvIGJlDSAgIHVzZWQgaW4gdGhlIEFjY2Vzcy1SZXF1ZXN0IHBhY2tl dCBhcyBoaW50IHRvIHRoZSBzZXJ2ZXIuDQ0gICBBIHN1bW1hcnkgb2YgdGhlIFJvdXRlLUlQdjYt SW5mb3JtYXRpb24gYXR0cmlidXRlIGZvcm1hdCBpcyBzaG93bg0gICBiZWxvdy4gIFRoZSByb3V0 ZSBpbmZvcm1hdGlvbiBvcHRpb24gZGVmaW5lZCBpbiBbUkZDNDE5MV0gaXMgY2FwdHVyZWQNICAg aW4gdGhpcyBhbmQgZm9sbG93aW5nIHR3byBhdHRyaWJ1dGVzLg0NDSAgICAgICAgMCAgICAgICAg ICAgICAgICAgICAxICAgICAgICAgICAgICAgICAgIDIgICAgICAgICAgICAgICAgICAgMw0gICAg ICAgIDAgMSAyIDMgNCA1IDYgNyA4IDkgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2 IDcgOCA5IDAgMQ0gICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSsNICAgICAgIHwgICAgIFR5cGUgICAgICB8ICAgIExl bmd0aCAgICAgfCAgIFJlc2VydmVkICAgIHwgUHJlZml4LUxlbmd0aCB8DSAgICAgICArLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Kw0gICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIHwNICAgICAgIC4gICAgICAgICAgICAgICAgICAgICAgICBQcmVmaXgg KHZhcmlhYmxlKSAgICAgICAgICAgICAgICAgICAgICAuDSAgICAgICAuICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLg0gICAgICAg fCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIHwNICAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0r LSstKy0rLSstKy0rLSstKy0rLSstKy0rDQ0gICBUeXBlDQ0gICAgICBUQkEzIGZvciBSb3V0ZS1J UHY2LUluZm9ybWF0aW9uDQ0gICBMZW5ndGgNDSAgICAgIExlbmd0aCBpbiBieXRlcy4gIEF0IGxl YXN0IDQgYW5kIG5vIGxhcmdlciB0aGFuIDIwOyB0eXBpY2FsbHkgMTINICAgICAgb3IgbGVzcy4N DSAgIFByZWZpeCBMZW5ndGgNDSAgICAgIFRoZSBsZW5ndGggb2YgdGhlIHByZWZpeCwgaW4gYml0 czsgYXQgbGVhc3QgMCBhbmQgbm8gbW9yZSB0aGFuDSAgICAgIDEyODsgdHlwaWNhbGx5IDY0IG9y IGxlc3MuDQ0gICBQcmVmaXgNDSAgICAgIFZhcmlhYmxlLWxlbmd0aCBmaWVsZCBjb250YWluaW5n IGFuIElQIHByZWZpeC4gIFRoZSBQcmVmaXggTGVuZ3RoDSAgICAgIGZpZWxkIGNvbnRhaW5zIHRo ZSBudW1iZXIgb2YgdmFsaWQgbGVhZGluZyBiaXRzIGluIHRoZSBwcmVmaXguDSAgICAgIFRoZSBi aXRzIGluIHRoZSBwcmVmaXggYWZ0ZXIgdGhlIHByZWZpeCBsZW5ndGggKGlmIGFueSkgdXAgdG8g dGhlDSAgICAgIGJ5dGUgYm91bmRhcnkgYXJlIHJlc2VydmVkIGFuZCBNVVNUIGJlIGluaXRpYWxp emVkIHRvIHplcm8gYnkgdGhlDSAgICAgIHNlbmRlciBhbmQgaWdub3JlZCBieSB0aGUgcmVjZWl2 ZXIuDQ0NDQ0NDUxvdXJkZWxldCwgZXQgYWwuICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMTUsIDIw MTEgICAgICAgICAgICAgICBbUGFnZSA5XQ0MDUludGVybmV0LURyYWZ0ICAgICAgICAgICAgIFJB RElVUyBJUHY2IEFjY2VzcyAgICAgICAgICAgICAgICAgTWFyY2ggMjAxMQ0NDTMuNC4gIERlbGVn YXRlZC1JUHY2LVByZWZpeC1Qb29sDQ0gICBUaGlzIEF0dHJpYnV0ZSBjb250YWlucyB0aGUgbmFt ZSBvZiBhbiBhc3NpZ25lZCBwb29sIHRoYXQgU0hPVUxEIGJlDSAgIHVzZWQgdG8gc2VsZWN0IGFu IElQdjYgZGVsZWdhdGVkIHByZWZpeCBmb3IgdGhlIHVzZXIuICBJZiBhIE5BUyBkb2VzDSAgIG5v dCBzdXBwb3J0IG11bHRpcGxlIHByZWZpeCBwb29scywgdGhlIE5BUyBNVVNUIGlnbm9yZSB0aGlz DSAgIEF0dHJpYnV0ZS4NDSAgIEEgc3VtbWFyeSBvZiB0aGUgRGVsZWdhdGVkLUlQdjYtUHJlZml4 LVBvb2wgQXR0cmlidXRlIGZvcm1hdCBpcyBzaG93bg0gICBiZWxvdy4gIFRoZSBmaWVsZHMgYXJl IHRyYW5zbWl0dGVkIGZyb20gbGVmdCB0byByaWdodC4NICAgICAgIDAgICAgICAgICAgICAgICAg ICAgMSAgICAgICAgICAgICAgICAgICAyDSAgICAgICAwIDEgMiAzIDQgNSA2IDcgOCA5IDAgMSAy IDMgNCA1IDYgNyA4IDkgMCAxIDIgMw0gICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSstKy0rDSAgICAgIHwgICAgIFR5cGUgICAgICB8ICAgIExlbmd0aCAg ICAgfCAgICAgU3RyaW5nLi4uDSAgICAgICstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKy0rLSsNDQ0gICBUeXBlDQ0gICAgICBUQkE0IGZvciBEZWxlZ2F0ZWQtSVB2 Ni1QcmVmaXgtUG9vbA0NICAgTGVuZ3RoDQ0gICAgICBMZW5ndGggaW4gYnl0ZXMuICBBdCBsZWFz dCA0Lg0NICAgU3RyaW5nDQ0gICAgICBUaGUgc3RyaW5nIGZpZWxkIGNvbnRhaW5zIHRoZSBuYW1l IG9mIGFuIGFzc2lnbmVkIElQdjYgcHJlZml4IHBvb2wNICAgICAgY29uZmlndXJlZCBvbiB0aGUg TkFTLiAgVGhlIGZpZWxkIGlzIG5vdCBOVUxMIChoZXggMDApIHRlcm1pbmF0ZWQuDQ0NMy41LiAg REhDUHY2LUlQdjYtQWRkcmVzcy1Qb29sDQ0gICBUaGlzIEF0dHJpYnV0ZSBjb250YWlucyB0aGUg bmFtZSBvZiBhbiBhc3NpZ25lZCBwb29sIHRoYXQgU0hPVUxEIGJlDSAgIHVzZWQgdG8gc2VsZWN0 IGFuIElQdjYgYWRkcmVzcyBmb3IgdGhlIHVzZXIuICBJZiBhIE5BUyBkb2VzDSAgIG5vdCBzdXBw b3J0IG11bHRpcGxlIHByZWZpeCBwb29scywgdGhlIE5BUyBNVVNUIGlnbm9yZSB0aGlzDSAgIEF0 dHJpYnV0ZS4NDSAgIEEgc3VtbWFyeSBvZiB0aGUgREhDUHY2LUlQdjYtQWRkcmVzcy1Qb29sIEF0 dHJpYnV0ZSBmb3JtYXQgaXMgc2hvd24NICAgYmVsb3cuICBUaGUgZmllbGRzIGFyZSB0cmFuc21p dHRlZCBmcm9tIGxlZnQgdG8gcmlnaHQuDSAgICAgICAwICAgICAgICAgICAgICAgICAgIDEgICAg ICAgICAgICAgICAgICAgMg0gICAgICAgMCAxIDIgMyA0IDUgNiA3IDggOSAwIDEgMiAzIDQgNSA2 IDcgOCA5IDAgMSAyIDMNICAgICAgKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rLSstKw0gICAgICB8ICAgICBUeXBlICAgICAgfCAgICBMZW5ndGggICAgIHwgICAg IFN0cmluZy4uLg0gICAgICArLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSstKy0rLSst Ky0rLSstKy0rDQ0NICAgVHlwZQ0NICAgICAgVEJBNCBmb3IgREhDUHY2LUlQdjYtQWRkcmVzcy1Q b29sDQ0gICBMZW5ndGgNDSAgICAgIExlbmd0aCBpbiBieXRlcy4gIEF0IGxlYXN0IDQuDQ0gICBT dHJpbmcNDSAgICAgIFRoZSBzdHJpbmcgZmllbGQgY29udGFpbnMgdGhlIG5hbWUgb2YgYW4gYXNz aWduZWQgSVB2NiBhZGRyZXNzIHBvb2wNICAgICAgY29uZmlndXJlZCBvbiB0aGUgTkFTLiAgVGhl IGZpZWxkIGlzIG5vdCBOVUxMIChoZXggMDApIHRlcm1pbmF0ZWQuDQ0NMy41LiAgVGFibGUgb2Yg YXR0cmlidXRlcw0NICAgVGhlIGZvbGxvd2luZyB0YWJsZSBwcm92aWRlcyBhIGd1aWRlIHRvIHdo aWNoIGF0dHJpYnV0ZXMgbWF5IGJlIGZvdW5kDSAgIGluIHdoaWNoIGtpbmRzIG9mIHBhY2tldHMs IGFuZCBpbiB3aGF0IHF1YW50aXR5Lg0NDVJlcXVlc3QgQWNjZXB0IFJlamVjdCBDaGFsbGVuZ2Ug QWNjb3VudGluZyAgICAjICBBdHRyaWJ1dGUNICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBSZXF1ZXN0DTArICAgICAgMCsgICAgIDAgICAgICAwICAgICAgICAgMCsgICAgICBUQkEx ICBGcmFtZWQtSVB2Ni1BZGRyZXNzDTArICAgICAgMCsgICAgIDAgICAgICAwICAgICAgICAgMCsg ICAgICBUQkEyICBETlMtU2VydmVyLUlQdjYtQWRkcmVzcw0wICAgICAgIDArICAgICAwICAgICAg MCAgICAgICAgIDArICAgICAgVEJBMyAgUm91dGUtSVB2Ni1JbmZvcm1hdGlvbg0wICAgICAgMC0x ICAgICAwICAgICAgMCAgICAgICAgMC0xICAgICAgVEJBNCAgRGVsZWdhdGVkLUlQdjYtUHJlZml4 LVBvb2wNMCAgICAgIDAtMSAgICAgMCAgICAgIDAgICAgICAgIDAtMSAgICAgIFRCQTQgIERIQ1B2 Ni1JUHY2LUFkZHJlc3MtUG9vbA0NDTQuICBEaWFtZXRlciBDb25zaWRlcmF0aW9ucw0NICAgR2l2 ZW4gdGhhdCB0aGUgQXR0cmlidXRlcyBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQgYXJlIGFsbG9j YXRlZCBmcm9tDSAgIHRoZSBzdGFuZGFyZCBSQURJVVMgdHlwZSBzcGFjZSAoc2VlIFNlY3Rpb24g NiksIG5vIHNwZWNpYWwgaGFuZGxpbmcNICAgaXMgcmVxdWlyZWQgYnkgRGlhbWV0ZXIgZW50aXRp ZXMuDQ0NDUxvdXJkZWxldCwgZXQgYWwuICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMTUsIDIwMTEg ICAgICAgICAgICAgIFtQYWdlIDEwXQ0MDUludGVybmV0LURyYWZ0ICAgICAgICAgICAgIFJBRElV UyBJUHY2IEFjY2VzcyAgICAgICAgICAgICAgICAgTWFyY2ggMjAxMQ0NDTUuICBTZWN1cml0eSBD b25zaWRlcmF0aW9ucw0NICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgdGhlIHVzZSBvZiBSQURJ VVMgZm9yIHRoZSBwdXJwb3NlcyBvZg0gICBhdXRoZW50aWNhdGlvbiwgYXV0aG9yaXphdGlvbiBh bmQgYWNjb3VudGluZyBpbiBJUHY2LWVuYWJsZWQNICAgbmV0d29ya3MuICBJbiBzdWNoIG5ldHdv cmtzLCB0aGUgUkFESVVTIHByb3RvY29sIG1heSBydW4gZWl0aGVyIG92ZXINICAgSVB2NCBvciBv dmVyIElQdjYuICBLbm93biBzZWN1cml0eSB2dWxuZXJhYmlsaXRpZXMgb2YgdGhlIFJBRElVUw0g ICBwcm90b2NvbCBhcHBseSB0byB0aGUgYXR0cmlidXRlcyBkZWZpbmVkIGluIHRoaXMgZG9jdW1l bnQuICBTaW5jZQ0gICBJUFNFQyBpcyBuYXRpdmVseSBkZWZpbmVkIGZvciBJUHY2LCBpdCBpcyBl eHBlY3RlZCB0aGF0IHJ1bm5pbmcNICAgUkFESVVTIGltcGxlbWVudGF0aW9ucyBzdXBwb3J0aW5n IElQdjYgbWF5IHdhbnQgdG8gcnVuIG92ZXIgSVBTRUMuDSAgIFdoZXJlIFJBRElVUyBpcyBydW4g b3ZlciBJUFNFQyBhbmQgd2hlcmUgY2VydGlmaWNhdGVzIGFyZSB1c2VkIGZvcg0gICBhdXRoZW50 aWNhdGlvbiwgaXQgbWF5IGJlIGRlc2lyYWJsZSB0byBhdm9pZCBtYW5hZ2VtZW50IG9mIFJBRElV Uw0gICBzaGFyZWQgc2VjcmV0cywgc28gYXMgdG8gbGV2ZXJhZ2UgdGhlIGltcHJvdmVkIHNjYWxh YmlsaXR5IG9mIHB1YmxpYw0gICBrZXkgaW5mcmFzdHJ1Y3R1cmUuDQ0NNi4gIElBTkEgQ29uc2lk ZXJhdGlvbnMNDSAgIFRoaXMgZG9jdW1lbnQgcmVxdWlyZXMgdGhlIGFzc2lnbm1lbnQgb2YgdGhy ZWUgbmV3IFJBRElVUyBBdHRyaWJ1dGUNICAgVHlwZXMgaW4gdGhlICJSYWRpdXMgVHlwZXMiIHJl Z2lzdHJ5IChjdXJyZW50bHkgbG9jYXRlZCBhdA0gICBodHRwOi8vd3d3LmlhbmEub3JnL2Fzc2ln bm1lbnRzL3JhZGl1cy10eXBlcyBmb3IgdGhlIGZvbGxvd2luZw0gICBhdHRyaWJ1dGVzOg0NICAg byAgRnJhbWVkLUlQdjYtQWRkcmVzcw0NICAgbyAgRE5TLVNlcnZlci1JUHY2LUFkZHJlc3MNDSAg IG8gIFJvdXRlLUlQdjYtSW5mb3JtYXRpb24NDSAgIG8gIERlbGVnYXRlZC1JUHY2LVByZWZpeC1Q b29sDURIQ1B2Ni1JUHY2LUFkZHJlc3MtUG9vbA0NDTcuICBBY2tub3dsZWRnZW1lbnRzDQ0gICBU aGUgYXV0aG9ycyB3b3VsZCBsaWtlIHRvIHRoYW5rIEJlcm5hcmQgQWJvYmEsIEFsZnJlZCBIaW5l cywgQWxhbg0gICBEZUtvaywgUGV0ZXIgRGVhY29uLCBhbmQgTWFyayBTbWl0aCBmb3IgdGhlaXIg aGVscCBhbmQgY29tbWVudHMgaW4NICAgcmV2aWV3aW5nIHRoaXMgZG9jdW1lbnQuDQ0NOC4gIFJl ZmVyZW5jZXMNDTguMS4gIE5vcm1hdGl2ZSBSZWZlcmVuY2VzDQ0gICBbUkZDMjExOV0gIEJyYWRu ZXIsIFMuLCAiS2V5IHdvcmRzIGZvciB1c2UgaW4gUkZDcyB0byBJbmRpY2F0ZQ0gICAgICAgICAg ICAgIFJlcXVpcmVtZW50IExldmVscyIsIEJDUCAxNCwgUkZDIDIxMTksIE1hcmNoIDE5OTcuDQ0g ICBbUkZDNDg2Ml0gIFRob21zb24sIFMuLCBOYXJ0ZW4sIFQuLCBhbmQgVC4gSmlubWVpLCAiSVB2 NiBTdGF0ZWxlc3MNICAgICAgICAgICAgICBBZGRyZXNzIEF1dG9jb25maWd1cmF0aW9uIiwgUkZD IDQ4NjIsIFNlcHRlbWJlciAyMDA3Lg0NDQ0NTG91cmRlbGV0LCBldCBhbC4gICAgICBFeHBpcmVz IFNlcHRlbWJlciAxNSwgMjAxMSAgICAgICAgICAgICAgW1BhZ2UgMTFdDQwNSW50ZXJuZXQtRHJh ZnQgICAgICAgICAgICAgUkFESVVTIElQdjYgQWNjZXNzICAgICAgICAgICAgICAgICBNYXJjaCAy MDExDQ0NOC4yLiAgSW5mb3JtYXRpdmUgUmVmZXJlbmNlcw0NICAgW1JGQzMxNjJdICBBYm9iYSwg Qi4sIFpvcm4sIEcuLCBhbmQgRC4gTWl0dG9uLCAiUkFESVVTIGFuZCBJUHY2IiwNICAgICAgICAg ICAgICBSRkMgMzE2MiwgQXVndXN0IDIwMDEuDQ0gICBbUkZDMzMxNV0gIERyb21zLCBSLiwgQm91 bmQsIEouLCBWb2x6LCBCLiwgTGVtb24sIFQuLCBQZXJraW5zLCBDLiwNICAgICAgICAgICAgICBh bmQgTS4gQ2FybmV5LCAiRHluYW1pYyBIb3N0IENvbmZpZ3VyYXRpb24gUHJvdG9jb2wgZm9yDSAg ICAgICAgICAgICAgSVB2NiAoREhDUHY2KSIsIFJGQyAzMzE1LCBKdWx5IDIwMDMuDQ0gICBbUkZD MzYzM10gIFRyb2FuLCBPLiBhbmQgUi4gRHJvbXMsICJJUHY2IFByZWZpeCBPcHRpb25zIGZvciBE eW5hbWljDSAgICAgICAgICAgICAgSG9zdCBDb25maWd1cmF0aW9uIFByb3RvY29sIChESENQKSB2 ZXJzaW9uIDYiLCBSRkMgMzYzMywNICAgICAgICAgICAgICBEZWNlbWJlciAyMDAzLg0NICAgW1JG QzM2NDZdICAiIi4NDSAgIFtSRkM0MTkxXSAgRHJhdmVzLCBSLiBhbmQgRC4gVGhhbGVyLCAiRGVm YXVsdCBSb3V0ZXIgUHJlZmVyZW5jZXMgYW5kDSAgICAgICAgICAgICAgTW9yZS1TcGVjaWZpYyBS b3V0ZXMiLCBSRkMgNDE5MSwgTm92ZW1iZXIgMjAwNS4NDSAgIFtSRkM0ODE4XSAgU2Fsb3dleSwg Si4gYW5kIFIuIERyb21zLCAiUkFESVVTIERlbGVnYXRlZC1JUHY2LVByZWZpeA0gICAgICAgICAg ICAgIEF0dHJpYnV0ZSIsIFJGQyA0ODE4LCBBcHJpbCAyMDA3Lg0NICAgW1JGQzQ4NjFdICBOYXJ0 ZW4sIFQuLCBOb3JkbWFyaywgRS4sIFNpbXBzb24sIFcuLCBhbmQgSC4gU29saW1hbiwNICAgICAg ICAgICAgICAiTmVpZ2hib3IgRGlzY292ZXJ5IGZvciBJUCB2ZXJzaW9uIDYgKElQdjYpIiwgUkZD IDQ4NjEsDSAgICAgICAgICAgICAgU2VwdGVtYmVyIDIwMDcuDQ0gICBbUkZDNTAwNl0gIEplb25n LCBKLiwgUGFyaywgUy4sIEJlbG9laWwsIEwuLCBhbmQgUy4gTWFkYW5hcGFsbGksDSAgICAgICAg ICAgICAgIklQdjYgUm91dGVyIEFkdmVydGlzZW1lbnQgT3B0aW9uIGZvciBETlMgQ29uZmlndXJh dGlvbiIsDSAgICAgICAgICAgICAgUkZDIDUwMDYsIFNlcHRlbWJlciAyMDA3Lg0NICAgW1JGQzUy MjZdICBOYXJ0ZW4sIFQuIGFuZCBILiBBbHZlc3RyYW5kLCAiR3VpZGVsaW5lcyBmb3IgV3JpdGlu ZyBhbg0gICAgICAgICAgICAgIElBTkEgQ29uc2lkZXJhdGlvbnMgU2VjdGlvbiBpbiBSRkNzIiwg QkNQIDI2LCBSRkMgNTIyNiwNICAgICAgICAgICAgICBNYXkgMjAwOC4NDQ1BdXRob3JzJyBBZGRy ZXNzZXMNDSAgIEJlbm9pdCBMb3VyZGVsZXQNICAgQ2lzY28gU3lzdGVtcywgSW5jLg0gICBWaWxs YWdlIGVudC4gR3JlZW5TaWRlLCBCYXQgVDMsDSAgIDQwMCwgQXYgZGUgUm91bWFuaWxsZSwNICAg MDY0MTAgQklPVCAtIFNvcGhpYS1BbnRpcG9saXMgQ2VkZXgNICAgRnJhbmNlDQ0gICBQaG9uZTog KzMzIDQgOTcgMjMgMjYgMjMNICAgRW1haWw6IGJsb3VyZGVsQGNpc2NvLmNvbQ0NDQ0NDQ1Mb3Vy ZGVsZXQsIGV0IGFsLiAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDE1LCAyMDExICAgICAgICAgICAg ICBbUGFnZSAxMl0NDA1JbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICBSQURJVVMgSVB2NiBBY2Nl c3MgICAgICAgICAgICAgICAgIE1hcmNoIDIwMTENDQ0gICBXb2pjaWVjaCBEZWMgKGVkaXRvcikN ICAgQ2lzY28gU3lzdGVtcywgSW5jLg0gICBIYWFybGVyYmVyZ3dlZyAxMy0xOQ0gICBBbXN0ZXJk YW0gLCBOT09SRC1IT0xMQU5EIDExMDEgQ0gNICAgTmV0aGVybGFuZHMNDSAgIEVtYWlsOiB3ZGVj QGNpc2NvLmNvbQ0NDSAgIEJlaGNldCBTYXJpa2F5YQ0gICBIdWF3ZWkgVVNBDSAgIDE3MDAgQWxt YSBEci4gU3VpdGUgNTAwDSAgIFBsYW5vLCBUWA0gICBVUw0NICAgUGhvbmU6ICsxIDk3Mi01MDkt NTU5OQ0gICBFbWFpbDogc2FyaWtheWFAaWVlZS5vcmcNDQ0gICBHbGVuIFpvcm4NICAgTmV0d29y ayBaZW4NICAgMTMxMCBFYXN0IFRob21hcyBTdHJlZXQNICAgU2VhdHRsZSwgV0ENICAgVVMNDSAg IEVtYWlsOiBnd3pAbmV0LXplbi5uZXQNDQ0gICBEYXZpZCBNaWxlcw0gICBBbGNhdGVsLUx1Y2Vu dA0gICBMMyAvIDIxNSBTcHJpbmcgU3QNICAgTWVsYm91cm5lLCBWaWN0b3JpYSAzMDAwLA0gICBB dXN0cmFsaWENDSAgIFBob25lOg0gICBGYXg6DSAgIEVtYWlsOiBEYXZpZC5NaWxlc0BhbGNhdGVs LWx1Y2VudC5jb20NICAgVVJJOg0NDQ0NDQ0NDQ0NDQ0NTG91cmRlbGV0LCBldCBhbC4gICAgICBF eHBpcmVzIFNlcHRlbWJlciAxNSwgMjAxMSAgICAgICAgICAgICAgW1BhZ2UgMTNdDQwNDQ0AAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA BgAArAwAALAMAADjDAAA5wwAAOgMAADpDAAA9wwAAAMNAAASDQAAIw0AACQNAABeDQAAIxEAAE4R AACSIwAAmCMAANMjAADUIwAA9SMAAA4kAAAXJAAAHCQAACMkAABBJAAAQiQAAEMkAAAIJgAAbiYA AHgoAAD54/nZz9nF2c/Fu7H5pvmcj4V7cWexZ12PVvmmSwAUFWgCJ78AFmgHWtYAbUgdBHNIHQQA DBVoB1rWABZo02xeAAATAQiBBEgBAAVoYLr2hhZo02xeABMBCIEESAEABWhhuvaGFmjTbF4AEwEI gQRIAQAFaF+69oYWaNNsXgATAQiBBEgBAAVoXrr2hhZo02xeABMBCIEESAEABWh7uvaGFmi2Y+8A GQEIgQRIAQAFaF669oYVaNNsXgAWaNNsXgATAQiBBEgBAAVoXbr2hhZo02xeABQVaAInvwAWaAda 1gBtSAwEc0gMBAATAQiBBEgBAAVoc7r2hhZoYSnDABMBCIEESAEABWh7uvaGFmiPSBkAEwEIgQRI AQAFaFy69oYWaNNsXgATAQiBBEgBAAVoW7r2hhZo02xeABMBCIEESAEABWhauvaGFmjTbF4AKwAI gRVoB1rWABZoB1rWABdo02xeAGNIAQBkaAAAAABkaAAAAABkaFq69oYMFWgHWtYAFmgHWtYAHQAG AAABCAAAAggAAAMIAABMCAAAlQgAAN4IAAAnCQAAcAkAALkJAAACCgAASwoAAJQKAADdCgAA3goA AN8KAAAZCwAAUAsAAFELAABaCwAAWwsAAKILAADrCwAAMQwAAHoMAADADAAAYA0AAGENAAB3DQAA eA0AAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAdAAYA AItxAAD9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBAABAQF4DQAA vw0AAAcOAABNDgAATg4AAGIOAABjDgAApA4AAMgOAADJDgAADg8AAFAPAACYDwAA1Q8AANYPAAAf EAAAZxAAAKkQAADnEAAA6BAAACIRAAAjEQAANBEAADURAAA2EQAANxEAAIARAACCEQAAyxEAAMwR AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAAAAAAAEDwBnZAInvwAAHcwRAADN EQAAEBIAADsSAAA8EgAAfRIAAKYSAADpEgAAKRMAAHITAAC6EwAAABQAAEMUAABvFAAAcBQAALIU AAD4FAAAPhUAAIEVAADHFQAADxYAAFUWAACbFgAA4hYAACoXAAA7FwAAPBcAAD0XAAA+FwAAPxcA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAdPxcAAEAX AABBFwAAQhcAAEMXAABEFwAARRcAAEYXAABHFwAASBcAAEkXAABKFwAASxcAAEwXAABNFwAAThcA AE8XAABQFwAAURcAAFIXAABTFwAAVBcAAFUXAABWFwAAnxcAAKEXAADqFwAA6xcAAOwXAAD+FwAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAAAAAAABA8AZ2QCJ78AAB3+FwAA/xcA AEgYAACRGAAA2hgAACMZAABsGQAAtRkAAP4ZAABHGgAAkBoAANkaAAAiGwAAaxsAALQbAAD9GwAA RhwAAI8cAADYHAAAIR0AAGodAACzHQAAtB0AALUdAAC2HQAAtx0AALgdAAC5HQAAuh0AALsdAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAAAAAAAEDwBnZAInvwAAHbsdAAC8HQAA vR0AAL4dAAC/HQAAwB0AAMEdAADCHQAAwx0AAMQdAADFHQAAxh0AAMcdAADIHQAAyR0AAModAADL HQAAzB0AAM0dAADOHQAAzx0AANAdAAAZHgAAGx4AAGQeAABlHgAAZh4AAHceAAB4HgAAwR4AAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAdwR4AAAgfAABR HwAAmh8AAOIfAAArIAAAbiAAAJMgAACUIAAA2yAAACQhAABqIQAAsCEAAPUhAAA8IgAASyIAAEwi AACUIgAAlSIAANgiAAAeIwAAHyMAAGgjAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA8AZ2QCJ78AABZoIwAAkyMAAJQj AABDJAAAuQAAAAAAAAAAAAAAAHEAAAAAAAAAAAAAAAAmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAASw8ACiYAC0YDAEMkAUXGgAAAAQBduvaGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2TTbF4AAEcPAEMkAUXGgAAA AQBduvaGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAZ2TTbF4ARg8ARcaAAAACAF269oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZAInvwAAA0MkAABEJAAARSQA AF4kAABfJAAApiQAAO8kAAA2JQAAfiUAAMUlAAAFJgAAFSYAABYmAAAXJgAAGCYAABkmAAAaJgAA GyYAABwmAAAdJgAAHiYAAB8mAAAgJgAAISYAACImAAAjJgAAbCYAAG4mAAC3JgAAuCYAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAduCYAALkmAAD0JgAA LycAAGonAAClJwAA3ScAABUoAABVKAAAjSgAAMUoAAABKQAAPSkAAHkpAAC1KQAA8SkAAPIpAAAZ KgAAGioAAGMqAACsKgAA9CoAADQrAAB7KwAAxCsAAAssAABTLAAAYCwAAGEsAACmLAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAAAAAAABA8AZ2QCJ78AAB14KAAAuikAAD8wAACj MAAA7jAAAKU6AADwOgAAPjsAAGc7AABoOwAAizsAAJ07AAAIPAAAHzwAADw8AABLPAAAUjwAAFU8 AABlPAAAZjwAAIc8AACmPAAAtTwAAPE8AAD0PAAA9jwAAAg9AAASPQAAFD0AACA9AAAoPQAAOj0A AD89AAD17uP17uP17tnPxbiuoa7FrriuuMWXjYN5jW9ljVuNWwAAAAAAAAAAAAAAAAAAAAAAABMB CIEESAEABWhmuvaGFmjTbF4AEwEIgQRIAQAFaGm69oYWaGVHFwATAQiBBEgBAAVoZbr2hhZoZUcX ABMBCIEESAEABWiAuvaGFmi2Y+8AEwEIgQRIAQAFaGW69oYWaLZj7wATAQiBBEgBAAVoZbr2hhZo 02xeABMBCIEESAEABWhouvaGFmhlRxcAGQEIgQRIAQAFaGW69oYVaAda1gAWaNNsXgATAQiBBEgB AAVoZLr2hhZo02xeABkBCIEESAEABWhjuvaGFWgHWtYAFmjTbF4AEwEIgQRIAQAFaGO69oYWaNNs XgATAQiBBEgBAAVoYrr2hhZo02xeABMBCIEESAEABWhiuvaGFmgHWtYAFBVo02xeABZoB1rWAG1I DARzSAwEAAwVaAda1gAWaAda1gAAFBVo02xeABZoB1rWAG1IHQRzSB0EIKYsAACnLAAAxSwAAMYs AAANLQAATy0AAJQtAADSLQAA0y0AABsuAABfLgAApS4AAO0uAAAxLwAAdi8AALcvAAD3LwAAPDAA AFMwAABUMAAAVTAAAFYwAABXMAAAWDAAAKEwAACjMAAA7DAAAO0wAADuMAAACjEAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAdCjEAAAsxAABUMQAAlTEA AN0xAAAkMgAAbDIAALMyAADaMgAA2zIAAPgyAAD5MgAAQjMAAIkzAADPMwAAFjQAACM0AAAkNAAA aDQAAK80AAD3NAAAQDUAAEw1AABNNQAAljUAAN01AAAhNgAAZjYAAIY2AACHNgAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAAAAAAABA8AZ2QCJ78AAB2HNgAAqDYAAKk2AADsNgAA LjcAAHU3AAC8NwAABDgAAEk4AACNOAAAuTgAALo4AAAAOQAARzkAAIk5AADQOQAAGDoAAF86AACi OgAAozoAAKQ6AAClOgAA7joAAPA6AAA5OwAAOjsAADs7AABoOwAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDwBnZAInvwAAG2g7AABpOwAAljsAAJk7AADh OwAAtwAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAABvAAAAAAAAAAAAAAAAJwAAAAAAAAAAAAAAAAAA AAAAAABHDwBDJAFFxoAAAAEAY7r2hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdk02xeAABHDwBDJAFFxoAAAAEAY7r2hgAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AGdkAie/AABHDwBDJAFFxoAAAAEAYrr2hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdkAie/AAAEPz0AAFc9AABnPQAAbz0AAHM9 AAB9PQAAgD0AAIY9AACRPQAAkj0AAJg9AACbPQAApT0AAKs9AACvPQAAxT0AANU9AADWPQAAED4A ABM+AAAyPgAAMz4AADQ+AAA1PgAAZT4AAHE+AACJPgAAvT4AAMQ+AAD16+Hr1+vNwM3Azeuz66mc kqmIfqlxaVzhT1zhAAAAAAAAAAAAAAAAAAAZAQiBBEgBAAVobbr2hhVoB1rWABZoZUcXABkBCIEE SAEABWhsuvaGFWgHWtYAFmhlRxcADwAIgRZo02xeABdoZUcXABkBCIEESAEABWhjuvaGFWgHWtYA FmjTbF4AEwEIgQRIAQAFaHS69oYWaLZj7wATAQiBBEgBAAVodLr2hhZoYSnDABMBCIEESAEABWh1 uvaGFmhhKcMAGQEIgQRIAQAFaGq69oYVaNNsXgAWaGVHFwATAQiBBEgBAAVoarr2hhZoZUcXABkB CIEESAEABWhnuvaGFWgHWtYAFmhlRxcAGQEIgQRIAQAFaGm69oYVaAda1gAWaGVHFwATAQiBBEgB AAVoabr2hhZoZUcXABMBCIEESAEABWhouvaGFmhlRxcAEwEIgQRIAQAFaGy69oYWaGVHFwATAQiB BEgBAAVoZ7r2hhZoZUcXABMBCIEESAEABWhmuvaGFmhlRxcAABzhOwAAND4AADU+AAC9PgAABz8A ALcAAAAAAAAAAAAAAABvAAAAAAAAAAAAAAAAJwAAAAAAAAAAAAAAACcAAAAAAAAAAAAAAAAAAAAA AAAARw8AQyQBRcaAAAABAGy69oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZGVHFwAARw8AQyQBRcaAAAABAGy69oYAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn ZAInvwAARw8AQyQBRcaAAAABAGO69oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZGVHFwAABMQ+AADKPgAA0D4AANg+AADdPwAA 4D8AAOY/AADsPwAA9D8AACdAAAA2QAAAQkAAAElAAABNQAAAUUAAAFhAAABoQAAAokAAAKNAAACl QAAANEcAAJZHAADkRwAAA04AAE5OAACZTgAA/VUAAEhWAACTVgAAJVoAACZaAAArWgAALloAADpa AABBWgAAqVoAALBaAAAwWwAANlsAAPXo9eje9ej16N7U3srAyrPK6N6soZasoZasoZasjIJ1gt51 a3VhEwEIgQRIAQAFaHG69oYWaIh0JQATAQiBBEgBAAVocLr2hhZoiHQlABkBCIEESAEABWhruvaG FWgHWtYAFmhlRxcAEwEIgQRIAQAFaGu69oYWaGVHFwATAQiBBEgBAAVoa7r2hhZoB1rWABQVaNNs XgAWaAda1gBtSB0Ec0gdBAAUFWjTbF4AFmgHWtYAbUgMBHNIDAQADBVoB1rWABZoB1rWAAAZAQiB BEgBAAVob7r2hhVo02xeABZoZUcXABMBCIEESAEABWh1uvaGFmhhKcMAEwEIgQRIAQAFaG+69oYW aGVHFwATAQiBBEgBAAVobrr2hhZoZUcXABMBCIEESAEABWhsuvaGFmhlRxcAGQEIgQRIAQAFaGy6 9oYVaAda1gAWaGVHFwATAQiBBEgBAAVobbr2hhZoZUcXAAAmBz8AAE4/AACWPwAA3T8AAKRAAACl QAAApkAAAKdAAAC2QAAAt0AAAP5AAAAIQQAACUEAACNBAAAkQQAAbUEAALJBAAD7QQAAPkIAAIJC AADIQgAAtwAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAAC3AAAAAAAAAAAAAAAAtwAAAAAAAAAAAAAA ALcAAAAAAAAAAAAAAACyAAAAAAAAAAAAAAAAsgAAAAAAAAAAAAAAALIAAAAAAAAAAAAAAACyAAAA AAAAAAAAAAAAsgAAAAAAAAAAAAAAALIAAAAAAAAAAAAAAACyAAAAAAAAAAAAAAAAsgAAAAAAAAAA AAAAALIAAAAAAAAAAAAAAACyAAAAAAAAAAAAAAAAsgAAAAAAAAAAAAAAALIAAAAAAAAAAAAAAACy AAAAAAAAAAAAAAAAsgAAAAAAAAAAAAAAALIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA8AZ2QC J78AAEcPAEMkAUXGgAAAAQBsuvaGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZ2RlRxcAABTIQgAAD0MAAFVDAABWQwAAn0MAAMZD AADHQwAAEEQAABFEAABURAAAmUQAAN9EAAAYRQAAXkUAAItFAADRRQAA/kUAAERGAABxRgAAt0YA AN1GAAADRwAABEcAAAxHAAANRwAAMEcAADFHAAA7RwAAPEcAAEVHAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAAAAAAAEDwBnZAInvwAAHUVHAABGRwAAR0cAAEhHAABJRwAASkcA AEtHAACURwAAlkcAAN9HAADgRwAA4UcAAOxHAADtRwAAK0gAACxIAABKSAAAS0gAAJNIAADbSAAA JEkAAG1JAAC2SQAAwUkAAMJJAAAJSgAANUoAADZKAAB8SgAAhkoAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAdhkoAAIdKAADKSgAAD0sAAFVLAACOSwAA 1EsAAAFMAABHTAAAdEwAALpMAADnTAAALU0AAFNNAAB5TQAAek0AAIJNAACDTQAAqk0AAKtNAAC1 TQAAtk0AAL9NAADATQAAy00AAMxNAAD8TQAA/U0AAP5NAAD/TQAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAAAAAAABA8AZ2QCJ78AAB3/TQAAAE4AAAFOAAACTgAAA04AAExOAABO TgAAl04AAJhOAACZTgAAtk4AALdOAAD8TgAAQU8AAIZPAADNTwAACVAAAApQAABPUAAAmFAAAMFQ AADCUAAAw1AAAAlRAABRUQAAmlEAAONRAAAsUgAAdVIAAL5SAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAAAAAAAEDwBnZAInvwAAHb5SAAAHUwAAUFMAAJlTAACaUwAAolMAAKNT AADJUwAAylMAANRTAADVUwAAHFQAACtUAAAsVAAAPVQAAD5UAACDVAAApFQAAKVUAACvVAAAsFQA APhUAAA9VQAAhVUAAM1VAAD3VQAA+FUAAPlVAAD6VQAA+1UAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAAAAAAAAQPAGdkAie/AAAd+1UAAPxVAAD9VQAARlYAAEhWAACRVgAAklYA AJNWAAC0VgAAtVYAAPxWAABEVwAAg1cAAJFXAACSVwAA21cAABVYAABGWAAAfVgAALVYAADrWAAA I1kAACRZAAAlWQAALVkAAC5ZAABYWQAAWVkAAGNZAABkWQAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAAAAAAABA8AZ2QCJ78AAB1kWQAAiFkAAIlZAACTWQAAlFkAAN1ZAAAmWgAA J1oAAChaAABHWgAASFoAAI9aAADOWgAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAsgAAAAAAAAAAAAAA ALIAAAAAAAAAAAAAAABqAAAAAAAAAAAAAAAAagAAAAAAAAAAAAAAAGoAAAAAAAAAAAAAAABqAAAA AAAAAAAAAAAAAAAAAABHDwBDJAFFxoAAAAEAa7r2hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGdkZUcXAABHDwBDJAFFxoAAAAEA a7r2hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAGdkAie/AAAEDwBnZAInvwAADM5aAAANWwAAG1sAABxbAABjWwAAnVsAAM5bAAAF XAAAPVwAAHNcAACrXAAArFwAAK1cAAC1XAAAtlwAAN5cAADfXAAA6VwAAOpcAAAOXQAAD10AABld AAC3AAAAAAAAAAAAAAAAtwAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAAC3AAAAAAAAAAAAAAAAtwAA AAAAAAAAAAAAALcAAAAAAAAAAAAAAAC3AAAAAAAAAAAAAAAAtwAAAAAAAAAAAAAAALcAAAAAAAAA AAAAAAC3AAAAAAAAAAAAAAAAtwAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAAC3AAAAAAAAAAAAAAAA twAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAAC3AAAAAAAAAAAAAAAAtwAAAAAAAAAAAAAAALcAAAAA AAAAAAAAAAC3AAAAAAAAAAAAAAAAtwAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAAAAAAAAAABHDwBD JAFFxoAAAAEAa7r2hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAGdkZUcXAAAVNlsAADxbAABDWwAAtlwAAMZcAADLXAAA0VwAANhc AAA9XQAAV10AAF5dAACtXQAArl0AAMVfAADcXwAA9F8AAPlfAAD/XwAABmAAAAxgAADjYAAALmEA AHlhAAClZQAAq2UAAMVlAADGZQAA2WUAAN5lAADfZQAA3mcAACloAAB0aAAAwm0AAOVtAAAmbgAA uG4AAAZvAAA2bwAA9eve9ev16971697X0MPrueu5w9Cuo9CL0IG5dG3QrqPQrqOuo9AAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAMFWgHWtYAFmiIdCUAABkBCIEESAEABWhyuvaGFWgHWtYAFmiIdCUA EwEIgQRIAQAFaHK69oYWaAda1gAvAAiBFWgHWtYAFmgHWtYAF2iIdCUAY0gBAGRoAAAAAGRoAAAA AGRocrr2hmdIBgAUFWjTbF4AFmgHWtYAbUgdBHNIHQQAFBVo02xeABZoB1rWAG1IDARzSAwEABMB CIEESAEABWhyuvaGFmiIdCUAGQEIgQRIAQAFaHG69oYVaAda1gAWaIh0JQAMFWgHWtYAFmgHWtYA AAwVaAda1gAWaGVHFwAAGQEIgQRIAQAFaGu69oYVaAda1gAWaGVHFwATAQiBBEgBAAVocbr2hhZo iHQlABMBCIEESAEABWhruvaGFmiIdCUAACYZXQAAGl0AAGRdAACtXQAArl0AAK9dAADJXQAAyl0A ABNeAABHXgAASF4AAEleAACEXgAAtwAAAAAAAAAAAAAAALcAAAAAAAAAAAAAAAC3AAAAAAAAAAAA AAAAbwAAAAAAAAAAAAAAAGoAAAAAAAAAAAAAAABqAAAAAAAAAAAAAAAAagAAAAAAAAAAAAAAAGoA AAAAAAAAAAAAAABqAAAAAAAAAAAAAAAAagAAAAAAAAAAAAAAAGoAAAAAAAAAAAAAAABqAAAAAAAA AAAAAAAAAAAAAAAEDwBnZAInvwAARw8AQyQBRcaAAAABAGu69oYAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnZAInvwAARw8AQyQB RcaAAAABAGu69oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAABnZGVHFwAADIReAACvXgAA8V4AADdfAAB8XwAAxV8AAAxgAAANYAAA DmAAACpgAAArYAAAdGAAALtgAADgYAAA4WAAAOJgAADjYAAALGEAAC5hAAB3YQAAeGEAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAAsgAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEcPAEMkAUXGgAAAAQBxuvaG AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAZ2SIdCUAAAQPAGdkAie/AAAUeGEAAHlhAACVYQAAlmEAANdhAAAXYgAAX2IAAKNiAADo YgAAK2MAAHFjAAC3YwAA/GMAAERkAABbZAAAXGQAAF1kAAB1ZAAAdmQAAL1kAAD7ZAAAPWUAAExl AABNZQAAZ2UAAGhlAACGZQAAh2UAAKRlAAClZQAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAAAAAAABA8AZ2QCJ78AAB2lZQAAxmUAAN9lAADgZQAA4WUAAPZlAAD3ZQAAPGYAAIJm AACeZgAAn2YAAKBmAACvZgAAsGYAAMtmAADMZgAADmcAAE9nAABQZwAAlmcAANpnAAC0AAAAAAAA AAAAAAAAtAAAAAAAAAAAAAAAAK8AAAAAAAAAAAAAAACvAAAAAAAAAAAAAAAArwAAAAAAAAAAAAAA AK8AAAAAAAAAAAAAAACvAAAAAAAAAAAAAAAArwAAAAAAAAAAAAAAAK8AAAAAAAAAAAAAAACvAAAA AAAAAAAAAAAArwAAAAAAAAAAAAAAAK8AAAAAAAAAAAAAAACvAAAAAAAAAAAAAAAArwAAAAAAAAAA AAAAAK8AAAAAAAAAAAAAAACvAAAAAAAAAAAAAAAArwAAAAAAAAAAAAAAAK8AAAAAAAAAAAAAAACv AAAAAAAAAAAAAAAArwAAAAAAAAAAAAAAAAAAAAAAAAAEDwBnZAInvwBLDwAKJgALRgQAQyQBRcaA AAABAHK69oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAABnZIh0JQAAFNpnAADbZwAA3GcAAN1nAADeZwAAJ2gAACloAAByaAAAc2gA AHRoAACRaAAAkmgAANdoAAD8aAAA/WgAAENpAACJaQAAvGkAAL1pAAAEagAAS2oAAGhqAABpagAA e2oAAHxqAADEagAAAmsAAANrAABJawAAeWsAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA +gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAAAAAAAAQPAGdkAie/AAAdeWsAAHprAAC/awAABWwAACNsAAAkbAAAaGwAALBsAADYbAAA 2WwAACBtAABmbQAAfm0AAH9tAACAbQAAk20AAJRtAACobQAAv20AAOJtAAD8bQAAI24AAC1uAAAu bgAASm4AAGduAABobgAAaW4AAGpuAABrbgAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAA AAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAA AAAAAAAAAAAABA8AZ2QCJ78AAB1rbgAAbG4AAG1uAAC2bgAAuG4AAAFvAAACbwAAA28AABxvAAAz bwAAS28AAHBvAAB/bwAAgG8AAJlvAACabwAAm28AAK5vAAC8bwAA128AAORvAADqbwAA628AAAVw AAAhcAAAInAAACNwAAAwcAAAP3AAAFpwAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAA AAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAA AAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoA AAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAAAAAAAEDwBnZAInvwAAHTZvAAC/bwAA7m8AAONwAABVcQAAi3EAAPXq49jjAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQVaNNs XgAWaAda1gBtSAwEc0gMBAAMFWgHWtYAFmgHWtYAABQVaNNsXgAWaAda1gBtSBYEc0gWBAAUFWjT bF4AFmgHWtYAbUgTBHNIEwQFWnAAAGlwAABvcAAAcHAAAIpwAACLcAAAjHAAAJtwAACtcAAAw3AA AOBwAADtcAAA7nAAAPhwAAAAcQAAKXEAADFxAAAycQAAM3EAADRxAAA1cQAANnEAADdxAAA4cQAA OXEAADpxAAA7cQAAPHEAAD1xAAA+cQAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAA APoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAA AAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6 AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAA AAAAAAAABA8AZ2QCJ78AAB0+cQAAh3EAAIlxAACKcQAAi3EAAPoAAAAAAAAAAAAAAAD6AAAAAAAA AAAAAAAA+gAAAAAAAAAAAAAAAPoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAEDwBnZAInvwAABDIAMZBoATpwAie/AB+w0C8gsOA9IbAnBSKwJwUjkIkFJJBuBCWwAAAX sMQCGLDEAgyQxAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAhgIRABIAAQCcAA8ABAAAAAMAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARAAAQPH/AgBEAAwEAAAAAAAAAAAG AE4AbwByAG0AYQBsAAAAAgAAABwAQ0oYAF9IAQRhShgAbUgJBG5IEQRzSAkEdEgRBAAAAAAAAAAA AAAAAAAAAAAAAEQAQQDy/6EARAAMBQAAAAAAAAAAFgBEAGUAZgBhAHUAbAB0ACAAUABhAHIAYQBn AHIAYQBwAGgAIABGAG8AbgB0AAAAAABSAGkA8/+zAFIADAUAAAAAAAAAAAwAVABhAGIAbABlACAA TgBvAHIAbQBhAGwAAAAcABf2AwAANNYGAAEKA2wANNYGAAEFAwAAYfYDAAACAAsAAAAoAGsA9P/B ACgAAAUAAAAAAAAAAAcATgBvACAATABpAHMAdAAAAAIAAAAAAAAARABaQAEA8gBEAAwEAADQFtEA AAAKAFAAbABhAGkAbgAgAFQAZQB4AHQAAAACAA8AFABDShQAT0oEAFFKBABeSgQAYUoUAEgAmUAB AAIBSAAMBQAA02xeAAAADABCAGEAbABsAG8AbwBuACAAVABlAHgAdAAAAAIAEAAUAENKEABPSgUA UUoFAF5KBQBhShAAAAAAAItpAAALAADCAAAIAP////8RAAAABCABAP//AQCgepkAAAAAAAAgAAD/ /wIAoHqZAAAAAAAEIAAA//8DAKB6mQAAAAAAACABAP//BACgepkAAAAAAAQgAAD//wUAoHqZAAAA AAAAIAAA//8GAKB6mQAAAAAABCAAAP//BwCgepkAAAAAAAAgAQD//wgAoHqZAAAAAAAEIAAA//8J AKB6mQAAAAAAACAAAP//CgCgepkAAAAAAAQgAAD//wsAoHqZAAAAAAAAIAAA//8MAKB6mQAAAAAA BCAAAP//DQCgepkAAAAAAAAgAQD//w4AoHqZAAAAAAAEIAAA//8PAKB6mQAAAAAAACAAAP//EACg epkAAAAAAAQgAAD//xEAoHqZAAAAAAAAAAAAgQkAAKAPAAAaFgAAIh4AAG0eAACiKAAA7zIAAP49 AACVPwAATUYAAEdOAAAPVQAALVkAAChgAAC3ZgAAiGkAAItpAAAAABAAAAABAAEAAAACAAEAAAAD AAEAAAAEAAEAAAAFAAEAAAAGAAEAAAAHAIgAAAAIAAEAAAAJAAEAAAAKAAEAAAALAAoAAAAMAAEA AAANABsAAAAOAAEAAAAPAAEAAAAQAAAAAAAAAAAAAAAAAAEAAAACAAAAAwAAAEwAAACVAAAA3gAA ACcBAABwAQAAuQEAAAICAABLAgAAlAIAAN0CAADeAgAA3wIAABkDAABQAwAAUQMAAFoDAABbAwAA ogMAAOsDAAAxBAAAwAQAAGAFAABhBQAAdwUAAHgFAAC/BQAABwYAAE0GAABOBgAAYgYAAGMGAACk BgAAyAYAAMkGAAAOBwAAUAcAAJgHAADVBwAA1gcAAB8IAABnCAAAqQgAAOcIAADoCAAAIgkAACMJ AAA0CQAANQkAADYJAAA3CQAAggkAAMsJAADMCQAAzQkAABAKAAA7CgAAPAoAAH0KAACmCgAA6QoA ACkLAAByCwAAugsAAAAMAABDDAAAbwwAAHAMAACyDAAA+AwAAD4NAACBDQAAxw0AAA8OAABVDgAA mw4AAOIOAAAqDwAAOw8AADwPAAA9DwAAPg8AAD8PAABADwAAQQ8AAEIPAABDDwAARA8AAEUPAABG DwAARw8AAEgPAABJDwAASg8AAEsPAABMDwAATQ8AAE4PAABPDwAAUA8AAFEPAABSDwAAUw8AAFQP AABVDwAAVg8AAKEPAADqDwAA6w8AAOwPAAD+DwAA/w8AAEgQAACREAAA2hAAACMRAABsEQAAtREA AP4RAABHEgAAkBIAANkSAAAiEwAAaxMAALQTAAD9EwAARhQAAI8UAADYFAAAIRUAAGoVAACzFQAA tBUAALUVAAC2FQAAtxUAALgVAAC5FQAAuhUAALsVAAC8FQAAvRUAAL4VAAC/FQAAwBUAAMEVAADC FQAAwxUAAMQVAADFFQAAxhUAAMcVAADIFQAAyRUAAMoVAADLFQAAzBUAAM0VAADOFQAAzxUAANAV AAAbFgAAZBYAAGUWAABmFgAAdxYAAHgWAADBFgAACBcAAFEXAACaFwAA4hcAACsYAABuGAAAkxgA AJQYAADbGAAAJBkAAGoZAACwGQAA9RkAADwaAABLGgAATBoAAJQaAACVGgAA2BoAAB4bAAAfGwAA aBsAAJMbAABDHAAARBwAAEUcAABeHAAAXxwAAKYcAADvHAAANh0AAH4dAADFHQAABR4AABUeAAAW HgAAFx4AABgeAAAZHgAAGh4AABseAAAcHgAAHR4AAB4eAAAfHgAAIB4AACEeAAAiHgAAIx4AAG4e AAC3HgAAuB4AALkeAAD0HgAALx8AAGofAAClHwAA3R8AABUgAABVIAAAjSAAAMUgAAABIQAAPSEA AHkhAAC1IQAA8SEAAPIhAAAZIgAAGiIAAGMiAACsIgAA9CIAADQjAAB7IwAAxCMAAAskAABTJAAA YCQAAGEkAACmJAAApyQAAMUkAADGJAAADSUAAE8lAACUJQAA0iUAANMlAAAbJgAAXyYAAKUmAADt JgAAMScAAHYnAAC3JwAA9ycAADwoAABTKAAAVCgAAFUoAABWKAAAVygAAFgoAACjKAAA7CgAAO0o AADuKAAACikAAAspAABUKQAAlSkAAN0pAAAkKgAAbCoAALMqAADaKgAA2yoAAPgqAAD5KgAAQisA AIkrAADPKwAAFiwAACMsAAAkLAAAaCwAAK8sAAD3LAAAQC0AAEwtAABNLQAAli0AAN0tAAAhLgAA Zi4AAIYuAACHLgAAqC4AAKkuAADsLgAALi8AAHUvAAC8LwAABDAAAEkwAACNMAAAuTAAALowAAAA MQAARzEAAIkxAADQMQAAGDIAAF8yAACiMgAAozIAAKQyAAClMgAA8DIAADkzAAA6MwAAOzMAAGgz AABpMwAAljMAAJkzAADhMwAAvTYAAAc3AABONwAAljcAAN03AACkOAAApTgAAKY4AACnOAAAtjgA ALc4AAD+OAAACDkAAAk5AAAjOQAAJDkAAG05AACyOQAA+zkAAD46AACCOgAAyDoAAA87AABVOwAA VjsAAJ87AADGOwAAxzsAABA8AAARPAAAVDwAAJk8AADfPAAAGD0AAF49AACLPQAA0T0AAP49AABE PgAAcT4AALc+AADdPgAAAz8AAAQ/AAAMPwAADT8AADA/AAAxPwAAOz8AADw/AABFPwAARj8AAEc/ AABIPwAAST8AAEo/AABLPwAAlj8AAN8/AADgPwAA4T8AAOw/AADtPwAAK0AAACxAAABKQAAAS0AA AJNAAADbQAAAJEEAAG1BAAC2QQAAwUEAAMJBAAAJQgAANUIAADZCAAB8QgAAhkIAAIdCAADKQgAA D0MAAFVDAACOQwAA1EMAAAFEAABHRAAAdEQAALpEAADnRAAALUUAAFNFAAB5RQAAekUAAIJFAACD RQAAqkUAAKtFAAC1RQAAtkUAAL9FAADARQAAy0UAAMxFAAD8RQAA/UUAAP5FAAD/RQAAAEYAAAFG AAACRgAAA0YAAE5GAACXRgAAmEYAAJlGAAC2RgAAt0YAAPxGAABBRwAAhkcAAM1HAAAJSAAACkgA AE9IAACYSAAAwUgAAMJIAADDSAAACUkAAFFJAACaSQAA40kAACxKAAB1SgAAvkoAAAdLAABQSwAA mUsAAJpLAACiSwAAo0sAAMlLAADKSwAA1EsAANVLAAAcTAAAK0wAACxMAAA9TAAAPkwAAINMAACk TAAApUwAAK9MAACwTAAA+EwAAD1NAACFTQAAzU0AAPdNAAD4TQAA+U0AAPpNAAD7TQAA/E0AAP1N AABITgAAkU4AAJJOAACTTgAAtE4AALVOAAD8TgAARE8AAINPAACRTwAAkk8AANtPAAAVUAAARlAA AH1QAAC1UAAA61AAACNRAAAkUQAAJVEAAC1RAAAuUQAAWFEAAFlRAABjUQAAZFEAAIhRAACJUQAA k1EAAJRRAADdUQAAJlIAACdSAAAoUgAAR1IAAEhSAACPUgAAzlIAAA1TAAAbUwAAHFMAAGNTAACd UwAAzlMAAAVUAAA9VAAAc1QAAKtUAACsVAAArVQAALVUAAC2VAAA3lQAAN9UAADpVAAA6lQAAA5V AAAPVQAAGVUAABpVAABkVQAArVUAAK5VAACvVQAAyVUAAMpVAAATVgAAR1YAAEhWAABJVgAAhFYA AK9WAADxVgAAN1cAAHxXAADFVwAADFgAAA1YAAAOWAAAKlgAACtYAAB0WAAAu1gAAOBYAADhWAAA 4lgAAONYAAAuWQAAd1kAAHhZAAB5WQAAlVkAAJZZAADXWQAAF1oAAF9aAACjWgAA6FoAACtbAABx WwAAt1sAAPxbAABEXAAAW1wAAFxcAABdXAAAdVwAAHZcAAC9XAAA+1wAAD1dAABMXQAATV0AAGdd AABoXQAAhl0AAIddAACkXQAAxl0AAN9dAADgXQAA4V0AAPZdAAD3XQAAPF4AAIJeAACeXgAAn14A AKBeAACvXgAAsF4AAMteAADMXgAADl8AAE9fAABQXwAAll8AANpfAADbXwAA3F8AAN1fAADeXwAA KWAAAHJgAABzYAAAdGAAAJFgAACSYAAA12AAAPxgAAD9YAAAQ2EAAIlhAAC8YQAAvWEAAARiAABL YgAAaGIAAGliAAB7YgAAfGIAAMRiAAACYwAAA2MAAEljAAB5YwAAemMAAL9jAAAFZAAAI2QAACRk AABoZAAAsGQAANhkAADZZAAAIGUAAGZlAAB+ZQAAf2UAAIBlAACTZQAAlGUAAKhlAAC/ZQAA4mUA APxlAAAjZgAALWYAAC5mAABKZgAAZ2YAAGhmAABpZgAAamYAAGtmAABsZgAAbWYAALhmAAABZwAA AmcAAANnAAAcZwAAM2cAAEtnAABwZwAAf2cAAIBnAACZZwAAmmcAAJtnAACuZwAAvGcAANdnAADk ZwAA6mcAAOtnAAAFaAAAIWgAACJoAAAjaAAAMGgAAD9oAABaaAAAaWgAAG9oAABwaAAAimgAAIto AACMaAAAm2gAAK1oAADDaAAA4GgAAO1oAADuaAAA+GgAAABpAAApaQAAMWkAADJpAAAzaQAANGkA ADVpAAA2aQAAN2kAADhpAAA5aQAAOmkAADtpAAA8aQAAPWkAAD5pAACJaQAAimkAAI1pAAAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AwAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAACAAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAwAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAALuHAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAA giUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAA AQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsx AgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUA APsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAQAAgiUAAPsxAgAAAAAA AQAAAAIAAAADAAAATAAAAJUAAADeAAAAJwEAAHABAAC5AQAAAgIAAEsCAACUAgAA3QIAAN4CAADf AgAAGQMAAFADAABRAwAAWgMAAFsDAACiAwAA6wMAADEEAAB6BAAAwAQAAGAFAABhBQAAdwUAAHgF AAC/BQAABwYAAE0GAABOBgAAYgYAAGMGAACkBgAAyAYAAMkGAAAOBwAAUAcAAJgHAADVBwAA1gcA AB8IAABnCAAAqQgAAOcIAADoCAAAIgkAACMJAAA0CQAANQkAADYJAAA3CQAAgAkAAIIJAADLCQAA zAkAAM0JAAAQCgAAOwoAADwKAAB9CgAApgoAAOkKAAApCwAAcgsAALoLAAAADAAAQwwAAG8MAABw DAAAsgwAAPgMAAA+DQAAgQ0AAMcNAAAPDgAAVQ4AAJsOAADiDgAAKg8AADsPAAA8DwAAPQ8AAD4P AAA/DwAAQA8AAEEPAABCDwAAQw8AAEQPAABFDwAARg8AAEcPAABIDwAASQ8AAEoPAABLDwAATA8A AE0PAABODwAATw8AAFAPAABRDwAAUg8AAFMPAABUDwAAVQ8AAFYPAACfDwAAoQ8AAOoPAADrDwAA 7A8AAP4PAAD/DwAASBAAAJEQAADaEAAAIxEAAGwRAAC1EQAA/hEAAEcSAACQEgAA2RIAACITAABr EwAAtBMAAP0TAABGFAAAjxQAANgUAAAhFQAAahUAALMVAAC0FQAAtRUAALYVAAC3FQAAuBUAALkV AAC6FQAAuxUAALwVAAC9FQAAvhUAAL8VAADAFQAAwRUAAMIVAADDFQAAxBUAAMUVAADGFQAAxxUA AMgVAADJFQAAyhUAAMsVAADMFQAAzRUAAM4VAADPFQAA0BUAABkWAAAbFgAAZBYAAGUWAABmFgAA dxYAAHgWAADBFgAACBcAAFEXAACaFwAA4hcAACsYAABuGAAAkxgAAJQYAADbGAAAJBkAAGoZAACw GQAA9RkAADwaAABLGgAATBoAAJQaAACVGgAA2BoAAB4bAAAfGwAAaBsAAJMbAACUGwAAQxwAAEQc AABFHAAAXhwAAF8cAACmHAAA7xwAADYdAAB+HQAAxR0AAAUeAAAVHgAAFh4AABceAAAYHgAAGR4A ABoeAAAbHgAAHB4AAB0eAAAeHgAAHx4AACAeAAAhHgAAIh4AACMeAABsHgAAbh4AALceAAC4HgAA uR4AAPQeAAAvHwAAah8AAKUfAADdHwAAFSAAAFUgAACNIAAAxSAAAAEhAAA9IQAAeSEAALUhAADx IQAA8iEAABkiAAAaIgAAYyIAAKwiAAD0IgAANCMAAHsjAADEIwAACyQAAFMkAABgJAAAYSQAAKYk AACnJAAAxSQAAMYkAAANJQAATyUAAJQlAADSJQAA0yUAABsmAABfJgAApSYAAO0mAAAxJwAAdicA ALcnAAD3JwAAPCgAAFMoAABUKAAAVSgAAFYoAABXKAAAWCgAAKEoAACjKAAA7CgAAO0oAADuKAAA CikAAAspAABUKQAAlSkAAN0pAAAkKgAAbCoAALMqAADaKgAA2yoAAPgqAAD5KgAAQisAAIkrAADP KwAAFiwAACMsAAAkLAAAaCwAAK8sAAD3LAAAQC0AAEwtAABNLQAAli0AAN0tAAAhLgAAZi4AAIYu AACHLgAAqC4AAKkuAADsLgAALi8AAHUvAAC8LwAABDAAAEkwAACNMAAAuTAAALowAAAAMQAARzEA AIkxAADQMQAAGDIAAF8yAACiMgAAozIAAKQyAAClMgAA7jIAAPAyAAA5MwAAOjMAADszAABoMwAA aTMAAJYzAACZMwAA4TMAADQ2AAA1NgAAvTYAAAc3AABONwAAljcAAN03AACkOAAApTgAAKY4AACn OAAAtjgAALc4AAD+OAAACDkAAAk5AAAjOQAAJDkAAG05AACyOQAA+zkAAD46AACCOgAAyDoAAA87 AABVOwAAVjsAAJ87AADGOwAAxzsAABA8AAARPAAAVDwAAJk8AADfPAAAGD0AAF49AACLPQAA0T0A AP49AABEPgAAcT4AALc+AADdPgAAAz8AAAQ/AAAMPwAADT8AADA/AAAxPwAAOz8AADw/AABFPwAA Rj8AAEc/AABIPwAAST8AAEo/AABLPwAAlD8AAJY/AADfPwAA4D8AAOE/AADsPwAA7T8AACtAAAAs QAAASkAAAEtAAACTQAAA20AAACRBAABtQQAAtkEAAMFBAADCQQAACUIAADVCAAA2QgAAfEIAAIZC AACHQgAAykIAAA9DAABVQwAAjkMAANRDAAABRAAAR0QAAHREAAC6RAAA50QAAC1FAABTRQAAeUUA AHpFAACCRQAAg0UAAKpFAACrRQAAtUUAALZFAAC/RQAAwEUAAMtFAADMRQAA/EUAAP1FAAD+RQAA /0UAAABGAAABRgAAAkYAAANGAABMRgAATkYAAJdGAACYRgAAmUYAALZGAAC3RgAA/EYAAEFHAACG RwAAzUcAAAlIAAAKSAAAT0gAAJhIAADBSAAAwkgAAMNIAAAJSQAAUUkAAJpJAADjSQAALEoAAHVK AAC+SgAAB0sAAFBLAACZSwAAmksAAKJLAACjSwAAyUsAAMpLAADUSwAA1UsAABxMAAArTAAALEwA AD1MAAA+TAAAg0wAAKRMAAClTAAAr0wAALBMAAD4TAAAPU0AAIVNAADNTQAA900AAPhNAAD5TQAA +k0AAPtNAAD8TQAA/U0AAEZOAABITgAAkU4AAJJOAACTTgAAtE4AALVOAAD8TgAARE8AAINPAACR TwAAkk8AANtPAAAVUAAARlAAAH1QAAC1UAAA61AAACNRAAAkUQAAJVEAAC1RAAAuUQAAWFEAAFlR AABjUQAAZFEAAIhRAACJUQAAk1EAAJRRAADdUQAAJlIAACdSAAAoUgAAR1IAAEhSAACPUgAAzlIA AA1TAAAbUwAAHFMAAGNTAACdUwAAzlMAAAVUAAA9VAAAc1QAAKtUAACsVAAArVQAALVUAAC2VAAA 3lQAAN9UAADpVAAA6lQAAA5VAAAPVQAAGVUAABpVAABkVQAArVUAAK5VAACvVQAAyVUAAMpVAAAT VgAAR1YAAEhWAABJVgAAhFYAAK9WAADxVgAAN1cAAHxXAADFVwAADFgAAA1YAAAOWAAAKlgAACtY AAB0WAAAu1gAAOBYAADhWAAA4lgAAONYAAAsWQAALlkAAHdZAAB4WQAAeVkAAJVZAACWWQAA11kA ABdaAABfWgAAo1oAAOhaAAArWwAAcVsAALdbAAD8WwAARFwAAFtcAABcXAAAXVwAAHVcAAB2XAAA vVwAAPtcAAA9XQAATF0AAE1dAABnXQAAaF0AAIZdAACHXQAApF0AAKVdAADGXQAA310AAOBdAADh XQAA9l0AAPddAAA8XgAAgl4AAJ5eAACfXgAAoF4AAK9eAACwXgAAy14AAMxeAAAOXwAAT18AAFBf AACWXwAA2l8AANtfAADcXwAA3V8AAN5fAAAnYAAAKWAAAHJgAABzYAAAdGAAAJFgAACSYAAA12AA APxgAAD9YAAAQ2EAAIlhAAC8YQAAvWEAAARiAABLYgAAaGIAAGliAAB7YgAAfGIAAMRiAAACYwAA A2MAAEljAAB5YwAAemMAAL9jAAAFZAAAI2QAACRkAABoZAAAsGQAANhkAADZZAAAIGUAAGZlAAB+ ZQAAf2UAAIBlAACTZQAAlGUAAKhlAAC/ZQAA4mUAAPxlAAAjZgAALWYAAC5mAABKZgAAZ2YAAGhm AABpZgAAamYAAGtmAABsZgAAbWYAALZmAAC4ZgAAAWcAAAJnAAADZwAAHGcAADNnAABLZwAAcGcA AH9nAACAZwAAmWcAAJpnAACbZwAArmcAALxnAADXZwAA5GcAAOpnAADrZwAABWgAACFoAAAiaAAA I2gAADBoAAA/aAAAWmgAAGloAABvaAAAcGgAAIpoAACLaAAAjGgAAJtoAACtaAAAw2gAAOBoAADt aAAA7mgAAPhoAAAAaQAAKWkAADFpAAAyaQAAM2kAADRpAAA1aQAANmkAADdpAAA4aQAAOWkAADpp AAA7aQAAPGkAAD1pAAA+aQAAh2kAAIlpAACKaQAAjWkAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAyAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA ABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAIAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA EAGYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQ AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA ABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA EACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAABAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQ AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAEACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mIAEIA8wAAAAAAAAAIAAAACAAAAAAAAAAAAQAJgABCAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA AACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAAACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAAAAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAAAAAAAAAQAAAAIAAAAD AAAATAAAAJUAAADeAAAAJwEAAHABAAC5AQAAAgIAAEsCAACUAgAA3QIAAN4CAADfAgAAGQMAAFAD AABRAwAAWgMAAFsDAACiAwAA6wMAADEEAAB6BAAAwAQAAGAFAABhBQAAdwUAAHgFAAC/BQAABwYA AE0GAABOBgAAYgYAAGMGAACkBgAAyAYAAMkGAAAOBwAAUAcAAJgHAADVBwAA1gcAAB8IAABnCAAA qQgAAOcIAADoCAAAIgkAACMJAAA0CQAANQkAADYJAAA3CQAAgAkAAIIJAADLCQAAzAkAAM0JAAAQ CgAAOwoAADwKAAB9CgAApgoAAOkKAAApCwAAcgsAALoLAAAADAAAQwwAAG8MAABwDAAAsgwAAPgM AAA+DQAAgQ0AAMcNAAAPDgAAVQ4AAJsOAADiDgAAKg8AADsPAAA8DwAAPQ8AAD4PAAA/DwAAQA8A AEEPAABCDwAAQw8AAEQPAABFDwAARg8AAEcPAABIDwAASQ8AAEoPAABLDwAATA8AAE0PAABODwAA Tw8AAFAPAABRDwAAUg8AAFMPAABUDwAAVQ8AAFYPAACfDwAAoQ8AAOoPAADrDwAA7A8AAP4PAAD/ DwAASBAAAJEQAADaEAAAIxEAAGwRAAC1EQAA/hEAAEcSAACQEgAA2RIAACITAABrEwAAtBMAAP0T AABGFAAAjxQAANgUAAAhFQAAahUAALMVAAC0FQAAtRUAALYVAAC3FQAAuBUAALkVAAC6FQAAuxUA ALwVAAC9FQAAvhUAAL8VAADAFQAAwRUAAMIVAADDFQAAxBUAAMUVAADGFQAAxxUAAMgVAADJFQAA yhUAAMsVAADMFQAAzRUAAM4VAADPFQAA0BUAABkWAAAbFgAAZBYAAGUWAABmFgAAdxYAAHgWAADB FgAACBcAAFEXAACaFwAA4hcAACsYAABuGAAAkxgAAJQYAADbGAAAJBkAAGoZAACwGQAA9RkAADwa AABLGgAATBoAAJQaAACVGgAA2BoAAB4bAAAfGwAAaBsAAJMbAACUGwAAQxwAAEQcAABFHAAAXhwA AF8cAACmHAAA7xwAADYdAAB+HQAAxR0AAAUeAAAVHgAAFh4AABceAAAYHgAAGR4AABoeAAAbHgAA HB4AAB0eAAAeHgAAHx4AACAeAAAhHgAAIh4AACMeAABsHgAAbh4AALceAAC4HgAAuR4AAPQeAAAv HwAAah8AAKUfAADdHwAAFSAAAFUgAACNIAAAxSAAAAEhAAA9IQAAeSEAALUhAADxIQAA8iEAABki AAAaIgAAYyIAAKwiAAD0IgAANCMAAHsjAADEIwAACyQAAFMkAABgJAAAYSQAAKYkAACnJAAAxSQA AMYkAAANJQAATyUAAJQlAADSJQAA0yUAABsmAABfJgAApSYAAO0mAAAxJwAAdicAALcnAAD3JwAA PCgAAFMoAABUKAAAVSgAAFYoAABXKAAAWCgAAKEoAACjKAAA7CgAAO0oAADuKAAACikAAAspAABU KQAAlSkAAN0pAAAkKgAAbCoAALMqAADaKgAA2yoAAPgqAAD5KgAAQisAAIkrAADPKwAAFiwAACMs AAAkLAAAaCwAAK8sAAD3LAAAQC0AAEwtAABNLQAAli0AAN0tAAAhLgAAZi4AAIYuAACHLgAAqC4A AKkuAADsLgAALi8AAHUvAAC8LwAABDAAAEkwAACNMAAAuTAAALowAAAAMQAARzEAAIkxAADQMQAA GDIAAF8yAACiMgAAozIAAKQyAAClMgAA7jIAAPAyAAA5MwAAOjMAADszAABoMwAAaTMAAJYzAACZ MwAA4TMAADQ2AAA1NgAAvTYAAAc3AABONwAAljcAAN03AACkOAAApTgAAKY4AACnOAAAtjgAALc4 AAD+OAAACDkAAAk5AAAjOQAAJDkAAG05AACyOQAA+zkAAD46AACCOgAAyDoAAA87AABVOwAAVjsA AJ87AADGOwAAxzsAABA8AAARPAAAVDwAAJk8AADfPAAAGD0AAF49AACLPQAA0T0AAP49AABEPgAA cT4AALc+AADdPgAAAz8AAAQ/AAAMPwAADT8AADA/AAAxPwAAOz8AADw/AABFPwAARj8AAEc/AABI PwAAST8AAEo/AABLPwAAlD8AAJY/AADfPwAA4D8AAOE/AADsPwAA7T8AACtAAAAsQAAASkAAAEtA AACTQAAA20AAACRBAABtQQAAtkEAAMFBAADCQQAACUIAADVCAAA2QgAAfEIAAIZCAACHQgAAykIA AA9DAABVQwAAjkMAANRDAAABRAAAR0QAAHREAAC6RAAA50QAAC1FAABTRQAAeUUAAHpFAACCRQAA g0UAAKpFAACrRQAAtUUAALZFAAC/RQAAwEUAAMtFAADMRQAA/EUAAP1FAAD+RQAA/0UAAABGAAAB RgAAAkYAAANGAABMRgAATkYAAJdGAACYRgAAmUYAALZGAAC3RgAA/EYAAEFHAACGRwAAzUcAAAlI AAAKSAAAT0gAAJhIAADBSAAAwkgAAMNIAAAJSQAAUUkAAJpJAADjSQAALEoAAHVKAAC+SgAAB0sA AFBLAACZSwAAmksAAKJLAACjSwAAyUsAAMpLAADUSwAA1UsAABxMAAArTAAALEwAAD1MAAA+TAAA g0wAAKRMAAClTAAAr0wAALBMAAD4TAAAPU0AAIVNAADNTQAA900AAPhNAAD5TQAA+k0AAPtNAAD8 TQAA/U0AAEZOAABITgAAkU4AAJJOAACTTgAAtE4AALVOAAD8TgAARE8AAINPAACRTwAAkk8AANtP AAAVUAAARlAAAH1QAAC1UAAA61AAACNRAAAkUQAAJVEAAC1RAAAuUQAAWFEAAFlRAABjUQAAZFEA AIhRAACJUQAAk1EAAJRRAADdUQAAJlIAACdSAAAoUgAAR1IAAEhSAACPUgAAzlIAAA1TAAAbUwAA HFMAAGNTAACdUwAAzlMAAAVUAAA9VAAAc1QAAKtUAACsVAAArVQAALVUAAC2VAAA3lQAAN9UAADp VAAA6lQAAA5VAAAPVQAAGVUAABpVAABkVQAArVUAAK5VAACvVQAAyVUAAMpVAAATVgAAR1YAAEhW AABJVgAAhFYAAK9WAADxVgAAN1cAAHxXAADFVwAADFgAAA1YAAAOWAAAKlgAACtYAAB0WAAAu1gA AOBYAADhWAAA4lgAAONYAAAsWQAALlkAAHdZAAB4WQAAeVkAAJVZAACWWQAA11kAABdaAABfWgAA o1oAAOhaAAArWwAAcVsAALdbAAD8WwAARFwAAFtcAABcXAAAXVwAAHVcAAB2XAAAvVwAAPtcAAA9 XQAATF0AAE1dAABnXQAAaF0AAIZdAACHXQAApF0AAKVdAADGXQAA310AAOBdAADhXQAA9l0AAPdd AAA8XgAAgl4AAJ5eAACfXgAAoF4AAK9eAACwXgAAy14AAMxeAAAOXwAAT18AAFBfAACWXwAA2l8A ANtfAADcXwAA3V8AAN5fAAAnYAAAKWAAAHJgAABzYAAAdGAAAJFgAACSYAAA12AAAPxgAAD9YAAA Q2EAAIlhAAC8YQAAvWEAAARiAABLYgAAaGIAAGliAAB7YgAAfGIAAMRiAAACYwAAA2MAAEljAAB5 YwAAemMAAL9jAAAFZAAAI2QAACRkAABoZAAAsGQAANhkAADZZAAAIGUAAGZlAAB+ZQAAf2UAAIBl AACTZQAAlGUAAKhlAAC/ZQAA4mUAAPxlAAAjZgAALWYAAC5mAABKZgAAZ2YAAGhmAABpZgAAamYA AGtmAABsZgAAbWYAALZmAAC4ZgAAAWcAAAJnAAADZwAAHGcAADNnAABLZwAAcGcAAH9nAACAZwAA mWcAAJpnAACbZwAArmcAALxnAADXZwAA5GcAAOpnAADrZwAABWgAACFoAAAiaAAAI2gAADBoAAA/ aAAAWmgAAGloAABvaAAAcGgAAIpoAACLaAAAjGgAAJtoAACtaAAAw2gAAOBoAADtaAAA7mgAAPho AAAAaQAAKWkAADFpAAAyaQAAM2kAADRpAAA1aQAANmkAADdpAAA4aQAAOWkAADppAAA7aQAAPGkA AD1pAAA+aQAAh2kAAIlpAACKaQAAjWkAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAA gAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAIAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACQAJgAAyAPMAAAAAAAAACAAAAA gAAAAAAAAAAAgAGYAAAADzAAAAAAAAAAgAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAIAAAACAAAAAAAAAAACQAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAkACYAAAA DzAAAAAAAAAAgAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAIAAAACAAAAAAAAAAACQAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJABmAAAAA8w AAAAAAAAAIAAAACAAAAAAAAAAACIAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAA AAAAAIAAAACAAAAAAAAAAACQAZgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACQAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA kACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQ AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAJAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACQAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAkACYAAAADzAAAAAAAAAAgAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmIAEIA8wAAAA AAAAAIAAAACAAAAAAAAAAACQAJgABCAPMAEAAAAAAACAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAA mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAA AAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAA AAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAA AACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAAgACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAA AIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACAAJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA gACYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAAIAAmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAACA AJgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANIC mAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKY AAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgA AAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAA AA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAA DzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAP MAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8w AAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAA AAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAA AAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAA AAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAA AAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAA AAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAA AQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAAB AAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEA AAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAA AACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAA AIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAA gAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACA AAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAAAAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAA AAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAAAAAAAADSApgAAAAPMAAAAAAAAAEAAAAAgAAA AAAAAAAA0gKYAAAADzAAAAAAAAABAAAAAIAAAAAAAAAAANICmAAAAA8wAAAAAAAAAQAAAACAAAAA AAAAAADSApgAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAgAAABgAAeCgAAD89AADEPgAANlsAADZv AACLcQAAOQAAAEUAAABKAAAATAAAAFYAAABeAAAAAAYAAHgNAADMEQAAPxcAAP4XAAC7HQAAwR4A AGgjAABDJAAAuCYAAKYsAAAKMQAAhzYAAGg7AADhOwAABz8AAMhCAABFRwAAhkoAAP9NAAC+UgAA +1UAAGRZAADOWgAAGV0AAIReAAB4YQAApWUAANpnAAB5awAAa24AAFpwAAA+cQAAi3EAADoAAAA8 AAAAPQAAAD4AAAA/AAAAQAAAAEEAAABCAAAAQwAAAEQAAABGAAAARwAAAEgAAABJAAAASwAAAE0A AABOAAAATwAAAFAAAABRAAAAUgAAAFMAAABUAAAAVQAAAFcAAABYAAAAWQAAAFoAAABbAAAAXAAA AF0AAABfAAAAYAAAAAAGAACLcQAAOwAAAA8AAPA4AAAAAAAG8BgAAAACBAAAAgAAAAEAAAABAAAA AQAAAAIAAABAAB7xEAAAAP//AAAAAP8AgICAAPcAABAADwAC8JIAAAAQAAjwCAAAAAEAAAABBAAA DwAD8DAAAAAPAATwKAAAAAEACfAQAAAAAAAAAAAAAAAAAAAAAAAAAAIACvAIAAAAAAQAAAUAAAAP AATwQgAAABIACvAIAAAAAQQAAAAOAABTAAvwHgAAAL8BAAAQAMsBAAAAAP8BAAAIAAQDCQAAAD8D AQABAAAAEfAEAAAAAQAAAP//FAAAAAYAfKAkABAAAQA0FWQCBgB9oCQAEQABALRvJQUGAGygJAAI AAEAhFwwBQYAbaAkABEAAQCEQCcFBgBuoCQACAABAHTIeggGAG+gJAARAAEA3LZjAgYAcKAkAAgA AQDk7l4CBgBxoCQAEQABAIS6HQUGAGqgJAAIAAIAHLwdBQYAcqAkABAAAQAsth0FBgBzoCQAEQAB APwZNAUGAGugJAAIAAIAJPUwBQYAdKAkAAgAAQCktDAFBgB1oCQAEQABAESSKwUGAHagJAAQAAEA lLcdBQYAd6AkABEAAQAEkisFBgB4oCQAEQABANRTKQUGAHmgJAAQAAEAbBwbBQYAeqAkABEAAQCU ESwFBgB7oCQAEQABAEQSLAVsAQAAbAEAACgRAAAoEQAA2yoAANsqAAA3VwAAN1cAAFheAABHZAAA R2QAAIpnAABCaAAAQmgAAF1oAABdaAAAZmgAAMZoAADGaAAA0WgAAI1pAAAAAAAAAgABAAAAAgAC AAAAAgADAAAAAgAEAAAAAgAFAAAAAgAGAAAAAgAHAAAAAgAIAAAAAQAJAAAAAgAKAAAAAgALAAAA AQAMAAAAAgANAAAAAgAPAAAAAgAOAAAAAgAQAAAAAgASAAAAAgARAAAAAgATAAAAAgBvAQAAbwEA ADgRAAA4EQAA6yoAAOsqAABqVwAAalcAAGJeAABOZAAATmQAAJhnAABZaAAAWWgAAGRoAABoaAAA aGgAAM9oAADZaAAA2WgAAI1pAAAAAAAAAQAAAAIAAAADAAAABAAAAAUAAAAGAAcABwAHAAgABwAJ AAcACgAHAAsABwAMAAcADQAHAA8ABwAOAAcAEAAHABIABwARAAcAEwAHAAcAAABCAAAAEwAAACqA dXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6c21hcnR0YWdzDoBjb3VudHJ5LXJlZ2lv bgCAOQAAAAQAAAAqgHVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOnNtYXJ0dGFncwWA U3RhdGUAgDgAAAAKAAAAKoB1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpzbWFydHRh Z3MEgENpdHkAgDkAAAAUAAAAKoB1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpzbWFy dHRhZ3MFgHBsYWNlAIA6AAAAEQAAACqAdXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6 c21hcnR0YWdzBoBTdHJlZXQAgDsAAAASAAAAKoB1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9m ZmljZTpzbWFydHRhZ3MHgGFkZHJlc3MAgD4AAAAMAAAAKoB1cm46c2NoZW1hcy1taWNyb3NvZnQt Y29tOm9mZmljZTpzbWFydHRhZ3MKgFBlcnNvbk5hbWUAgAwAAAGwUKMFAAAAABQAAAAAABMAAAAA ABIAAAAAABEAAAAAABIAAAAAABEAAAAAABIAAAAAABEAAAAAAAwAAAAAABQAAAAAAAoAAAAAAAwA AAAAABIAAAAAABEAAAAAABQAAAAAAAoAAAAAAAQAAAAAABQAAAAAAAoAAAAAAAQAAAAAAAAAAABC AAAASwAAAB4BAAAmAQAAZQEAAGsBAABDCAAATAgAADcJAABACQAAVg8AAF8PAADQFQAA2RUAABMb AAAVGwAAOh0AAD8dAACPHQAAlB0AANodAADfHQAACB4AABMeAAAjHgAALB4AAEIeAABLHgAAbh4A ALceAADtHgAA9B4AAB0fAAAvHwAAnh8AAKUfAADMHwAA3R8AAAEgAAAVIAAAOyAAAFUgAACxIAAA xSAAANogAAABIQAAByEAACshAAA2IQAAPSEAAEUhAAB5IQAAgCEAALUhAAAyIgAANyIAAHkiAAB8 IgAAYiYAAGomAAA/KAAARygAAFgoAABhKAAAdygAAIAoAACjKAAA7CgAAAQsAAAJLAAApTIAAK4y AADEMgAAzTIAAPAyAAArMwAALjMAADkzAABbOgAAXToAADQ/AAA6PwAASz8AAFQ/AABqPwAAcz8A AJY/AADfPwAAA0YAAAxGAAAiRgAAK0YAAE5GAABoRgAAaUYAAJdGAAD9TQAABk4AABxOAAAlTgAA SE4AAJFOAADFVgAAxlYAAM9WAADQVgAAB1cAAAhXAAARVwAAElcAAD9XAABAVwAATVcAAE5XAABX VwAAWFcAAJJXAACTVwAA21cAANxXAADjWAAA7FgAAAJZAAALWQAALlkAAHZZAAA/XgAARF4AANpe AADhXgAA/V4AAAFfAABrXwAAcV8AAH5fAACEXwAArF8AAL1fAADeXwAA518AAP1fAAAGYAAAKWAA AHFgAAC8YAAAwmAAAIpiAACQYgAAEWMAABhjAACIYwAAjmMAAJRjAACcYwAAtmMAAL1jAAAyZAAA N2QAAEdkAABOZAAAW2QAAGZkAADnZAAA7WQAAPlkAAADZQAATWUAAFFlAACeZQAAp2UAAMplAADN ZQAAz2UAANhlAADlZQAA/GUAAP9lAAAjZgAAbWYAAHZmAACMZgAAlWYAALhmAAABZwAANmcAAEtn AABOZwAAb2cAAHNnAAB/ZwAAg2cAAJlnAACeZwAArmcAALFnAAC8ZwAAv2cAANdnAADaZwAA5GcA AOdnAADqZwAA42gAAOxoAAA+aQAAR2kAAI1pAAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAH AAUABwAFAAcABQAHAAUABwAFAAcABQAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHAAUABwAcAAcA HAAHABwABwAFAAcABQAHABwABwAcAAcAHAAHABwABwAFAAcAHAAHABwABwAFAAcABQAHABwABwAc AAcABQAHABsABwAbAAcAGwAHABsABwAbAAcAGwAHABsABwAbAAcAGwAHABwABwAcAAcABQAHABwA BwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcABQAHABwABwAcAAcAHAAHABwABwAcAAcAHAAH ABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHAAUABwAFAAcAHAAHABwABwAFAAcA BQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcAHAAHABwABwAAAAAATAAAAJQAAACV AAAA3QAAACsDAABPAwAApQMAALADAADuAwAA8gMAAMMEAADIBAAACgYAABIGAACnBgAAsQYAAFMH AABaBwAAmwcAAKQHAAAiCAAAJQgAAGoIAABuCAAArAgAALQIAAATCgAAGwoAAOwKAAD3CgAALAsA ADULAAB1CwAAdwsAAL0LAADECwAAAwwAAAYMAABGDAAATwwAAPsMAAAEDQAAQQ0AAEkNAACEDQAA kQ0AABIOAAAVDgAAWA4AAF8OAACeDgAAoQ4AAOUOAADnDgAALQ8AADEPAABWDwAAZw8AAJkQAACg EAAA4hAAAO4QAAArEQAAMhEAAHQRAACAEQAABhIAAA8SAABPEgAAVRIAAJgSAACgEgAA4RIAAO0S AAAqEwAAMhMAAOAUAADsFAAAKRUAADcVAADQFQAA4RUAAMQWAADIFgAACxcAABAXAABUFwAAVxcA AOUXAADyFwAAlxgAAJ0YAADhGAAA4xgAACoZAAAtGQAAQhoAAEkaAABPGgAAXBoAAJgaAACoGgAA IhsAACgbAACpHAAAqxwAADkdAABUHQAAgR0AAIYdAADIHQAAyx0AAAgeAAATHgAAbh4AALYeAADs HgAA8x4AABwfAAAuHwAAVh8AAGofAACRHwAApB8AAMwfAADcHwAAACAAABQgAAA4IAAAVCAAAHgg AACMIAAAsCAAAMQgAADZIAAAACEAAAYhAAA8IQAAQiEAAHghAAB+IQAAtCEAAGYiAABuIgAAryIA AMUiAAD3IgAA+iIAADcjAABBIwAAfiMAAIgjAADHIwAAyiMAAA4kAAASJAAAViQAAFkkAACqJAAA sSQAABAlAAAZJQAAUiUAAFolAACXJQAAmyUAAGImAABqJgAAqCYAALAmAAA0JwAAOicAAHknAAB9 JwAAuicAAMMnAAD6JwAABCgAAD8oAABHKAAAoygAAOsoAADxKAAA/SgAAJgpAACpKQAA4CkAAOMp AAAnKgAALyoAALYqAAC5KgAA3ioAAOUqAABFKwAARysAAIwrAACOKwAA0isAANcrAAAZLAAAIiwA AGssAABxLAAAsiwAANosAAD6LAAA/ywAAEMtAABKLQAA4C0AAOItAAAkLgAAKi4AAGkuAABxLgAA ii4AAJYuAADvLgAA+C4AADEvAAA7LwAAeC8AAIIvAAC/LwAAyS8AAAcwAAALMAAATDAAAFIwAACQ MAAAljAAAAMxAAAKMQAASjEAAE0xAACMMQAAkjEAABsyAAAlMgAA8DIAADgzAAA+MwAASDMAAOQz AADtMwAAwDYAAMM2AAAKNwAAEDcAAJk3AACjNwAAATkAAAY5AAAMOQAAFTkAAHA5AAB2OQAAtTkA ALw5AABBOgAARzoAAIU6AACKOgAAyzoAANg6AAASOwAAFjsAAKI7AACoOwAAlj8AAN4/AAAvQAAA NUAAAJZAAACfQAAA3kAAAOBAAAAnQQAAK0EAAHBBAABzQQAAuUEAAL9BAAAMQgAAFUIAAH9CAACE QgAA0kUAAPtFAABORgAAlkYAAJxGAACkRgAA/0YAAAlHAABERwAATUcAANBHAADURwAAUkgAAFdI AACbSAAAnUgAANtLAADrSwAAIkwAACRMAACJTAAAo0wAALZMAADkTAAA/kwAAANNAACLTQAAj00A ANNNAADZTQAASE4AAJBOAACWTgAAok4AAP9OAAADTwAAR08AAEpPAADeTwAA408AAGpRAAB6UQAA fFEAAIdRAADjUQAA7VEAACtSAAA0UgAAklIAAJZSAADRUgAA1FIAAGZTAABrUwAA8FQAAABVAAAC VQAADVUAAGpVAAB0VQAAslUAALpVAAAWVgAAGFYAAHdWAACDVgAA11YAAONWAAAZVwAAIlcAAF9X AABqVwAApFcAALNXAADtVwAA+VcAAHdYAAB6WAAAvlgAAMBYAAAuWQAAdlkAANpZAADoWQAAGloA ACJaAABiWgAAdFoAAKZaAACuWgAAulsAAMhbAAD/WwAABVwAAEdcAABKXAAAQF0AAEpdAABQXQAA WV0AAGtdAABxXQAAil0AAJJdAAA3XgAAO14AAIVeAACOXgAAs14AAL9eAAApYAAAcWAAAHdgAACF YAAAUWEAAFRhAADlZQAA+2UAAP9lAAAiZgAAuGYAAABnAAA2ZwAASmcAAE5nAABvZwAAc2cAAH5n AACDZwAAmGcAAJ5nAACtZwAAsWcAALtnAAC/ZwAA1mcAANpnAADjZwAA52cAAOlnAAC5aAAAv2gA AI1pAAAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoA BwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAH ADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcA OgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6 AAcAOgAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUA BwAFAAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAH ADoABwA6AAcAOgAHADoABwA6AAcAOgAHAAUABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcA OgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6 AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHAAUABwA6AAcAOgAHADoABwA6AAcAOgAHADoA BwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHAAUABwA6AAcAOgAHADoABwA6AAcAOgAH ADoABwA6AAcAOgAHADoABwAFAAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcA OgAHADoABwA6AAcAOgAHAAUABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6 AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoA BwAFAAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAHADoABwA6AAcAOgAH ADoABwAFAAcAOgAHADoABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAUABwAFAAcA BQAHAAUABwA6AAcAAAAAAChSAABLUgAAxVcAAA5YAADGXQAA4V0AAFVpAACKaQAAjWkAAAcABQAH AAUABwAFAAcABQAHAAAAAACNaQAABwAEAHZ9gFjG4ALB/w//D/8P/w//D/8P/w//D/8PEACuMUJb mDFmWf8P/w//D/8P/w//D/8P/w//DxAAHw2NZbCUsCn/D/8P/w//D/8P/w//D/8P/w8QAJQsRnoY FbC5/w//D/8P/w//D/8P/w//D/8PEAABAAAAFxAAAAAAAAAAAAAAaAEAAAAAAAAVGAAAD4TQAhGE mP4VxgUAAdACBl6E0AJghJj+T0oGAFFKBgBvKACHaAAAAACISAAAAQCn8AEAAAAXkAAAAAAAAAAA AABoAQAAAAAAABkYAAAPhKAFEYSY/hXGBQABoAUGXoSgBWCEmP5PSgQAUUoEAF5KBABvKACHaAAA AACISAAAAQBvAAEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAPhHAIEYSY/hXGBQABcAgGXoRw CGCEmP5PSgYAUUoGAG8oAIdoAAAAAIhIAAABAKfwAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAFRgA AA+EQAsRhJj+FcYFAAFACwZehEALYISY/k9KAQBRSgEAbygAh2gAAAAAiEgAAAEAt/ABAAAAF5AA AAAAAAAAAAAAaAEAAAAAAAAZGAAAD4QQDhGEmP4VxgUAARAOBl6EEA5ghJj+T0oEAFFKBABeSgQA bygAh2gAAAAAiEgAAAEAbwABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAVGAAAD4TgEBGEmP4VxgUA AeAQBl6E4BBghJj+T0oGAFFKBgBvKACHaAAAAACISAAAAQCn8AEAAAAXkAAAAAAAAAAAAABoAQAA AAAAABUYAAAPhLATEYSY/hXGBQABsBMGXoSwE2CEmP5PSgEAUUoBAG8oAIdoAAAAAIhIAAABALfw AQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAGRgAAA+EgBYRhJj+FcYFAAGAFgZehIAWYISY/k9KBABR SgQAXkoEAG8oAIdoAAAAAIhIAAABAG8AAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+EUBkR hJj+FcYFAAFQGQZehFAZYISY/k9KBgBRSgYAbygAh2gAAAAAiEgAAAEAp/AAAAAAFwAAAAAAAAAA AAAAAAAAAAAAAAATGAAAD4TQAhGEmP4VxgUAAdACBl6E0AJghJj+T0oBAFBKAwBRSgEAXkoEAG8o AAEAt/ABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAZGAAAD4SgBRGEmP4VxgUAAaAFBl6EoAVghJj+ T0oEAFFKBABeSgQAbygAh2gAAAAAiEgAAAEAbwABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAVGAAA D4RwCBGEmP4VxgUAAXAIBl6EcAhghJj+T0oGAFFKBgBvKACHaAAAAACISAAAAQCn8AEAAAAXgAAA AAAAAAAAAAAAAAAAAAAAABUYAAAPhEALEYSY/hXGBQABQAsGXoRAC2CEmP5PSgEAUUoBAG8oAIdo AAAAAIhIAAABALfwAQAAABeAAAAAAAAAAAAAAAAAAAAAAAAAGRgAAA+EEA4RhJj+FcYFAAEQDgZe hBAOYISY/k9KBABRSgQAXkoEAG8oAIdoAAAAAIhIAAABAG8AAQAAABeAAAAAAAAAAAAAAAAAAAAA AAAAFRgAAA+E4BARhJj+FcYFAAHgEAZehOAQYISY/k9KBgBRSgYAbygAh2gAAAAAiEgAAAEAp/AB AAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4SwExGEmP4VxgUAAbATBl6EsBNghJj+T0oBAFFK AQBvKACHaAAAAACISAAAAQC38AEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAABkYAAAPhIAWEYSY/hXG BQABgBYGXoSAFmCEmP5PSgQAUUoEAF5KBABvKACHaAAAAACISAAAAQBvAAEAAAAXgAAAAAAAAAAA AAAAAAAAAAAAABUYAAAPhFAZEYSY/hXGBQABUBkGXoRQGWCEmP5PSgYAUUoGAG8oAIdoAAAAAIhI AAABAKfwAQAAABcQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+E0AIRhJj+FcYFAAHQAgZehNACYISY /k9KBgBRSgYAbygAh2gAAAAAiEgAAAEAp/ABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAZGAAAD4Sg BRGEmP4VxgUAAaAFBl6EoAVghJj+T0oEAFFKBABeSgQAbygAh2gAAAAAiEgAAAEAbwABAAAAF5AA AAAAAAAAAAAAaAEAAAAAAAAVGAAAD4RwCBGEmP4VxgUAAXAIBl6EcAhghJj+T0oGAFFKBgBvKACH aAAAAACISAAAAQCn8AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAPhEALEYSY/hXGBQABQAsG XoRAC2CEmP5PSgEAUUoBAG8oAIdoAAAAAIhIAAABALfwAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAA GRgAAA+EEA4RhJj+FcYFAAEQDgZehBAOYISY/k9KBABRSgQAXkoEAG8oAIdoAAAAAIhIAAABAG8A AQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+E4BARhJj+FcYFAAHgEAZehOAQYISY/k9KBgBR SgYAbygAh2gAAAAAiEgAAAEAp/ABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAVGAAAD4SwExGEmP4V xgUAAbATBl6EsBNghJj+T0oBAFFKAQBvKACHaAAAAACISAAAAQC38AEAAAAXkAAAAAAAAAAAAABo AQAAAAAAABkYAAAPhIAWEYSY/hXGBQABgBYGXoSAFmCEmP5PSgQAUUoEAF5KBABvKACHaAAAAACI SAAAAQBvAAEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAPhFAZEYSY/hXGBQABUBkGXoRQGWCE mP5PSgYAUUoGAG8oAIdoAAAAAIhIAAABAKfwAQAAABcQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+E aAERhJj+FcYFAAFoAQZehGgBYISY/k9KBgBRSgYAbygAh2gAAAAAiEgAAAEAp/ABAAAAF5AAAAAA AAAAAAAAaAEAAAAAAAAZGAAAD4Q4BBGEmP4VxgUAATgEBl6EOARghJj+T0oEAFFKBABeSgQAbygA h2gAAAAAiEgAAAEAbwABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAVGAAAD4QIBxGEmP4VxgUAAQgH Bl6ECAdghJj+T0oGAFFKBgBvKACHaAAAAACISAAAAQCn8AEAAAAXkAAAAAAAAAAAAABoAQAAAAAA ABUYAAAPhNgJEYSY/hXGBQAB2AkGXoTYCWCEmP5PSgEAUUoBAG8oAIdoAAAAAIhIAAABALfwAQAA ABeQAAAAAAAAAAAAAGgBAAAAAAAAGRgAAA+EqAwRhJj+FcYFAAGoDAZehKgMYISY/k9KBABRSgQA XkoEAG8oAIdoAAAAAIhIAAABAG8AAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+EeA8RhJj+ FcYFAAF4DwZehHgPYISY/k9KBgBRSgYAbygAh2gAAAAAiEgAAAEAp/ABAAAAF5AAAAAAAAAAAAAA aAEAAAAAAAAVGAAAD4RIEhGEmP4VxgUAAUgSBl6ESBJghJj+T0oBAFFKAQBvKACHaAAAAACISAAA AQC38AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABkYAAAPhBgVEYSY/hXGBQABGBUGXoQYFWCEmP5P SgQAUUoEAF5KBABvKACHaAAAAACISAAAAQBvAAEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAP hOgXEYSY/hXGBQAB6BcGXoToF2CEmP5PSgYAUUoGAG8oAIdoAAAAAIhIAAABAKfwBAAAAJQsRnoA AAAAAAAAAAAAAAB2fYBYAAAAAAAAAAAAAAAAHw2NZQAAAAAAAAAAAAAAAK4xQlsAAAAAAAAAAAAA AAD///////////////////////8EAAAAAAAAAAAAAAD//wQAAAASAAUACQQDAAkEBQAJBAEACQQD AAkEBQAJBAEACQQDAAkEBQAJBBIApFYa2QMACQQFAAkEAQAJBAMACQQFAAkEAQAJBAMACQQFAAkE EgAFAAkEAwAJBAUACQQBAAkEAwAJBAUACQQBAAkEAwAJBAUACQQSAAUACQQDAAkEBQAJBAEACQQD AAkEBQAJBAEACQQDAAkEBQAJBE0GAAAEAAAACAAAAOUAAAAAAAAATAYAAFsUAACVIwAAPQQBAKMN AQAELQEAEC4BABMvAQApPgEAe0QBAHBSAQDrZAEAxQ4CAGdgAgAFYQIAHWQCAFZ2AgAsdwIAl3oC AC08AwC7SQMAzFEDACh1AwD6fAMAECAEAIswBACjdgQA6HgEAOISBQCrFQUAASoFAPw7BQBsawUA twMGACAKBgC3DwYAiRsGAPIiBgC6OAYARkIGADZoBgAaawYAcnAGAEYIBwAeFwcAfRwHAL4+BwDK CwgAvyMIAEM7CACnVggA92AIAMxnCAA0awgAJgQJAFIRCQC5IAkAczIJAAM0CQALNQkAlUYJAB4M CgDEEQoA7CoKAGA2CgA4UQoA8VYKAD1aCgBBXwoAGWAKAHRiCgAgZwoA3w4LAFUQCwB8EwsAxCgL ADMqCwD9NgsAMjgLANFACwAYQgsAD0cLACphCwBGYgsA7XcLAC0dDAD+dAwAVwANALswDQCIRg0A vlsNAFRsDQCCbQ0AbQEOAHksDgB9LQ4AXXAOAKN9DgAJKQ8AcTsPAMAPEAAPFBAAeRwQADsqEACx OBAAfVUQADFdEADTehAAKQgRAEYgEQAFNBEAHU0RAORbEQC/bxEAzTESADx9EgC4fhIABT0TABxG EwDmSRMAHGATAHolFADyLRQALTEUAJgyFAC+VhQAblwUAORnFADKcxQAS3QUANl2FAAFBBUArRIV ACIkFQAMLRUAVzAVAA85FQBcSBUAuV0VACRhFQCFbRUAb3gVAHJ6FQC4DBYAnzQWANdKFgDCSxYA zgEXAN0MFwBGFBcAkiYXAPQpFwAPKxcAojwXAGVHFwCtSRcAXU8XAOt1FwD7AhgAGgkYAGgMGABJ IRgACS4YAEk+GAAVUBgAPAgZAMEWGQD/GxkAMC4ZAI9IGQC4UhkA1HYZAFB3GQDoexkAO30ZAEwD GgDbbxoAnXMaAEQoGwBXLRsAhzQbAFhcGwBJAhwA9W8cAMYFHQB4GB0AXxodAE0fHQAzSR0AIFMd AKgYHgARKB4AVmweAPUEHwDWDh8AIEcfAINaHwAIbB8Ax20fAH9CIADhSSAAEAohADUQIQD0IyEA DS0hAE1KIQAABSIAgSciAKxkIgCmciIA/Q0jAMQSIwBHPiMA6lwjAPBiIwA5ZiMA9xkkAJkcJADW PCQAmz8kAIVdJABDbiQALX0kAJoHJQDyPyUAi0clAHtiJQBzZCUAiHQlAPV2JQA0AiYA2AsmAFgh JgDmLSYAmi8mANU9JgAySCYAsEwmACtRJgAEXyYAPGYmAD1tJgC6ACcAMAgnAKYJJwBPDCcAXx0n ANhtJwCEMygAiVEoAG0PKQDtJSkAvEwpADxoKQCAeikA8gkqAHcfKgDlbCoAnm4qAKcMKwD5MisA kTYrAJpCKwA9QysAQFErAMpZKwDnGywAMS4sACdVLADzcSwApQ0tALE9LQAKSS0AAVUtAOF8LQCf AS4AsQEuAK8LLgCHIi4A8EYuADFKLgBmdC4AI3UuAIAELwCABi8ADAsvALE5LwCiSC8AKFovAApf LwB6ZS8AfnkvAFYJMAD/HDAAPSkwAPAyMAALXTAAQF0wADBgMABYaTAAq3AwAA8QMQBfITEAPzQx ACNkMQD5BzIAIzsyAB5MMgB2TjIAN3QyABh3MgDbOjMAjk8zANRRMwBTWTMACGQzANlnMwABIjQA 3Tc0AFc6NADtQzQAT200AP1zNAC0BTUAZws1ANUWNQCgHzUAXiE1AJduNQA2eDUAJQU2ANwXNgC8 JDYAJDI2AMI0NgCzPTYADFE2AOVpNgBNCzcALgw3ALQRNwDCKjcALFM3AP5mNwCDcjcAgwM4ADkF OACODDgAdBA4AJkgOADIJjgARis4AAxTOADlVjgAmgU5ALlFOQC1aDkAc245AF4EOgDMDDoA4Sw6 AOtMOgAxTzoAtFY6AHJXOgDLezoAMwo7ANcgOwDWIjsARzo7AF9IOwDpaDsAtgg8ADo5PAAePDwA Gkc8AAlPPADwajwA5Hs8AMR8PAANAz0AQiE9AMsjPQBkOz0AzVI9ABlyPQB1cj0ADX89ABsUPgAk Gj4AiVs+AENtPwBeej8AGAFAAFoDQABzB0AAXxZAAAtRQAC1UUAAO2dAAHBzQAA8e0AALwlBABEs QQChWEEAwRlCAGwlQgCcJUIAIyBDAKRFQwCZVkMAEwtEAIMlRAAkUUQAyV5EAEN4RAAdVUUA8lVF AI5zRQBhdUUAVyNGAFwvRgA8M0YAByFHABtERwBjS0cAOHBHAIV6RwAUfEcA7RtIAABFSACBSUgA rVtIAOMISQDiCUkApRhJAOwfSQCcMkkAZUpJANVgSQBJDEoAfhxKAEEdSgBrOUoAAENKAKdWSgDV VkoA92NKAGkFSwB6LksAbDBLAKE3SwCSPEsAwjxLANxeSwDDa0sAJHVLAJB3SwBaJ0wAHklMAGMM TQC2JU0AQzJNAFQ8TQDPRU0Am01NABBPTQDCXU0A2G9NAPdyTQA+f00AMRlOAOkeTgDeH04AcVBO APRqTgCEbE4A7iFPAFwuTwCTVE8AiGtPACV2TwDZeE8AchFQAFs9UAA0T1AAzAJRAJxCUQDVQ1EA l11RAItqUQBJb1EA3wxSAJQlUgBmUFIA1gJTAH8PUwBHFlMA/j1TALxAUwAdTFMA2m5TAOMTVADh N1QAikZUAMZTVABaVVQAG2lUALF9VADdA1UAfgdVAKFEVQBlTVUAPWFVAG9oVQBKDFYA9Q9WAFoX VgAMG1YA6x5WALMuVgDuOVYA/zxWAIBQVgAiV1YA1HxWAHoNVwDaIVcA5DNXAOZLVwBMUlcAGVVX ALNbVwA5ZFcAIGhXAO5qVwBWeVcArytYAARjWABOdFgAun9YABAMWQD3KFkAu2RZAF10WQCfEFoA XRJaAJVPWgDPVVoA5gBbAOgEWwBhClsAmi9bAB8wWwABPFsAMktbALdTWwCIbFsASm9bAG12WwC+ BlwAOg1cAEsQXAAjKVwACTZcACA6XAAUPFwAKz5cAGFEXAA/SVwAH1BcAC1VXADwWFwAwGBcANho XADCflwAHhldANYfXQCPVl0AjVZeAABoXgDTbF4AGHleAHcKXwD1EF8ArhhfAK0cXwCWSV8AwlRf AF5eXwBrF2AAw1xgAGMNYQA1J2EAzEZhAKNWYQAGb2EAQXRhADQPYgD4FGIAVzZiAEo/YgCFfGIA zAtjAJ4tYwDuNWMAVFBjAMJiYwBUc2MA0AhkAPsPZADBF2QAHDRkAFU0ZAB1PGQAn0JkAOdEZABl CWUAgxNlAFNXZQAMCmYADDdmADVBZgBGRmYAM3hmADsJZwDTKmcAxVdnABxrZwA8bGcAmxZoAJo1 aAC1PmgAeT9oAC9GaAAkaWgAbXZoAIkLaQCyTWkATyFqALwoagBjM2oAXzlqAEc/agBnS2oAyltq ADxeagDffWoATw1rAC0XawDzRWsAmUlrAEhPawBZVmsAK3xrAMQCbAAYBWwAbxZsADFGbADYUmwA LVZsAPxXbACXXGwAhx1tAHg7bQCXVG0AiFVtAIx0bQCZUm4APVxuAKthbgAGbW4A/gFvABcabwAw KW8AVDZvAIU+bwDDAHAA3wVwABEucAD3YnAAnQtxAKcMcQCpHXEAsg5yAHY4cgAnQnIAMV1yAA0R cwB/EXMADRhzAGIrcwDkPXMArVBzAPtVcwAsbHMAax50AM0xdAA1YHQA3Wh0AEV6dADFBXUAuR11 ACwtdQDfXnUAJ3x1ANUZdgA2KHYAT0Z2AFNRdgCjXHYAtV52AA1idgDhc3YA3H52ABETdwCtFXcA bRh3APgodwAeL3cAVTB3AOFYdwDud3cAhnt3APQUeACDQ3gA+kN4ADdNeAAHU3gAdVd4AOBoeAAB dXgA0Ap5AHgQeQDBEnkA8mF5AJRjeQBeBXoA/xl6AAocegAhMnoAyTd6ALM5egCqUHoA3HR6AIAD ewBKC3sAHRp7AAAzewDhO3sAO0N7AI96ewCRGnwA9x18APoffABPP3wAGEt8AJhOfABrc3wAeRd9 AM8bfQDxMn0A00Z9ABhOfQCfU34A0GB+AERkfgD2fn4AcSd/AAYxfwCxQX8A83x/ABQ7gABuYYAA VmiAAE1qgADdboAAt3KAAK12gABhd4AALnuAADN/gAAaDoEAHhOBABMfgQBUH4EAoimBAIswgQAk OoEAtlSBAEJwgQBOcYEAgXyBAK8AggDcBIIApwuCADYcggD/KIIAui6CAIE2ggCaR4IAFluCAN9f ggCEE4MAEBmDAD5AgwAXQYMA4EGDAN1KgwCEZ4MAFwKEAJwMhADVL4QAgz+EAD9RhACsAIUABgGF ANgBhQCaDYUA6B6FAJsfhQAsMYUAmUOFALtZhQBCZ4UAyW2FALRvhQC5b4UAziOGAJs5hgBLSIYA rRSHAMA0hwDRQYcAxE6HALZchwDIYocAIReIAMgniABFOIgArz+IAEFBiAAsRogAllaIAI5wiADY EYkAvxWJAJQXiQCiF4kAtSSJAOAuiQBrMYkA4kGJAJ9SiQDNaYkA8muJAGh5iQBxEooA3iWKACtC igBQRIoA6VKKAIpiigAwbooA8R2LADUiiwCfJosAwEuLAMhYiwDRXIsAq2SLAAcdjAAVKIwATTeM AKFAjADUTIwAqGSMAPlzjADmC40ARj6NAHFPjQCRVY0AGGONAK15jQCCe40AW0SOAGZXjgCtcI4A GX2OAK0JjwD9F48AZR6PAE0ijwCgJY8AnFGPAOtXjwDPIZAARzyQAARRkAC1DZEArRyRAGMvkQCg VJEAXleRAAlfkQDSdJEAEyuSAMRCkgCSSJIAdxSTAP0JlABzLpQAMDiUADA9lADVS5QAZlCUALBj lAC8dJQA+3iUAPsvlQAeR5UAzVaVAHRclQAaZpUAhgyWANxKlgDlVJYAuHyWAMkJlwALTJcA/FmX ALcJmACxG5gA4iKYAL5pmAD0bZgA83KYAOYjmQB2LZkAYT+ZAIBVmQCnVZkAkWCZAHBlmQBIZpkA HHmZAG4JmgBdGZoAfxyaAHslmgDEMJoA4zGaAGtEmgCFe5oAUn2aAHIFmwDPB5sA1QibADYhmwA7 JJsAHTqbAIRImwC9S5sAPk+bANhUmwDpZZsAX26bAD52mwAxBpwAvk2cAFxbnACnfZwAsg6dAGAc nQA4IJ0AVS+dAAc+nQC2Rp0Ar1WdAP1unQArFZ4ACB6eABcungCSMJ4A3WaeAKZ+ngDbJJ8A/0Wf AAlenwCkA6AAmBagAB4foABPPKAAEmmgAPweoQCWNKEAJVChAH1UoQAeZqEARWmhAFF0oQAIeKEA 8BCiAMFiogDncKIAFXSiAJkaowAtQKMAJEajANACpAAhBaQAJS+kAE84pAC7RqQAGkikAJVOpADJ cqQAVXekANkSpQChM6UA41SlAB52pQDEfKUA3RymAGsgpgB5F6cAbyunAA8wpwA7OKcAsmGnADQF qABFDKgAfgyoAMsrqADrNagAEEKoAMNEqACLYagA9X+oAAoRqQBdFqkAdS2pALw5qQBrUKkAwlGp AEVYqQDqZ6kABQaqAO5FqgAKUaoA/VuqAE9zqgBjEKsACSKrAEEvqwB3W6sAe2OrAJVnqwDHa6sA rh2sAHc0rAAAQ6wA5ESsADhfrACwZawAz3asAJQIrQBeCa0AchatAMYZrQAcOK0AbUWtAMVRrQDa Xa0AUmOtAMF7rQDpB68AGA2vANU5rwA/PK8A/0GvAD1KrwBzY68AtW2vAB8psAD1QrAARkmwACNV sAB3W7AAemGwABJlsAAKALEAwR+xACMgsQBTLbEAmDKxALVEsQDORrEA2U2xAEFXsQAYXrEA9HGx AOcGsgAgGrIAuFSyAPlfsgA7Y7IAHXayANl4sgDnerIApH+yAMQjswAANrMAC1uzAD5uswA/CbQA ewy0AEUVtACiI7QA+Ti0AN09tACmPrQA3kG0AFM+tQAqRbUAtkm1AFZftQCVY7UAEXK1AJx4tQDN ILYAQjW2AEVhtgAldLYANnq2ADAXtwCWLLcAUmu3AHFrtwCYdbcAZBW4ABwXuADQGbgAoyq4AK8y uAD3NrgAHFW4AKBluABxB7kAsRa5AFo3uQBHeLkAPAe6ACkjugCdRLoAfV+6ANEouwCQNbsAg0i7 AC5cuwBnXbsATne7AEMgvADeKrwAyiu8AMswvAA6OrwAAD+8ANlBvAAeR7wA+WK8AHNpvACeb7wA uRO9AP02vQBqU70AqWi9ACh4vQCgfr0A2xe+AJ4ivgCVVb4AyVe+ACR0vgAsd74AAH++AAInvwBU RL8AD1q/AB9avwCtAMAAHQLAAM0gwAB9ZMAA1mnAACt8wABLBcEASgfBAJUKwQDRDcEAUhLBAPEd wQBVIsEAIC3BAL01wQBtRMEAYWLBAEl0wgCSeMIAYSnDAMUwwwANSsMAQlLDAB5TwwBfVcMAQ2LD AKR2wwB0CsQAeQzEABoQxACWd8QAHX3EAGs6xQBUXsUACXLFAKIBxgDcAsYAHAXGAAUTxgCQE8YA 6TLGAPUIxwDFCccAiBDHAJEZxwBuGscAMknHALddxwCoZccAm3nHAGB9xwCSNcgAV2fIABJryADS ccgAZnfIAAZ8yABLBMkAWxHJAKEsyQDjLskAHUPJAFxEyQDJR8kAPmTJAHN3yQCFeMkAoxXKAHEY ygBcJsoAfijKAGA0ygACXsoAKGDKACRzygC4dMoAjy/LAOs0ywARO8sAHUnLANFeywDHYMsAqHLL AN0LzACXFswAOivMAFFGzADgdswAXhTNAP0mzQBtPc0Ap0HNAFJHzQDbR80AhUzNAINNzQCWdc0A YQDOAMwKzgC9DM4AKxXOAJIWzgAkGM4Am13OACF5zgBzf84AVAXPAOAIzwAyMc8Adz/PAM1MzwCP Ws8A5XDPALcQ0AA9GtAAZC7QALg/0AAaR9AAfFfQAMle0AAdZtAAknjQAKwQ0QD8JtEAakLRAARh 0QB6FNIA9ivSAD020gDFRtIANnTSAFUf0wDeN9MAU0fTAOxm0wBSb9MAzQ3UAHAO1ABJENQALD3U ABJl1AD+c9QAqn/UAKxi1QBjctUAFH7VADQI1gCACNYAKRPWAMYp1gDENdYALjvWAEU91gAHWtYA An3WAN451wA3QtcACFrXAMNi1wAWetcACiDYAA0k2ACSMNgABTvYAJFS2ACgXNgAnl/YAOpo2AAL ctgA3XfYAPEv2QB5PtkAHVnZAIgD2gDpB9oA1yLaAO0t2gAVUtoAR17aAIxs2gD2DtsAsSXbANBj 2wAcaNsA+nzbABd+2wDEF9wAribcAI4w3AC/PdwAwkfcABBP3AD4EN0AOhrdAEEl3QDFKN0ABind ABdH3QC2dd0AGB3eACck3gDjJ94A8yjeAJ1F3gBsSN4A31TeAL9m3gDpZ94AoXfeAOF33gBIC98A +yLfAGMo3wD0R98AI1TfAFxU3wBwaN8AVWnfADV43wDcF+AARD7gAHVX4AD0WuAAw1/gALcl4QDx KOEAYirhABos4QDvWOEApnDhAAcL4gCgUOIA0lfiACtb4gCbfuIAfETjABZa4wA9ZeMAK27jADJz 4wBRVuQApljkANpi5ABTZeQAQnXkAEIR5QBvIOUA6zXlAAdT5QAmV+UA933lABEG5gAdFuYAkWHm AMQB5wDeA+cAWw/nAC4S5wD+FecAcCnnAB9d5wCFducAFHjnAHN55wCweecAgQjoAEok6ABYUugA NmLoAIN/6ADPFukANRvpAKUs6QC+MekAZjXpANBU6QDRWukA+3XpACN76QDBNeoA30nqAPlQ6gBe VOoAYljqAONr6gCPb+oA4AXrAPZi6wDyaOsAe3TrACF+6wBRAewAfxXsANkY7AAaNewANDXsAMg7 7ABEW+wAH2jsAOFv7AD4He0AESztAHZO7QArZu0A/mjtACYK7gD6H+4ARTHuAPZQ7gAaV+4A0Fzu AA107gBHA+8ATATvAGoH7wC2Hu8A0lzvACpe7wAZX+8AtmPvAGYH8AAWL/AAJjzwABZB8ADrS/AA q2LwAGht8ABHFPEAThjxAGYg8QBUNvEAKVnxANQA8gB1L/IAu1DyALhu8gBacfIAWAPzACAs8wBx O/MAk0rzAHdr8wCQcfMAjH7zADwD9ADhCvQAaAv0AMIR9ACNI/QAyCX0AKc59ADhY/QApn30ACIC 9QBOBPUA/hD1ADkl9QC5JfUAw2H1ABNl9QDkHfYAoSz2AEY79gBAQvYAEUP2AKpF9gC1RvYAkEv2 AGdO9gCTXvYALF/2ABZI9wCVJvgACjX4AHw5+ACXQfgAqmL4AL4D+QDjJPkAbir5ALdD+QBbTPkA AV35AK1w+QDeePkA1Hz5AJcM+gCoFfoA3xz6AFkg+gDbIfoAgjL6AJ1H+gAESPoASXb6AJN6+gDY KPsAqS37ANIw+wA/PPsA12n7ANx6+wBXAfwAyRb8AEwZ/ADrP/wApFX8AB9g/ABaAP0AnRP9ACEd /QCVMf0A6jv9AFVL/QC3bf0ARHL9AFkx/gCGav4Ay27+ANlw/gDhdP4AlHj+ABtP/wDUfv8A/0AD gAEAWgMAAFoDAAAgs/oLAQABAFoDAAAAAAAAWgMAAAAAAAACEAAAAAAAAACLaQAAsAAAEABAAAD/ /wQAAAAHAFUAbgBrAG4AbwB3AG4AEABSAG8AYgBlAHIAdABhACAATQBhAGcAbABpAG8AbgBlAAcA VQBuAGsAbgBvAHcAbgAQAFIAbwBiAGUAcgB0AGEAIABNAGEAZwBsAGkAbwBuAGUA//8EAAgAAAAA AAAAAAAAAAAAAAAAAAAAAwAZAFUAbgBrAG4AbwB3AG4AMgAwADEAMQAwADYAMgAzAFQAMAA5ADEA NwAxADIAMAA0ADMAUbr2hgAAAAAhAFIAbwBiAGUAcgB0AGEAIABNAGEAZwBsAGkAbwBuAGUAMgAw ADEAMQAwADYAMgAzAFQAMAA5ADEANwA4ADYAMAA1AFG69oYAAAMA//8EAAAAAAAAAAAAEABSAG8A YgBlAHIAdABhACAATQBhAGcAbABpAG8AbgBlAP//AAACAP//AAAAAP//AAACAP//AAAAAAcAAABH FpABAAACAgYDBQQFAgMEh3oAIAAAAIAIAAAAAAAAAP8BAAAAAAAAVABpAG0AZQBzACAATgBlAHcA IABSAG8AbQBhAG4AAAA1FpABAgAFBQECAQcGAgUHAAAAAAAAABAAAAAAAAAAAAAAAIAAAAAAUwB5 AG0AYgBvAGwAAAAzJpABAAACCwYEAgICAgIEh3oAIAAAAIAIAAAAAAAAAP8BAAAAAAAAQQByAGkA YQBsAAAAXRGQAYAKAgIGCQQCBQgDBAEAAAAAAAcIEAAAAAAAAAAAAAIAAAAAAE0AUwAgAE0AaQBu AGMAaABvAAAAQQByAGkAYQBsACAAVQBuAGkAYwBvAGQAZQAgAE0AUwAAAD81kAEAAAIHAwkCAgUC BASHegAgAAAAgAgAAAAAAAAA/wEAAAAAAABDAG8AdQByAGkAZQByACAATgBlAHcAAAA1JpABAAAC CwYEAwUEBAIEh3oAYQAAAIAIAAAAAAAAAP8BAQAAAAAAVABhAGgAbwBtAGEAAAA7BpABAgAFAAAA AAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAIAAAAAAVwBpAG4AZwBkAGkAbgBnAHMAAAAiAAQAcYiI GADw0AIAAGgBAAAAAFq69oaCuvaGAAAAAAYAIAAAAMAPAADLWQAAEQA1AAAABAADEL8AAADADwAA y1kAABEANQAAAL8AAAAAAAAA1AIA8BAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApQbAB7QA tACBgT40AAARABkAZAAAABkAAABWaQAAVmkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAFM4NRAPAQAAgAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhQAAAAACzw/w8BAAE/AAAAAAAArAQAAP///3////9///// f////3////9/////f/tVcwAAAAAAMgAAAAAAAAAAAAAAAAABAAAA//8SAAAAAAAAAD0ATgBlAHQA dwBvAHIAawAgAFcAbwByAGsAaQBuAGcAIABHAHIAbwB1AHAAIAAgACAAIAAgACAAIAAgACAAIAAg ACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAAIAAgACAA QgAAAAAAAAAQAFIAbwBiAGUAcgB0AGEAIABNAGEAZwBsAGkAbwBuAGUAEABSAG8AYgBlAHIAdABh ACAATQBhAGcAbABpAG8AbgBlAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAAAAAYAAAAEAAAAAAAMAAEA DAACAAwAAwAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7/AAAFAQIAAAAAAAAAAAAAAAAAAAAAAAEAAADg hZ/y+U9oEKuRCAArJ7PZMAAAALwBAAARAAAAAQAAAJAAAAACAAAAmAAAAAMAAADgAAAABAAAAOwA AAAFAAAACAEAAAYAAAAUAQAABwAAACABAAAIAAAAMAEAAAkAAABMAQAAEgAAAFgBAAAKAAAAeAEA AAwAAACEAQAADQAAAJABAAAOAAAAnAEAAA8AAACkAQAAEAAAAKwBAAATAAAAtAEAAAIAAADkBAAA HgAAAEAAAABOZXR3b3JrIFdvcmtpbmcgR3JvdXAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBCAAAAHgAAAAQAAAAAAAAAHgAAABQAAABSb2JlcnRhIE1hZ2xpb25lAAAAAB4A AAAEAAAAAAAAAB4AAAAEAAAAAAAAAB4AAAAIAAAATm9ybWFsAAAeAAAAFAAAAFJvYmVydGEgTWFn bGlvbmUAAAAAHgAAAAQAAAA2AAAAHgAAABgAAABNaWNyb3NvZnQgT2ZmaWNlIFdvcmQAAABAAAAA AMBoeAQAAABAAAAAAHTfzHYxzAFAAAAAAExV1HsxzAEDAAAAEQAAAAMAAADADwAAAwAAAMtZAAAD AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAD+/wAABQECAAAAAAAAAAAAAAAAAAAAAAABAAAAAtXN1ZwuGxCT lwgAKyz5rjAAAAAsAQAADAAAAAEAAABoAAAADwAAAHAAAAAFAAAAhAAAAAYAAACMAAAAEQAAAJQA AAAXAAAAnAAAAAsAAACkAAAAEAAAAKwAAAATAAAAtAAAABYAAAC8AAAADQAAAMQAAAAMAAAADgEA AAIAAADkBAAAHgAAAAwAAABJVCBUZWxlY29tAAADAAAAvwAAAAMAAAA1AAAAAwAAAFZpAAADAAAA DycLAAsAAAAAAAAACwAAAAAAAAALAAAAAAAAAAsAAAAAAAAAHhAAAAEAAAA+AAAATmV0d29yayBX b3JraW5nIEdyb3VwICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgQgAMEAAA AgAAAB4AAAAGAAAAVGl0bGUAAwAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAQAAAAIAAAADAAAABAAAAAUAAAAGAAAABwAAAAgAAAAJAAAACgAAAAsAAAAM AAAADQAAAA4AAAAPAAAAEAAAABEAAAASAAAAEwAAABQAAAAVAAAAFgAAABcAAAAYAAAAGQAAABoA AAAbAAAAHAAAAB0AAAAeAAAAHwAAACAAAAAhAAAAIgAAACMAAAAkAAAAJQAAACYAAAAnAAAAKAAA ACkAAAAqAAAAKwAAACwAAAAtAAAALgAAAC8AAAAwAAAAMQAAADIAAAAzAAAANAAAADUAAAA2AAAA NwAAADgAAAA5AAAAOgAAADsAAAA8AAAAPQAAAD4AAAA/AAAAQAAAAEEAAABCAAAAQwAAAEQAAABF AAAARgAAAEcAAABIAAAASQAAAEoAAABLAAAATAAAAE0AAABOAAAATwAAAFAAAABRAAAAUgAAAFMA AABUAAAAVQAAAFYAAABXAAAAWAAAAFkAAABaAAAAWwAAAFwAAABdAAAAXgAAAF8AAABgAAAAYQAA AP7///9jAAAAZAAAAGUAAABmAAAAZwAAAGgAAABpAAAAagAAAGsAAABsAAAAbQAAAG4AAABvAAAA cAAAAHEAAAByAAAAcwAAAHQAAAB1AAAAdgAAAHcAAAB4AAAAeQAAAHoAAAB7AAAAfAAAAH0AAAB+ AAAAfwAAAIAAAACBAAAAggAAAIMAAACEAAAAhQAAAIYAAACHAAAAiAAAAIkAAACKAAAAiwAAAIwA AACNAAAAjgAAAI8AAACQAAAAkQAAAJIAAACTAAAAlAAAAJUAAACWAAAAlwAAAJgAAACZAAAAmgAA AJsAAACcAAAAnQAAAJ4AAACfAAAAoAAAAKEAAACiAAAAowAAAKQAAAClAAAApgAAAKcAAACoAAAA qQAAAKoAAACrAAAArAAAAK0AAACuAAAArwAAALAAAACxAAAAsgAAALMAAAC0AAAAtQAAALYAAAC3 AAAAuAAAALkAAAC6AAAAuwAAALwAAAC9AAAAvgAAAL8AAADAAAAAwQAAAMIAAADDAAAAxAAAAMUA AADGAAAAxwAAAMgAAADJAAAAygAAAMsAAADMAAAAzQAAAM4AAADPAAAA0AAAANEAAADSAAAA0wAA ANQAAADVAAAA1gAAANcAAADYAAAA2QAAANoAAADbAAAA3AAAAN0AAADeAAAA3wAAAOAAAADhAAAA 4gAAAOMAAADkAAAA5QAAAOYAAADnAAAA6AAAAOkAAADqAAAA6wAAAOwAAADtAAAA7gAAAO8AAADw AAAA8QAAAPIAAADzAAAA9AAAAPUAAAD2AAAA9wAAAPgAAAD5AAAA+gAAAPsAAAD8AAAA/QAAAP4A AAD/AAAA/v///wEBAAACAQAAAwEAAAQBAAAFAQAABgEAAAcBAAD+////CQEAAAoBAAALAQAADAEA AA0BAAAOAQAADwEAAP7////9/////f////3///8UAQAA/v////7////+//////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////////UgBvAG8AdAAgAEUAbgB0AHIAeQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAABYABQH//////////wMAAAAGCQIAAAAAAMAAAAAAAABGAAAAAAAAAAAA AAAAoB6L5XsxzAEWAQAAgAAAAAAAAAAxAFQAYQBiAGwAZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgACAf////8FAAAA/////wAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGIAAADROgEAAAAAAFcAbwByAGQARABvAGMAdQBtAGUA bgB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaAAIBAQAAAP////// ////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADTCAAAAAAAABQBTAHUA bQBtAGEAcgB5AEkAbgBmAG8AcgBtAGEAdABpAG8AbgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA ACgAAgECAAAABAAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAA ABAAAAAAAAAFAEQAbwBjAHUAbQBlAG4AdABTAHUAbQBtAGEAcgB5AEkAbgBmAG8AcgBtAGEAdABp AG8AbgAAAAAAAAAAAAAAOAACAf///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAgBAAAAEAAAAAAAAAEAQwBvAG0AcABPAGIAagAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASAAIA////////////////AAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD///////////// //8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAEAAAD+//////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////AQD+/wMKAAD/////BgkCAAAAAADAAAAAAAAARh8AAABNaWNyb3NvZnQgT2ZmaWNlIFdv cmQgRG9jdW1lbnQACgAAAE1TV29yZERvYwAQAAAAV29yZC5Eb2N1bWVudC44APQ5snEAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAA= --_002_282BBE8A501E1F4DA9C775F964BB21FE3EB35BEC73GRFMBX704BA02_-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Mon, 27 Jun 2011 07:16:24 +0000 Message-ID: <4E082E0B.30701@restena.lu> Date: Mon, 27 Jun 2011 09:15:23 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.9.2.18) Gecko/20110616 SUSE/3.1.11 Lightning/1.0b2 Thunderbird/3.1.11 MIME-Version: 1.0 To: Bernard Aboba CC: "radiusext@ops.ietf.org" , trac+radext@zinfandel.tools.ietf.org Subject: Re: [radext] #93: Compliance with Crypto-Agility Requirements Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig4B460A8149F51A5F107D0990" This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig4B460A8149F51A5F107D0990 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi, > This material might be appropriate for inclusion in an Appendix so > that it wouldn't clutter the main text. > > Interesting point with respect to TLS_RSA_WITH_3DES_EDE_CBC_SHA.=20 > Since later TLS RFCs provide recommendations on implementations of > algorithms that would be "Acceptable" with > no known deprecation date, would it make sense for the document to > incorporate that guidance (even though it only requires earlier > versions of TLS)? Well, guidance is alright, but not sufficient. The Crypto-Agility Requirements speak of > RECOMMENDED that mandatory-to-implement cryptographic > algorithms be chosen from among those classified as "Acceptable" with > no known deprecation date. So it's about mandatory-to-implement algorithms; not recommended-to-implement algorithms. Of course, the draft could be changed to make TLS_RSA_WITH_AES_128_CBC_SHA the required-to-implement algorithm. That would fix the crypto-agility-req point; but it might render some TLS 1.1 implementations not compatible to that new draft spec because in 1.1, that ciphersuite was optional. Greetings, Stefan > > > Date: Fri, 13 May 2011 15:51:13 +0200 > > From: stefan.winter@restena.lu > > To: radiusext@ops.ietf.org > > CC: trac+radext@zinfandel.tools.ietf.org; bernard_aboba@hotmail.com > > Subject: Re: [radext] #93: Compliance with Crypto-Agility Requirement= s > > > > Dear radext issue tracker, all, > > > > below is a discussion of all the requirements. It is somewhat verbose= ; I > > wonder if it should go into the document in its entirety or if a > > condensed "I believe it's allright" statement would be enough. > > > > Note that I'm not sure whether TLS_RSA_WITH_3DES_EDE_CBC_SHA is a > > two-key or a three-key 3DES algorithm. This condition would be the on= ly > > one that could downgrade the proposal from "unconditionally compliant= " > > to "conditionally compliant". Note also that there's a proposed > > mitigation for that in the text below. > > > > Here goes: > > > > The Requirements > > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > > > > 4.2: Security Services > > > > MUST support the negotiation of cryptographic algorithms for per-pack= et > > integrity/authentication protection. > > -> Check, TLS allows negotiation of cipher suites and thus cryptograp= hic > > algorithms. > > > > MUST support per-packet replay protection for all RADIUS message type= s. > > -> Check, TLS allows for replay protection. > > > > MUST specify mandatory-to-implement cryptographic algorithms for each= > > defined mechanism. > > -> Check, see section 2.3.2 > > > > MUST avoid security compromise, even in > > situations where the existing cryptographic algorithms utilized by > > RADIUS implementations are shown to be weak enough to provide little > > or no security > > -> Check, the RADIUS shared secret is of no cryptographic significanc= e > > > > RECOMMENDED that mandatory-to-implement cryptographic > > algorithms be chosen from among those classified as "Acceptable" with= > > no known deprecation date. > > -> UNKNOWN: > > The mandatory-to-implement alogrithm is TLS_RSA_WITH_3DES_EDE_CBC_SHA= , > > is a three-key Triple DES Encryption and Decryption algorithm ** IS T= HIS > > TRUE??? **, > > which is classified as "Acceptable" without deprecation date in the > > document in question. > > Can be mitigated; TLS 1.2 makes TLS_RSA_WITH_AES_128_CBC_SHA > > mandatory-to-implement, > > which fulfills the NIST "Acceptable" in any case. Could raise TLS > > requirements to strictly 1.2 and above. > > > > RECOMMENDED that solutions provide support for confidentiality > > -> Check, encryption of entire RADIUS packets is supported. > > > > MUST support the negotiation of cryptographic algorithms for encrypti= on. > > -> Check, TLS allows negotiation of cipher suites and thus cryptograp= hic > > algorithms. > > > > REQUIRED to generate fresh session keys for use between the RADIUS > > client and server > > -> Check, TLS session keys fulfill requirement. > > > > RECOMMENDED to support Perfect Forward Secrecy (PFS) with respect to > > session keys > > negotiated between the RADIUS client and server. > > -> Check, TLS supports PFS when negotiating appropriate ciphers. > > > > RECOMMENDED that a RADIUS crypto-agility solution > > support X.509 certificates for authentication between the NAS and > > RADIUS server. > > -> Check. > > > > SHOULD also support pre-shared key credentials. > > -> Check. > > > > 4.3: Backwards Compatibility > > > > MUST demonstrate backward compatibility with existing RADIUS > > implementations. > > -> Check, there are multiple implementations which support RADIUS and= > > RADIUS/TLS, > > and can act as a translator between the two > > > > After legacy mechanisms have been compromised, secure algorithms MUST= be > > used, > > so that backward compatibility is no longer possible. > > -> Check, RADIUS clients always need to manually configured (IP and > > shared secret needed), > > and can thus be de-configured after the compromise. > > > > 4.4: Interoperability and Change Control > > > > MUST indicate a willingness to cede change control to the IETF. > > -> Check, change control is at IETF. > > > > MUST be interoperable between independent implementations based purel= y > > on the > > information provided in the specification. > > -> Check, at least one implementation was created according to draft > > specs only. > > > > 4.5: Scope of Work > > > > Crypto-agility solutions MUST apply to all RADIUS packet types > > -> Check, crypto-agility is achieved on transport layer, and agnostic= to > > RADIUS content. > > > > message data exchanged with Diameter SHOULD NOT be affected. > > -> Check, the solution is Diameter-agnostic. > > > > MUST discuss any inherent assumptions about, or limitations on, > > client/server operations or deployment > > > > -> Believed to be a check, as I don't think I have unarticulated > > assumptions in my head, > > hence nothing to be discussed. > > > > SHOULD provide recommendations for transition of deployments from leg= acy > > RADIUS to > > crypto-agile RADIUS. > > -> Check, see Security Considerations. > > > > Issues regarding cipher-suite negotiation, > > legacy interoperability and the potential for bidding down attacks, > > SHOULD be among these discussions. > > -> Check, see Security Considerations. > > > > 4.6: Applicability of Automated Key Management Requirements > > > > As a result, support for Automated Key Management is RECOMMENDED > within a > > RADIUS crypto-agility solution. > > -> Check; TLS supports PFS and thus supports AKM. > > > > automated key management is REQUIRED for RADIUS crypto-agility > > solutions that use cryptographic modes of operation that require > > frequent key changes. > > -> Check. > > > > > > > > Am 29.04.2011 18:48, schrieb radext issue tracker: > > > #93: Compliance with Crypto-Agility Requirements > > > > > > The Crypto-Agility Requirements document now in WG last call (see > > > > http://tools.ietf.org/html/draft-ietf-radext-crypto-agility-requirement= s ) > > > includes the following in Section 1.4: > > > > > > In the initial phase, crypto-agility solutions adopted by the worki= ng > > > group will be published on the Experimental Track. Experimental > > > Track documents should contain a description of experimental > > > deployments and implementations in progress, as well as an evaluati= on > > > of the proposal against the requirements described in this document= =2E > > > > > > > > > The RADSEC document currently does not include this information. > > > > > > > > > -- > > Stefan WINTER > > Ingenieur de Recherche > > Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education Nati= onale > et de la Recherche > > 6, rue Richard Coudenhove-Kalergi > > L-1359 Luxembourg > > > > Tel: +352 424409 1 > > Fax: +352 422473 > > > > --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education National= e et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 --------------enig4B460A8149F51A5F107D0990 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAk4ILg8ACgkQ+jm90f8eFWajyQCZAYbYjCGMt2kdWeoOjCQDjNRM WqMAnjgVnk4CP55WWRCQcUT3+Pai4G+N =dmS0 -----END PGP SIGNATURE----- --------------enig4B460A8149F51A5F107D0990-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Sun, 26 Jun 2011 15:46:16 +0000 Message-ID: <4E07540E.4040202@deployingradius.com> Date: Sun, 26 Jun 2011 17:45:18 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Klaas Wierenga CC: "Sanchez, Mauricio (HP Networking)" , "'radiusext@ops.ietf.org'" Subject: Re: Conclusion of RADEXT WG call for consensus poll for IANA #409959 NAS-Port-Type value request Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Klaas Wierenga wrote: > I find this procedure rather odd. I think at the very least you should > have forwarded the replies to the proper list before the poll closed. > Far be it from me to suggest any conspiracy, but I find it inappropriate > to come up with a rabbit from the hat trick after the poll has closed. I > thought consensus was gauged on the list, not at some private alias? I agree. The consensus on the list clearly was against allocation. Having the consensus negated by large numbers of "off the record" posts is a problem. > I have seen no discussion on the list, apart from Avi's responses > (thanks for that!), where do all these people all of a sudden come from? This reeks of last-minute ballot stuffing. > Can I ask for some more openness in future consensus polls? > > Klaas (who is ashamed that after expressing his opinion in the meeting, > then on the list, he missed the final consensus call) I would ask that the chairs open the consensus call again, this time restricting entries to *on list* messages. If people can't be bothered to follow the process, then by the rules, their opinions should not be taken into account. Alan DeKok. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Sun, 26 Jun 2011 12:26:59 +0000 Message-ID: <4E072543.5070903@wierenga.net> Date: Sun, 26 Jun 2011 14:25:39 +0200 From: Klaas Wierenga User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-GB; rv:1.9.2.18) Gecko/20110616 Thunderbird/3.1.11 MIME-Version: 1.0 To: "Sanchez, Mauricio (HP Networking)" CC: "'radiusext@ops.ietf.org'" Subject: Re: Conclusion of RADEXT WG call for consensus poll for IANA #409959 NAS-Port-Type value request Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 6/24/11 9:42 PM, Sanchez, Mauricio (HP Networking) wrote: Mauricio, I find this procedure rather odd. I think at the very least you should have forwarded the replies to the proper list before the poll closed. Far be it from me to suggest any conspiracy, but I find it inappropriate to come up with a rabbit from the hat trick after the poll has closed. I thought consensus was gauged on the list, not at some private alias? I have seen no discussion on the list, apart from Avi's responses (thanks for that!), where do all these people all of a sudden come from? And does it matter what company they represent? I was under the impression that "we are all individuals"..... Can I ask for some more openness in future consensus polls? Klaas (who is ashamed that after expressing his opinion in the meeting, then on the list, he missed the final consensus call) > After discussion between current chairs and AD, the conclusion we > have reached is to approve this request as we believe rough consensus > for approval has been achieved. The situation is bit peculiar in > that a number of industry individuals expressed themselves in favor > of approving the request, but sent their email to the incorrect email > address (owner-radiusext@ops.ietf.org rather than > radiusext@ops.ietf.org). I have attached the emails for all those > individuals who used the incorrect address. > > The chairs appreciate the spirited conversation arising from this > topic and do agree with the long-term RADIUS experts that these new > types are not entirely in-line given the definition and past usage of > the attribute. However, the chairs feel the misalignment between > these new types and the attribute definition is not sufficiently > large to warrant disallowing the allocation. We also took into > account the industry support for immediate usage of these types into > account. > > So as to improve the usability of these new values, we will be asking > IANA to include references to the appropriate WiMAX standards (and > sections if available) in the IANA registry. Avi: We'd appreciate > your assistance in getting us the right information to include. > > If after this decision the WG would like to continue exploring a > generalized solution to similar use cases, the chairs and AD are > supportive. > > -MS > > -------------------------------------------------------------------------------------------------- > > Final count In Favor Clearwire - Dave McGiniss, David Holmes ZTE - > Chu Li Alcatel - Pertez Feder Intel - Muthiah Venkatachala Huawei - > Ronal Mao Samsun - Jungshin Park NSN - Seyeedi Shahab Sprint - Mark > Lipford, Brent Hirschman Bridgewater - Avi Lior > > Opposed Alan DeKok Stefan Winter Bernard Aboba Dave Nelson -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.14 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk4HJUMACgkQH2Wy/p4XeFJpOwCdF+yKyZdjhuZdRLGkGrCdsj68 weEAnAiv2I8hkMYF0bQsk096qjFTi/69 =ZmUy -----END PGP SIGNATURE----- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Fri, 24 Jun 2011 19:44:49 +0000 From: "Sanchez, Mauricio (HP Networking)" To: "'radiusext@ops.ietf.org'" Date: Fri, 24 Jun 2011 19:42:17 +0000 Subject: Conclusion of RADEXT WG call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Conclusion of RADEXT WG call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: Acwypm964uThU1ZbSRareRnDLH9nqA== Message-ID: <9BC2F7926B33FE4AB10D69891D58FC1C5C753B978A@GVW0671EXC.americas.hpqcorp.net> Accept-Language: en-US Content-Language: en-US acceptlanguage: en-US Content-Type: multipart/mixed; boundary="_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_" MIME-Version: 1.0 --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable After discussion between current chairs and AD, the conclusion we have reac= hed is to approve this request as we believe rough consensus for approval h= as been achieved. The situation is bit peculiar in that a number of indust= ry individuals expressed themselves in favor of approving the request, but = sent their email to the incorrect email address (owner-radiusext@ops.ietf.o= rg rather than radiusext@ops.ietf.org). I have attached the emails for all= those individuals who used the incorrect address. =20 The chairs appreciate the spirited conversation arising from this topic and= do agree with the long-term RADIUS experts that these new types are not en= tirely in-line given the definition and past usage of the attribute. Howe= ver, the chairs feel the misalignment between these new types and the attri= bute definition is not sufficiently large to warrant disallowing the alloca= tion. We also took into account the industry support for immediate usage o= f these types into account. =20 So as to improve the usability of these new values, we will be asking IANA = to include references to the appropriate WiMAX standards (and sections if a= vailable) in the IANA registry. Avi: We'd appreciate your assistance in g= etting us the right information to include.=20 If after this decision the WG would like to continue exploring a generalize= d solution to similar use cases, the chairs and AD are supportive.=20 -MS=20 ---------------------------------------------------------------------------= ----------------------- Final count=20 In Favor Clearwire - Dave McGiniss, David Holmes ZTE - Chu Li Alcatel - Pertez Feder Intel - Muthiah Venkatachala Huawei - Ronal Mao Samsun - Jungshin Park NSN - Seyeedi Shahab Sprint - Mark Lipford, Brent Hirschman Bridgewater - Avi Lior Opposed=20 Alan DeKok Stefan Winter Bernard Aboba Dave Nelson --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g6t0182.atlanta.hp.com (15.193.32.59) by G4W1842.americas.hpqcorp.net (16.234.97.224) with Microsoft SMTP Server (TLS) id 8.2.176.0; Tue, 17 May 2011 17:19:27 +0000 Received: from mail51.messagelabs.com (mail51.messagelabs.com [216.82.241.99]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by g6t0182.atlanta.hp.com (Postfix) with ESMTPS id 46DE918003 for ; Tue, 17 May 2011 17:19:27 +0000 (UTC) Received: (qmail 19811 invoked from network); 17 May 2011 17:19:26 -0000 Received: from mail.bridgewatersystems.com (HELO webmail.bridgewatersystems.com) (72.35.6.119) by server-10.tower-51.messagelabs.com with RC4-SHA encrypted SMTP; 17 May 2011 17:19:26 -0000 Received: from m679t05.fpmis.bridgewatersys.com ([10.52.81.148]) by m679t01.fpmis.bridgewatersys.com ([10.52.81.144]) with mapi; Tue, 17 May 2011 13:19:24 -0400 From: Avi Lior To: "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" Date: Tue, 17 May 2011 17:19:23 +0000 Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwUtpDxK+cumzgyTLmiYTBUw1gv9w== Message-ID: In-Reply-To: <9BC2F7926B33FE4AB10D69891D58FC1C5C72F20527@GVW0671EXC.americas.hpqcorp.net> Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G4W1842.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US user-agent: Microsoft-MacOutlook/14.10.0.110310 x-originating-ip: [72.35.6.119] x-msg-ref: server-10.tower-51.messagelabs.com!1305652766!94676505!1 x-env-sender: avi@bridgewatersystems.com x-viruschecked: Checked x-starscan-version: 6.2.16; banners=-,-,- Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Yes. -- Avi Lior --Bridgewater Systems On 17-05-11 22:52 , "Sanchez, Mauricio (HP Networking)" > wrote: At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: owner-radiusext@ops.ietf.org [ma= ilto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio (HP Netwo= rking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g1t0023.austin.hp.com (15.216.28.30) by G4W1844.americas.hpqcorp.net (16.234.97.226) with Microsoft SMTP Server (TLS) id 8.2.176.0; Thu, 19 May 2011 18:53:54 +0000 Received: from VA3EHSOBE002.bigfish.com (va3ehsobe002.messaging.microsoft.com [216.32.180.12]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by g1t0023.austin.hp.com (Postfix) with ESMTPS id 041EB3C071 for ; Thu, 19 May 2011 18:53:53 +0000 (UTC) Received: from mail120-va3-R.bigfish.com (10.7.14.241) by VA3EHSOBE002.bigfish.com (10.7.40.22) with Microsoft SMTP Server id 14.1.225.22; Thu, 19 May 2011 18:53:53 +0000 Received: from mail120-va3 (localhost.localdomain [127.0.0.1]) by mail120-va3-R.bigfish.com (Postfix) with ESMTP id 481A2DA845E; Thu, 19 May 2011 18:53:53 +0000 (UTC) Received: from mail120-va3 (localhost.localdomain [127.0.0.1]) by mail120-va3 (MessageSwitch) id 1305831232570423_13452; Thu, 19 May 2011 18:53:52 +0000 (UTC) Received: from VA3EHSMHS023.bigfish.com (unknown [10.7.14.239]) by mail120-va3.bigfish.com (Postfix) with ESMTP id 80378114804E; Thu, 19 May 2011 18:53:52 +0000 (UTC) Received: from plsasdm1.corp.sprint.com (144.230.168.25) by VA3EHSMHS023.bigfish.com (10.7.99.33) with Microsoft SMTP Server (TLS) id 14.1.225.22; Thu, 19 May 2011 18:53:50 +0000 Received: from PLSWEH01.ad.sprint.com (PLSWEH01.corp.sprint.com [144.226.242.129]) by plsasdm1.corp.sprint.com (Sentrion-MTA-4.0.5/Sentrion-MTA-4.0.5) with ESMTP id p4JIrmod012189 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Thu, 19 May 2011 13:53:49 -0500 Received: from PLSWM14A.ad.sprint.com ([fe80::39b3:69de:7a65:ad5f]) by PLSWEH01.ad.sprint.com ([2002:90e2:f281::90e2:f281]) with mapi id 14.01.0270.001; Thu, 19 May 2011 13:53:48 -0500 From: "Hirschman, Brent B [CTO]" To: "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" Date: Thu, 19 May 2011 18:53:48 +0000 Subject: Consensus poll for IANA #409959 NAS-Port-Type value request - Support Thread-Topic: Consensus poll for IANA #409959 NAS-Port-Type value request - Support Thread-Index: AcwWVhFSVaiT3i3GTryxNc1uniKAkw== Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G4W1844.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US x-originating-ip: [10.214.116.69] received-spf: pass (mail120-va3: domain of sprint.com designates 144.230.168.25 as permitted sender) client-ip=144.230.168.25; envelope-from=Brent.Hirschman@sprint.com; helo=plsasdm1.corp.sprint.com ;p.sprint.com ; x-bigfish: VS-33(zz9371O1fa4J4015Lzz1202hzz8275dh1033ILz2fh2a8h668h839h61h) x-spamscore: -33 x-spam-tcs-scl: 0:0 x-forefront-antispam-report: CIP:144.230.168.25;KIP:(null);UIP:(null);IPVD:NLI;H:plsasdm1.corp.sprint.com;RD:smtpls1.sprint.com;EFVD:NLI x-originatororg: sprint.com Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Support At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g6t0182.atlanta.hp.com (15.193.32.59) by G3W0630.americas.hpqcorp.net (16.233.58.74) with Microsoft SMTP Server id 8.2.176.0; Fri, 20 May 2011 00:05:07 +0000 Received: from AM1EHSOBE003.bigfish.com (am1ehsobe003.messaging.microsoft.com [213.199.154.206]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by g6t0182.atlanta.hp.com (Postfix) with ESMTPS id F266118033 for ; Fri, 20 May 2011 00:05:06 +0000 (UTC) Received: from mail30-am1-R.bigfish.com (10.3.201.244) by AM1EHSOBE003.bigfish.com (10.3.204.23) with Microsoft SMTP Server id 14.1.225.22; Fri, 20 May 2011 00:05:05 +0000 Received: from mail30-am1 (localhost.localdomain [127.0.0.1]) by mail30-am1-R.bigfish.com (Postfix) with ESMTP id C17BCB904CB; Fri, 20 May 2011 00:05:05 +0000 (UTC) Received: from mail30-am1 (localhost.localdomain [127.0.0.1]) by mail30-am1 (MessageSwitch) id 1305849904952069_3094; Fri, 20 May 2011 00:05:04 +0000 (UTC) Received: from AM1EHSMHS003.bigfish.com (unknown [10.3.201.242]) by mail30-am1.bigfish.com (Postfix) with ESMTP id E2F9F4F004E; Fri, 20 May 2011 00:05:04 +0000 (UTC) Received: from CWCH3EXCAPVW007.NA.corp.clearwire.com (64.14.230.15) by AM1EHSMHS003.bigfish.com (10.3.207.103) with Microsoft SMTP Server (TLS) id 14.1.225.22; Fri, 20 May 2011 00:05:04 +0000 Received: from cwch3excapsw003.NA.corp.clearwire.com ([fe80::c97f:4fd1:de81:9153]) by CWCH3EXCAPVW007.NA.corp.clearwire.com ([fe80::3819:5711:9b29:b4a0%11]) with mapi id 14.01.0270.001; Thu, 19 May 2011 19:05:02 -0500 From: David Holmes To: "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" CC: "Avi Lior (avi@bridgewatersystems.com)" , "Lipford, Mark A [CTO] (Mark.A.Lipford@sprint.com)" , "nwg@list.wimaxforum.org" Date: Fri, 20 May 2011 00:05:01 +0000 Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOg== Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G3W0630.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US x-originating-ip: [172.20.240.135] received-spf: neutral (mail30-am1: 64.14.230.15 is neither permitted nor denied by domain of clearwire.com) client-ip=64.14.230.15; envelope-from=David.Holmes@clearwire.com; helo=CWCH3EXCAPVW007.NA.corp.clearwire.com ;learwire.com ; x-bigfish: VPS-37(zz9371Oe2eM1fa4J4015Lzz1202hzz8275bh8275dh1033ILz2ei2a8h668h839h61h) x-spamscore: -37 x-spam-tcs-scl: 0:0 x-forefront-antispam-report: CIP:64.14.230.15;KIP:(null);UIP:(null);IPVD:NLI;H:CWCH3EXCAPVW007.NA.corp.clearwire.com;RD:none;EFVD:NLI x-originatororg: clearwire.com Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Yes. Thanks. David Holmes Standards Integration clearwire P (+1) (425) 247-7104 C (+1) (206) 696-6713 At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g6t0183.atlanta.hp.com (15.193.32.60) by G4W1842.americas.hpqcorp.net (16.234.97.224) with Microsoft SMTP Server (TLS) id 8.2.176.0; Fri, 20 May 2011 13:49:41 +0000 Received: from AM1EHSOBE001.bigfish.com (am1ehsobe001.messaging.microsoft.com [213.199.154.204]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by g6t0183.atlanta.hp.com (Postfix) with ESMTPS id 773C438011 for ; Fri, 20 May 2011 13:49:40 +0000 (UTC) Received: from mail97-am1-R.bigfish.com (10.3.201.243) by AM1EHSOBE001.bigfish.com (10.3.204.21) with Microsoft SMTP Server id 14.1.225.22; Fri, 20 May 2011 13:49:39 +0000 Received: from mail97-am1 (localhost.localdomain [127.0.0.1]) by mail97-am1-R.bigfish.com (Postfix) with ESMTP id 519BE17E83BB; Fri, 20 May 2011 13:49:39 +0000 (UTC) Received: from mail97-am1 (localhost.localdomain [127.0.0.1]) by mail97-am1 (MessageSwitch) id 1305899378400497_14022; Fri, 20 May 2011 13:49:38 +0000 (UTC) Received: from AM1EHSMHS012.bigfish.com (unknown [10.3.201.252]) by mail97-am1.bigfish.com (Postfix) with ESMTP id 5C76A420052; Fri, 20 May 2011 13:49:38 +0000 (UTC) Received: from pdaasdm1.corp.sprint.com (144.229.32.56) by AM1EHSMHS012.bigfish.com (10.3.207.112) with Microsoft SMTP Server (TLS) id 14.1.225.22; Fri, 20 May 2011 13:49:35 +0000 Received: from PDAWEH02.ad.sprint.com (PDAWEH02.corp.sprint.com [144.226.111.42]) by pdaasdm1.corp.sprint.com (Sentrion-MTA-4.0.5/Sentrion-MTA-4.0.5) with ESMTP id p4KDnWcI018375 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Fri, 20 May 2011 08:49:33 -0500 Received: from PDAWEH04.ad.sprint.com (144.226.111.59) by PDAWEH02.ad.sprint.com (144.226.111.42) with Microsoft SMTP Server (TLS) id 14.1.270.1; Fri, 20 May 2011 08:49:32 -0500 Received: from plswm03b.ad.sprint.com ([fe80::f4e1:a2df:50a0:f75d]) by PDAWEH04.ad.sprint.com ([2002:90e2:6f3b::90e2:6f3b]) with mapi id 14.01.0270.001; Fri, 20 May 2011 08:49:32 -0500 From: "Lipford, Mark A [CTO]" To: David Holmes , "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" CC: "Avi Lior (avi@bridgewatersystems.com)" , "nwg@list.wimaxforum.org" Date: Fri, 20 May 2011 13:49:32 +0000 Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOgAcyy/Q Message-ID: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G4W1842.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US x-originating-ip: [10.122.53.24] received-spf: pass (mail97-am1: domain of sprint.com designates 144.229.32.56 as permitted sender) client-ip=144.229.32.56; envelope-from=Mark.A.Lipford@sprint.com; helo=pdaasdm1.corp.sprint.com ;p.sprint.com ; x-bigfish: VS-46(zz9371O1fa4J62a3Kef4R4015Lzz1202hzz8275bh8275dh1033ILz2fh2a8h668h839h61h) x-spamscore: -46 x-spam-tcs-scl: 0:0 x-forefront-antispam-report: CIP:144.229.32.56;KIP:(null);UIP:(null);IPVD:NLI;H:pdaasdm1.corp.sprint.com;RD:smtpda1.sprint.com;EFVD:NLI x-originatororg: sprint.com Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Yes as well Mark A. Lipford Manager - Industry Standards Sprint Nextel 6220 Sprint Parkway Mailstop: KSOPHD0402-4B350 Overland Park, KS 66251 USA +1 (913) 762-6740 (Office) +1 (913) 579-2319 (Mobile) email: mark.a.lipford@sprint.com From: David Holmes [mailto:David.Holmes@clearwire.com] Sent: Thursday, May 19, 2011 7:05 PM To: mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); Lip= ford, Mark A [CTO]; nwg@list.wimaxforum.org Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Yes. Thanks. David Holmes Standards Integration clearwire P (+1) (425) 247-7104 C (+1) (206) 696-6713 At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g6t0183.atlanta.hp.com (15.193.32.60) by G5W0332.americas.hpqcorp.net (16.228.8.74) with Microsoft SMTP Server (TLS) id 8.2.176.0; Fri, 20 May 2011 15:43:56 +0000 Received: from motgate3.mot-solutions.com (motgate3.mot-solutions.com [136.182.1.13]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by g6t0183.atlanta.hp.com (Postfix) with ESMTPS id BE47038014 for ; Fri, 20 May 2011 15:43:55 +0000 (UTC) Received: from il27exr02.cig.mot.com (il27exr02.mot.com [10.17.196.71]) by motgate3.mot-solutions.com (8.14.3/8.14.3) with ESMTP id p4KFhtKh009812 for ; Fri, 20 May 2011 08:43:55 -0700 (MST) Received: from il27vts02.mot.com (il27vts02.cig.mot.com [10.17.196.86]) by il27exr02.cig.mot.com (8.13.1/Vontu) with SMTP id p4KFhsWw000083 for ; Fri, 20 May 2011 10:43:54 -0500 (CDT) Received: from de01exm70.ds.mot.com (de01exm70.am.mot.com [10.176.8.26]) by il27exr02.cig.mot.com (8.13.1/8.13.0) with ESMTP id p4KFhs8N000079 for ; Fri, 20 May 2011 10:43:54 -0500 (CDT) From: Sayeedi Shahab-CLXR88 To: "ext Lipford, Mark A [CTO]" , David Holmes , "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" CC: "avi@bridgewatersystems.com" , "nwg@list.wimaxforum.org" Content-Class: urn:content-classes:message Date: Fri, 20 May 2011 15:43:30 +0000 Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOgAcyy/QAAP5PEA= Message-ID: References: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> In-Reply-To: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G5W0332.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: x-cfilter-loop: Reflected Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 YES. Regards,, Shahab Sayeedi From: ext Lipford, Mark A [CTO] [mailto:Mark.A.Lipford@sprint.com] Sent: Friday, May 20, 2011 8:50 AM To: David Holmes; mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); nwg= @list.wimaxforum.org Subject: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value requ= est Yes as well Mark A. Lipford Manager - Industry Standards Sprint Nextel 6220 Sprint Parkway Mailstop: KSOPHD0402-4B350 Overland Park, KS 66251 USA +1 (913) 762-6740 (Office) +1 (913) 579-2319 (Mobile) email: mark.a.lipford@sprint.com From: David Holmes [mailto:David.Holmes@clearwire.com] Sent: Thursday, May 19, 2011 7:05 PM To: mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); Lip= ford, Mark A [CTO]; nwg@list.wimaxforum.org Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Yes. Thanks. David Holmes Standards Integration clearwire P (+1) (425) 247-7104 C (+1) (206) 696-6713 At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g4t0011.houston.hp.com (15.201.24.14) by G5W0331.americas.hpqcorp.net (16.228.8.76) with Microsoft SMTP Server (TLS) id 8.2.176.0; Mon, 23 May 2011 04:09:55 +0000 Received: from mailout3.samsung.com (mailout3.samsung.com [203.254.224.33]) by g4t0011.houston.hp.com (Postfix) with ESMTP id 8D66E20087 for ; Mon, 23 May 2011 04:09:54 +0000 (UTC) Received: from epcpsbgm1.samsung.com (mailout3.samsung.com [203.254.224.33]) by mailout3.samsung.com (Oracle Communications Messaging Exchange Server 7u4-19.01 64bit (built Sep 7 2010)) with ESMTP id <0LLM00E4JRKCSEL0@mailout3.samsung.com> for mauricio.sanchez@hp.com; Mon, 23 May 2011 13:09:53 +0900 (KST) Received: from epmmp2 ( [203.254.227.17]) by epcpsbgm1.samsung.com (MMPCPMTA) with SMTP id EE.B9.06799.ACDD9DD4; Mon, 23 May 2011 13:08:42 +0900 (KST) Received: from NOSHIN02PAR03 ([168.219.197.48]) by mmp2.samsung.com (iPlanet Messaging Server 5.2 Patch 2 (built Jul 14 2004)) with ESMTPSA id <0LLM007G6RIIBL@mmp2.samsung.com> for mauricio.sanchez@hp.com; Mon, 23 May 2011 13:08:42 +0900 (KST) From: "Park,Jungshin" To: 'Sayeedi Shahab-CLXR88' , "'ext Lipford, Mark A [CTO]'" , 'David Holmes' , "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" CC: "avi@bridgewatersystems.com" , "nwg@list.wimaxforum.org" Date: Mon, 23 May 2011 04:08:43 +0000 Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOgAcyy/QAAP5PEAAfpgcgA== Message-ID: <013b01cc18ff$1ada6830$508f3890$%park@samsung.com> References: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> In-Reply-To: X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G5W0331.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: x-auditid: cbfee61a-b7ce2ae000001a8f-97-4dd9ddca0269 x-brightmail-tracker: AAAAAA== Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Yes. Samsung also supports. Regards, Jungshin From: Sayeedi Shahab-CLXR88 [mailto:shahab.sayeedi@nsn.com] Sent: Saturday, May 21, 2011 12:44 AM To: ext Lipford, Mark A [CTO]; David Holmes; mauricio.sanchez@hp.com; owner= -radiusext@ops.ietf.org Cc: avi@bridgewatersystems.com; nwg@list.wimaxforum.org Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value = request YES. Regards,, Shahab Sayeedi From: ext Lipford, Mark A [CTO] [mailto:Mark.A.Lipford@sprint.com] Sent: Friday, May 20, 2011 8:50 AM To: David Holmes; mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); nwg= @list.wimaxforum.org Subject: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value requ= est Yes as well Mark A. Lipford Manager - Industry Standards Sprint Nextel 6220 Sprint Parkway Mailstop: KSOPHD0402-4B350 Overland Park, KS 66251 USA +1 (913) 762-6740 (Office) +1 (913) 579-2319 (Mobile) email: mark.a.lipford@sprint.com From: David Holmes [mailto:David.Holmes@clearwire.com] Sent: Thursday, May 19, 2011 7:05 PM To: mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); Lip= ford, Mark A [CTO]; nwg@list.wimaxforum.org Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Yes. Thanks. David Holmes Standards Integration clearwire P (+1) (425) 247-7104 C (+1) (206) 696-6713 At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g5t0005.atlanta.hp.com (15.192.0.42) by G4W1844.americas.hpqcorp.net (16.234.97.226) with Microsoft SMTP Server (TLS) id 8.2.176.0; Mon, 23 May 2011 17:02:50 +0000 Received: from usaga04-in.huawei.com (usaga04-in.huawei.com [206.16.17.180]) by g5t0005.atlanta.hp.com (Postfix) with ESMTP id 7D095801B for ; Mon, 23 May 2011 17:02:50 +0000 (UTC) Received: from huawei.com (usaga04-in [172.18.4.101]) by usaga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0LLN009U7RCOBY@usaga04-in.huawei.com> for mauricio.sanchez@hp.com; Mon, 23 May 2011 12:02:50 -0500 (CDT) Received: from RonaldMao1 ([10.192.25.52]) by usaga04-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTPA id <0LLN00527RCM87@usaga04-in.huawei.com> for mauricio.sanchez@hp.com; Mon, 23 May 2011 12:02:48 -0500 (CDT) From: Ronald Mao To: "'Park,Jungshin'" , 'Sayeedi Shahab-CLXR88' , "'ext Lipford, Mark A [CTO]'" , 'David Holmes' , "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" CC: "avi@bridgewatersystems.com" , "nwg@list.wimaxforum.org" Date: Mon, 23 May 2011 17:02:46 +0000 Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOgAcyy/QAAP5PEAAfpgcgAAbCQ5A Message-ID: <00df01cc196b$3df1beb0$b9d53c10$@com> References: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> <013b01cc18ff$1ada6830$508f3890$%park@samsung.com> In-Reply-To: <013b01cc18ff$1ada6830$508f3890$%park@samsung.com> X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G4W1844.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Yes from Huawei. Ronald From: Park,Jungshin [mailto:shin02.park@samsung.com] Sent: Sunday, May 22, 2011 9:09 PM To: 'Sayeedi Shahab-CLXR88'; 'ext Lipford, Mark A [CTO]'; 'David Holmes'; m= auricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: avi@bridgewatersystems.com; nwg@list.wimaxforum.org Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value = request Yes. Samsung also supports. Regards, Jungshin From: Sayeedi Shahab-CLXR88 [mailto:shahab.sayeedi@nsn.com] Sent: Saturday, May 21, 2011 12:44 AM To: ext Lipford, Mark A [CTO]; David Holmes; mauricio.sanchez@hp.com; owner= -radiusext@ops.ietf.org Cc: avi@bridgewatersystems.com; nwg@list.wimaxforum.org Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value = request YES. Regards,, Shahab Sayeedi From: ext Lipford, Mark A [CTO] [mailto:Mark.A.Lipford@sprint.com] Sent: Friday, May 20, 2011 8:50 AM To: David Holmes; mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); nwg= @list.wimaxforum.org Subject: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value requ= est Yes as well Mark A. Lipford Manager - Industry Standards Sprint Nextel 6220 Sprint Parkway Mailstop: KSOPHD0402-4B350 Overland Park, KS 66251 USA +1 (913) 762-6740 (Office) +1 (913) 579-2319 (Mobile) email: mark.a.lipford@sprint.com From: David Holmes [mailto:David.Holmes@clearwire.com] Sent: Thursday, May 19, 2011 7:05 PM To: mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); Lip= ford, Mark A [CTO]; nwg@list.wimaxforum.org Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Yes. Thanks. David Holmes Standards Integration clearwire P (+1) (425) 247-7104 C (+1) (206) 696-6713 At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g1t0024.austin.hp.com (15.216.28.31) by G5W0332.americas.hpqcorp.net (16.228.8.74) with Microsoft SMTP Server (TLS) id 8.2.176.0; Mon, 23 May 2011 17:08:22 +0000 Received: from mga09.intel.com (mga09.intel.com [134.134.136.24]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by g1t0024.austin.hp.com (Postfix) with ESMTPS id 8E889403B for ; Mon, 23 May 2011 17:08:20 +0000 (UTC) Received: from orsmga002.jf.intel.com ([10.7.209.21]) by orsmga102.jf.intel.com with ESMTP; 23 May 2011 10:08:19 -0700 Received: from orsmsx604.amr.corp.intel.com ([10.22.226.87]) by orsmga002.jf.intel.com with ESMTP; 23 May 2011 10:08:19 -0700 Received: from orsmsx508.amr.corp.intel.com ([10.22.226.46]) by orsmsx604.amr.corp.intel.com ([10.250.113.17]) with mapi; Mon, 23 May 2011 10:08:19 -0700 From: "Venkatachalam, Muthaiah" To: Ronald Mao , "'Park,Jungshin'" , 'Sayeedi Shahab-CLXR88' , "'ext Lipford, Mark A [CTO]'" , 'David Holmes' , "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" CC: "avi@bridgewatersystems.com" , "nwg@list.wimaxforum.org" Date: Mon, 23 May 2011 17:08:17 +0000 Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOgAcyy/QAAP5PEAAfpgcgAAbCQ5AAAA06rA= Message-ID: References: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> <013b01cc18ff$1ada6830$508f3890$%park@samsung.com> <00df01cc196b$3df1beb0$b9d53c10$@com> In-Reply-To: <00df01cc196b$3df1beb0$b9d53c10$@com> Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G5W0332.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US x-extloop1: 1 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Yes from Intel. From: Ronald Mao [mailto:rmao@huawei.com] Sent: Monday, May 23, 2011 10:03 AM To: 'Park,Jungshin'; 'Sayeedi Shahab-CLXR88'; 'ext Lipford, Mark A [CTO]'; = 'David Holmes'; mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: avi@bridgewatersystems.com; nwg@list.wimaxforum.org Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value = request Yes from Huawei. Ronald From: Park,Jungshin [mailto:shin02.park@samsung.com] Sent: Sunday, May 22, 2011 9:09 PM To: 'Sayeedi Shahab-CLXR88'; 'ext Lipford, Mark A [CTO]'; 'David Holmes'; m= auricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: avi@bridgewatersystems.com; nwg@list.wimaxforum.org Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value = request Yes. Samsung also supports. Regards, Jungshin From: Sayeedi Shahab-CLXR88 [mailto:shahab.sayeedi@nsn.com] Sent: Saturday, May 21, 2011 12:44 AM To: ext Lipford, Mark A [CTO]; David Holmes; mauricio.sanchez@hp.com; owner= -radiusext@ops.ietf.org Cc: avi@bridgewatersystems.com; nwg@list.wimaxforum.org Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value = request YES. Regards,, Shahab Sayeedi From: ext Lipford, Mark A [CTO] [mailto:Mark.A.Lipford@sprint.com] Sent: Friday, May 20, 2011 8:50 AM To: David Holmes; mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); nwg= @list.wimaxforum.org Subject: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value requ= est Yes as well Mark A. Lipford Manager - Industry Standards Sprint Nextel 6220 Sprint Parkway Mailstop: KSOPHD0402-4B350 Overland Park, KS 66251 USA +1 (913) 762-6740 (Office) +1 (913) 579-2319 (Mobile) email: mark.a.lipford@sprint.com From: David Holmes [mailto:David.Holmes@clearwire.com] Sent: Thursday, May 19, 2011 7:05 PM To: mauricio.sanchez@hp.com; owner-radiusext@ops.ietf.org Cc: Avi Lior (avi@bridgewatersystems.com); Lip= ford, Mark A [CTO]; nwg@list.wimaxforum.org Subject: RE: Consensus poll for IANA #409959 NAS-Port-Type value request Yes. Thanks. David Holmes Standards Integration clearwire P (+1) (425) 247-7104 C (+1) (206) 696-6713 At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_ Content-Type: message/rfc822 Received: from g4t0013.houston.hp.com (15.201.24.16) by G5W0330.americas.hpqcorp.net (16.228.8.75) with Microsoft SMTP Server (TLS) id 8.2.176.0; Mon, 23 May 2011 17:41:28 +0000 Received: from ihemail3.lucent.com (ihemail3.lucent.com [135.245.0.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by g4t0013.houston.hp.com (Postfix) with ESMTPS id 81B633C03D for ; Mon, 23 May 2011 17:41:28 +0000 (UTC) Received: from usnavsmail4.ndc.alcatel-lucent.com (usnavsmail4.ndc.alcatel-lucent.com [135.3.39.12]) by ihemail3.lucent.com (8.13.8/IER-o) with ESMTP id p4NHfPsV004582 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Mon, 23 May 2011 12:41:25 -0500 (CDT) Received: from USNAVSXCHHUB03.ndc.alcatel-lucent.com (usnavsxchhub03.ndc.alcatel-lucent.com [135.3.39.112]) by usnavsmail4.ndc.alcatel-lucent.com (8.14.3/8.14.3/GMO) with ESMTP id p4NHfPfw004093 (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT); Mon, 23 May 2011 12:41:25 -0500 Received: from USNAVSXCHMBSA3.ndc.alcatel-lucent.com ([135.3.39.124]) by USNAVSXCHHUB03.ndc.alcatel-lucent.com ([135.3.39.112]) with mapi; Mon, 23 May 2011 12:41:25 -0500 From: "Feder, Peretz (Peretz)" To: Ronald Mao , "'Park,Jungshin'" , 'Sayeedi Shahab-CLXR88' , "'ext Lipford, Mark A [CTO]'" , 'David Holmes' , "Sanchez, Mauricio (HP Networking)" , "owner-radiusext@ops.ietf.org" Date: Mon, 23 May 2011 17:41:24 +0000 Subject: RE: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: [nwg] RE: Consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwWgY85bdmrpkcwR/Gn6F8iep7MOgAcyy/QAAP5PEAAfpgcgAAbCQ5AAAFCoEA= Message-ID: <16F113FE6689D24D9A2B8229FD4540B0250A0877A1@USNAVSXCHMBSA3.ndc.alcatel-lucent.com> References: <7B9295EFE571004E960BA80D9DA77F042479EF03@PLSWM03B.ad.sprint.com> <013b01cc18ff$1ada6830$508f3890$%park@samsung.com> <00df01cc196b$3df1beb0$b9d53c10$@com> In-Reply-To: <00df01cc196b$3df1beb0$b9d53c10$@com> Accept-Language: en-US Content-Language: en-US X-MS-Exchange-Organization-AuthMechanism: 10 X-MS-Exchange-Organization-AuthSource: G5W0330.americas.hpqcorp.net X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US x-scanned-by: MIMEDefang 2.64 on 135.3.39.12 Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Mauricio et al: I am in full support of the proposed allocation. Peretz Feder Director, Alcatel-Lucent At this time we find ourselves with a mixed result between the in room sent= iment at IETF 80 (which was negative to allocation) and the subsequent cons= ensus poll (which was neutral/positive to allocation). As such, a final c= onsensus poll is warranted to establish rough consensus in either direction= . Please respond to this email by May 24, 2011 with either a =91yes=92 (indi= cating allocation should occur) or a =91no=92 (indicating allocation should= be denied). Please respond regardless of whether you commented at IETF 80= or to the below consensus poll. Thanks, Mauricio From: [mailto:owner-radiusext@ops.ietf.org] On Behalf Of Sanchez, Mauricio = (HP Networking) Sent: Friday, April 08, 2011 11:31 AM To: 'radiusext@ops.ietf.org' Subject: Consensus poll for IANA #409959 NAS-Port-Type value request During IETF 80 one of the agenda topics discussed was whether to approve a = request received by IANA for allocation of additional NAS-port-type values = relating to Wimax as described below Type of Assignment : Nas-Port-Type values as follows: TBD for WIMAX-3GPP-PRIF: WiMAX Pre-Release 8 IWK Function TBD for WIMAX-WIFI-IWK: WiMAX WIFI Interworking TBD for WIMAX-SFF: Signaling Forwarding Function for LTE/3GPP2. TBD for WIMAX-HA-LMA: WiMAX HA and or LMA function. TBD for WIMAX-DHCP : WIMAX DCHP service TBD for WIMAX- LBS : WiMAX location based service TBD for WIMAX-WVS : WiMAX voice service The snippet of meeting notes relating to this topic are show below: ---- --------------------------- Request for registration for NAS-port-type. Under 3575, falls under expert= review. This request is for NAS-port-type relating to WiMax - Stefan comments that there=92s already type for WiFi so not sure why anot= her one is needed, just one. - Klaas comments that agrees with Stefan=92s comments. - Nancy comments that looking at the current assignment is that there is on= ly 1 allocation per mode. - Bernard takes the general comment of only allocating one as the response = to take back to the request. Given consensus here, will verify that opinio= n in the reflector. ---- --------------------------- The sentiment in the room was clearly against approving this IANA request a= nd at this time we would like to confirm this on the mailing list. Please respond to this email and state whether you are in favor or against = approving this IANA request. Thanks, MS _____ This e-mail may contain Sprint Nextel proprietary information intended for = the sole use of the recipient(s). Any use by others is prohibited. If you a= re not the intended recipient, please contact the sender and delete all cop= ies of the message. --_010_9BC2F7926B33FE4AB10D69891D58FC1C5C753B978AGVW0671EXCame_-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Thu, 23 Jun 2011 08:19:56 +0000 Date: Thu, 23 Jun 2011 01:18:58 -0700 (Pacific Daylight Time) From: Peter Deacon To: Alan DeKok cc: 'radext mailing list' Subject: Re: Extended attrs doc Message-ID: User-Agent: Alpine 2.00 (WNT 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII On Thu, 23 Jun 2011, Alan DeKok wrote: >> If I had to choose between a more flag and the counter I would pick the >> counter. >> Prefer combination of more and counter since it gives you the end marker >> to detect truncation. > Or, start the counter at the last fragment. Counters go N, N-1, N-2, > ..., 1, 0. If the list is truncated, it doesn't end at zero. This shifts the problem from the end to the start. regards, Peter -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Thu, 23 Jun 2011 07:29:58 +0000 Message-ID: <4E02EB2E.6070709@deployingradius.com> Date: Thu, 23 Jun 2011 09:28:46 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Peter Deacon CC: 'radext mailing list' Subject: Re: Extended attrs doc Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Peter Deacon wrote: > Slightly off-topic -- wanted to point out proxies seem to be allowed to > add add attributes anywhere they want in a packet while still respecting > ordering constraint of RFC 2865 2.3. Yes. > I believe practically if this type of encoding were wrong the situation > would be detected quickly in any reasonable interop test. It is the not > so obvious interactions between systems and extension attributes I'm > most concerned about. People do interop tests? Maybe I post a list of vendors who've blatantly violated the RFCs and interoperability. > Don't think this applies to extensions VSAs. In 4.6 Vendor Type is > explicitly defined as a single byte. > > "The Vendor-Type field is one octet. Values are assigned at the sole > discretion of the Vendor." > > This type has a more flag so thinking we would expect the same encoding > rules for all extensions VSAs where it came to fragmentation. Yes. The top-level VSA can be fragmented. Anything *inside* of that, such as sub-TLVs, cannot be fragmented. > If I had to choose between a more flag and the counter I would pick the > counter. > > Prefer combination of more and counter since it gives you the end marker > to detect truncation. Or, start the counter at the last fragment. Counters go N, N-1, N-2, ..., 1, 0. If the list is truncated, it doesn't end at zero. Alan DeKok. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Wed, 22 Jun 2011 20:13:24 +0000 Date: Wed, 22 Jun 2011 13:12:17 -0700 (Pacific Daylight Time) From: Peter Deacon To: Alan DeKok cc: 'radext mailing list' Subject: Re: Extended attrs doc Message-ID: User-Agent: Alpine 2.00 (WNT 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Slightly off-topic -- wanted to point out proxies seem to be allowed to add add attributes anywhere they want in a packet while still respecting ordering constraint of RFC 2865 2.3. >> The use of a separate fragment-data attribute raises more ordering >> dependency questions. From a design POV I prefer the attributes to be >> self-contained within the same type. What happens when there are >> multiple ext frag attributes in the same request with different >> attribute id's (245,246) ? > My message describes how they're treated. Ordering *is* important. >> There is no RFC anywhere preventing reorder >> and as you mention how do you know which fragment is which or when one >> stops and the other starts? > My message describes how to detect when a fragment starts and stops. Yes, think we agree on the constraints. Packet wide ordering would need to be preserved. >> My suggestion is to keep the draft as is but add an explicit fragment >> counter next to the more flag using some or all of the remaining 7-bits. >> Since max RADIUS packet size is 4096 there are more than enough bits. > One issue is having a "fragment id" field means there's another > opportunity for implementations to get the encoding wrong. And there's > been talk of extending the maximum RADIUS packet size. I believe practically if this type of encoding were wrong the situation would be detected quickly in any reasonable interop test. It is the not so obvious interactions between systems and extension attributes I'm most concerned about. >> I also prefer fragmentation occur on the same level of the attribute >> like WiMax VSAs where the attributes inner type is fully defined before >> the fragmentation payload so there can never be any ambiguity regarding >> at least the attribute type the fragment belongs. > The difficulty with that is that the fragmentation method *cannot* > modify how the VSA space is encoded. That space is completely under > control of the vendors. Don't think this applies to extensions VSAs. In 4.6 Vendor Type is explicitly defined as a single byte. "The Vendor-Type field is one octet. Values are assigned at the sole discretion of the Vendor." This type has a more flag so thinking we would expect the same encoding rules for all extensions VSAs where it came to fragmentation. >> With the above >> Counter fields in the picture this preference does not matter as much >> and perhaps saving the extra byte(s) is the better tradeoff. > The counter makes it easier to detect re-ordered attributes, that's > true. > Changing the "more" flag to an 8-bit fragment counter would solve a > number of issues. You would have an explicit ordering of fragments, and > it would mean that attributes could be 251*255, or 64005 octets long. > That *should* be enough for most RADIUS purposes... If I had to choose between a more flag and the counter I would pick the counter. Prefer combination of more and counter since it gives you the end marker to detect truncation. regards, Peter -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Tue, 21 Jun 2011 17:16:44 +0000 Message-ID: <4E00D1E6.700@deployingradius.com> Date: Tue, 21 Jun 2011 19:16:22 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Peter Deacon CC: 'radext mailing list' Subject: Re: Extended attrs doc Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Peter Deacon wrote: > Interesting...RFC 2865 5: > > "A RADIUS server or client MUST NOT have any dependencies on the order > of attributes of different types." Yes. However, the WG can change that if consensus is reached. > "A RADIUS server or client MUST NOT require attributes of the same type > to be contiguous." > > RFC 3579 3.1 (EAP) > > "If multiple EAP-Message attributes are contained within an > Access-Request or Access-Challenge packet, they MUST be in order and > they MUST be consecutive attributes in the Access-Request or > Access-Challenge packet." > > Note the direct contradiction of 'MUST NOT' vs 'MUST'. Yes. I haven't seen any interoperability issues as a result of EAP violating RFC 2865 Section 5. > I tend to prefer a system which minimizes the possibility of data > corruption caused by ordering or truncation of attributes by systems > (Not necessarily only proxies) some of which may not even know what an > extended attribute is. I agree. > If the system detects an error or the data is missing no data is ALWAYS > preferable to wrong data. That's why the document introduces the concept of an "invalid attribute". These are attributes which are not treated as their alleged number would indicate. > Extended attribute is like WiMax however a little worse in that the > inner attribute type is not preserved in the next fragment so any error > could cause weird situations where the data field of a mis-ordered > extended type leaks into a separate attributes 'type' field. (Esp last > attribute with more bit not set) Yes. The hope is that proxies will not re-order attributes of the same type. So having the fragments buried inside of multiple attributes of type 245 *should* be OK. > The use of a separate fragment-data attribute raises more ordering > dependency questions. From a design POV I prefer the attributes to be > self-contained within the same type. What happens when there are > multiple ext frag attributes in the same request with different > attribute id's (245,246) ? My message describes how they're treated. Ordering *is* important. > There is no RFC anywhere preventing reorder > and as you mention how do you know which fragment is which or when one > stops and the other starts? My message describes how to detect when a fragment starts and stops. > My suggestion is to keep the draft as is but add an explicit fragment > counter next to the more flag using some or all of the remaining 7-bits. > Since max RADIUS packet size is 4096 there are more than enough bits. One issue is having a "fragment id" field means there's another opportunity for implementations to get the encoding wrong. And there's been talk of extending the maximum RADIUS packet size. > For example Attr1 requires 4 fragments to assemble.. > > Attr1 - (More=Yes, Counter=1) ... data ... Attr1 - (More=Yes, Counter=2) > ... data ... Attr1 - (More=Yes, Counter=3) ... data ... Attr1 - > (More=No, Counter=4) ... data ... > > Attr2 does not require fragmentation: > > Attr2 - (More=No, Counter=0) > > Note attributes not requiring fragmentation could use 0 to explicitly > indicate so they could never be confused with an end of fragment. OK. > I also prefer fragmentation occur on the same level of the attribute > like WiMax VSAs where the attributes inner type is fully defined before > the fragmentation payload so there can never be any ambiguity regarding > at least the attribute type the fragment belongs. The difficulty with that is that the fragmentation method *cannot* modify how the VSA space is encoded. That space is completely under control of the vendors. > With the above > Counter fields in the picture this preference does not matter as much > and perhaps saving the extra byte(s) is the better tradeoff. The counter makes it easier to detect re-ordered attributes, that's true. Changing the "more" flag to an 8-bit fragment counter would solve a number of issues. You would have an explicit ordering of fragments, and it would mean that attributes could be 251*255, or 64005 octets long. That *should* be enough for most RADIUS purposes... Alan DeKok. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Tue, 21 Jun 2011 16:51:08 +0000 Date: Tue, 21 Jun 2011 09:49:37 -0700 (Pacific Daylight Time) From: Peter Deacon To: Alan DeKok cc: 'radext mailing list' Subject: Re: Extended attrs doc Message-ID: User-Agent: Alpine 2.00 (WNT 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed On Tue, 21 Jun 2011, Alan DeKok wrote: > Does anyone have feedback? > My $0.02 is that the format of the "long" attributes is very awkward. > It means that there are *two* format changes. The "flags" octet has 7 > unused bits, which doesn't seem useful. And the discussion around the > whole "flags" thing seems awkward. Interesting...RFC 2865 5: "A RADIUS server or client MUST NOT have any dependencies on the order of attributes of different types." "A RADIUS server or client MUST NOT require attributes of the same type to be contiguous." RFC 3579 3.1 (EAP) "If multiple EAP-Message attributes are contained within an Access-Request or Access-Challenge packet, they MUST be in order and they MUST be consecutive attributes in the Access-Request or Access-Challenge packet." Note the direct contradiction of 'MUST NOT' vs 'MUST'. I tend to prefer a system which minimizes the possibility of data corruption caused by ordering or truncation of attributes by systems (Not necessarily only proxies) some of which may not even know what an extended attribute is. If the system detects an error or the data is missing no data is ALWAYS preferable to wrong data. WiMax uses more flags, EAP I will just ignore. Extended attribute is like WiMax however a little worse in that the inner attribute type is not preserved in the next fragment so any error could cause weird situations where the data field of a mis-ordered extended type leaks into a separate attributes 'type' field. (Esp last attribute with more bit not set) The use of a separate fragment-data attribute raises more ordering dependency questions. From a design POV I prefer the attributes to be self-contained within the same type. What happens when there are multiple ext frag attributes in the same request with different attribute id's (245,246) ? There is no RFC anywhere preventing reorder and as you mention how do you know which fragment is which or when one stops and the other starts? My suggestion is to keep the draft as is but add an explicit fragment counter next to the more flag using some or all of the remaining 7-bits. Since max RADIUS packet size is 4096 there are more than enough bits. With this approach the chance of at least detecting out of order fragments increase. For example Attr1 requires 4 fragments to assemble.. Attr1 - (More=Yes, Counter=1) ... data ... Attr1 - (More=Yes, Counter=2) ... data ... Attr1 - (More=Yes, Counter=3) ... data ... Attr1 - (More=No, Counter=4) ... data ... Attr2 does not require fragmentation: Attr2 - (More=No, Counter=0) Note attributes not requiring fragmentation could use 0 to explicitly indicate so they could never be confused with an end of fragment. I also prefer fragmentation occur on the same level of the attribute like WiMax VSAs where the attributes inner type is fully defined before the fragmentation payload so there can never be any ambiguity regarding at least the attribute type the fragment belongs. With the above Counter fields in the picture this preference does not matter as much and perhaps saving the extra byte(s) is the better tradeoff. regards, Peter > I've had some off-list discussions with people, and would like to > propose an alternative. > > The idea is to allow "fragmented" attributes, via an explicit > "Fragment-Data" attribute. This attribute would be assigned number 255, > and would be defined as being a fragment of the *previous* attribute. > > The rules for encoding it are: > > - take attribute data (> 253 octets) > - fill up the first attribute as normal, until "length = 255" > - take the rest of the data > - chop it into fragments of 253 octets > - pack it into "Fragment-Data" (type = 255, length = 255) > - last fragment has length <= 255 > OR last fragment has length == 255, AND the next attribute > is not Fragment-Data > > The rules for decoding it are: > > - For each attribute in the packet > - if length is 255 AND the next attribute is Fragment-Data (255) > THEN the data from the next attribute is concatenated to this one > > There are two issues with this proposal: > > 1) vendors have "self allocated" attribute 255. This proposal is > compatible with that, as Fragment-Data is define only when the > previous attribute has Length==255. This should be rare. > > 2) existing proxies re-ordering attributes. > RFC 2865 says that implementations MUST NOT re-order attributes > of the same type. But they CAN re-order attributes of differing > type. So there's a chance that proxies which don't understand > Fragment-Data will re-order them, breaking the packet entirely... > > I'm not aware of many (if any) proxies that do (2). Most are more > stringent than the requirements of RFC 2865, and don't re-order > attributes of differing type. > > Thoughts? > > Alan DeKok. > > -- > to unsubscribe send a message to radiusext-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: > -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Tue, 21 Jun 2011 12:42:59 +0000 Message-ID: <4E00918D.6010105@deployingradius.com> Date: Tue, 21 Jun 2011 14:41:49 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: 'radext mailing list' Subject: Extended attrs doc Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Does anyone have feedback? My $0.02 is that the format of the "long" attributes is very awkward. It means that there are *two* format changes. The "flags" octet has 7 unused bits, which doesn't seem useful. And the discussion around the whole "flags" thing seems awkward. I've had some off-list discussions with people, and would like to propose an alternative. The idea is to allow "fragmented" attributes, via an explicit "Fragment-Data" attribute. This attribute would be assigned number 255, and would be defined as being a fragment of the *previous* attribute. The rules for encoding it are: - take attribute data (> 253 octets) - fill up the first attribute as normal, until "length = 255" - take the rest of the data - chop it into fragments of 253 octets - pack it into "Fragment-Data" (type = 255, length = 255) - last fragment has length <= 255 OR last fragment has length == 255, AND the next attribute is not Fragment-Data The rules for decoding it are: - For each attribute in the packet - if length is 255 AND the next attribute is Fragment-Data (255) THEN the data from the next attribute is concatenated to this one There are two issues with this proposal: 1) vendors have "self allocated" attribute 255. This proposal is compatible with that, as Fragment-Data is define only when the previous attribute has Length==255. This should be rare. 2) existing proxies re-ordering attributes. RFC 2865 says that implementations MUST NOT re-order attributes of the same type. But they CAN re-order attributes of differing type. So there's a chance that proxies which don't understand Fragment-Data will re-order them, breaking the packet entirely... I'm not aware of many (if any) proxies that do (2). Most are more stringent than the requirements of RFC 2865, and don't re-order attributes of differing type. Thoughts? Alan DeKok. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Wed, 15 Jun 2011 10:20:17 +0000 Message-ID: <4DF8872F.90405@deployingradius.com> Date: Wed, 15 Jun 2011 12:19:27 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: "Romascanu, Dan (Dan)" CC: radiusext@ops.ietf.org, Charlie Kaufman Subject: Re: FW: Secdir review of draft-ietf-radext-crypto-agility-requirements-06 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Romascanu, Dan (Dan) wrote: > I couldn't figure out what solutions people might have in mind motivating these requirements. In fact, these requirements appeared to me to rule out any possible solution. In particular, page 5 para 3 line 1 says "Proposals MUST NOT introduce new capabilities negotiation features into the RADIUS protocol and crypto-agility solutions SHOULD NOT require changes to the RADIUS operational model.", where the model says that RADIUS is a stateless request/response protocol. That makes most cryptographic algorithm negotiation protocols impossible. I think that's part of the goal. There isn't much point in having the RADIUS WG design new cryptographic protocols. It would seem more efficient and secure to just leverage TLS. > Actually, crypto agility for RADIUS would be pretty trivial. RADIUS uses pair-wise configured secret keys. Cryptographic algorithms could be associated with those keys, and therefore configured in the same manner as the keys. You couldn't assign the new kinds of keys unless both ends understood the new algorithms. Everything would work with no cryptographic negotiation at all. Hmm... the secrets would then need to contain both the cryptographic algorithms, *and* any keys necessary for those algorithms. That's possible, I guess. > The apparent reason that doesn't address the problem is that they are trying to do much more than algorithm agility. They are also trying to improve the protocol to include features like Perfect Forward Secrecy, Automated Key Management, and authentication using X.509 certificates. Yes. The WG has been focusing on TLS and DTLS for a while now. > Some text in the document seems to imply that running the whole thing over DTLS might be acceptable (because DTLS would be considered a transport so it's algorithm negotiation mechanisms would not be considered new capabilities negotiation features in RADIUS). If that were acceptable, it would solve all of their other problems, though it would add a lot of heft to implementations on small devices. Most small devices doing RADIUS have HTTPS web interfaces. The cost of DTLS is likely acceptable. Also, if a device is doing RADIUS, it's probably forwarding, filtering, and switching traffic at multiple Mbps. Adding TLS for a few packets/s is likely to be acceptable. > The bottom line is that they are working really hard to do the right thing, but there is a danger they will be wasting their time unless someone from the security community is working with them to find a reasonable solution that works for both the RADIUS community and the security community. I have my doubts as to whether this document brings them closer to a solution, but it is certainly an opportunity for someone to volunteer to step up. If TLS is acceptable to the RADIUS WG, I presume it is likely to also be acceptable to the security reviewers. > p.s. One protocol nit to worry about. In section 4.3, paragraph 4, the spec suggests to one way to mitigate downgrade attacks is for initiators to remember that responders once accepted the newer (stronger) protocol, and on that basis refuse to accept the older (weaker) protocol in subsequent negotiations. While it sounds logical, it can lead to deployment problems where someone rolls out a newer responder but then finds due to some problem that they must back it out. For that case, there must be some (likely out of band) way to tell the initiator to go back to accepting the old protocol. IIRC, that is usually done via an administrative configuration change on the device. Alan DeKok. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Wed, 15 Jun 2011 08:45:29 +0000 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: FW: Secdir review of draft-ietf-radext-crypto-agility-requirements-06 Date: Wed, 15 Jun 2011 10:44:42 +0200 Message-ID: Thread-Topic: Secdir review of draft-ietf-radext-crypto-agility-requirements-06 Thread-Index: AcwrEhaCu4VKSJ6LSL6yByy0oqg7zQAJjwMg From: "Romascanu, Dan (Dan)" To: Cc: "Charlie Kaufman" Document authors and WG,=20 Please respond to the issues raised by Charlie in his secdir review. Thanks and Regards, Dan=20 -----Original Message----- From: Charlie Kaufman [mailto:charliek@microsoft.com]=20 Sent: Wednesday, June 15, 2011 9:04 AM To: secdir@ietf.org; iesg@ietf.org; = draft-ietf-radext-crypto-agility-requirements.all@tools.ietf.org Subject: Secdir review of = draft-ietf-radext-crypto-agility-requirements-06 I have reviewed this document as part of the security directorate's = ongoing effort to review all IETF documents being processed by the = IESG.=A0 These comments were written primarily for the benefit of the = security area directors.=A0 Document editors and WG chairs should treat = these comments just like any other last call comments. This document was written based on a request/demand from the security = area, so it would seem only fair that we review it fairly carefully. = RADIUS was developed in simpler times and uses a na=EFve approach to = encryption and authentication of messages. Among the least of its = problems, it has a hard-wired dependency on MD5. Russ Housley - Security = Area Director at the time - asked the RADEXT WG to propose remediations = to the protocol (perhaps as the price of withdrawing a 'discuss' on some = other work they were doing). This was in 2006. This document does not propose remediations to RADIUS, but rather = proposes requirements that any such remediations must satisfy. I've = always hated IETF 'requirements' documents, because they tend to be a = form of shadow boxing where people have solutions in mind and are trying = not to admit it as that argue for requirements that would favor their = solution when solutions are judged against requirements. That makes it = especially hard for people who are not deeply involved to understand the = implications of what is being said. I couldn't figure out what solutions people might have in mind = motivating these requirements. In fact, these requirements appeared to = me to rule out any possible solution. In particular, page 5 para 3 line = 1 says "Proposals MUST NOT introduce new capabilities negotiation = features into the RADIUS protocol and crypto-agility solutions SHOULD = NOT require changes to the RADIUS operational model.", where the model = says that RADIUS is a stateless request/response protocol. That makes = most cryptographic algorithm negotiation protocols impossible. Actually, crypto agility for RADIUS would be pretty trivial. RADIUS uses = pair-wise configured secret keys. Cryptographic algorithms could be = associated with those keys, and therefore configured in the same manner = as the keys. You couldn't assign the new kinds of keys unless both ends = understood the new algorithms. Everything would work with no = cryptographic negotiation at all. The apparent reason that doesn't = address the problem is that they are trying to do much more than = algorithm agility. They are also trying to improve the protocol to = include features like Perfect Forward Secrecy, Automated Key Management, = and authentication using X.509 certificates. Some text in the document seems to imply that running the whole thing = over DTLS might be acceptable (because DTLS would be considered a = transport so it's algorithm negotiation mechanisms would not be = considered new capabilities negotiation features in RADIUS). If that = were acceptable, it would solve all of their other problems, though it = would add a lot of heft to implementations on small devices. The bottom line is that they are working really hard to do the right = thing, but there is a danger they will be wasting their time unless = someone from the security community is working with them to find a = reasonable solution that works for both the RADIUS community and the = security community. I have my doubts as to whether this document brings = them closer to a solution, but it is certainly an opportunity for = someone to volunteer to step up. --Charlie p.s. One protocol nit to worry about. In section 4.3, paragraph 4, the = spec suggests to one way to mitigate downgrade attacks is for initiators = to remember that responders once accepted the newer (stronger) protocol, = and on that basis refuse to accept the older (weaker) protocol in = subsequent negotiations. While it sounds logical, it can lead to = deployment problems where someone rolls out a newer responder but then = finds due to some problem that they must back it out. For that case, = there must be some (likely out of band) way to tell the initiator to go = back to accepting the old protocol. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Wed, 15 Jun 2011 06:18:32 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: "radext issue tracker" Cc: radiusext@ops.ietf.org Auto-Submitted: auto-generated To: charliek@microsoft.com Date: Wed, 15 Jun 2011 06:17:27 -0000 Reply-To: radiusext@ops.ietf.org Subject: =?utf-8?q?=5Bradext=5D_=23101=3A_Secdir_review_of_draft-ietf-rad?= =?utf-8?q?ext-crypto-agility-requirements-06=E2=80=8F?= Message-ID: <063.921701c6d8a7e1501f2bc570ac34eb42@trac.tools.ietf.org> #101: Secdir review of draft-ietf-radext-crypto-agility-requirements-06‏ I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document was written based on a request/demand from the security area, so it would seem only fair that we review it fairly carefully. RADIUS was developed in simpler times and uses a naïve approach to encryption and authentication of messages. Among the least of its problems, it has a hard-wired dependency on MD5. Russ Housley - Security Area Director at the time - asked the RADEXT WG to propose remediations to the protocol (perhaps as the price of withdrawing a 'discuss' on some other work they were doing). This was in 2006. This document does not propose remediations to RADIUS, but rather proposes requirements that any such remediations must satisfy. I've always hated IETF 'requirements' documents, because they tend to be a form of shadow boxing where people have solutions in mind and are trying not to admit it as that argue for requirements that would favor their solution when solutions are judged against requirements. That makes it especially hard for people who are not deeply involved to understand the implications of what is being said. I couldn't figure out what solutions people might have in mind motivating these requirements. In fact, these requirements appeared to me to rule out any possible solution. In particular, page 5 para 3 line 1 says "Proposals MUST NOT introduce new capabilities negotiation features into the RADIUS protocol and crypto-agility solutions SHOULD NOT require changes to the RADIUS operational model.", where the model says that RADIUS is a stateless request/response protocol. That makes most cryptographic algorithm negotiation protocols impossible. Actually, crypto agility for RADIUS would be pretty trivial. RADIUS uses pair-wise configured secret keys. Cryptographic algorithms could be associated with those keys, and therefore configured in the same manner as the keys. You couldn't assign the new kinds of keys unless both ends understood the new algorithms. Everything would work with no cryptographic negotiation at all. The apparent reason that doesn't address the problem is that they are trying to do much more than algorithm agility. They are also trying to improve the protocol to include features like Perfect Forward Secrecy, Automated Key Management, and authentication using X.509 certificates. Some text in the document seems to imply that running the whole thing over DTLS might be acceptable (because DTLS would be considered a transport so it's algorithm negotiation mechanisms would not be considered new capabilities negotiation features in RADIUS). If that were acceptable, it would solve all of their other problems, though it would add a lot of heft to implementations on small devices. The bottom line is that they are working really hard to do the right thing, but there is a danger they will be wasting their time unless someone from the security community is working with them to find a reasonable solution that works for both the RADIUS community and the security community. I have my doubts as to whether this document brings them closer to a solution, but it is certainly an opportunity for someone to volunteer to step up. --Charlie p.s. One protocol nit to worry about. In section 4.3, paragraph 4, the spec suggests to one way to mitigate downgrade attacks is for initiators to remember that responders once accepted the newer (stronger) protocol, and on that basis refuse to accept the older (weaker) protocol in subsequent negotiations. While it sounds logical, it can lead to deployment problems where someone rolls out a newer responder but then finds due to some problem that they must back it out. For that case, there must be some (likely out of band) way to tell the initiator to go back to accepting the old protocol. -- ------------------------------------+--------------------------------------- Reporter: charliek@… | Owner: Type: defect | Status: new Priority: minor | Milestone: milestone1 Component: Crypto-Agility | Version: 1.0 Severity: Submitted WG Document | Keywords: ------------------------------------+--------------------------------------- Ticket URL: radext -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Mon, 13 Jun 2011 23:43:18 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:from:content-type:content-transfer-encoding :subject:date:references:to:message-id:mime-version:x-mailer; bh=sr5Ls7ahtDv3zL79x/ogkYAU0dQYyBoY6rTFY7l1KHU=; b=YB8MzTFdqJmNxtpAYQQA//0ienJVmNBb+wVRBPdXuXtwY1yb3P9/st4Lj7NEYDJeX6 Yf9A4E15dZJ8zTiukNc7yjtSYRl+IjX4Zunz+fvZPKJcbc+9AtgLIX13W3ymQtXtlhly 3ixrxiHXhaGkS8svm/b6yM2oB4wjdWfEnn9O0= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:content-type:content-transfer-encoding:subject:date:references :to:message-id:mime-version:x-mailer; b=j357XGOf9Welzu2//DHzTywiJXxXV3wDJBnZ+7C5a4K5pt0Qs1x/vNeKKFOiMok2i/ sa1Nfq2JqxqR+eSrlaa4dOTXMZwMzOzgQIF2nHAGXhNbLAlQILKRbvAeJ6lN6oWzxT8C 4vccBIrYAulPkIr/qTTJDsd9FAavas2gLRTBk= From: jouni korhonen Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Subject: Fwd: Nomcom 2011-12: Call for Volunteers Date: Tue, 14 Jun 2011 02:42:09 +0300 To: radiusext@ops.ietf.org Message-Id: <5242D23B-6D4E-4B05-8ABF-AFF839004A9F@gmail.com> Mime-Version: 1.0 (Apple Message framework v1084) FYI Begin forwarded message: > From: NomCom Chair > Date: June 11, 2011 5:56:06 AM GMT+03:00 > To: IETF Announcement list > Subject: Nomcom 2011-12: Call for Volunteers > > The IETF nominating committee process for 2011-12 has begun. The IETF > nominating committee appoints folks to fill the open slots on the > IAOC, the IAB, and the IESG. The 10 nominating committee members are > selected randomly from a pool of volunteers. The more volunteers, the > better the chance we have of choosing a random yet representative > cross section of the IETF population. The details of the nomcom > process can be found in RFC 3777. > > To be eligible, volunteers for the nomcom need to have attended 3 of > the past 5 IETF meetings as of the time this announcement goes out > (i.e. IETF76-IETF80). If you qualify, and are not seeking appointment > to any of the open positions this nomcom will be filling, please > consider volunteering. > > The list of people and posts whose terms end with the March 2012 IETF > meeting, and thus the positions for which the nominating committee is > responsible, are as follows: > > IAB > === > > Bernard Aboba > Hannes Tschofenig > Andrei Robachevsky > Olaf Kolkman > Spencer Dawkins > Ross Callon > > IAOC > ==== > > Marshall Eubanks > > IESG > ==== > > Peter Saint-Andre (Applications) > Jari Arkko (Internet) > Dan Romascanu (Operations & Management) > Gonzalo Camarillo (RAI) > Stewart Bryant (Routing) > Sean Turner (Security) > David Harrington (Transport) > > > The primary activity for this nomcom will begin during IETF-81 in > Quebec City and should be completed by January 2012. The nomcom will > be collecting requirements from the community, as well as talking to > candidates and to community members about candidates. There will be > regularly scheduled conference calls to ensure progress. Thus, being a > nomcom member does require some time commitment. > > Please volunteer by sending an email to me before > 11:59 pm EDT July 10, 2011 as follows: > > To: suresh.krishnan@ericsson.com > Subject: Nomcom 2011-12 Volunteer > > Please include the following information in the body of the mail: > > Full Name: // As you enter in the IETF Registration Form, > // First/Given name followed by Last/Family Name > > Current Primary Affiliation: // typically what goes in the Company > // field in the IETF Registration Form > > Email Address(es): // all email addresses used to Register for the > // past 5 IETF meetings > // Please designate a Preferred email address for > // contact if there is more than one email address > > Telephone number: // With country code (for confirmation if selected) > > Please expect an email response from me within 3 business days stating > whether or not you are qualified. If you do not receive a response in > this timeframe, please re-send your email with the tag "RESEND:" added > to the subject line. > > If you are not yet sure you would like to volunteer, please consider > that nomcom members play a very important role in shaping the > leadership of the IETF. Ensuring the leadership of the IETF is fair > and balanced and comprised of those who can lead the IETF in the right > direction is an important responsibility that rests on the IETF > participants at large. Volunteering for the nomcom is a good way of > contributing in that direction. > > I will be publishing a more detailed target timetable, as well as > details of the randomness seeds to be used for the RFC 3797 selection > process within the next few days. > > Thank you in advance for your participation. > > Suresh Krishnan > Nomcom Chair 2011-2012 > Email: nomcom-chair@ietf.org, suresh.krishnan@ericsson.com > > _______________________________________________ > IETF-Announce mailing list > IETF-Announce@ietf.org > https://www.ietf.org/mailman/listinfo/ietf-announce -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Fri, 10 Jun 2011 13:51:48 +0000 From: Avi Lior To: Dave Nelson CC: Stefan Winter , Alper Yegin , "Sanchez, Mauricio (HP Networking)" , "radiusext@ops.ietf.org" Date: Fri, 10 Jun 2011 09:50:33 -0400 Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwndV75WRkoa68xTViu10u+z0pziQ== Message-ID: Accept-Language: en-US Content-Language: en-US user-agent: Microsoft-MacOutlook/14.10.0.110310 acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Its just a name - so I am okay with another name. Do you have a suggestion? The issue I have with Service-Type is that that is already overloaded. The purpose of the attribute is to convey to the Server the context of the request message. The approach would be to have an IANA registry/name space (just like in Diameter) of reserved identifiers for IETF that would require an RFC and a space that is to be allocated to Vendors/SDO. -- Avi Lior --Bridgewater Systems On 09-06-11 09:51 , "Dave Nelson" wrote: >> If we would invent a new attribute then I would vote for Application-Id. >> >> This is more inline with Diameter etc.... > >I would support a new attribute, but I would *not* support >Application-Id, as that concept exists in Diameter. IMO, that's a >shortcoming of Diameter. Moving it over to RADUS would not be >attractive. > >Regards, > >Dave > >David B. Nelson >Sr. Software Architect >Elbrys Networks, Inc. >www.elbrys.com >+1.603.570.2636 -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Thu, 09 Jun 2011 13:41:53 +0000 From: Avi Lior To: Stefan Winter CC: Alper Yegin , "'Sanchez, Mauricio (HP Networking)'" , "radiusext@ops.ietf.org" Date: Thu, 9 Jun 2011 09:40:26 -0400 Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: Acwmqsr8lVYE1d7VTGW0BCRO5KDXMQ== Message-ID: Accept-Language: en-US Content-Language: en-US user-agent: Microsoft-MacOutlook/14.10.0.110310 acceptlanguage: en-US Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 If we would invent a new attribute then I would vote for Application-Id. This is more inline with Diameter etc.... If we have support for that I would be more than happy to write it up. -- Avi Lior --Bridgewater Systems On 09-06-11 05:08 , "Stefan Winter" wrote: >Hi, > >> You cant use Service-Type because service type is also indicating >> authorize only or authenticate only and call-check etc. and thus you >>cant >> express the Type of Service as well. I pointed this out oh it seem like >> 30 years ago when we were doing Chiba work. > >Well... would an IETF attribute like the "Extended-Service-Type-Info" as >I mentioned earlier help you? I.e. your requests could be tagged: > >Service-Type =3D Authorize-Only >Extended-Service-Type-Info =3D "WiMAX IP Mobility" > >or so? > >Stefan > > >--=20 >Stefan WINTER >Ingenieur de Recherche >Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education Nationale= et >de la Recherche >6, rue Richard Coudenhove-Kalergi >L-1359 Luxembourg > >Tel: +352 424409 1 >Fax: +352 422473 > > -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Thu, 09 Jun 2011 09:08:21 +0000 Message-ID: <4DF08D79.6020200@restena.lu> Date: Thu, 09 Jun 2011 11:08:09 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.9.2.17) Gecko/20110414 Lightning/1.0b2 Thunderbird/3.1.10 MIME-Version: 1.0 To: Avi Lior CC: Alper Yegin , "'Sanchez, Mauricio (HP Networking)'" , "radiusext@ops.ietf.org" Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig1F15EC992F9152BD9D3D8B6B" This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig1F15EC992F9152BD9D3D8B6B Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi, > You cant use Service-Type because service type is also indicating > authorize only or authenticate only and call-check etc. and thus you ca= nt > express the Type of Service as well. I pointed this out oh it seem lik= e > 30 years ago when we were doing Chiba work. Well... would an IETF attribute like the "Extended-Service-Type-Info" as I mentioned earlier help you? I.e. your requests could be tagged: Service-Type =3D Authorize-Only Extended-Service-Type-Info =3D "WiMAX IP Mobility" or so? Stefan --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education National= e et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 --------------enig1F15EC992F9152BD9D3D8B6B Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk3wjXkACgkQ+jm90f8eFWYkdACdHj7X5PEZIl5Q0aMqK6zNiCVm 3bEAnjq0FHRnuhETRXrY+eMvChy04V2a =Mm+A -----END PGP SIGNATURE----- --------------enig1F15EC992F9152BD9D3D8B6B-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Thu, 09 Jun 2011 09:04:59 +0000 Message-ID: <4DF08C76.60000@restena.lu> Date: Thu, 09 Jun 2011 11:03:50 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.9.2.17) Gecko/20110414 Lightning/1.0b2 Thunderbird/3.1.10 MIME-Version: 1.0 To: Dave Nelson CC: Alper Yegin , "Sanchez, Mauricio (HP Networking)" , radiusext@ops.ietf.org Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig2D794547F632950FCB187B46" This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig2D794547F632950FCB187B46 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi, >> Which is, BTW, extremely similar to how I solved the problem for me. I= >> defined a VSA "RESTENA-Service-Type" (string) and put things like "IMA= P" >> into it. > What else was in the request message? Was there an instance of > Service-Type, and if so what was it's value? The requests were generated by a pam_radius_auth module, which sends Service-Type =3D Authenticate-Only. That module doesn't even send VSA's, so I had to trick like "if the sending client was IP adress x.y.z.a, add RESTENA-Service-Type =3D IMAP prior to further processing". And there I was lucky that this IP address has only *one* process that uses RADIUS. Well, standard ugly hacks. > I see the argument for using Service-Type for this application. OTOH, > there are two minor issues with that path: (a) allocation requires > IETF Consensus, and (b) it tends to clutter up what's currently a > concise list of options. That's true (and that's why I just took a VSA and went my merry way). Of course, having an IETF-allocated string attribute of sorts "Extended-Service-Type-Info" that people could fill with whatever is needed inside their AAA infrastructure would be not so bad. Better than cluttering Service-Type with hundreds(?) of possible RADIUS-speaking applications IMHO; where the list would be necessarily incomplete. Greetings, Stefan Winter > Regards, > > Dave > > David B. Nelson > Sr. Software Architect > Elbrys Networks, Inc. > www.elbrys.com > +1.603.570.2636 --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education National= e et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 --------------enig2D794547F632950FCB187B46 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk3wjIEACgkQ+jm90f8eFWa3dwCfelydAnTJa9qTAv5afflW2oto cb4AniAWCzjkoRUukMqeoX9Clncy7t52 =zy15 -----END PGP SIGNATURE----- --------------enig2D794547F632950FCB187B46-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Wed, 08 Jun 2011 16:13:00 +0000 From: Avi Lior To: Stefan Winter , Alper Yegin CC: "'Sanchez, Mauricio (HP Networking)'" , "radiusext@ops.ietf.org" Date: Wed, 8 Jun 2011 12:12:05 -0400 Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: Acwl9s7lEXLw+5mbQKij5fwBLhh/cQ== Message-ID: Accept-Language: en-US Content-Language: en-US user-agent: Microsoft-MacOutlook/14.10.0.110310 acceptlanguage: en-US Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 You cant use Service-Type because service type is also indicating authorize only or authenticate only and call-check etc. and thus you cant express the Type of Service as well. I pointed this out oh it seem like 30 years ago when we were doing Chiba work. -- Avi Lior --Bridgewater Systems On 08-06-11 08:48 , "Stefan Winter" wrote: >Hi, > >> I think we need to get these question marks discussed before saying no. >> >> Historically, the NAS-port-type is associated with the L1/L2 port over >> which the =B3access=B2 service is provided. But with the new use of >> RADIUS, this view is no longer applicable. Again, consider a Mobile IP >> Home Agent node implementing RADIUS client for AAAing the MN=B9s >> registration requests. The L1/L2 port that receives the MN >> registration request has no significance, and it can be one of many >> types. Here, our thinking is, the =B3logical=B2 port is the =B3Mobile IP >> Home Agent=B2, and that has nothing to do with the L1/L2 port. >> >> What do people think? >> >> > >If the use of RADIUS has nothing to do with giving access to real >NAS-Ports - then why overload the NAS-Port-Type attribute for this >unrelated business? NAS-Port-Type is optional, so if you don't provision >service on a NAS port leave the attribute out. > >RFC2865 says: An Access-Request SHOULD contain a NAS-Port or NAS-Port-Type >attribute or both unless the type of access being requested does >not involve a port or the NAS does not distinguish among its >ports. > >Sounds clear to me :-) > >I understand the need for signalling for what kind of service the user >is being authenticated. I have same at home where our RADIUS server does >IMAP, SMTP, 802.11, Jabber, Dialup, etc... logins. These are different >services; so it would sound natural to use Service-Type for it: > >RFC2865 says: This Attribute indicates the type of service the user has >requested, or the type of service to be provided. > >Which is, BTW, extremely similar to how I solved the problem for me. I >defined a VSA "RESTENA-Service-Type" (string) and put things like "IMAP" >into it. That makes server-side per-service processing easy. > >Of course, WiMAX could get a "real" Service-Type value instead and >wouldn't need to hide behind a VSA :-) > >Greetings, > >Stefan Winter > >--=20 >Stefan WINTER >Ingenieur de Recherche >Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education Nationale= et >de la Recherche >6, rue Richard Coudenhove-Kalergi >L-1359 Luxembourg > >Tel: +352 424409 1 >Fax: +352 422473 > > -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Wed, 08 Jun 2011 12:49:52 +0000 Message-ID: <4DEF6FAC.70903@restena.lu> Date: Wed, 08 Jun 2011 14:48:44 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.9.2.17) Gecko/20110414 Lightning/1.0b2 Thunderbird/3.1.10 MIME-Version: 1.0 To: Alper Yegin CC: "'Sanchez, Mauricio \(HP Networking\)'" , radiusext@ops.ietf.org Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enigED7DAF3DB1E08789D21135B6" This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigED7DAF3DB1E08789D21135B6 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hi, > I think we need to get these question marks discussed before saying no.= > > Historically, the NAS-port-type is associated with the L1/L2 port over > which the =93access=94 service is provided. But with the new use of > RADIUS, this view is no longer applicable. Again, consider a Mobile IP > Home Agent node implementing RADIUS client for AAAing the MN=92s > registration requests. The L1/L2 port that receives the MN > registration request has no significance, and it can be one of many > types. Here, our thinking is, the =93logical=94 port is the =93Mobile I= P > Home Agent=94, and that has nothing to do with the L1/L2 port. > > What do people think? > > If the use of RADIUS has nothing to do with giving access to real NAS-Ports - then why overload the NAS-Port-Type attribute for this unrelated business? NAS-Port-Type is optional, so if you don't provision service on a NAS port leave the attribute out. RFC2865 says: An Access-Request SHOULD contain a NAS-Port or NAS-Port-Typ= e attribute or both unless the type of access being requested does not involve a port or the NAS does not distinguish among its ports. Sounds clear to me :-) I understand the need for signalling for what kind of service the user is being authenticated. I have same at home where our RADIUS server does IMAP, SMTP, 802.11, Jabber, Dialup, etc... logins. These are different services; so it would sound natural to use Service-Type for it: RFC2865 says: This Attribute indicates the type of service the user has requested, or the type of service to be provided. Which is, BTW, extremely similar to how I solved the problem for me. I defined a VSA "RESTENA-Service-Type" (string) and put things like "IMAP" into it. That makes server-side per-service processing easy. Of course, WiMAX could get a "real" Service-Type value instead and wouldn't need to hide behind a VSA :-) Greetings, Stefan Winter --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education National= e et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 --------------enigED7DAF3DB1E08789D21135B6 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk3vb6wACgkQ+jm90f8eFWZ9YACdFu0+6jCCax3vu9uvfZqIl1SL a6UAn1BCvNgVXTXLy+gFCmoUZd4qqhYd =r67L -----END PGP SIGNATURE----- --------------enigED7DAF3DB1E08789D21135B6-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Mon, 06 Jun 2011 08:37:33 +0000 Message-ID: <4DEC91BF.2010905@deployingradius.com> Date: Mon, 06 Jun 2011 10:37:19 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: Stefan Winter CC: "radiusext@ops.ietf.org" Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Stefan Winter wrote: > If it's not, maybe WiMAX should get a new NSA-Port-Type. IMHO, the "NSA" port type attribute should encode a zero-width bit field with fixed value "tapped". :) Alan DeKok. -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Mon, 06 Jun 2011 08:32:20 +0000 Message-ID: <4DEC907B.5090102@restena.lu> Date: Mon, 06 Jun 2011 10:31:55 +0200 From: Stefan Winter User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); de; rv:1.9.2.17) Gecko/20110414 Lightning/1.0b2 Thunderbird/3.1.10 MIME-Version: 1.0 To: Avi Lior CC: Bernard Aboba , "radiusext@ops.ietf.org" Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig7954507DCB1ED58ACAD6D711" This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig7954507DCB1ED58ACAD6D711 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hi, > (me) In detail: My reservations against doing the WiFi > Interworking are the same as in the meeting (i.e. why is "WiMAX > Wifi" different from normal WiFi, which has a NAS-Port-Type > already), but I don't care too much. > > (Avi)Because the behaviour in WiMAX is different then when the AAA is > performing 'normal' WiFi operations. > Anyway you seem to care a lot. I care less about this one value than about all the others I wrote something about in the remainder of my mail. Unfortunately, you didn't respond to these AFAICT. On-topic again: I just don't get what "behaviour is different" means. Is the type of network access being provisioned (i.e. what the user gets after authenticating) compatible to the IEEE 802.11 standard (and/or any of the amendments)? If so, it's WiFi, and WiFi already has a NAS-Port-Type. If it's not, maybe WiMAX should get a new NSA-Port-Type. I think I can guesstimate where the desire for a separate NAS-Port-Type for WiMAX-WiFi would come from, even if the actual network access is plain WiFi. I am (sortof) facing the same desire for my eduroam hotspots: when doing AAA for eduroam, the business logic may be a different one from when doing just-some-other-WiFi on the same NAS. I would be delighted to have an IETF-approved tag "this is *eduroam* WiFi" so I could apply my different business logic depending on whether I want to service an eduroam login, or a something-else login that comes in from the same NAS. Still, that desire is wrong :-) A protocol isn't there to support one particular implementor's internal business logic; its purpose is to make interoperable (cross-organisation) standards. NAS-Port-Type has a clear semantics: an implementation which sees this value can expect the network access type to be IEEE 802.11. If you want to express something more fine-grained than just the NAS-Port-Type, why use the attribute NAS-Port-Type with wrong semantics for it. From a quick look into the draft "RADIUS attributes for IEEE 802 Networks", there are some candidates: Mobility-Domain-Id, Network-Id-Name ? Not sure about the semantics of either, but that document in general looks like a much more natural fit to express what *exact* WiFi properties to expect within the NAS-Port-Type of IEEE-80211.= So, I would really call for a litmus test: is the network access being provisioned compatible to IEEE 802.11(a/b/g/n/whatever)? Yes: NAS-Port-Type exists; no new allocation, look into other attributes. No: Consider issuing a new NAS-Port-Type for this. That question is a technical one, and I would hope it has a clear answer = :-) Greetings, Stefan > > > For the other types, my feeling is much stronger against > allocation. As per Avi's mail, there are > > - voice service > - DHCP service > - location based service > > The word "service" in these is a brightly blinking indicator that > this is not about a port type, but a service type. So allocating a > NAS-*Port*-Type here just doesn't seem to fit semantically. > > Service Type does not work. I wish it would. But its overloaded. For > example if I want to say Authenticate-Only for Voice Service I would > not be able to do so. > > > > There is also "WiMAX Pre-Release 8 ..." stuff. This would at best > be a temporary thing; when Release 8 is out, this NAS-Port-Type > would just be a burnt integer. I don't think that's right. > > Temporary thing hmmm. > Burnt Integer =97 seriously. =20 > > > > Leave alone that there are values which are a "function" - what > would that have to do with NAS-Port-Type? > > Seems to me that NAS-Port type IS the way you specify the type of > service connection and hence service the request is about. > > > > Given that all these values are to be registered as a block, and > the majority of the proposed values have a big question mark for > me, I can't help but say No. > > Greetings, > > Stefan Winter" > --=20 Stefan WINTER Ingenieur de Recherche Fondation RESTENA - R=E9seau T=E9l=E9informatique de l'Education National= e et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473 --------------enig7954507DCB1ED58ACAD6D711 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk3skIEACgkQ+jm90f8eFWa0eQCfQMBHaqAMzlf1EgGlbxT54f/C cw8AoIQ2rdibv66tPCA55ZiUi0rDbYBz =a7rd -----END PGP SIGNATURE----- --------------enig7954507DCB1ED58ACAD6D711-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Mon, 06 Jun 2011 08:28:35 +0000 Message-ID: <4DEC8F87.5050103@deployingradius.com> Date: Mon, 06 Jun 2011 10:27:51 +0200 From: Alan DeKok User-Agent: Thunderbird 2.0.0.24 (Macintosh/20100228) MIME-Version: 1.0 To: radiusext@ops.ietf.org Subject: Re: I-D Action: draft-ietf-radext-radius-extensions-01.txt Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit This draft fixes some typos, adds some clarifications, and adds an "integer64" data type as suggested by Stephan Winter. Alan DeKok. internet-drafts@ietf.org wrote: > A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the RADIUS EXTensions Working Group of the IETF. > > Title : Remote Authentication Dial In User Service (RADIUS) Protocol Extensions > Author(s) : Alan DeKok > Avi Lior > Filename : draft-ietf-radext-radius-extensions-01.txt > Pages : 58 > Date : 2011-06-05 > > The Remote Authentication Dial In User Service (RADIUS) protocol is > nearing exhaustion of its current 8-bit attribute type space. In > addition, experience shows a growing need for complex grouping, along > with attributes which can carry more than 253 octets of data. This > document defines changes to RADIUS which address all of the above > problems. > > > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-ietf-radext-radius-extensions-01.txt > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > This Internet-Draft can be retrieved at: > ftp://ftp.ietf.org/internet-drafts/draft-ietf-radext-radius-extensions-01.txt > > -- > to unsubscribe send a message to radiusext-request@ops.ietf.org with > the word 'unsubscribe' in a single line as the message text body. > archive: > > -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Mon, 06 Jun 2011 05:32:11 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: internet-drafts@ietf.org To: i-d-announce@ietf.org Cc: radiusext@ops.ietf.org Subject: I-D Action: draft-ietf-radext-radius-extensions-01.txt Message-ID: <20110606053056.2195.82606.idtracker@ietfa.amsl.com> Date: Sun, 05 Jun 2011 22:30:56 -0700 A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the RADIUS EXTensions Working Group of th= e IETF. Title : Remote Authentication Dial In User Service (RADIUS) Prot= ocol Extensions Author(s) : Alan DeKok Avi Lior Filename : draft-ietf-radext-radius-extensions-01.txt Pages : 58 Date : 2011-06-05 The Remote Authentication Dial In User Service (RADIUS) protocol is nearing exhaustion of its current 8-bit attribute type space. In addition, experience shows a growing need for complex grouping, along with attributes which can carry more than 253 octets of data. This document defines changes to RADIUS which address all of the above problems. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-radext-radius-extensions-01.= txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ This Internet-Draft can be retrieved at: ftp://ftp.ietf.org/internet-drafts/draft-ietf-radext-radius-extensions-01.t= xt -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Sun, 05 Jun 2011 03:29:50 +0000 From: Avi Lior To: Bernard Aboba , "radiusext@ops.ietf.org" Date: Sat, 4 Jun 2011 23:28:53 -0400 Subject: Re: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Topic: Final call for consensus poll for IANA #409959 NAS-Port-Type value request Thread-Index: AcwjMLKj1Zo4LRE9SsqZb2kKnCyEVA== Message-ID: Accept-Language: en-US Content-Language: en-US user-agent: Microsoft-MacOutlook/14.10.0.110310 acceptlanguage: en-US Content-Type: multipart/alternative; boundary="_000_CA106E6218B2Davibridgewatersystemscom_" MIME-Version: 1.0 --_000_CA106E6218B2Davibridgewatersystemscom_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable See inline=85. -- Avi Lior --Bridgewater Systems On 22-05-11 05:29 , "Bernard Aboba" > wrote: I agree with Alan and Stefan: against allocation. Alan DeKok said: > In summary: against allocation. I agree. Stefan Winter said; "In summary: against allocation. In detail: My reservations against doing the WiFi Interworking are the same= as in the meeting (i.e. why is "WiMAX Wifi" different from normal WiFi, wh= ich has a NAS-Port-Type already), but I don't care too much. Because the behaviour in WiMAX is different then when the AAA is performing= 'normal' WiFi operations. Anyway you seem to care a lot. For the other types, my feeling is much stronger against allocation. As per= Avi's mail, there are - voice service - DHCP service - location based service The word "service" in these is a brightly blinking indicator that this is n= ot about a port type, but a service type. So allocating a NAS-*Port*-Type h= ere just doesn't seem to fit semantically. Service Type does not work. I wish it would. But its overloaded. For examp= le if I want to say Authenticate-Only for Voice Service I would not be able= to do so. There is also "WiMAX Pre-Release 8 ..." stuff. This would at best be a temp= orary thing; when Release 8 is out, this NAS-Port-Type would just be a burn= t integer. I don't think that's right. Temporary thing hmmm. Burnt Integer =97 seriously. Leave alone that there are values which are a "function" - what would that = have to do with NAS-Port-Type? Seems to me that NAS-Port type IS the way you specify the type of service c= onnection and hence service the request is about. Given that all these values are to be registered as a block, and the majori= ty of the proposed values have a big question mark for me, I can't help but= say No. Greetings, Stefan Winter" --_000_CA106E6218B2Davibridgewatersystemscom_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
See inline=85.
<= div>
-- Avi Lior
--Bridgewater Systems


On 22-05-11 05:29 , "Bernard Aboba" <= ;bernard_aboba@hotmail.com= > wrote:

I agree with Alan and Stefan:  against allocation.

Alan DeKok = said:

> In summary: against allocation.

I agree.

Stefan Winter said;

"In summary: against allocation.

In detail: My reservations against doing the WiFi Interworking are the same as in the meeting (i.e. why is "WiMAX Wifi" differen= t from normal WiFi, which has a NAS-Port-Type already), but I don't care too much.
Because the behavi= our in WiMAX is different then when the AAA is performing 'normal' WiFi ope= rations.
Anyway you seem to care a lot.


For the other types, my feeling is much stronger against allocation. As per Avi's mail, there are

- voice service
- DHCP service
- location based service

The word "service" in these is a brightly blinking indicator = that this is not about a port type, but a service type. So allocating a NAS-*Port*-Type here just doesn't seem to fit semantically.
Service Type does not work.  I wish it= would. But its overloaded. For example if I want to say Authenticate-Only = for Voice Service I would not be able to do so.



There is also "WiMAX Pre-Release 8 ..." stuff. This would at = best be a temporary thing; when Release 8 is out, this NAS-Port-Type would just be a burnt integer. I don't think that's right.
Temporary thing hmmm.
Burnt Integer =97= seriously.  


Leave alone that there are values which are a "function" - wh= at would that have to do with NAS-Port-Type?
Seems to me that NAS-Port type IS the way you specify the ty= pe of service connection and hence service the request is about.
=


Given that all these values are to be registered as a block, and the majority of the proposed values have a big question mark for me, I can't help but say No.

Greetings,

Stefan Winter"

 --_000_CA106E6218B2Davibridgewatersystemscom_-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Sat, 04 Jun 2011 21:33:01 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: "radext issue tracker" Cc: radiusext@ops.ietf.org Auto-Submitted: auto-generated To: mary.ietf.barnes@gmail.com Date: Sat, 04 Jun 2011 21:30:58 -0000 Reply-To: radiusext@ops.ietf.org Subject: [radext] #100: Gen-ART Review Message-ID: <067.e81dbf4d76574598789baa0c45d6a812@trac.tools.ietf.org> #100: Gen-ART Review I am the assigned Gen-ART reviewer for this draft. For background on Gen- ART, please see the FAQ at . Please resolve these comments along with any other Last Call comments you may receive. Document: draft-ietf-radext-crypto-agility-requirements-06.txt Reviewer: Mary Barnes Review Date: 3 June 2011 IETF LC End Date: 14 June 2011 Summary: Almost Ready. The document is well written and concise. My primary concerns (minor issues really) are the many references to the WG, mailing list, IETF meetings, that while useful context for folks deeply involved in the activity, the information is not relevant to a broader audience and clutters the document IMHO. In addition, there are a few cases where I think normative language might be required (going along with the idea that normative language is appropriate in an Informational document). Major issue: - None Minor issue: - Introduction: It's my understanding that published RFCs shouldn't reference specific WGs and this sentence includes "when approved" which doesn't fit in the body of an RFC. Also, it's my understanding that any document published by a WG reflects consensus of that WG. So, I would suggest this sentence could be better stated as follows: OLD: This memo, when approved, reflects the consensus of the RADIUS Extensions (RADEXT) Working Group of the IETF as to the features, properties and limitations of the crypto-agility work item for RADIUS. NEW: This memo describes the features, properties and limitations of the crypto-agility solution for RADIUS. - General. I don't think you need references to the RADEXT WG since it a product of that WG - it's listed in the document header and it's obvious in the tools. Folks that aren't familiar with IETF probably don't care what WG produced the document. Subsequent comments below give specific suggestions around this. - Introduction,second paragraph. I don't think this necessarily fits the context of a published RFC. In general, the content of WG documents is based on mailing list discussion. And, it's usual that an informational document is published to provide the type of information that is noted in that paragraph. So, I would think you could just delete that paragraph. - Section 1.3. I don't think the background is necessary. Certainly, the motivation for this work is useful introductory information, but I think that initial problem statement/objectives could be reworded in present tense in terms of objectives and what this document specifies. - SEction 2. You could easily strike the first sentence in the first paragraph without any loss of information. Does it really matter that the definition was offered at IETF-68? - Section 2, 4th paragraph. Why is the second part of the first sentence a SHOULD NOT? What happens if this is done? For example, does this require additional specification of how the solution is still backwards compatible? It's generally a good idea to describe what might happen if someone doesn't abide by a SHOULD or SHOULD NOT. - Section 4.2, 5th paragraph, 1st sentence. Shouldn't the "need not" be stated using normative language - i.e., stated as "OPTIONAL", something like "Support for encryption of individual RADIUS attributes is OPTIONAL for solutions that provide encryption of entire RADIUS packets". - Section 4.2, "Limit key scope" paragraph. Should the "not required" be "is OPTIONAL"? - Section 4.3, 3rd paragraph. Shouldn't the "can be" be a "MAY be"? - i.e, isn't this normative behavior in terms of describing how the requirements for backwards compatibility can be satisfied or in some cases where they can't? - Section 4.3, 4th paragraph. Shouldn't the "can omit" be a "MAY omit"? - Section 4.3, 6th paragraph. Shouldn't the "can be" be a "MAY be"? - Section 4.6. This could be reworded to remove the references to IETF-70 and just state something like the following: OLD: At the IETF-70 meeting, and leading up to that meeting, the RADEXT WG debated whether or not RFC 4107 would require a RADIUS Crypto-Agility solution to feature Automated Key Management (AKM). The working group determined that AKM was not inherently required for RADIUS based on the following points: NEW: Consideration was given as to whether or not RFC 4107 would require a RADIUS Crypto-Agility solution to feature Automated Key Management (AKM). It was determined that AKM was not inherently required for RADIUS based on the following points: Nits: ----- - Section 4.6, 1st paragraph after the bulleted list: .., the same time, … -> …, at the same time,... -- ----------------------------------------+----------------------------------- Reporter: mary.ietf.barnes@… | Owner: Type: defect | Status: new Priority: minor | Milestone: milestone1 Component: Crypto-Agility | Version: 1.0 Severity: Submitted WG Document | Keywords: ----------------------------------------+----------------------------------- Ticket URL: radext -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Wed, 01 Jun 2011 09:24:46 +0000 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CC203D.825CBE41" Subject: RE: AD review of draft-ietf-radext-crypto-agility-requirements-06.txt Date: Wed, 1 Jun 2011 11:23:02 +0200 Message-ID: Thread-Topic: AD review of draft-ietf-radext-crypto-agility-requirements-06.txt Thread-Index: Acwfut8tpipgqkl7Rt+hJQ0nH6xR4gAgomaQ From: "Romascanu, Dan (Dan)" To: "Bernard Aboba" , This is a multi-part message in MIME format. ------_=_NextPart_001_01CC203D.825CBE41 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable =20 =20 Hi, See in line.=20 Thanks and Regards, Dan From: Bernard Aboba [mailto:bernard_aboba@hotmail.com]=20 Sent: Tuesday, May 31, 2011 8:48 PM To: Romascanu, Dan (Dan); radiusext@ops.ietf.org Subject: RE: AD review of draft-ietf-radext-crypto-agility-requirements-06.txt =20 > T1. I am a little concerned by the fact that the second paragraph of > section 1.2 speaks in terms of 'compliance', 'unconditional compliance' > and 'conditional compliance' with 'this specification' which is actually > an Informational document. Is this really needed? We tend to avoid such > strict language in IETF documents.=20 [BA] This language appears to be boilerplate in AAA requirements RFCs and BCPs (see RFC 2989 Section 1.1, RFC 4962 Section 1.1, etc.) [[DR]] OK.=20 =20 > T3. Also in section 4.2 I see the following:=20 >=20 > In addition to the goals referred to above, [RFC4962] Section 2 > describes additional security requirements, which translate into the > following requirements for RADIUS crypto-agility solutions: >=20 > It may be my understanding but I could not find in section 2 of > [RFC4962] the requirements that translate into 'strong, fresh, session > key' and 'Limit key scope'. Can you explain me what I am missing?=20 [BA] Looks like a typo -- should this refer to Section 3? [[DR]] Yes - please correct.=20 =20 ------_=_NextPart_001_01CC203D.825CBE41 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

 

 

Hi,

See in line. =


Thanks and = Regards,

Dan

From:= = Bernard Aboba [mailto:bernard_aboba@hotmail.com]
Sent: = Tuesday, May 31, 2011 8:48 PM
To: Romascanu, Dan (Dan); = radiusext@ops.ietf.org
Subject: RE: AD review of = draft-ietf-radext-crypto-agility-requirements-06.txt

 


> = T1. I am a little concerned by the fact that the second paragraph = of
> section 1.2 speaks in terms of 'compliance', 'unconditional = compliance'
> and 'conditional compliance' with 'this = specification' which is actually
> an Informational document. Is = this really needed? We tend to avoid such
> strict language in = IETF documents.

[BA] This language appears to be boilerplate in = AAA requirements RFCs and BCPs (see RFC 2989 Section 1.1, RFC 4962 = Section 1.1, etc.)

[[DR]] OK.


 > T3. Also in section 4.2 I see the following:
>
> In = addition to the goals referred to above, [RFC4962] Section 2
> = describes additional security requirements, which translate into = the
> following requirements for RADIUS crypto-agility = solutions:
>
> It may be my understanding but I could not = find in section 2 of
> [RFC4962] the requirements that translate = into 'strong, fresh, session
> key' and 'Limit key scope'. Can you = explain me what I am missing?

[BA] Looks like a typo -- should = this refer to Section 3?

[[DR]] Yes – please correct.

 



------_=_NextPart_001_01CC203D.825CBE41-- -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: Envelope-to: radiusext-data0@psg.com Delivery-date: Wed, 01 Jun 2011 00:06:40 +0000 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: "radext issue tracker" Cc: radiusext@ops.ietf.org Auto-Submitted: auto-generated To: dromasca@avaya.com Date: Wed, 01 Jun 2011 00:05:26 -0000 Reply-To: radiusext@ops.ietf.org Subject: [radext] #99: AD Review of RADIUS Crypto-Agility Requirements Message-ID: <059.188ec2e19b4809635aafabbaffc6355c@trac.tools.ietf.org> #99: AD Review of RADIUS Crypto-Agility Requirements Hi, This is the AD review of draft-ietf-radext-crypto-agility-requirements-06.txt. The document is in good shape. Because of the relative broad applicability and security impact of the document, I will send it to IETF Last Call, although as a WG document targetting Informational status this would not have been mandatory. I have a number of comments and questions which I request to be taken into consideration together with the other IETF LC comments. The technical comments are marked T and the Editorial comments are marked E. T1. I am a little concerned by the fact that the second paragraph of section 1.2 speaks in terms of 'compliance', 'unconditional compliance' and 'conditional compliance' with 'this specification' which is actually an Informational document. Is this really needed? We tend to avoid such strict language in IETF documents. T2. In section 4.2 I see the following: Guidance on acceptable algorithms can be found in [NIST-SP800-131A]; it is RECOMMENDED that mandatory-to-implement cryptographic algorithms be chosen from among those classified as "Acceptable" with no known deprecation date. I acknowledge that the NIST document is rather new, but such documents have a timely nature by definition and may change faster than we want this RFC to change. I would suggest to include at least a note saying that if [NIST-SP800-131A] its successors need to be taken as reference. Or, if we do not want to assume the risk of a blank check we should observe that this recommendation is valid at the time of the publication of this document. T3. Also in section 4.2 I see the following: In addition to the goals referred to above, [RFC4962] Section 2 describes additional security requirements, which translate into the following requirements for RADIUS crypto-agility solutions: It may be my understanding but I could not find in section 2 of [RFC4962] the requirements that translate into 'strong, fresh, session key' and 'Limit key scope'. Can you explain me what I am missing? E1. Idnits complains: == You're using the IETF Trust Provisions' Section 6.b License Notice from 12 Sep 2009 rather than the newer Notice from 28 Dec 2009. (See http://trustee.ietf.org/license-info/) E2. I am wondering what the scope of section 1.3 is. Maybe it's my English, but why is the section named 'The Charge'? Do you mean 'Scope'? It looks to me that dropping this section or making it (or a shorter version) part of Section 1.4 as background information would be better. E3. Page 5, second paragraph s/can selected/can be selected/ Thanks and Regards, Dan -- -----------------------------------+---------------------------------------- Reporter: dromasca@… | Owner: Type: defect | Status: new Priority: major | Milestone: milestone1 Component: Crypto-Agility | Version: 1.0 Severity: Submitted WG Document | Keywords: -----------------------------------+---------------------------------------- Ticket URL: radext -- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: