From nobody Fri Oct 5 05:30:30 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7103E130DF6; Fri, 5 Oct 2018 05:30:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CP6NcEiQ_Pnr; Fri, 5 Oct 2018 05:30:26 -0700 (PDT) Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70072.outbound.protection.outlook.com [40.107.7.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37D0E130E10; Fri, 5 Oct 2018 05:30:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=I8hwZHBaQt0vimaUoieava3m46g1uEQcw9I2WKAMDDY=; b=PH8+v2AI7DfwZDU19816fgm17L97UQBFHlvM7kCLU0wl+aPtxYdCPAUGOO7K3687ntMKJjQqhLxXlY3HO984Qr5Rrzfsy07yhWW+v4HNc+0A05k/+Tu6xmJHNFv1MfojUct9eAfTjZO97yBxgILWkbOmXG5mjfuBQN8I2FRaT9E= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB2062.eurprd08.prod.outlook.com (10.173.74.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1207.22; Fri, 5 Oct 2018 12:30:22 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::ed81:d01e:32bf:6116]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::ed81:d01e:32bf:6116%8]) with mapi id 15.20.1207.024; Fri, 5 Oct 2018 12:30:22 +0000 From: Hannes Tschofenig To: "eat@ietf.org" , "rats@ietf.org" CC: 'Benjamin Kaduk' Thread-Topic: BOF Preparation Thread-Index: AdRcpb8fJphegOvlR4eKyhV6gS3TBg== Date: Fri, 5 Oct 2018 12:30:21 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [195.149.223.137] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB2062; 6:VOq9Z15WlzlXGgvms1HH2RG5cNc+LYFfglgyR0GnV7Ar4G9IoutcMJpPcYDyJEQjiHNoKDA4UJy/DS8CnjHELCS4VRdh3re4dzyRFRhgWfex5zKcYMdLpEHJc4KmzYll6YCUgdl6cl2SS3p+yu/HgN190yyORbCuSThEXPr2GEm/OrcF3TbwYZAVW6xWVq4nvQ6uX5HkOhmhFxEJpNXQYzyJ0XZZ0VCGGBx4sp7ZlaZoUyloo+4p78NO+IAWET9mq/C7Uv8gRBJi/1LlYwg8emKfTOl8pSPQf2t5+2BH9xvWFvoOIBATGcL0iBZcLdefAy4P4XfWrApwU+AQRo3ExjZ/BBxTQ5KT7PCwXMd5P0GSXXwSuVjaHLJxxTjQynpu2+dmVO6joCce69Y4oPxe6w88bOCN0Bzqtw0XIoR/tobHfSeGdrI2j5RAY/aaK/Y8Km9ols7ROXUkhHqKrUbiPw==; 5:rIsYa4dZYcRmyfWTZZO3KIsUXSKRUi+IDJmQrfk54gvKp63Wsdo/yRDkjidEgq7VCecawbQ+gSnzGCDAa+TXOyUr4iQotnV4VdIymnDRrMel2IXowIh4ghapHWPP7b9xiOBV6mMpy+JJ8snXRIogMLjdU68UCGGUldNG5di2jqc=; 7:62md5egmReqgKjjJOlPdUesGGVX7r/p7/727ectmFpzgCkLaqercF5mbDtTA1FlomriP15vPunOEJe4V6xLp1j+UA5Ax3GVPwO8YFWxZNTOOvu/lxz56M4BguMdcQ38MxSOHBSC58xG2Vs9Z1GOzivZLSkUA+zsZZjlRqxny1TYHTcTey5nqeaCBIe9NGxljY5lndqRh8d0lqNWjGTGH9+8lk7nkFuscqtxZl+3GwO6xUqQXUFHYnnYj1pE3hJgx x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: a9c78db4-df57-428d-ca40-08d62abe51a2 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB2062; x-ms-traffictypediagnostic: VI1PR0801MB2062: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(21748063052155)(28532068793085)(190501279198761)(227612066756510); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(10201501046)(3231355)(944501410)(52105095)(93006095)(93001095)(3002001)(6055026)(149066)(150057)(6041310)(20161123558120)(20161123560045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(201708071742011)(7699051); SRVR:VI1PR0801MB2062; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB2062; x-forefront-prvs: 0816F1D86E x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(346002)(366004)(376002)(396003)(39860400002)(40434004)(189003)(199004)(53754006)(478600001)(6506007)(97736004)(86362001)(26005)(476003)(6436002)(14444005)(256004)(5024004)(81166006)(3480700004)(5250100002)(25786009)(99286004)(55016002)(8936002)(2501003)(4326008)(110136005)(81156014)(7736002)(8676002)(486006)(74316002)(68736007)(2900100001)(71190400001)(9686003)(6306002)(54896002)(7696005)(3846002)(6116002)(33656002)(221733001)(71200400001)(790700001)(66066001)(14454004)(186003)(7116003)(102836004)(5660300001)(72206003)(105586002)(316002)(2906002)(53936002)(106356001); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB2062; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: lqQyXbzLSltsfsBx/qvnUOZLRVt8Wol4wjW7jcHJ90zy7gNTJD07TLjdkIJYuWKv8Bt1e7f60dFrQYBdnhTbyHf6yn0m7GTJbEVnHvaFfMSw7JrW1ioM9s/lxjnekkey58MkYmtJHEcdb4TIPHQ+z+ZJ7pu4cce2K7rMPEKDo9wJ30ngnJZNQwPM0SDY1vUj/B49L3TZbNP7hVcD3jgZeVgpfyeMoqvy4k18ftgwjGVzXJvxr16L7Rq2HsEjrDWyqlj1Uljzg+YVJa5BDp79hIy74HbLLQv7c6+aqQ0H1B0NPZ6zX4A79riU53IvST2geMK2RpffUxfFu8VdMXvLFxA7yW7DZlBHr4Jv3RiaYSs= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB21125327AA79966191E874B4FAEB0VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: a9c78db4-df57-428d-ca40-08d62abe51a2 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Oct 2018 12:30:22.0098 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB2062 Archived-At: Subject: [Rats] BOF Preparation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Oct 2018 12:30:28 -0000 --_000_VI1PR0801MB21125327AA79966191E874B4FAEB0VI1PR0801MB2112_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Ben, Hi BOF chairs, Hi all, I have been thinking about how to turn this BoF into a success. I see a few= challenges: There are different items in scope of the work and we (Arm) are interested = in contributing to those that relate to the EAT/attestation token work. We = are happy to give a presentation about those but I haven't seen any agenda = for the BoF yet. Who is in charge of preparing an agenda? I have seen BoFs = fail where the presentations weren't well aligned or not clearly demonstrat= ing a real-world problem. At the BoF we will have to demonstrate that there are companies involved wh= o are actually willing to do the heavy lifting to turn this effort into a s= uccess. Since there are very different items listed on the proposed charter= text I am curious whether there is reasonable support for all of them. I c= an only speak for our interest in the EAT items and we are working with com= panies to state their support on the mailing list. But the BoF is likely go= ing to fail if there is only support for a subset of the items. Where are w= e with the rest and who is reaching out to which part of the industry? Ciao Hannes IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in = any medium. Thank you. --_000_VI1PR0801MB21125327AA79966191E874B4FAEB0VI1PR0801MB2112_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Ben, Hi BOF chairs, Hi all,

 

I have been thinking about how to turn this BoF into= a success. I see a few challenges:

 

There are different items in scope of the work and w= e (Arm) are interested in contributing to those that relate to the EAT/atte= station token work. We are happy to give a presentation about those but I h= aven’t seen any agenda for the BoF yet. Who is in charge of preparing an agenda? I have seen BoFs fail where = the presentations weren’t well aligned or not clearly demonstrating a= real-world problem.

 

At the BoF we will have to demonstrate that there ar= e companies involved who are actually willing to do the heavy lifting to tu= rn this effort into a success. Since there are very different items listed = on the proposed charter text I am curious whether there is reasonable support for all of them. I can only sp= eak for our interest in the EAT items and we are working with companies to = state their support on the mailing list. But the BoF is likely going to fai= l if there is only support for a subset of the items. Where are we with the rest and who is reaching out to= which part of the industry?

 

Ciao

Hannes

 

IMPORTANT NOTICE: The contents of this email and any attachments are confid= ential and may also be privileged. If you are not the intended recipient, p= lease notify the sender immediately and do not disclose the contents to any= other person, use it for any purpose, or store or copy the information in any medium. Thank you. --_000_VI1PR0801MB21125327AA79966191E874B4FAEB0VI1PR0801MB2112_-- From nobody Fri Oct 5 15:27:28 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26B3B128B14; Fri, 5 Oct 2018 15:27:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.455 X-Spam-Level: X-Spam-Status: No, score=-2.455 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.456, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=telefonica.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1JH-P83yhX0A; Fri, 5 Oct 2018 15:27:15 -0700 (PDT) Received: from EUR03-VE1-obe.outbound.protection.outlook.com (mail-eopbgr50134.outbound.protection.outlook.com [40.107.5.134]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 23D4D1277D2; Fri, 5 Oct 2018 15:27:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telefonica.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=zfYWg5qt0tu8tweELdT1F7oel2V9779Hkr3By6XfGBc=; b=JkK4Z0uSMDXLwnEaCtrvCfgcy6fdBM8gZQksUjGpRf7ovGDFK+EiI80cPh7l5c1iotqD7HU6FEGdNKF/7omHVvFeAoV75O5BQznUf/QcqADQ9Zu8NZLo/qdn7QGBPdeIXheu4y+HpEZDpD1kiR0f4gJ66VZJL/irW4Q9E9TpG/I= Received: from DB3PR0602MB3788.eurprd06.prod.outlook.com (52.134.70.148) by DB3PR0602MB3786.eurprd06.prod.outlook.com (52.134.65.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1207.21; Fri, 5 Oct 2018 22:27:12 +0000 Received: from DB3PR0602MB3788.eurprd06.prod.outlook.com ([fe80::1df0:efe8:3e5:7acb]) by DB3PR0602MB3788.eurprd06.prod.outlook.com ([fe80::1df0:efe8:3e5:7acb%5]) with mapi id 15.20.1207.024; Fri, 5 Oct 2018 22:27:12 +0000 From: "Diego R. Lopez" To: Hannes Tschofenig , "eat@ietf.org" , "rats@ietf.org" CC: 'Benjamin Kaduk' Thread-Topic: [EAT] BOF Preparation Thread-Index: AQHUXPqPnzfpBSwbUUWjNsMW7Ci7Fg== Date: Fri, 5 Oct 2018 22:27:12 +0000 Message-ID: <199F12B4-011C-4656-84C8-8BEDC2589282@telefonica.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.2.180910 authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-originating-ip: [88.16.176.166] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DB3PR0602MB3786; 6:dgifsEmRJ8X3gYw5BdVfPyr6882gqJebmQ2QhO2tpogqhRIcOlYy6YNWxeRFFs6SuBTNJV31VjlvmZIeM+hKipO4EDFfhCYJ00nul9CxHNERsTRO7aG0c0sZnrqzWKDd/AttFh5EZY5y8E7PxCM7zlApsEWmh4rue2FMo4i0LOcV71rOrnwg5PNin/ZjQyFa244GKG1Pm51gUp3UhkWCkp2PdUG7MEZcWfoMSYYDcIMGHm5z90cfcPtBqM/XGSyrILvmjp/AV+vTDJ5Asj7+jsbHILfGhZTAHyE588pMGBA+HmqjWrq/U5RMwt2Ki7KUD2x7A3lJ8xRQzijcckpQXwgMqxGTtvSmTU9koVyHOPWCXVLP58SEnpzu91d7/zSXNJHcJ98E16YTRmDEmAsBtajg6BpEWXqnLXIgErTNIdNcaJlKpTfqLa/7F2F86CSragQx3cvdUEmKppN4xJYy9w==; 5:xivjaFGG+OjJFmqZCGl2GiIavVSX8X67kz3g6RyrZIt6HjsYMzh21z6tTmMT6Nj7nolSXi5TQddM/EXrfbF6LVldvvAtIwiU3IKGuqRcZ9hFyV7jxqem4ybuZ9G32HvQ78HYV8HFGoBu6DaX9Ljz4K6/HHs7WSvE3At5HT1AeVk=; 7:PlVrYfTmahjWhlICn0Zwilmod4C3vkrNsZ3m/j7PXPb4UuZ+EmZ4VIT7emtJyqFE8EmXwMBvBEbMz2EvEt025p+Nz2hIy0KVQzNKzZKNisw/7enhoBRe6RL1AKcn7q7mO0NvmAU3byhvTxxtGMfNSYIErlJyoxdRQc/FwXezdERIrJN4XP0gUPMdIzsOi9E5yQmr8R2P5PWpfzwICrPO5ayibzdyjz7VM+7EwIKCvM7Bm1hZNkW1RsO050ewZfAa x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: d518e61b-bac7-40e8-7afb-08d62b11b230 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(5600074)(711020)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:DB3PR0602MB3786; x-ms-traffictypediagnostic: DB3PR0602MB3786: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(128460861657000)(81160342030619)(40392960112811)(180628864354917)(163750095850)(21748063052155)(28532068793085)(190501279198761)(227612066756510); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(10201501046)(3231355)(944501410)(52105095)(93006095)(93001095)(6055026)(149066)(150057)(6041310)(20161123562045)(20161123558120)(20161123564045)(201703131423095)(201702281529075)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(201708071742011)(7699051)(76991048); SRVR:DB3PR0602MB3786; BCL:0; PCL:0; RULEID:; SRVR:DB3PR0602MB3786; x-forefront-prvs: 0816F1D86E x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(346002)(376002)(366004)(136003)(396003)(189003)(199004)(25724002)(252514010)(53754006)(40434004)(40134004)(5024004)(81166006)(26005)(5660300001)(186003)(256004)(66574009)(14444005)(6486002)(229853002)(486006)(2616005)(6436002)(58126008)(476003)(54896002)(110136005)(6306002)(236005)(6512007)(83716004)(36756003)(71200400001)(71190400001)(81156014)(8676002)(99286004)(2201001)(8936002)(102836004)(68736007)(6506007)(7736002)(86362001)(786003)(316002)(606006)(66066001)(97736004)(33656002)(6246003)(82746002)(6116002)(5250100002)(53936002)(2501003)(3846002)(45080400002)(4326008)(105586002)(478600001)(25786009)(2906002)(106356001)(2900100001)(14454004)(966005); DIR:OUT; SFP:1102; SCL:1; SRVR:DB3PR0602MB3786; H:DB3PR0602MB3788.eurprd06.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 1HfSnSrlqWTgnKMA4wXWAG4yU9n5iLVO9bFqX/Oh6fD+F2pngfaQygEMhLcGalTul0SQA0aEjp4ng/lOxs6AXvq8vSEQErqKJBuGs2r2QzunKsv+bIIXLLNYG4TsFlihYlUoBlFOmJTa8RmqiuO1B66KJKDenhzqQzRI+vSAFtMOdycfkDNGAWZy3OBSO3Lb16aQyZ7qyvhnkNjMsOmCIGsk5KHAdi6XWay6N2Z7wwCsAyoQieUT72oeR3e4DpV6FYDyy0eG9rD8ln8qDR8rCOs2d6OJXdDbtXbqKpE0uYmOgK63wwrTl6gL4QED/moISpSD03Q7ksWCkOiP74iIphahXs146FSDCHe2sKMNm9U= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_199F12B4011C465684C88BEDC2589282telefonicacom_" MIME-Version: 1.0 X-OriginatorOrg: telefonica.com X-MS-Exchange-CrossTenant-Network-Message-Id: d518e61b-bac7-40e8-7afb-08d62b11b230 X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Oct 2018 22:27:12.2653 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB3PR0602MB3786 Archived-At: Subject: Re: [Rats] [EAT] BOF Preparation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Oct 2018 22:27:20 -0000 --_000_199F12B4011C465684C88BEDC2589282telefonicacom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCldlIGFyZSBpbnRlcmVzdGVkIGluIGZvc3RlcmluZyBhdHRlc3RhdGlvbiB0ZWNobm9s b2dpZXMgYWJsZSB0byBzdXBwb3J0IGFuZCBsZXZlcmFnZSBuZXR3b3JrIHZpcnR1YWxpemF0aW9u IHRlY2huaXF1ZXMgKHllcywgTkZWIHN0cmlrZXMgYmFja+KApiksIGFuZCBhcmUgaW4gY29udGFj dCB3aXRoIG90aGVyIGNvbXBhbmllcyB0aGF0IHNoYXJlIHRoZSBzYW1lIGludGVyZXN0Lg0KDQpJ IHdvbuKAmXQgbWFrZSBpdCB0byBCYW5na29rLCBidXQgd2lsbCBiZSBoYXBweSB0byBoZWxwIGlu IGFueXRoaW5nIEkgY2FuIHRocm91Z2ggcmVtb3RlIHBhcnRpY2lwYXRpb24uDQoNCkJlIGdvb2Rl LA0KDQotLQ0KIkVzdGEgdmV6IG5vIGZhbGxhcmVtb3MsIERvY3RvciBJbmZpZXJubyINCg0KRHIg RGllZ28gUi4gTG9wZXoNClRlbGVmb25pY2EgSStEDQpodHRwczovL3d3dy5saW5rZWRpbi5jb20v aW4vZHIybG9wZXovDQoNCmUtbWFpbDogZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbTxtYWls dG86ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbT4NClRlbDogICAgICAgICArMzQgOTEzIDEy OSAwNDENCk1vYmlsZTogICszNCA2ODIgMDUxIDA5MQ0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQ0KDQpPbiAwNS8xMC8yMDE4LCAxNDozMCwgIkVBVCBvbiBiZWhhbGYgb2YgSGFu bmVzIFRzY2hvZmVuaWciIDxlYXQtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86ZWF0LWJvdW5jZXNA aWV0Zi5vcmc+IG9uIGJlaGFsZiBvZiBIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPG1haWx0bzpI YW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPj4gd3JvdGU6DQoNCkhpIEJlbiwgSGkgQk9GIGNoYWly cywgSGkgYWxsLA0KDQpJIGhhdmUgYmVlbiB0aGlua2luZyBhYm91dCBob3cgdG8gdHVybiB0aGlz IEJvRiBpbnRvIGEgc3VjY2Vzcy4gSSBzZWUgYSBmZXcgY2hhbGxlbmdlczoNCg0KVGhlcmUgYXJl IGRpZmZlcmVudCBpdGVtcyBpbiBzY29wZSBvZiB0aGUgd29yayBhbmQgd2UgKEFybSkgYXJlIGlu dGVyZXN0ZWQgaW4gY29udHJpYnV0aW5nIHRvIHRob3NlIHRoYXQgcmVsYXRlIHRvIHRoZSBFQVQv YXR0ZXN0YXRpb24gdG9rZW4gd29yay4gV2UgYXJlIGhhcHB5IHRvIGdpdmUgYSBwcmVzZW50YXRp b24gYWJvdXQgdGhvc2UgYnV0IEkgaGF2ZW7igJl0IHNlZW4gYW55IGFnZW5kYSBmb3IgdGhlIEJv RiB5ZXQuIFdobyBpcyBpbiBjaGFyZ2Ugb2YgcHJlcGFyaW5nIGFuIGFnZW5kYT8gSSBoYXZlIHNl ZW4gQm9GcyBmYWlsIHdoZXJlIHRoZSBwcmVzZW50YXRpb25zIHdlcmVu4oCZdCB3ZWxsIGFsaWdu ZWQgb3Igbm90IGNsZWFybHkgZGVtb25zdHJhdGluZyBhIHJlYWwtd29ybGQgcHJvYmxlbS4NCg0K QXQgdGhlIEJvRiB3ZSB3aWxsIGhhdmUgdG8gZGVtb25zdHJhdGUgdGhhdCB0aGVyZSBhcmUgY29t cGFuaWVzIGludm9sdmVkIHdobyBhcmUgYWN0dWFsbHkgd2lsbGluZyB0byBkbyB0aGUgaGVhdnkg bGlmdGluZyB0byB0dXJuIHRoaXMgZWZmb3J0IGludG8gYSBzdWNjZXNzLiBTaW5jZSB0aGVyZSBh cmUgdmVyeSBkaWZmZXJlbnQgaXRlbXMgbGlzdGVkIG9uIHRoZSBwcm9wb3NlZCBjaGFydGVyIHRl eHQgSSBhbSBjdXJpb3VzIHdoZXRoZXIgdGhlcmUgaXMgcmVhc29uYWJsZSBzdXBwb3J0IGZvciBh bGwgb2YgdGhlbS4gSSBjYW4gb25seSBzcGVhayBmb3Igb3VyIGludGVyZXN0IGluIHRoZSBFQVQg aXRlbXMgYW5kIHdlIGFyZSB3b3JraW5nIHdpdGggY29tcGFuaWVzIHRvIHN0YXRlIHRoZWlyIHN1 cHBvcnQgb24gdGhlIG1haWxpbmcgbGlzdC4gQnV0IHRoZSBCb0YgaXMgbGlrZWx5IGdvaW5nIHRv IGZhaWwgaWYgdGhlcmUgaXMgb25seSBzdXBwb3J0IGZvciBhIHN1YnNldCBvZiB0aGUgaXRlbXMu IFdoZXJlIGFyZSB3ZSB3aXRoIHRoZSByZXN0IGFuZCB3aG8gaXMgcmVhY2hpbmcgb3V0IHRvIHdo aWNoIHBhcnQgb2YgdGhlIGluZHVzdHJ5Pw0KDQpDaWFvDQpIYW5uZXMNCg0KSU1QT1JUQU5UIE5P VElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUg Y29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0 aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRl bHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwg dXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24g aW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXw0KDQpFc3RlIG1lbnNhamUgeSBzdXMgYWRqdW50b3Mgc2UgZGlyaWdlbiBleGNsdXNpdmFt ZW50ZSBhIHN1IGRlc3RpbmF0YXJpbywgcHVlZGUgY29udGVuZXIgaW5mb3JtYWNpw7NuIHByaXZp bGVnaWFkYSBvIGNvbmZpZGVuY2lhbCB5IGVzIHBhcmEgdXNvIGV4Y2x1c2l2byBkZSBsYSBwZXJz b25hIG8gZW50aWRhZCBkZSBkZXN0aW5vLiBTaSBubyBlcyB1c3RlZC4gZWwgZGVzdGluYXRhcmlv IGluZGljYWRvLCBxdWVkYSBub3RpZmljYWRvIGRlIHF1ZSBsYSBsZWN0dXJhLCB1dGlsaXphY2nD s24sIGRpdnVsZ2FjacOzbiB5L28gY29waWEgc2luIGF1dG9yaXphY2nDs24gcHVlZGUgZXN0YXIg cHJvaGliaWRhIGVuIHZpcnR1ZCBkZSBsYSBsZWdpc2xhY2nDs24gdmlnZW50ZS4gU2kgaGEgcmVj aWJpZG8gZXN0ZSBtZW5zYWplIHBvciBlcnJvciwgbGUgcm9nYW1vcyBxdWUgbm9zIGxvIGNvbXVu aXF1ZSBpbm1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtaXNtYSB2w61hIHkgcHJvY2VkYSBhIHN1IGRl c3RydWNjacOzbi4NCg0KVGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIHRyYW5zbWlz c2lvbiBpcyBwcml2aWxlZ2VkIGFuZCBjb25maWRlbnRpYWwgaW5mb3JtYXRpb24gaW50ZW5kZWQg b25seSBmb3IgdGhlIHVzZSBvZiB0aGUgaW5kaXZpZHVhbCBvciBlbnRpdHkgbmFtZWQgYWJvdmUu IElmIHRoZSByZWFkZXIgb2YgdGhpcyBtZXNzYWdlIGlzIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBp ZW50LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0IGFueSBkaXNzZW1pbmF0aW9uLCBkaXN0 cmlidXRpb24gb3IgY29weWluZyBvZiB0aGlzIGNvbW11bmljYXRpb24gaXMgc3RyaWN0bHkgcHJv aGliaXRlZC4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyB0cmFuc21pc3Npb24gaW4gZXJyb3Is IGRvIG5vdCByZWFkIGl0LiBQbGVhc2UgaW1tZWRpYXRlbHkgcmVwbHkgdG8gdGhlIHNlbmRlciB0 aGF0IHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgY29tbXVuaWNhdGlvbiBpbiBlcnJvciBhbmQgdGhl biBkZWxldGUgaXQuDQoNCkVzdGEgbWVuc2FnZW0gZSBzZXVzIGFuZXhvcyBzZSBkaXJpZ2VtIGV4 Y2x1c2l2YW1lbnRlIGFvIHNldSBkZXN0aW5hdMOhcmlvLCBwb2RlIGNvbnRlciBpbmZvcm1hw6fD o28gcHJpdmlsZWdpYWRhIG91IGNvbmZpZGVuY2lhbCBlIMOpIHBhcmEgdXNvIGV4Y2x1c2l2byBk YSBwZXNzb2Egb3UgZW50aWRhZGUgZGUgZGVzdGluby4gU2UgbsOjbyDDqSB2b3NzYSBzZW5ob3Jp YSBvIGRlc3RpbmF0w6FyaW8gaW5kaWNhZG8sIGZpY2Egbm90aWZpY2FkbyBkZSBxdWUgYSBsZWl0 dXJhLCB1dGlsaXphw6fDo28sIGRpdnVsZ2HDp8OjbyBlL291IGPDs3BpYSBzZW0gYXV0b3JpemHD p8OjbyBwb2RlIGVzdGFyIHByb2liaWRhIGVtIHZpcnR1ZGUgZGEgbGVnaXNsYcOnw6NvIHZpZ2Vu dGUuIFNlIHJlY2ViZXUgZXN0YSBtZW5zYWdlbSBwb3IgZXJybywgcm9nYW1vcy1saGUgcXVlIG5v cyBvIGNvbXVuaXF1ZSBpbWVkaWF0YW1lbnRlIHBvciBlc3RhIG1lc21hIHZpYSBlIHByb2NlZGEg YSBzdWEgZGVzdHJ1acOnw6NvDQo= --_000_199F12B4011C465684C88BEDC2589282telefonicacom_ Content-Type: text/html; charset="utf-8" Content-ID: <9D7F48BDB0D1A643B04A41FFBA858451@eurprd06.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOiMwNTYzQzE7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOiM5NTRGNzI7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpw Lk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdy YXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBjbTsNCgltYXJnaW4t cmlnaHQ6MGNtOw0KCW1hcmdpbi1ib3R0b206MGNtOw0KCW1hcmdpbi1sZWZ0OjM2LjBwdDsNCglt YXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5t c29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGNtOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ow0KCW1hcmdpbi1sZWZ0OjBjbTsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBl OnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndp bmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwt cmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93 dGV4dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglm b250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzky LjBwdDsNCgltYXJnaW46NzIuMHB0IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2Vj dGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5 IGxhbmc9IkVTIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJX b3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0Ij5IaSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+V2UgYXJlIGludGVyZXN0ZWQg aW4gZm9zdGVyaW5nIGF0dGVzdGF0aW9uIHRlY2hub2xvZ2llcyBhYmxlIHRvIHN1cHBvcnQgYW5k IGxldmVyYWdlIG5ldHdvcmsgdmlydHVhbGl6YXRpb24gdGVjaG5pcXVlcyAoeWVzLCBORlYgc3Ry aWtlcyBiYWNr4oCmKSwgYW5kIGFyZSBpbiBjb250YWN0IHdpdGggb3RoZXIgY29tcGFuaWVzIHRo YXQgc2hhcmUNCiB0aGUgc2FtZSBpbnRlcmVzdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+SSB3b27igJl0IG1ha2Ug aXQgdG8gQmFuZ2tvaywgYnV0IHdpbGwgYmUgaGFwcHkgdG8gaGVscCBpbiBhbnl0aGluZyBJIGNh biB0aHJvdWdoIHJlbW90ZSBwYXJ0aWNpcGF0aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5CZSBnb29kZSw8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1H QiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dCI+LS08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdCI+JnF1b3Q7RXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9j dG9yIEluZmllcm5vJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0Ij5EciBEaWVnbyBSLiBMb3BlejxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5UZWxlZm9uaWNhIEkmIzQz O0Q8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdCI+PGEgaHJlZj0iaHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2lu L2RyMmxvcGV6LyI+aHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2luL2RyMmxvcGV6LzwvYT4mbmJz cDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPmUtbWFpbDombmJz cDs8L3NwYW4+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij48YSBo cmVmPSJtYWlsdG86ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbSI+PHNwYW4gbGFuZz0iRU4t VVMiPjxzcGFuIGxhbmc9IkVOLVVTIj5kaWVnby5yLjxzcGFuIGxhbmc9IkVOLVVTIj5sb3BlekB0 ZWxlZm9uaWNhLmNvbTwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvYT48L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+VGVsOiZu YnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0MzszNCA5MTMgMTI5 IDA0MTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxh bmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+TW9iaWxlOiAmbmJzcDsmIzQzOzM0 IDY4MiAwNTEgMDkxPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPi0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08L3NwYW4+PHNwYW4gbGFuZz0iRU4tR0IiIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+T24gMDUvMTAvMjAxOCwgMTQ6MzAsICZx dW90O0VBVCBvbiBiZWhhbGYgb2YgSGFubmVzIFRzY2hvZmVuaWcmcXVvdDsgJmx0OzxhIGhyZWY9 Im1haWx0bzplYXQtYm91bmNlc0BpZXRmLm9yZyI+ZWF0LWJvdW5jZXNAaWV0Zi5vcmc8L2E+IG9u IGJlaGFsZiBvZg0KPGEgaHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20iPkhh bm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkhpIEJlbiwgSGkgQk9GIGNoYWlycywg SGkgYWxsLCA8bzpwPg0KPC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5JIGhhdmUgYmVlbiB0aGlua2luZyBhYm91 dCBob3cgdG8gdHVybiB0aGlzIEJvRiBpbnRvIGEgc3VjY2Vzcy4gSSBzZWUgYSBmZXcgY2hhbGxl bmdlczo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+VGhlcmUgYXJlIGRpZmZlcmVudCBpdGVtcyBpbiBz Y29wZSBvZiB0aGUgd29yayBhbmQgd2UgKEFybSkgYXJlIGludGVyZXN0ZWQgaW4gY29udHJpYnV0 aW5nIHRvIHRob3NlIHRoYXQgcmVsYXRlIHRvIHRoZSBFQVQvYXR0ZXN0YXRpb24gdG9rZW4gd29y ay4gV2UgYXJlIGhhcHB5IHRvIGdpdmUgYSBwcmVzZW50YXRpb24gYWJvdXQgdGhvc2UgYnV0IEkg aGF2ZW7igJl0DQogc2VlbiBhbnkgYWdlbmRhIGZvciB0aGUgQm9GIHlldC4gV2hvIGlzIGluIGNo YXJnZSBvZiBwcmVwYXJpbmcgYW4gYWdlbmRhPyBJIGhhdmUgc2VlbiBCb0ZzIGZhaWwgd2hlcmUg dGhlIHByZXNlbnRhdGlvbnMgd2VyZW7igJl0IHdlbGwgYWxpZ25lZCBvciBub3QgY2xlYXJseSBk ZW1vbnN0cmF0aW5nIGEgcmVhbC13b3JsZCBwcm9ibGVtLg0KPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mbmJzcDs8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PkF0IHRoZSBCb0Ygd2Ugd2lsbCBoYXZlIHRvIGRlbW9uc3RyYXRlIHRoYXQgdGhlcmUgYXJlIGNv bXBhbmllcyBpbnZvbHZlZCB3aG8gYXJlIGFjdHVhbGx5IHdpbGxpbmcgdG8gZG8gdGhlIGhlYXZ5 IGxpZnRpbmcgdG8gdHVybiB0aGlzIGVmZm9ydCBpbnRvIGEgc3VjY2Vzcy4gU2luY2UgdGhlcmUg YXJlIHZlcnkgZGlmZmVyZW50IGl0ZW1zIGxpc3RlZCBvbiB0aGUNCiBwcm9wb3NlZCBjaGFydGVy IHRleHQgSSBhbSBjdXJpb3VzIHdoZXRoZXIgdGhlcmUgaXMgcmVhc29uYWJsZSBzdXBwb3J0IGZv ciBhbGwgb2YgdGhlbS4gSSBjYW4gb25seSBzcGVhayBmb3Igb3VyIGludGVyZXN0IGluIHRoZSBF QVQgaXRlbXMgYW5kIHdlIGFyZSB3b3JraW5nIHdpdGggY29tcGFuaWVzIHRvIHN0YXRlIHRoZWly IHN1cHBvcnQgb24gdGhlIG1haWxpbmcgbGlzdC4gQnV0IHRoZSBCb0YgaXMgbGlrZWx5IGdvaW5n IHRvIGZhaWwgaWYNCiB0aGVyZSBpcyBvbmx5IHN1cHBvcnQgZm9yIGEgc3Vic2V0IG9mIHRoZSBp dGVtcy4gV2hlcmUgYXJlIHdlIHdpdGggdGhlIHJlc3QgYW5kIHdobyBpcyByZWFjaGluZyBvdXQg dG8gd2hpY2ggcGFydCBvZiB0aGUgaW5kdXN0cnk/DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Q2lh bzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+SGFubmVzPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPklNUE9SVEFOVCBOT1RJQ0U6IFRo ZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVu dGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVu ZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBk byBub3QgZGlzY2xvc2UgdGhlDQogY29udGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0 IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55 IG1lZGl1bS4gVGhhbmsgeW91Lg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxicj4NCjxocj4N Cjxmb250IGZhY2U9IkFyaWFsIiBjb2xvcj0iR3JheSIgc2l6ZT0iMSI+PGJyPg0KRXN0ZSBtZW5z YWplIHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUgYSBzdSBkZXN0aW5h dGFyaW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEgbyBjb25maWRl bmNpYWwgeSBlcyBwYXJhIHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUg ZGVzdGluby4gU2kgbm8gZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEg bm90aWZpY2FkbyBkZSBxdWUgbGENCiBsZWN0dXJhLCB1dGlsaXphY2nDs24sIGRpdnVsZ2FjacOz biB5L28gY29waWEgc2luIGF1dG9yaXphY2nDs24gcHVlZGUgZXN0YXIgcHJvaGliaWRhIGVuIHZp cnR1ZCBkZSBsYSBsZWdpc2xhY2nDs24gdmlnZW50ZS4gU2kgaGEgcmVjaWJpZG8gZXN0ZSBtZW5z YWplIHBvciBlcnJvciwgbGUgcm9nYW1vcyBxdWUgbm9zIGxvIGNvbXVuaXF1ZSBpbm1lZGlhdGFt ZW50ZSBwb3IgZXN0YSBtaXNtYSB2w61hIHkgcHJvY2VkYSBhIHN1IGRlc3RydWNjacOzbi48YnI+ DQo8YnI+DQpUaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMgdHJhbnNtaXNzaW9uIGlz IHByaXZpbGVnZWQgYW5kIGNvbmZpZGVudGlhbCBpbmZvcm1hdGlvbiBpbnRlbmRlZCBvbmx5IGZv ciB0aGUgdXNlIG9mIHRoZSBpbmRpdmlkdWFsIG9yIGVudGl0eSBuYW1lZCBhYm92ZS4gSWYgdGhl IHJlYWRlciBvZiB0aGlzIG1lc3NhZ2UgaXMgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHlv dSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRoYXQgYW55IGRpc3NlbWluYXRpb24sDQogZGlzdHJpYnV0 aW9uIG9yIGNvcHlpbmcgb2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0 ZWQuIElmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBu b3QgcmVhZCBpdC4gUGxlYXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5 b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4gZGVs ZXRlIGl0Ljxicj4NCjxicj4NCkVzdGEgbWVuc2FnZW0gZSBzZXVzIGFuZXhvcyBzZSBkaXJpZ2Vt IGV4Y2x1c2l2YW1lbnRlIGFvIHNldSBkZXN0aW5hdMOhcmlvLCBwb2RlIGNvbnRlciBpbmZvcm1h w6fDo28gcHJpdmlsZWdpYWRhIG91IGNvbmZpZGVuY2lhbCBlIMOpIHBhcmEgdXNvIGV4Y2x1c2l2 byBkYSBwZXNzb2Egb3UgZW50aWRhZGUgZGUgZGVzdGluby4gU2UgbsOjbyDDqSB2b3NzYSBzZW5o b3JpYSBvIGRlc3RpbmF0w6FyaW8gaW5kaWNhZG8sIGZpY2Egbm90aWZpY2FkbyBkZSBxdWUgYQ0K IGxlaXR1cmEsIHV0aWxpemHDp8OjbywgZGl2dWxnYcOnw6NvIGUvb3UgY8OzcGlhIHNlbSBhdXRv cml6YcOnw6NvIHBvZGUgZXN0YXIgcHJvaWJpZGEgZW0gdmlydHVkZSBkYSBsZWdpc2xhw6fDo28g dmlnZW50ZS4gU2UgcmVjZWJldSBlc3RhIG1lbnNhZ2VtIHBvciBlcnJvLCByb2dhbW9zLWxoZSBx dWUgbm9zIG8gY29tdW5pcXVlIGltZWRpYXRhbWVudGUgcG9yIGVzdGEgbWVzbWEgdmlhIGUgcHJv Y2VkYSBhIHN1YSBkZXN0cnVpw6fDo288YnI+DQo8L2ZvbnQ+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_199F12B4011C465684C88BEDC2589282telefonicacom_-- From nobody Fri Oct 5 16:02:14 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59D42128CF2; Fri, 5 Oct 2018 16:01:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RmxGxXE5Lt3X; Fri, 5 Oct 2018 16:01:47 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4059812872C; Fri, 5 Oct 2018 16:01:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w95N1h5K027980; Sat, 6 Oct 2018 01:01:43 +0200 (CEST) Received: from [192.168.217.102] (p54A6C3C7.dip0.t-ipconnect.de [84.166.195.199]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 42Rlcl3YPszDXqZ; Sat, 6 Oct 2018 01:01:43 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 X-Mao-Original-Outgoing-Id: 560473301.606288-c7fe6422b2715fe968046003cdd4f56d Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Sat, 6 Oct 2018 01:01:42 +0200 Message-Id: To: suit , teep@ietf.org, din@irtf.org, rats@ietf.org, eat@ietf.org X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: [Rats] Constrained Node/Network Cluster @ IETF103: DRAFT AGENDA X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Oct 2018 23:01:51 -0000 Here is my usual eclectic condensed agenda based on the DRAFT AGENDA for IETF103. Remember that there is still quite some potential for changes. cbor/teep and 6tisch/suit are annoying but probably livable. No qirg for core goers... All times are ICT (Indochina Time) =3D=3D UTC +7 hours. There is no daylight saving time in effect in Thailand. DST will have ended in Europe by then (e.g., CET =3D UTC+0100) and will end in the US during the initial weekend (On Sun, Nov 4; e.g. EST =3D UTC-0500). (You can get pure UTC times on https://datatracker.ietf.org/meeting/agenda-utc, for those who want to listen from remote.) Please note that the Friday schedule is still evolving; plan to stick around until 13:20 or you may miss interesting conversations. Gr=C3=BC=C3=9Fe, Carsten SATURDAY/SUNDAY, November 3/4. 2018 -- Hackathon (including various interops) (Centre Ville) -- Sun 1700-1900 Welcome Reception - Garden at Queen's Park -- Sun 1800-2000 Hot RFC Lightning Talks - Thai Chitlada 3 MONDAY, November 5, 2018 0900-1100 Morning Session I Thai Chitlada 3 IRTF*** dinrg Decentralized Internet Infrastructure = Proposed RG Meeting 1 OPS v6ops IPv6 Operations WG Boromph. 1/2 RTG *** roll Routing Over Low power and Lossy = networks WG Thai Chitlada 1 SEC secdispatch Security Dispatch WG Thai Chitlada 2 TSV taps Transport Services WG 1120-1220 Morning Session II Thai Chitlada 1 IRTF cfrg Crypto Forum Thai Chitlada 2 TSV tsvarea Transport Area Open Meeting 1350-1550 Afternoon Session I Boromph. 1/2 ART *** core Constrained RESTful Environments WG Meeting 2 OPS anima Autonomic Networking Integrated Model = and Approach WG Thai Chitlada 2 SEC tls Transport Layer Security WG Thai Chitlada 3 TSV tsvwg Transport Area Working Group WG 1610-1810 Afternoon Session II Meeting 1 INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Thai Chitlada 1 IRTF irtfopen IRTF Open Meeting Thai Chitlada 2 SEC mls Messaging Layer Security WG TUESDAY, November 6, 2018 0900-1100 Morning Session I Thai Chitlada 2 ART httpbis Hypertext Transfer Protocol WG Meeting 1 INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Boromph. 1/2 SEC oauth Web Authorization Protocol WG 1120-1220 Morning Session II Thai Chitlada 3 INT ipwave IP Wireless Access in Vehicular = Environments WG Meeting 2 SEC oauth Web Authorization Protocol WG 1350-1550 Afternoon Session I Thai Chitlada 3 INT 6man IPv6 Maintenance WG Thai Chitlada 2 SEC rats Remote ATtestation ProcedureS BOF Thai Chitlada 1 TSV quic QUIC WG 1610-1810 Afternoon Session II Thai Chitlada 1 IRTF maprg Measurement and Analysis for Protocols Meeting 2 IRTF*** t2trg Thing-to-Thing WEDNESDAY, November 7, 2018 0900-1100 Morning Session ! Thai Chitlada 3 ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Boromph. 3 RTG bier Bit Indexed Explicit Replication WG Meeting 1 SEC *** teep Trusted Execution Environment = Provisioning WG Boromph. 1/2 SEC tokbind Token Binding WG Thai Chitlada 1 TSV quic QUIC WG 1120-1220 Morning Session II Boromph. 1/2 INT *** lwig Light-Weight Implementation Guidance WG Thai Chitlada 1 SEC tls Transport Layer Security WG Thai Chitlada 2 TSV tsvwg Transport Area Working Group WG 1350-1520 Afternoon Session I Meeting 1 GEN wugh WGs Using GitHub BOF Thai Chitlada 3 INT homenet Home Networking WG Meeting 2 IRTF panrg Path Aware Networking RG 1540-1710 Afternoon Session II Meeting 1 ART dispatch Dispatch WG - Joint with ARTAREA Thai Chitlada 3 INT intarea Internet Area Working Group WG Meeting 2 IRTF pearg Privacy Enhancements and Assessments = Proposed Research Group Boromph. 3 RTG babel Babel routing protocol WG Boromph. 1/2 RTG rift Routing In Fat Trees WG THURSDAY, November 8, 2018 0900-1100 Morning Session I Thai Chitlada 1 ART httpbis Hypertext Transfer Protocol WG Boromph. 4 INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG Meeting 1 IRTF icnrg Information-Centric Networking Thai Chitlada 2 SEC *** suit Software Updates for Internet of Things = WG 1120-1220 Morning Session II Thai Chitlada 2 ART *** core Constrained RESTful Environments WG Thai Chitlada 3 IRTF qirg Quantum Internet Proposed Research Group Boromph. 4 RTG bier Bit Indexed Explicit Replication WG Thai Chitlada 1 SEC mls Messaging Layer Security WG Meeting 2 TSV rmcat RTP Media Congestion Avoidance = Techniques WG 1350-1550 Afternoon Session I Meeting 1 INT dnssd Extensions for Scalable DNS Service = Discovery WG Thai Chitlada 2 RTG detnet Deterministic Networking WG Thai Chitlada 1 SEC saag Security Area Open Meeting 1610-1810 Afternoon Session II Thai Chitlada 3 RTG rtgarea Routing Area Open Meeting Thai Chitlada 1 SEC *** ace Authentication and Authorization for = Constrained Environments WG Boromph. 1/2 SEC acme Automated Certificate Management = Environment WG FRIDAY, November 9, 2018 Various ad-hoc meetings, please see https://trac.ietf.org/trac/ietf/meeting/wiki/103sidemeetings#FRIDAY -- 0900..1320 T2TRG work meeting -- 1000..??? COIN (Computing in the Network) From nobody Fri Oct 5 23:23:58 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8017A130DCC for ; Fri, 5 Oct 2018 23:23:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FQXYlAMyX2m6 for ; Fri, 5 Oct 2018 23:23:48 -0700 (PDT) Received: from p3plsmtpa09-10.prod.phx3.secureserver.net (p3plsmtpa09-10.prod.phx3.secureserver.net [173.201.193.239]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7153130DCE for ; Fri, 5 Oct 2018 23:23:48 -0700 (PDT) Received: from [172.20.10.4] ([174.221.141.2]) by :SMTPAUTH: with ESMTPSA id 8g02gJIQNkkwp8g09g5o9n; Fri, 05 Oct 2018 23:23:47 -0700 From: Laurence Lundblade Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Message-Id: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> Date: Sat, 6 Oct 2018 13:23:36 +0700 Cc: rats@ietf.org, eat@ietf.org To: Henk Birkholz X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfJLuRPsXb2cYXcrMrKV5GzvbPRN9xnzrgavaibgTwyffPgkAbdXiUJ+rjyA3TTndtWqxebBhTNXjHf6o+oOGUyqtfmuBicvbTiz+GehHQGJ6NmGQZjuC gC2JcG8DTguTNk8VZ923GDds1o05MZb46cCNdKoM8Cb/kAoHm7r9Y6Yoyl7p6IX3JSvwl8s1l1MY59Bls1WrpThXQuFbBnwAuvAz/0WOlYoUx7z2rmDgov9e Archived-At: Subject: [Rats] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Oct 2018 06:23:52 -0000 Hi Henk, Bangkok IETF is getting close, will you be able to update the charter = for the attestation BoF to properly include EAT? I sent you some text = that just needs to be pasted along with some comments. It doesn=E2=80=99t = look like there=E2=80=99s been any updates.=20 LL From nobody Fri Oct 5 23:51:14 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13966130DCD; Fri, 5 Oct 2018 23:51:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BfhgXkBtYAPl; Fri, 5 Oct 2018 23:51:09 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A76A130DCC; Fri, 5 Oct 2018 23:51:08 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w966p4bi003771 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 6 Oct 2018 08:51:05 +0200 Received: from android-86100a6c0956de20.local (91.51.238.176) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Sat, 6 Oct 2018 08:50:58 +0200 Date: Sat, 6 Oct 2018 08:50:57 +0200 User-Agent: K-9 Mail for Android In-Reply-To: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----LOST9WVZX15N90N5W1HZD7CYZLDZOS" Content-Transfer-Encoding: 7bit To: Laurence Lundblade CC: , From: Henk Birkholz Message-ID: X-Originating-IP: [91.51.238.176] Archived-At: Subject: Re: [Rats] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Oct 2018 06:51:12 -0000 ------LOST9WVZX15N90N5W1HZD7CYZLDZOS Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello Laurance, the BoF proponents are refactoring the charter based on various inputs, in= cluding yours for example=2E This also includes some quite extensive trimmi= ng of charter size=2E Hence, a tad bit more is done than simply the merging= of proposals right now=2E We plan to float a new version to the list early next week, including an i= nitial agenda layout=2E Viele Gr=C3=BC=C3=9Fe, Henk On October 6, 2018 8:23:36 AM GMT+02:00, Laurence Lundblade wrote: >Hi Henk, > >Bangkok IETF is getting close, will you be able to update the charter >for the attestation BoF to properly include EAT? I sent you some text >that just needs to be pasted along with some comments=2E It doesn=E2=80= =99t look >like there=E2=80=99s been any updates=2E=20 > >LL --=20 Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E ------LOST9WVZX15N90N5W1HZD7CYZLDZOS Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello Laurance,

the BoF proponents are refactoring the charter based on various inputs, in= cluding yours for example=2E This also includes some quite extensive trimmi= ng of charter size=2E Hence, a tad bit more is done than simply the merging= of proposals right now=2E

We plan to float a new version to the list early next week, including an i= nitial agenda layout=2E

Viele Gr=C3=BC=C3=9Fe,

Henk



On October 6, 2018 8:23:36 AM GMT+02:00= , Laurence Lundblade <lgl@island-resort=2Ecom> wrote:
Hi Henk,

Bangkok IETF is getting close, w=
ill you be able to update the charter for the attestation BoF to properly i=
nclude EAT?  I sent you some text that just needs to be pasted along with s=
ome comments=2E It doesn’t look like there’s been any updates=
=2E 

LL


--
Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E ------LOST9WVZX15N90N5W1HZD7CYZLDZOS-- From nobody Sat Oct 6 02:08:25 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3AB1A130DE7; Sat, 6 Oct 2018 02:08:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O2hrt5KH12QB; Sat, 6 Oct 2018 02:08:15 -0700 (PDT) Received: from EUR02-AM5-obe.outbound.protection.outlook.com (mail-eopbgr00047.outbound.protection.outlook.com [40.107.0.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 768C5130DDA; Sat, 6 Oct 2018 02:08:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=7b5/iXZ1sWqRdAUbJAC630yQjrpSc/CRxxluWoXK/cw=; b=sCOMM8EcPlRPtc9ksdpfxV5Q5gXelyUKRUzbmp1M+OgxrRvbA+oKbeSYtqDd6Yb0cjandE4PUDcx7cFiXAkA6m8D/zVLkgMuY9on5LVb5+u2O3unfhtMyVBjzue6Ym7HZbq+W/TH+MiR8VrK62d6shDCemP/Fa8D0FSS24OzHUM= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB2080.eurprd08.prod.outlook.com (10.173.75.8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1207.21; Sat, 6 Oct 2018 09:08:11 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::ed81:d01e:32bf:6116]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::ed81:d01e:32bf:6116%8]) with mapi id 15.20.1207.024; Sat, 6 Oct 2018 09:08:11 +0000 From: Hannes Tschofenig To: "Diego R. Lopez" , "eat@ietf.org" , "rats@ietf.org" CC: 'Benjamin Kaduk' Thread-Topic: [EAT] BOF Preparation Thread-Index: AQHUXPqPnzfpBSwbUUWjNsMW7Ci7FqUR7Ufg Date: Sat, 6 Oct 2018 09:08:11 +0000 Message-ID: References: <199F12B4-011C-4656-84C8-8BEDC2589282@telefonica.com> In-Reply-To: <199F12B4-011C-4656-84C8-8BEDC2589282@telefonica.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.115.7] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB2080; 6:AbExLXHl4OpAFiNPWt5/ph81yOZPCk6mPeg4crVJC10bCP2IFdkhPUdzxe5pMqh6vepdHuMI4rujzXYSQ8wZRwZizxP9yGpaW+FXHz4Su3c5LgJyv5mJyaLAP3xb/K41t9TR7Bj85FqKxWlYHeVUVEeFfZiqHyFqEjlBtcynEdJsB63v7r8aatVwwEVrLqNULOAH6vuq1vLyK3HpFROVBmD67SYW+1vX6PJTGOLJvY7DiWnYUVqUBvfL48hbjOI56dGZCl5kXq8jgg5skWzaeP9JU8yBGIjpYzei/NOmAGOeMdGXwkURbTPh+z22Uvq5n69CUB7hiAUYXtQSUIw77kCRsrn7XXR2oDYr3MmSeS+8MsTYKGUVnKV0FkjN7D+kLuYNiA2yQUiv5zZiX0z+t3nKgEaNFR2Y+77s/cOjRe1YL02MQPLzKvUEFZMlltTVtAko5BomKVFrrHktrjVM2Q==; 5:g3SdcOXn5MgWwITXqrqM7e1LqJgDsUFlFRR6YBEGxuCO9wb7+ZJbAuUkwSFEKOIiQ8rUxIDhIbTwMMb79QY5GI6J1eaDlqjYoD5naybNGRtwRVAPXugZl2gIEJhjjqn9KeKGOah6r7jtqqJ1KsvSVOUp977Jkh8pMJuEQfMqjpU=; 7:WYMdHppolJII3GvDsiUwbu37esQyQ7hl31yDDxf8POKxGCeHofa4Cvze1wAZxcd07XK4XtJWhPI7NM1Rb2Q/Rvkuljm0mniW0xSAhbWQkdVdnP8grZXLm43kzhyOoHi5PKSqfWO3dNtobj1j+0GiMOU/tgmwe/tBK8ybBrfGIXz24WHmbzRjC2pw+le5zTj2To47NW+u0s3NqFvQV5Om5dVtVSf81rjFPqMCGu+afy5EfkrJEkhfxCQ0leiCowXL x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 2d3bbb4f-1ad1-4395-9d7b-08d62b6b3da2 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(5600074)(711020)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB2080; x-ms-traffictypediagnostic: VI1PR0801MB2080: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(40392960112811)(180628864354917)(240460790083961)(128460861657000)(81160342030619)(163750095850)(21748063052155)(28532068793085)(190501279198761)(227612066756510); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3231355)(944501410)(52105095)(3002001)(10201501046)(93006095)(93001095)(6055026)(149066)(150057)(6041310)(20161123558120)(201703131423095)(201703031522075)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123562045)(20161123560045)(201708071742011)(7699051); SRVR:VI1PR0801MB2080; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB2080; x-forefront-prvs: 0817737FD1 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(346002)(136003)(376002)(39860400002)(396003)(53754006)(25724002)(199004)(189003)(252514010)(40134004)(40434004)(72206003)(14454004)(6506007)(53546011)(486006)(316002)(446003)(476003)(11346002)(33656002)(256004)(296002)(7736002)(5024004)(14444005)(478600001)(186003)(76176011)(74316002)(236005)(110136005)(26005)(2900100001)(102836004)(45080400002)(71200400001)(54896002)(71190400001)(6306002)(66574009)(9686003)(53936002)(2906002)(55016002)(966005)(7696005)(6436002)(97736004)(4326008)(81156014)(6246003)(106356001)(5250100002)(105586002)(8676002)(81166006)(606006)(25786009)(2201001)(86362001)(790700001)(99286004)(3846002)(68736007)(66066001)(9326002)(8936002)(5660300001)(6116002)(2501003)(229853002); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB2080; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: CLP0vf2HSPr4OfX4NM3u5SKER4NIgjgPOSACf9Ktzug2R1jONLo0ONrz+CmutYdWVyL18vHJnnz65kYFfz+mtfAK2x/CYCqpY8fUCqMAgleoR502BnIH64rE9nfR3X78OSlvYYlNHAEnHh3Hdf6eYBw6MM8L49WaDRo+frEqU7/yd6WXlbhM3MjIHFPbKpEbyzrMmVY3RdZ1umthTyj+bzwAPBxfdYan8eJUjbrGoW6uHTI3nKYOhyxcJ1aMDGwNK6loLAX9Pk2FKYDnFvXlUKETt0KoqQNg+5K656NlC1exyLboSexmiV3tNR4SufpTXnFrCCsxfcJ4XWe1LzBHf0o+q3zujfNsPkHgk90No2g= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB21120C455B5D8477E7B167E7FAE40VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 2d3bbb4f-1ad1-4395-9d7b-08d62b6b3da2 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Oct 2018 09:08:11.2874 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB2080 Archived-At: Subject: Re: [Rats] [EAT] BOF Preparation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Oct 2018 09:08:18 -0000 --_000_VI1PR0801MB21120C455B5D8477E7B167E7FAE40VI1PR0801MB2112_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRGllZ28sDQoNCkkgZ3Vlc3MgVGVsZWZvbmljYSBpcyBhIHVzZXIgb2YgdGhlIHRlY2hub2xv Z3kqLiBIb3cgd291bGQgbGV2ZXJhZ2UgdGhlIHJlc3VsdHM/DQoNCkNpYW8NCkhhbm5lcw0KDQoq OiBZb3UgYXJlIG5vdCBtYW51ZmFjdHVyaW5nIGNoaXBzLCBkZXZlbG9waW5nIG9wZXJhdGluZyBz eXN0ZW1zLCBvciB3cml0aW5nIGxvdyBsZXZlbCBzb2Z0d2FyZSAobGlrZSBmaXJtd2FyZSkgdGhh dCBpbnRlZ3JhdGVzIHRoZSBkaXNjdXNzZWQgYXR0ZXN0YXRpb24gdGVjaG5vbG9neS4gSXMgdGhh dCBjb3JyZWN0Pw0KDQpGcm9tOiBEaWVnbyBSLiBMb3BleiA8ZGllZ28uci5sb3BlekB0ZWxlZm9u aWNhLmNvbT4NClNlbnQ6IFNhdHVyZGF5LCBPY3RvYmVyIDYsIDIwMTggMTI6MjcgQU0NClRvOiBI YW5uZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT47IGVhdEBpZXRmLm9y ZzsgcmF0c0BpZXRmLm9yZw0KQ2M6ICdCZW5qYW1pbiBLYWR1aycgPGthZHVrQG1pdC5lZHU+DQpT dWJqZWN0OiBSZTogW0VBVF0gQk9GIFByZXBhcmF0aW9uDQoNCkhpLA0KDQpXZSBhcmUgaW50ZXJl c3RlZCBpbiBmb3N0ZXJpbmcgYXR0ZXN0YXRpb24gdGVjaG5vbG9naWVzIGFibGUgdG8gc3VwcG9y dCBhbmQgbGV2ZXJhZ2UgbmV0d29yayB2aXJ0dWFsaXphdGlvbiB0ZWNobmlxdWVzICh5ZXMsIE5G ViBzdHJpa2VzIGJhY2vigKYpLCBhbmQgYXJlIGluIGNvbnRhY3Qgd2l0aCBvdGhlciBjb21wYW5p ZXMgdGhhdCBzaGFyZSB0aGUgc2FtZSBpbnRlcmVzdC4NCg0KSSB3b27igJl0IG1ha2UgaXQgdG8g QmFuZ2tvaywgYnV0IHdpbGwgYmUgaGFwcHkgdG8gaGVscCBpbiBhbnl0aGluZyBJIGNhbiB0aHJv dWdoIHJlbW90ZSBwYXJ0aWNpcGF0aW9uLg0KDQpCZSBnb29kZSwNCg0KLS0NCiJFc3RhIHZleiBu byBmYWxsYXJlbW9zLCBEb2N0b3IgSW5maWVybm8iDQoNCkRyIERpZWdvIFIuIExvcGV6DQpUZWxl Zm9uaWNhIEkrRA0KaHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2luL2RyMmxvcGV6Lw0KDQplLW1h aWw6IGRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb208bWFpbHRvOmRpZWdvLnIubG9wZXpAdGVs ZWZvbmljYS5jb20+DQpUZWw6ICAgICAgICAgKzM0IDkxMyAxMjkgMDQxDQpNb2JpbGU6ICArMzQg NjgyIDA1MSAwOTENCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KT24gMDUv MTAvMjAxOCwgMTQ6MzAsICJFQVQgb24gYmVoYWxmIG9mIEhhbm5lcyBUc2Nob2ZlbmlnIiA8ZWF0 LWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmVhdC1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYg b2YgSGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTxtYWlsdG86SGFubmVzLlRzY2hvZmVuaWdAYXJt LmNvbT4+IHdyb3RlOg0KDQpIaSBCZW4sIEhpIEJPRiBjaGFpcnMsIEhpIGFsbCwNCg0KSSBoYXZl IGJlZW4gdGhpbmtpbmcgYWJvdXQgaG93IHRvIHR1cm4gdGhpcyBCb0YgaW50byBhIHN1Y2Nlc3Mu IEkgc2VlIGEgZmV3IGNoYWxsZW5nZXM6DQoNClRoZXJlIGFyZSBkaWZmZXJlbnQgaXRlbXMgaW4g c2NvcGUgb2YgdGhlIHdvcmsgYW5kIHdlIChBcm0pIGFyZSBpbnRlcmVzdGVkIGluIGNvbnRyaWJ1 dGluZyB0byB0aG9zZSB0aGF0IHJlbGF0ZSB0byB0aGUgRUFUL2F0dGVzdGF0aW9uIHRva2VuIHdv cmsuIFdlIGFyZSBoYXBweSB0byBnaXZlIGEgcHJlc2VudGF0aW9uIGFib3V0IHRob3NlIGJ1dCBJ IGhhdmVu4oCZdCBzZWVuIGFueSBhZ2VuZGEgZm9yIHRoZSBCb0YgeWV0LiBXaG8gaXMgaW4gY2hh cmdlIG9mIHByZXBhcmluZyBhbiBhZ2VuZGE/IEkgaGF2ZSBzZWVuIEJvRnMgZmFpbCB3aGVyZSB0 aGUgcHJlc2VudGF0aW9ucyB3ZXJlbuKAmXQgd2VsbCBhbGlnbmVkIG9yIG5vdCBjbGVhcmx5IGRl bW9uc3RyYXRpbmcgYSByZWFsLXdvcmxkIHByb2JsZW0uDQoNCkF0IHRoZSBCb0Ygd2Ugd2lsbCBo YXZlIHRvIGRlbW9uc3RyYXRlIHRoYXQgdGhlcmUgYXJlIGNvbXBhbmllcyBpbnZvbHZlZCB3aG8g YXJlIGFjdHVhbGx5IHdpbGxpbmcgdG8gZG8gdGhlIGhlYXZ5IGxpZnRpbmcgdG8gdHVybiB0aGlz IGVmZm9ydCBpbnRvIGEgc3VjY2Vzcy4gU2luY2UgdGhlcmUgYXJlIHZlcnkgZGlmZmVyZW50IGl0 ZW1zIGxpc3RlZCBvbiB0aGUgcHJvcG9zZWQgY2hhcnRlciB0ZXh0IEkgYW0gY3VyaW91cyB3aGV0 aGVyIHRoZXJlIGlzIHJlYXNvbmFibGUgc3VwcG9ydCBmb3IgYWxsIG9mIHRoZW0uIEkgY2FuIG9u bHkgc3BlYWsgZm9yIG91ciBpbnRlcmVzdCBpbiB0aGUgRUFUIGl0ZW1zIGFuZCB3ZSBhcmUgd29y a2luZyB3aXRoIGNvbXBhbmllcyB0byBzdGF0ZSB0aGVpciBzdXBwb3J0IG9uIHRoZSBtYWlsaW5n IGxpc3QuIEJ1dCB0aGUgQm9GIGlzIGxpa2VseSBnb2luZyB0byBmYWlsIGlmIHRoZXJlIGlzIG9u bHkgc3VwcG9ydCBmb3IgYSBzdWJzZXQgb2YgdGhlIGl0ZW1zLiBXaGVyZSBhcmUgd2Ugd2l0aCB0 aGUgcmVzdCBhbmQgd2hvIGlzIHJlYWNoaW5nIG91dCB0byB3aGljaCBwYXJ0IG9mIHRoZSBpbmR1 c3RyeT8NCg0KQ2lhbw0KSGFubmVzDQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBv ZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5 IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVu dCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xv c2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBv c2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5r IHlvdS4NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0KRXN0ZSBtZW5zYWpl IHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUgYSBzdSBkZXN0aW5hdGFy aW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEgbyBjb25maWRlbmNp YWwgeSBlcyBwYXJhIHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUgZGVz dGluby4gU2kgbm8gZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEgbm90 aWZpY2FkbyBkZSBxdWUgbGEgbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24geS9v IGNvcGlhIHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0dWQg ZGUgbGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUgbWVuc2FqZSBw b3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRpYXRhbWVudGUg cG9yIGVzdGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24uDQoNClRoZSBp bmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Npb24gaXMgcHJpdmlsZWdlZCBh bmQgY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9ubHkgZm9yIHRoZSB1c2Ugb2Yg dGhlIGluZGl2aWR1YWwgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUgcmVhZGVyIG9mIHRo aXMgbWVzc2FnZSBpcyBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkg bm90aWZpZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwgZGlzdHJpYnV0aW9uIG9yIGNvcHlpbmcg b2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuIElmIHlvdSBoYXZl IHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4gUGxl YXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5b3UgaGF2ZSByZWNlaXZl ZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4gZGVsZXRlIGl0Lg0KDQpFc3Rh IG1lbnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBhbyBzZXUg ZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZpbGVnaWFkYSBvdSBj b25maWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlkYWRl IGRlIGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlvIGlu ZGljYWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUgcXVlIGEgbGVpdHVyYSwgdXRpbGl6YcOnw6NvLCBk aXZ1bGdhw6fDo28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBwcm9p YmlkYSBlbSB2aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1IGVzdGEg bWVuc2FnZW0gcG9yIGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBjb211bmlxdWUgaW1lZGlh dGFtZW50ZSBwb3IgZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEgc3VhIGRlc3RydWnDp8Ojbw0K SU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRh Y2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5 b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5k ZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90 aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUg aW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K --_000_VI1PR0801MB21120C455B5D8477E7B167E7FAE40VI1PR0801MB2112_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpEZW5nWGlhbjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OiJcQERlbmdYaWFuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCi8qIFN0 eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9y bWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTox MS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFu Lk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsN Cgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxp bmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0 ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlz dFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0 Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbWFyZ2luLWJvdHRvbTow aW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1z aXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpwLm1zb25v cm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1z b25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0K CW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNp emU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1h aWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjAN Cgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5 bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp ZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBl OmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJ e3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpk aXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4 PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8 bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0i MSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5 IGxhbmc9IkVOLUdCIiBsaW5rPSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNz PSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGkgRGllZ28sIDxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5JIGd1ZXNzIFRlbGVmb25pY2EgaXMgYSB1c2VyIG9mIHRoZSB0ZWNo bm9sb2d5Ki4gSG93IHdvdWxkIGxldmVyYWdlIHRoZSByZXN1bHRzPw0KPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPkNpYW88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhhbm5l czxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4qOiBZb3UgYXJlIG5vdCBtYW51ZmFjdHVyaW5nIGNo aXBzLCBkZXZlbG9waW5nIG9wZXJhdGluZyBzeXN0ZW1zLCBvciB3cml0aW5nIGxvdyBsZXZlbCBz b2Z0d2FyZSAobGlrZSBmaXJtd2FyZSkgdGhhdCBpbnRlZ3JhdGVzIHRoZSBkaXNjdXNzZWQgYXR0 ZXN0YXRpb24gdGVjaG5vbG9neS4gSXMgdGhhdCBjb3JyZWN0Pw0KPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0 eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzoz LjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBsYW5nPSJF Ti1VUyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVOLVVTIj4gRGllZ28gUi4gTG9wZXog Jmx0O2RpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb20mZ3Q7DQo8YnI+DQo8Yj5TZW50OjwvYj4g U2F0dXJkYXksIE9jdG9iZXIgNiwgMjAxOCAxMjoyNyBBTTxicj4NCjxiPlRvOjwvYj4gSGFubmVz IFRzY2hvZmVuaWcgJmx0O0hhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20mZ3Q7OyBlYXRAaWV0Zi5v cmc7IHJhdHNAaWV0Zi5vcmc8YnI+DQo8Yj5DYzo8L2I+ICdCZW5qYW1pbiBLYWR1aycgJmx0O2th ZHVrQG1pdC5lZHUmZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbRUFUXSBCT0YgUHJlcGFy YXRpb248bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+SGksPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0Ij5XZSBhcmUgaW50ZXJlc3RlZCBpbiBmb3N0ZXJpbmcgYXR0ZXN0YXRp b24gdGVjaG5vbG9naWVzIGFibGUgdG8gc3VwcG9ydCBhbmQgbGV2ZXJhZ2UgbmV0d29yayB2aXJ0 dWFsaXphdGlvbiB0ZWNobmlxdWVzICh5ZXMsIE5GViBzdHJpa2VzIGJhY2vigKYpLCBhbmQgYXJl IGluIGNvbnRhY3Qgd2l0aCBvdGhlciBjb21wYW5pZXMgdGhhdCBzaGFyZSB0aGUgc2FtZQ0KIGlu dGVyZXN0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+SSB3b27i gJl0IG1ha2UgaXQgdG8gQmFuZ2tvaywgYnV0IHdpbGwgYmUgaGFwcHkgdG8gaGVscCBpbiBhbnl0 aGluZyBJIGNhbiB0aHJvdWdoIHJlbW90ZSBwYXJ0aWNpcGF0aW9uLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+QmUgZ29vZGUsPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPi0tPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0Ij4mcXVvdDtFc3RhIHZleiBubyBmYWxsYXJlbW9zLCBEb2N0b3IgSW5maWVy bm8mcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdCI+RHIgRGllZ28gUi4gTG9wZXo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQiPlRlbGVmb25pY2EgSSYjNDM7RDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+PGEgaHJl Zj0iaHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2luL2RyMmxvcGV6LyI+aHR0cHM6Ly93d3cubGlu a2VkaW4uY29tL2luL2RyMmxvcGV6LzwvYT4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+ZS1tYWlsOiZuYnNwOzwvc3Bh bj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+PGEgaHJlZj0ibWFpbHRvOmRpZWdvLnIu bG9wZXpAdGVsZWZvbmljYS5jb20iPjxzcGFuIGxhbmc9IkVOLVVTIj5kaWVnby5yLmxvcGV6QHRl bGVmb25pY2EuY29tPC9zcGFuPjwvYT48L3NwYW4+PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+VGVsOiZuYnNwOyZuYnNwOyZuYnNwOyAm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0MzszNCA5MTMgMTI5IDA0MTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0Ij5Nb2JpbGU6ICZuYnNwOyYjNDM7MzQgNjgyIDA1MSAwOTE8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0Ij4tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIGxhbmc9IkVTIj5PbiAw NS8xMC8yMDE4LCAxNDozMCwgJnF1b3Q7RUFUIG9uIGJlaGFsZiBvZiBIYW5uZXMgVHNjaG9mZW5p ZyZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmVhdC1ib3VuY2VzQGlldGYub3JnIj5lYXQtYm91 bmNlc0BpZXRmLm9yZzwvYT4gb24gYmVoYWxmIG9mDQo8YSBocmVmPSJtYWlsdG86SGFubmVzLlRz Y2hvZmVuaWdAYXJtLmNvbSI+SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTwvYT4mZ3Q7IHdyb3Rl OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIGxhbmc9IkVTIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyI+SGkgQmVuLCBIaSBCT0YgY2hh aXJzLCBIaSBhbGwsDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiPiZuYnNwOzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj48c3BhbiBsYW5nPSJFUyI+SSBoYXZlIGJlZW4gdGhpbmtpbmcgYWJvdXQgaG93IHRvIHR1 cm4gdGhpcyBCb0YgaW50byBhIHN1Y2Nlc3MuIEkgc2VlIGEgZmV3IGNoYWxsZW5nZXM6PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxzcGFuIGxhbmc9IkVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMi PlRoZXJlIGFyZSBkaWZmZXJlbnQgaXRlbXMgaW4gc2NvcGUgb2YgdGhlIHdvcmsgYW5kIHdlIChB cm0pIGFyZSBpbnRlcmVzdGVkIGluIGNvbnRyaWJ1dGluZyB0byB0aG9zZSB0aGF0IHJlbGF0ZSB0 byB0aGUgRUFUL2F0dGVzdGF0aW9uIHRva2VuIHdvcmsuIFdlIGFyZSBoYXBweSB0byBnaXZlIGEg cHJlc2VudGF0aW9uIGFib3V0IHRob3NlDQogYnV0IEkgaGF2ZW7igJl0IHNlZW4gYW55IGFnZW5k YSBmb3IgdGhlIEJvRiB5ZXQuIFdobyBpcyBpbiBjaGFyZ2Ugb2YgcHJlcGFyaW5nIGFuIGFnZW5k YT8gSSBoYXZlIHNlZW4gQm9GcyBmYWlsIHdoZXJlIHRoZSBwcmVzZW50YXRpb25zIHdlcmVu4oCZ dCB3ZWxsIGFsaWduZWQgb3Igbm90IGNsZWFybHkgZGVtb25zdHJhdGluZyBhIHJlYWwtd29ybGQg cHJvYmxlbS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyI+Jm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxzcGFuIGxhbmc9IkVTIj5BdCB0aGUgQm9GIHdlIHdpbGwgaGF2ZSB0byBkZW1vbnN0cmF0ZSB0 aGF0IHRoZXJlIGFyZSBjb21wYW5pZXMgaW52b2x2ZWQgd2hvIGFyZSBhY3R1YWxseSB3aWxsaW5n IHRvIGRvIHRoZSBoZWF2eSBsaWZ0aW5nIHRvIHR1cm4gdGhpcyBlZmZvcnQgaW50byBhIHN1Y2Nl c3MuIFNpbmNlIHRoZXJlIGFyZSB2ZXJ5IGRpZmZlcmVudCBpdGVtcw0KIGxpc3RlZCBvbiB0aGUg cHJvcG9zZWQgY2hhcnRlciB0ZXh0IEkgYW0gY3VyaW91cyB3aGV0aGVyIHRoZXJlIGlzIHJlYXNv bmFibGUgc3VwcG9ydCBmb3IgYWxsIG9mIHRoZW0uIEkgY2FuIG9ubHkgc3BlYWsgZm9yIG91ciBp bnRlcmVzdCBpbiB0aGUgRUFUIGl0ZW1zIGFuZCB3ZSBhcmUgd29ya2luZyB3aXRoIGNvbXBhbmll cyB0byBzdGF0ZSB0aGVpciBzdXBwb3J0IG9uIHRoZSBtYWlsaW5nIGxpc3QuIEJ1dCB0aGUgQm9G IGlzIGxpa2VseSBnb2luZw0KIHRvIGZhaWwgaWYgdGhlcmUgaXMgb25seSBzdXBwb3J0IGZvciBh IHN1YnNldCBvZiB0aGUgaXRlbXMuIFdoZXJlIGFyZSB3ZSB3aXRoIHRoZSByZXN0IGFuZCB3aG8g aXMgcmVhY2hpbmcgb3V0IHRvIHdoaWNoIHBhcnQgb2YgdGhlIGluZHVzdHJ5Pw0KPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41 aW4iPjxzcGFuIGxhbmc9IkVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiPkNp YW88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiPkhhbm5lczxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBs YW5nPSJFUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIGxhbmc9IkVTIj5JTVBPUlRBTlQgTk9U SUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBj b25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRo ZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVs eSBhbmQgZG8gbm90DQogZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24s IHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9u IGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFs aWduOmNlbnRlciI+PHNwYW4gbGFuZz0iRVMiPg0KPGhyIHNpemU9IjMiIHdpZHRoPSIxMDAlIiBh bGlnbj0iY2VudGVyIj4NCjwvc3Bhbj48L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjcuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6Z3JheSI+PGJyPg0KRXN0ZSBtZW5zYWplIHkgc3VzIGFk anVudG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUgYSBzdSBkZXN0aW5hdGFyaW8sIHB1ZWRl IGNvbnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEgbyBjb25maWRlbmNpYWwgeSBlcyBw YXJhIHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUgZGVzdGluby4gU2kg bm8gZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEgbm90aWZpY2FkbyBk ZSBxdWUgbGENCiBsZWN0dXJhLCB1dGlsaXphY2nDs24sIGRpdnVsZ2FjacOzbiB5L28gY29waWEg c2luIGF1dG9yaXphY2nDs24gcHVlZGUgZXN0YXIgcHJvaGliaWRhIGVuIHZpcnR1ZCBkZSBsYSBs ZWdpc2xhY2nDs24gdmlnZW50ZS4gU2kgaGEgcmVjaWJpZG8gZXN0ZSBtZW5zYWplIHBvciBlcnJv ciwgbGUgcm9nYW1vcyBxdWUgbm9zIGxvIGNvbXVuaXF1ZSBpbm1lZGlhdGFtZW50ZSBwb3IgZXN0 YSBtaXNtYSB2w61hIHkgcHJvY2VkYSBhIHN1IGRlc3RydWNjacOzbi48YnI+DQo8YnI+DQpUaGUg aW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMgdHJhbnNtaXNzaW9uIGlzIHByaXZpbGVnZWQg YW5kIGNvbmZpZGVudGlhbCBpbmZvcm1hdGlvbiBpbnRlbmRlZCBvbmx5IGZvciB0aGUgdXNlIG9m IHRoZSBpbmRpdmlkdWFsIG9yIGVudGl0eSBuYW1lZCBhYm92ZS4gSWYgdGhlIHJlYWRlciBvZiB0 aGlzIG1lc3NhZ2UgaXMgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5 IG5vdGlmaWVkIHRoYXQgYW55IGRpc3NlbWluYXRpb24sDQogZGlzdHJpYnV0aW9uIG9yIGNvcHlp bmcgb2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuIElmIHlvdSBo YXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4g UGxlYXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5b3UgaGF2ZSByZWNl aXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4gZGVsZXRlIGl0Ljxicj4N Cjxicj4NCkVzdGEgbWVuc2FnZW0gZSBzZXVzIGFuZXhvcyBzZSBkaXJpZ2VtIGV4Y2x1c2l2YW1l bnRlIGFvIHNldSBkZXN0aW5hdMOhcmlvLCBwb2RlIGNvbnRlciBpbmZvcm1hw6fDo28gcHJpdmls ZWdpYWRhIG91IGNvbmZpZGVuY2lhbCBlIMOpIHBhcmEgdXNvIGV4Y2x1c2l2byBkYSBwZXNzb2Eg b3UgZW50aWRhZGUgZGUgZGVzdGluby4gU2UgbsOjbyDDqSB2b3NzYSBzZW5ob3JpYSBvIGRlc3Rp bmF0w6FyaW8gaW5kaWNhZG8sIGZpY2Egbm90aWZpY2FkbyBkZSBxdWUgYQ0KIGxlaXR1cmEsIHV0 aWxpemHDp8OjbywgZGl2dWxnYcOnw6NvIGUvb3UgY8OzcGlhIHNlbSBhdXRvcml6YcOnw6NvIHBv ZGUgZXN0YXIgcHJvaWJpZGEgZW0gdmlydHVkZSBkYSBsZWdpc2xhw6fDo28gdmlnZW50ZS4gU2Ug cmVjZWJldSBlc3RhIG1lbnNhZ2VtIHBvciBlcnJvLCByb2dhbW9zLWxoZSBxdWUgbm9zIG8gY29t dW5pcXVlIGltZWRpYXRhbWVudGUgcG9yIGVzdGEgbWVzbWEgdmlhIGUgcHJvY2VkYSBhIHN1YSBk ZXN0cnVpw6fDo288L3NwYW4+PHNwYW4gbGFuZz0iRVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5k IGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxl Z2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5 IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMg dG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwNCiBvciBzdG9yZSBv ciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo8L2JvZHk+ DQo8L2h0bWw+DQo= --_000_VI1PR0801MB21120C455B5D8477E7B167E7FAE40VI1PR0801MB2112_-- From nobody Sat Oct 6 07:29:02 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 321241292AD for ; Sat, 6 Oct 2018 07:29:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u-n-7L-bRjOF for ; Sat, 6 Oct 2018 07:28:58 -0700 (PDT) Received: from p3plsmtpa09-06.prod.phx3.secureserver.net (p3plsmtpa09-06.prod.phx3.secureserver.net [173.201.193.235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A141512008A for ; Sat, 6 Oct 2018 07:28:58 -0700 (PDT) Received: from [172.17.7.253] ([203.117.154.230]) by :SMTPAUTH: with ESMTPSA id 8nZfgxpSZu5T68nZggjgQE; Sat, 06 Oct 2018 07:28:57 -0700 From: Laurence Lundblade Content-Type: multipart/alternative; boundary="Apple-Mail=_ECF550AB-65ED-463A-A804-5854D3CE2FFE" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Message-Id: <7871DF5D-01E4-496A-B35D-82D1397B55AA@island-resort.com> Date: Sat, 6 Oct 2018 21:28:15 +0700 To: eat@ietf.org, rats@ietf.org X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfAkQiu066YgowPlo0YD+IynMVTeuZGGdhiVk+qiZiYDmfcDJKnKtkeD21VqHCW0ELPvrLJfDjGkUdGyDpHxu6CBNh6B73XPYPzT7T1nUJXSGiG+AjeBx YsuGCfzisofMSK9YPbIZdbokZjQdqQvq2XOAXiPJHnVFxPcj3tVfq0xYvAF0iLNBNQDNDmzLpm2Cnw== Archived-At: Subject: [Rats] Real EAT implementations X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Oct 2018 14:29:00 -0000 --Apple-Mail=_ECF550AB-65ED-463A-A804-5854D3CE2FFE Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I believe one of the area directors asked who=E2=80=99s going to = implement these attestation schemes we standardize. One answer is = Qualcomm=E2=80=99s already commercialized precursor implementation of = EAT which is described very briefly in official marketing material on = Qualcomm=E2=80=99s web site = as =E2=80=9CHardware Token=E2=80=9D.=20 LL --Apple-Mail=_ECF550AB-65ED-463A-A804-5854D3CE2FFE Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I = believe one of the area directors asked who=E2=80=99s going to implement = these attestation schemes we standardize.  One answer is = Qualcomm=E2=80=99s already commercialized precursor implementation of = EAT which is described very briefly in official marketing material on = Qualcomm=E2=80=99s web site as =E2=80=9CHardware = Token=E2=80=9D. 

LL

= --Apple-Mail=_ECF550AB-65ED-463A-A804-5854D3CE2FFE-- From nobody Sat Oct 6 10:30:52 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F8DF130E08; Sat, 6 Oct 2018 10:30:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iRoejnl1VHzi; Sat, 6 Oct 2018 10:30:43 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CEE00130E00; Sat, 6 Oct 2018 10:30:43 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 85F9F20090; Sat, 6 Oct 2018 13:30:41 -0400 (EDT) Received: by sandelman.ca (Postfix, from userid 179) id 9AB2D22F5; Sat, 6 Oct 2018 13:30:42 -0400 (EDT) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 95C461B6D; Sat, 6 Oct 2018 13:30:42 -0400 (EDT) From: Michael Richardson To: eat@ietf.org, rats@ietf.org In-Reply-To: <7871DF5D-01E4-496A-B35D-82D1397B55AA@island-resort.com> References: <7871DF5D-01E4-496A-B35D-82D1397B55AA@island-resort.com> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] Real EAT implementations X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Oct 2018 17:30:46 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Laurence Lundblade wrote: > I believe one of the area directors asked who=E2=80=99s going to impl= ement > these attestation schemes we standardize. One answer is Qualcomm=E2= =80=99s > already commercialized precursor implementation of EAT which is > described very briefly in official marketing material on Qualcomm=E2= =80=99s > web site as =E2=80=9CHardware Token=E2=80=9D. I see this as evidence: 1) the market doesn't need/want a standard 2) Qualcomm isn't going to implement our standard, they already have thei= r own. Now that could be trivially be refuted if we saw clear participation from qualcomm, but I haven't seen it yet. But, maybe I missed it. I await the charter. So far I haven't seen something that is concrete enough to be useful on its= own. =2D- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlu48UEACgkQgItw+93Q 3WVjyAgAh//wCDFHo0fVAaWIoK2cZ5yKH+fIaWYpHdbJeRZ7V4qbq/bQXQtOZa9D GiEhLtCfiaxDZWGtpsSSf9K79w3Y8LNB8Q5NTkkZNFHV4qEocqu/Z8ZAa3g1vRQ9 UfhxR1ETMRRN+lTvtzXp6CpYNDpKERfYgTZCjWZlt0OQv6h6HaTayRthtO7RddkH 4zl4stwn3m96RF5GgEC4D8Bz1HlVYU09DqF6vO7uOGUjVzH8Kin1VpXlkJ4b8hCu TX739Q+WCkyi9072xKxA++sca1Ju/PEn/SUY2lVyJQAnRnNiXY6eZgGaezMuJBXQ JKeew6im8sMEHyaDYbbl5dbXvkBBaQ== =B58Z -----END PGP SIGNATURE----- --=-=-=-- From nobody Sat Oct 6 15:08:04 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF3AF1286D9; Sat, 6 Oct 2018 15:07:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ng_v-3TTKHZ3; Sat, 6 Oct 2018 15:07:55 -0700 (PDT) Received: from alexa-out-ams-01.qualcomm.com (alexa-out-ams-01.qualcomm.com [185.23.61.162]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4AC5E127AC2; Sat, 6 Oct 2018 15:07:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1538863674; x=1570399674; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=2HXX/m4gKUUK/Un2xq51ypaCX7/Xb5dwpQ4KcOYqFmw=; b=UqmzqMrD/gILnWCBVBlpE9yYhFqTShQ2zCwap1vjQESwjb9Y0sv0n9HJ 0oOrrM0z2TtdXWJ8VMyX+RuBibyFD3LhP4h6mZOYdousAme1t5tmeWFaR 7EaD/4N3pdbB3Xf3k4wBWJVszhNO9OXAOdgp8inA65I9BDcTU4wVbGyzT 4=; X-IronPort-AV: E=Sophos;i="5.54,350,1534802400"; d="scan'208,217";a="1294872" Received: from ironmsg01-ams.qualcomm.com ([10.251.56.2]) by alexa-out-ams-01.qualcomm.com with ESMTP; 07 Oct 2018 00:07:09 +0200 X-IronPort-AV: E=McAfee;i="5900,7806,9038"; a="5812390" Received: from euamsexm01f.eu.qualcomm.com ([10.251.127.43]) by ironmsg01-ams.qualcomm.com with ESMTP/TLS/AES256-SHA; 07 Oct 2018 00:07:09 +0200 Received: from euamsexm01a.eu.qualcomm.com (10.251.127.40) by euamsexm01f.eu.qualcomm.com (10.251.127.43) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Sun, 7 Oct 2018 00:06:55 +0200 Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by euamsexm01a.eu.qualcomm.com ([10.251.127.40]) with mapi id 15.00.1365.000; Sun, 7 Oct 2018 00:06:55 +0200 From: Jeremy O'Donoghue To: Michael Richardson CC: "eat@ietf.org" , "rats@ietf.org" Thread-Topic: [EXTERNAL] Re: [EAT] [Rats] Real EAT implementations Thread-Index: AQHUXZpWiOFcYSwDEEiK9/4SZiResKUSlQqA Date: Sat, 6 Oct 2018 22:06:55 +0000 Message-ID: <0BEAA9FA-31F2-442A-BD63-29291E658DE6@qti.qualcomm.com> References: <7871DF5D-01E4-496A-B35D-82D1397B55AA@island-resort.com> <30469.1538847042@localhost> In-Reply-To: <30469.1538847042@localhost> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.9.1) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [212.136.9.72] Content-Type: multipart/alternative; boundary="_000_0BEAA9FA31F2442ABD6329291E658DE6qtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EXTERNAL] Re: [EAT] Real EAT implementations X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Oct 2018 22:07:57 -0000 --_000_0BEAA9FA31F2442ABD6329291E658DE6qtiqualcommcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 T24gNiBPY3QgMjAxOCwgYXQgMTg6MzAsIE1pY2hhZWwgUmljaGFyZHNvbiA8bWNyK2lldGZAc2Fu ZGVsbWFuLmNhPG1haWx0bzptY3IraWV0ZkBzYW5kZWxtYW4uY2E+PiB3cm90ZToNCg0KDQpMYXVy ZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbTxtYWlsdG86bGdsQGlzbGFuZC1y ZXNvcnQuY29tPj4gd3JvdGU6DQpJIGJlbGlldmUgb25lIG9mIHRoZSBhcmVhIGRpcmVjdG9ycyBh c2tlZCB3aG/igJlzIGdvaW5nIHRvIGltcGxlbWVudA0KdGhlc2UgYXR0ZXN0YXRpb24gc2NoZW1l cyB3ZSBzdGFuZGFyZGl6ZS4gT25lIGFuc3dlciBpcyBRdWFsY29tbeKAmXMNCmFscmVhZHkgY29t bWVyY2lhbGl6ZWQgcHJlY3Vyc29yIGltcGxlbWVudGF0aW9uIG9mIEVBVCB3aGljaCBpcw0KZGVz Y3JpYmVkIHZlcnkgYnJpZWZseSBpbiBvZmZpY2lhbCBtYXJrZXRpbmcgbWF0ZXJpYWwgb24gUXVh bGNvbW3igJlzDQp3ZWIgc2l0ZSBhcyDigJxIYXJkd2FyZSBUb2tlbuKAnS4NCg0KSSBzZWUgdGhp cyBhcyBldmlkZW5jZToNCiAxKSB0aGUgbWFya2V0IGRvZXNuJ3QgbmVlZC93YW50IGEgc3RhbmRh cmQNCiAyKSBRdWFsY29tbSBpc24ndCBnb2luZyB0byBpbXBsZW1lbnQgb3VyIHN0YW5kYXJkLCB0 aGV5IGFscmVhZHkgaGF2ZSB0aGVpciBvd24uDQoNCk5vdyB0aGF0IGNvdWxkIGJlIHRyaXZpYWxs eSBiZSByZWZ1dGVkIGlmIHdlIHNhdyBjbGVhciBwYXJ0aWNpcGF0aW9uIGZyb20NCnF1YWxjb21t LCBidXQgSSBoYXZlbid0IHNlZW4gaXQgeWV0LiAgQnV0LCBtYXliZSBJIG1pc3NlZCBpdC4NCg0K T0ssIHNvIEknbGwgYml0ZSBvbiB0aGlzLi4uIGluIHR3byBzZXBhcmF0ZSBjYXBhY2l0aWVzOiBv bmUgYmFzZWQgb24gbXkgZW1wbG95ZXIgYW5kIHRoZSBzZWNvbmQgYXMgQ2hhaXIgb2YgdGhlIFRy dXN0ZWQgUGxhdGZvcm0gU2VydmljZXMgQ29tbWl0dGVlIGF0IEdsb2JhbFBsYXRmb3JtLg0KDQpZ b3UnbGwgbm90aWNlIHRoYXQgYWxsIGZvdXIgbmFtZXMgb24gdGhlIEVBVCBkcmFmdCBhcmUgb3Ig d2VyZSBRdWFsY29tbSBlbXBsb3llZXMuIEVBVCBpcyBkZWZpbml0ZWx5IG9mIGludGVyZXN0IHRv IHVzLg0KDQpFQVQgaXMgdW5kZXIgc2VyaW91cyBjb25zaWRlcmF0aW9uIGFzIHRoZSBiYXNpcyBv ZiBhbiBhdHRlc3RhdGlvbiBmb3JtYXQgZm9yIEdsb2JhbFBsYXRmb3JtIFNlY3VyZSBDb21wb25l bnRzIChpLmUuIFRFRSBhbmQgU2VjdXJlIEVsZW1lbnQpLiBXZSBzZWUgYmVuZWZpdCBpbiBoYXZp bmcgdGhlIElFVEYgc3RhbmRhcmRpc2UgdGhlIG1vcmUgZ2VuZXJpYyBhc3BlY3RzIG9mIGFuIGF0 dGVzdGF0aW9uIGZvcm1hdCBhcm91bmQgRUFUIHdpdGggdGhlIEdsb2JhbFBsYXRmb3JtIHNwZWNp ZmljcyBiZWluZyBhZGRyZXNzZWQgYnkgR2xvYmFsUGxhdGZvcm0uDQoNCkknbSBhZnJhaWQgSSdt IG5vdCB2ZXJ5IGZhbWlsaWFyIHdpdGggdGhlIGFyY2FuYSBvZiBjaGFydGVyaW5nIGF0IElFVEYs IHNvIG11Y2ggcmVjZW50IGRpc2N1c3Npb24gaGFzIHBlcmhhcHMgbm90IHJlZ2lzdGVyZWQgd2l0 aCBtZSBhcyBzdHJvbmdseSBhcyBpdCBjb3VsZCBoYXZlLg0KDQotLS0NCkplcmVteSBP4oCZRG9u b2dodWUNCkVuZ2luZWVyLCBQcmluY2lwYWwvTWFuYWdlciwgUXVhbGNvbW0gSW5jLg0K --_000_0BEAA9FA31F2442ABD6329291E658DE6qtiqualcommcom_ Content-Type: text/html; charset="utf-8" Content-ID: <7E8F1905421C284F8BBCEF4E7EE51F5E@qualcomm.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2Pg0KPGJsb2Nr cXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIDYgT2N0IDIwMTgs IGF0IDE4OjMwLCBNaWNoYWVsIFJpY2hhcmRzb24gJmx0OzxhIGhyZWY9Im1haWx0bzptY3ImIzQz O2lldGZAc2FuZGVsbWFuLmNhIiBjbGFzcz0iIj5tY3ImIzQzO2lldGZAc2FuZGVsbWFuLmNhPC9h PiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUi Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KTGF1cmVuY2Ug THVuZGJsYWRlICZsdDs8YSBocmVmPSJtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tIiBjbGFz cz0iIj5sZ2xAaXNsYW5kLXJlc29ydC5jb208L2E+Jmd0OyB3cm90ZTo8YnIgY2xhc3M9IiI+DQo8 YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj5JIGJlbGlldmUgb25lIG9mIHRoZSBhcmVh IGRpcmVjdG9ycyBhc2tlZCB3aG/igJlzIGdvaW5nIHRvIGltcGxlbWVudDxiciBjbGFzcz0iIj4N CnRoZXNlIGF0dGVzdGF0aW9uIHNjaGVtZXMgd2Ugc3RhbmRhcmRpemUuIE9uZSBhbnN3ZXIgaXMg UXVhbGNvbW3igJlzPGJyIGNsYXNzPSIiPg0KYWxyZWFkeSBjb21tZXJjaWFsaXplZCBwcmVjdXJz b3IgaW1wbGVtZW50YXRpb24gb2YgRUFUIHdoaWNoIGlzPGJyIGNsYXNzPSIiPg0KZGVzY3JpYmVk IHZlcnkgYnJpZWZseSBpbiBvZmZpY2lhbCBtYXJrZXRpbmcgbWF0ZXJpYWwgb24gUXVhbGNvbW3i gJlzPGJyIGNsYXNzPSIiPg0Kd2ViIHNpdGUgYXMg4oCcSGFyZHdhcmUgVG9rZW7igJ0uPGJyIGNs YXNzPSIiPg0KPC9ibG9ja3F1b3RlPg0KPGJyIGNsYXNzPSIiPg0KSSBzZWUgdGhpcyBhcyBldmlk ZW5jZTo8YnIgY2xhc3M9IiI+DQombmJzcDsxKSB0aGUgbWFya2V0IGRvZXNuJ3QgbmVlZC93YW50 IGEgc3RhbmRhcmQ8YnIgY2xhc3M9IiI+DQombmJzcDsyKSBRdWFsY29tbSBpc24ndCBnb2luZyB0 byBpbXBsZW1lbnQgb3VyIHN0YW5kYXJkLCB0aGV5IGFscmVhZHkgaGF2ZSB0aGVpciBvd24uPGJy IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KTm93IHRoYXQgY291bGQgYmUgdHJpdmlhbGx5IGJl IHJlZnV0ZWQgaWYgd2Ugc2F3IGNsZWFyIHBhcnRpY2lwYXRpb24gZnJvbTxiciBjbGFzcz0iIj4N CnF1YWxjb21tLCBidXQgSSBoYXZlbid0IHNlZW4gaXQgeWV0LiAmbmJzcDtCdXQsIG1heWJlIEkg bWlzc2VkIGl0LjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8 L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+T0ssIHNvIEkn bGwgYml0ZSBvbiB0aGlzLi4uIGluIHR3byBzZXBhcmF0ZSBjYXBhY2l0aWVzOiBvbmUgYmFzZWQg b24gbXkgZW1wbG95ZXIgYW5kIHRoZSBzZWNvbmQgYXMgQ2hhaXIgb2YgdGhlIFRydXN0ZWQgUGxh dGZvcm0gU2VydmljZXMgQ29tbWl0dGVlIGF0IEdsb2JhbFBsYXRmb3JtLg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+ PC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+WW91J2xsIG5vdGljZSB0aGF0IGFs bCBmb3VyIG5hbWVzIG9uIHRoZSBFQVQgZHJhZnQgYXJlIG9yIHdlcmUgUXVhbGNvbW0gZW1wbG95 ZWVzLiBFQVQgaXMgZGVmaW5pdGVseSBvZiBpbnRlcmVzdCB0byB1cy48L2Rpdj4NCjxkaXY+PGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PkVBVCBpcyB1bmRlciBzZXJpb3VzIGNvbnNpZGVyYXRp b24gYXMgdGhlIGJhc2lzIG9mIGFuIGF0dGVzdGF0aW9uIGZvcm1hdCBmb3IgR2xvYmFsUGxhdGZv cm0gU2VjdXJlIENvbXBvbmVudHMgKGkuZS4gVEVFIGFuZCBTZWN1cmUgRWxlbWVudCkuIFdlIHNl ZSBiZW5lZml0IGluIGhhdmluZyB0aGUgSUVURiBzdGFuZGFyZGlzZSB0aGUgbW9yZSBnZW5lcmlj IGFzcGVjdHMgb2YgYW4gYXR0ZXN0YXRpb24gZm9ybWF0IGFyb3VuZCBFQVQgd2l0aA0KIHRoZSBH bG9iYWxQbGF0Zm9ybSBzcGVjaWZpY3MgYmVpbmcgYWRkcmVzc2VkIGJ5IEdsb2JhbFBsYXRmb3Jt LjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+SSdtIGFmcmFpZCBJJ20g bm90IHZlcnkgZmFtaWxpYXIgd2l0aCB0aGUgYXJjYW5hIG9mIGNoYXJ0ZXJpbmcgYXQgSUVURiwg c28gbXVjaCByZWNlbnQgZGlzY3Vzc2lvbiBoYXMgcGVyaGFwcyBub3QgcmVnaXN0ZXJlZCB3aXRo IG1lIGFzIHN0cm9uZ2x5IGFzIGl0IGNvdWxkIGhhdmUuPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0i Ij4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTog MTFweDsgZm9udC1mYW1pbHk6ICZxdW90O0x1Y2lkYSBDb25zb2xlJnF1b3Q7OyIgY2xhc3M9IiI+ PGZvbnQgY29sb3I9IiMwMDY5ZmYiIGNsYXNzPSIiPi0tLTwvZm9udD48L3NwYW4+PC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHg7IGZvbnQtZmFtaWx5OiAm cXVvdDtMdWNpZGEgQ29uc29sZSZxdW90OzsiIGNsYXNzPSIiPjxmb250IGNvbG9yPSIjMDA2OWZm IiBjbGFzcz0iIj5KZXJlbXkgT+KAmURvbm9naHVlPC9mb250Pjwvc3Bhbj48L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+PGZvbnQgZmFjZT0iTHVjaWRhIENvbnNvbGUiIGNvbG9yPSIjMDA2OWZmIiBjbGFz cz0iIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+RW5naW5lZXIsIFBy aW5jaXBhbC9NYW5hZ2VyLCBRdWFsY29tbSBJbmMuPC9zcGFuPjwvZm9udD48L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_0BEAA9FA31F2442ABD6329291E658DE6qtiqualcommcom_-- From nobody Sun Oct 7 04:44:42 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 70DE8130E02; Sun, 7 Oct 2018 04:44:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id faPmFXtVriaj; Sun, 7 Oct 2018 04:44:30 -0700 (PDT) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20075.outbound.protection.outlook.com [40.107.2.75]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E743E130DD2; Sun, 7 Oct 2018 04:44:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=v/DxN16QZPKbXfivUuPSgEoNiFWKAMIPuX83fAu6HSs=; b=JG3DzZh8S78fsL/R1s9iXpxPn5hBjr8N3Z6YitbnAfm+onF2ZWGqm6J/V+qJxfL63U92tmvhj7IBnm/rEanxy1T7RbpiJPxUhsjoZcWmMSMmwUNem2IMbL21tLE/cDxqS4SvPyv7MbLGXPL87jPfJvQHFVcKE0Iyx2v7jxzkfSo= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1437.eurprd08.prod.outlook.com (10.167.210.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1207.23; Sun, 7 Oct 2018 11:44:22 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::ed81:d01e:32bf:6116]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::ed81:d01e:32bf:6116%8]) with mapi id 15.20.1207.024; Sun, 7 Oct 2018 11:44:22 +0000 From: Hannes Tschofenig To: Michael Richardson , "eat@ietf.org" , "rats@ietf.org" Thread-Topic: [EAT] [Rats] Real EAT implementations Thread-Index: AQHUXZpWKsrAp4epP0uRiQySN5VuqaUTodrg Date: Sun, 7 Oct 2018 11:44:22 +0000 Message-ID: References: <7871DF5D-01E4-496A-B35D-82D1397B55AA@island-resort.com> <30469.1538847042@localhost> In-Reply-To: <30469.1538847042@localhost> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [83.175.123.202] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1437; 6:/RFPZW8xEK+N2MZGBNMFdHHmgvrZpFjhXlnF/bxyzSGKPw5wxEWVHfccNjEXevdLWE73NwIBC9BBuzaZorFhIUCT1JeUAddjNFn87AtH0s5a4jSUCoimqPP4B8MWtXyQHf4XkD38KJZDeZgAbUeD+dnHNRNxFWihwe3wnx6fHm7QXOKGDZs8NBaeOrswjmtn92cQwdbGY/DoLwXckYHEHSHDHM+tf/bpUM9GSDF4zxpxtK4TmQwaCT0tYZV4xC/motkI3iuSovbT1Vf0vZg/RMWMs4xEtX2LTA5xr0WiBgS23uNFmKJ+2rgbUFHjHXQ+w51UmE2KuRISknMrtA6ix7f1dv1ZBFbo20ac6NajGHhSaW8XZIlmd6se1GjRGCMjXDi/76f+D4Q1ItnmuXC4uvkpMGUMgvEE+w5cR78cYca+IYVLhpnQzCQTcppEbJUubvlmcwYb60gikleixea+mQ==; 5:/l0RrUHQUw8+YQzmQdb+u1gvIe8+I06++7p8w35/x3danuw3DP/CsRVvi9b8pmJZisswFmFRn6YLLCbJy55kPyLDFwy67rDu+C5Bm1HIQsMG+c6i3fL4+2wgB8vcrOJgG01SiJH7iOxxXBiuspn3TZtC+jjJGgDbBlTTcrQVUCc=; 7:SPrcxwWDzfY03PnGF2RJHjsj1iobbj2dAwOhN4qZsEP5MuRW1kWvXJ1ySsoI4slAuVwZZaNEHYTGETVKQL1HgQYgfasJnT8HcnwC6s7N9keF1Qb/pQUH98emLze0QLxHmwk7uiu4ZHgYnSqpwYCWg35Ryu4V2DrqMxuQavW9ca7IzWlxAM5yS3xRqnOXcSR34TAP3briPfQdtNLXqLsAwqLV1jj/eo9bQGvo/0NASVVXOuqIDvGmcRUiGfxbkxWn x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: a921d842-234f-4938-da7a-08d62c4a39ce x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1437; x-ms-traffictypediagnostic: VI1PR0801MB1437: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705)(11711142671493)(180628864354917); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3231355)(944501410)(52105095)(3002001)(10201501046)(93006095)(93001095)(6055026)(149066)(150057)(6041310)(20161123562045)(20161123564045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(201708071742011)(7699051); SRVR:VI1PR0801MB1437; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1437; x-forefront-prvs: 0818724663 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(366004)(376002)(346002)(136003)(39850400004)(13464003)(40434004)(199004)(189003)(966005)(305945005)(14454004)(74316002)(66066001)(2900100001)(110136005)(81166006)(81156014)(99286004)(7696005)(8676002)(478600001)(68736007)(71200400001)(71190400001)(72206003)(6506007)(6116002)(3846002)(5250100002)(7736002)(2501003)(53546011)(8936002)(76176011)(5024004)(14444005)(256004)(106356001)(5660300001)(316002)(6246003)(86362001)(105586002)(33656002)(97736004)(102836004)(26005)(486006)(25786009)(53936002)(6306002)(9686003)(55016002)(446003)(11346002)(476003)(186003)(6436002)(229853002)(2906002); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1437; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: E/FSwgXJo4L8ThEx3FCJ2u++XmR+eKhKJjAef/3nZ/OPHO4t+FuemvX19Z9PF4CWojklKBDOrWuI0g5cTXARX1HUBvSkoS3lW87O8gN/kcjJRpwIsYgDUrV50k/7Wlu/CnoF/eb4NySlGjTn8kFjG+VXs+XscbUyL+bxPHyie73qLRgTcBHmTvLK8ea/0d69ZB/BzW1ra7m2/gok5zNZRTFn4xVYlJ98Adw5YF/+O7+mg6QtPMfnmlCR4GHbfQh5WFI+/8VzE8sA2YF1K0Ai7RvOKN0Hh+B8ZyEMF7w15hFBDk3EM8rofGMkOF7gLpbSRh96OF3NMcbbd2F7RehIFg58E83pRvyVf78aiLdZkzo= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: a921d842-234f-4938-da7a-08d62c4a39ce X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Oct 2018 11:44:22.7502 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1437 Archived-At: Subject: Re: [Rats] [EAT] Real EAT implementations X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Oct 2018 11:44:34 -0000 SGkgTWljaGFlbCwNCg0KQXJtIGhhcyBsYXVuY2hlZCB0aGUgUGxhdGZvcm0gU2VjdXJpdHkgQXJj aGl0ZWN0dXJlIChQU0EpIGF0IEFybSBUZWNoQ29uIDIwMTcgd2l0aCB0aGUgZ29hbCB0byBpbXBy b3ZlIElvVCBzZWN1cml0eS4NCkl0IGlzIGEgZmFpcmx5IGJyb2FkIGVmZm9ydCBjbHVzdGVyZWQg aW50byB0aHJlZSBhcmVhcywgbmFtZWx5IGFuIGFuYWx5c2lzLCBhcmNoaXRlY3R1cmUgYW5kIGlt cGxlbWVudGF0aW9uIHBoYXNlLiBGb3IgdGhlIGZpcnN0IHBoYXNlIHdlIHByb3ZpZGUgdGVtcGxh dGVzIGZvciB0aHJlYXQgYW5hbHlzaXMgdG8gZGVyaXZlIHNlY3VyaXR5IHJlcXVpcmVtZW50cy4g Rm9yIHRoZSBhcmNoaXRlY3R1cmUgcGhhc2Ugd2Ugb2ZmZXIgaGFyZHdhcmUgc3BlY2lmaWNhdGlv bnMuIEZvciB0aGUgdGhpcmQgcGhhc2Ugd2Ugb2ZmZXIgY29kZS4NCg0KVGhlIExpbmFybyBmb3Vu ZGF0aW9uIGhhcyBzdGFydGVkIGEgcHJvamVjdCBmb3IgZmlybXdhcmUgZGV2ZWxvcG1lbnQgb24g dGhlc2UgQ29ydGV4IE0tY2xhc3MgZGV2aWNlcyAoY2FsbGVkIFRydXN0ZWQgRmlybXdhcmUgTSwg b3IgVEYtTSksIHNlZSBodHRwczovL2NvbW11bml0eS5hcm0uY29tL2lvdC9iL2Jsb2cvcG9zdHMv dGhlLW5leHQtc3RlcC1mb3ItcHNhLWFuZC1hLXNlY3VyZS1pb3QtZnV0dXJlLiBUaGUgVEYtTSBp cyB0aGUgcGxhY2Ugd2hlcmUgd2UgYXJlIGltcGxlbWVudCB0aGUgRUFUIHRva2VuIGZ1bmN0aW9u YWxpdHkgKGFzIHBhcnQgb2YgdGhlIGF0dGVzdGF0aW9uIEFQSSkuIFRoZXJlIGFyZSBhbHNvIG90 aGVyIEFQSXMsIHN1Y2ggYXMgY3J5cHRvIGFuZCBzZWN1cmUgc3RvcmFnZS4NClNpbmNlIHRoZSBh dHRlc3RhdGlvbiBBUEkgbm90IG9ubHkgYWxsb3dzIGFuIGFwcGxpY2F0aW9uIHRvIGFjY2VzcyBh dHRlc3RhdGlvbiBmdW5jdGlvbmFsaXR5IGxvY2FsbHkgb24gdGhlIGRldmljZSBidXQgYWxzbyB0 byBleHBvc2UgdGhlc2UgYXR0ZXN0YXRpb24gdG9rZW5zIHRvIG90aGVyIHNlcnZpY2VzIHRoZXJl IGlzIGFuIGludGVyb3BlcmFiaWxpdHkgcHJvYmxlbS4gVGhlIFF1YWxjb21tLWRldmVsb3BlZCB0 b2tlbiBmb3JtYXQsIHdoaWNoIHJlLXVzZXMgZXhpc3RpbmcgSUVURiB0ZWNobm9sb2d5LCBzaG93 ZWQgdXAgYXQgdGhlIHJpZ2h0IHRpbWUgZm9yIHVzIGFuZCB3ZSBiZWxpZXZlIGl0IGlzIGEgZ29v ZCBhcHByb2FjaC4gRm9yIHRoaXMgcmVhc29uIHdlIHN1cHBvcnQgZHJhZnQtaWV0Zi1tYW5keWFt LWVhdC4NCg0KVGhlIFRGLU0gaW1wbGVtZW50YXRpb24gYW5kIHRoZSB3b3JrIHdlIGRvIG9uIGF0 dGVzdGF0aW9uIGZlZWxzIHByZXR0eSByZWFsIHRvIG1lLiBXZSBob3BlIHRoYXQgbWFueSBjb21w YW5pZXMgaW1wbGVtZW50aW5nIElvVCBwcm9kdWN0cyB3YW50IHRvIG1ha2UgdXNlIG9mIHRoZSBU Ri1NIGNvZGUgYXMgYSBmb3VuZGF0aW9uIHRvIG1ha2UgdGhlaXIgZGV2aWNlcyBtb3JlIHNlY3Vy ZS4NCg0KQ2lhbw0KSGFubmVzDQoNClBTOiBNb3JlIGRldGFpbHMgYWJvdXQgdGhlIFBTQSBjYW4g YmUgZm91bmQgYXQgaHR0cHM6Ly9wYWdlcy5hcm0uY29tL3BzYS1yZXNvdXJjZXMuaHRtbC4gSWYg eW91IGhhcHBlbiB0byBiZSBpbiBTYW4gSm9zZSBpbiB0aGUgd2VlayBvZiAxNnRoIC0gMTh0aCBP Y3RvYmVyIEFybSBhbmQgaXRzIHBhcnRuZXJzIHdpbGwgdGFsayBhYm91dCB0aGUgcmVjZW50IGRl dmVsb3BtZW50cyBhcm91bmQgdGhlIFBTQSAoYW5kIElvVCBzZWN1cml0eSBpbiBnZW5lcmFsKSBh dCBBcm0gVGVjaENvbi4NCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEVBVCA8 ZWF0LWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBNaWNoYWVsIFJpY2hhcmRzb24NClNl bnQ6IFNhdHVyZGF5LCBPY3RvYmVyIDYsIDIwMTggNzozMSBQTQ0KVG86IGVhdEBpZXRmLm9yZzsg cmF0c0BpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtFQVRdIFtSYXRzXSBSZWFsIEVBVCBpbXBsZW1l bnRhdGlvbnMNCg0KDQpMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT4g d3JvdGU6DQogICAgPiBJIGJlbGlldmUgb25lIG9mIHRoZSBhcmVhIGRpcmVjdG9ycyBhc2tlZCB3 aG/igJlzIGdvaW5nIHRvIGltcGxlbWVudA0KICAgID4gdGhlc2UgYXR0ZXN0YXRpb24gc2NoZW1l cyB3ZSBzdGFuZGFyZGl6ZS4gT25lIGFuc3dlciBpcyBRdWFsY29tbeKAmXMNCiAgICA+IGFscmVh ZHkgY29tbWVyY2lhbGl6ZWQgcHJlY3Vyc29yIGltcGxlbWVudGF0aW9uIG9mIEVBVCB3aGljaCBp cw0KICAgID4gZGVzY3JpYmVkIHZlcnkgYnJpZWZseSBpbiBvZmZpY2lhbCBtYXJrZXRpbmcgbWF0 ZXJpYWwgb24gUXVhbGNvbW3igJlzDQogICAgPiB3ZWIgc2l0ZSBhcyDigJxIYXJkd2FyZSBUb2tl buKAnS4NCg0KSSBzZWUgdGhpcyBhcyBldmlkZW5jZToNCiAgMSkgdGhlIG1hcmtldCBkb2Vzbid0 IG5lZWQvd2FudCBhIHN0YW5kYXJkDQogIDIpIFF1YWxjb21tIGlzbid0IGdvaW5nIHRvIGltcGxl bWVudCBvdXIgc3RhbmRhcmQsIHRoZXkgYWxyZWFkeSBoYXZlIHRoZWlyIG93bi4NCg0KTm93IHRo YXQgY291bGQgYmUgdHJpdmlhbGx5IGJlIHJlZnV0ZWQgaWYgd2Ugc2F3IGNsZWFyIHBhcnRpY2lw YXRpb24gZnJvbSBxdWFsY29tbSwgYnV0IEkgaGF2ZW4ndCBzZWVuIGl0IHlldC4gIEJ1dCwgbWF5 YmUgSSBtaXNzZWQgaXQuDQoNCkkgYXdhaXQgdGhlIGNoYXJ0ZXIuDQpTbyBmYXIgSSBoYXZlbid0 IHNlZW4gc29tZXRoaW5nIHRoYXQgaXMgY29uY3JldGUgZW5vdWdoIHRvIGJlIHVzZWZ1bCBvbiBp dHMgb3duLg0KDQotLQ0KTWljaGFlbCBSaWNoYXJkc29uIDxtY3IrSUVURkBzYW5kZWxtYW4uY2E+ LCBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MgIC09IElQdjYgSW9UIGNvbnN1bHRpbmcgPS0NCg0K DQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkg YXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4g SWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUg c2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFu eSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkg dGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg== From nobody Sun Oct 7 07:11:20 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78240130DE1 for ; Sun, 7 Oct 2018 07:11:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dv4nyq9qcwr4 for ; Sun, 7 Oct 2018 07:11:12 -0700 (PDT) Received: from mail-ot1-x344.google.com (mail-ot1-x344.google.com [IPv6:2607:f8b0:4864:20::344]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AF53C130E0A for ; Sun, 7 Oct 2018 07:11:11 -0700 (PDT) Received: by mail-ot1-x344.google.com with SMTP id u22so17138020ota.12 for ; Sun, 07 Oct 2018 07:11:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:message-id:thread-topic:references :in-reply-to:mime-version:content-transfer-encoding; bh=xVaKyePNC8lgZbxRFrqhQqSg2rZXuCgeW2Pn/4T3Ppw=; b=fv/ZDTZyoGg3ePGCesAJNZkKkjhqVoAK1c/o3yzPwdB9AppW0nhpW0acoL/ib4JYms h5tChhbHbFpzAPOyV0G7NARTCgE3eWSPBi4/2vaGFijCWEjLfi/dpUTDIsfitq4d6XOt ftrmYALW3c8N5YfNCx4FYDhRCJFmbkm1aZGvI= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:message-id :thread-topic:references:in-reply-to:mime-version :content-transfer-encoding; bh=xVaKyePNC8lgZbxRFrqhQqSg2rZXuCgeW2Pn/4T3Ppw=; b=McGcFjvZcaKtW4Yb3BweezsGUYbgOXYKOeJwmJ1bqU/w9daP7Urfa2mZ9R8pQyBj/4 d4/nVhc519JQ8+jOFUsDHiAynhZf7cX2ameEsoFORkdzG+SG7A0GRDU9hHJstRsTMGpm xa5q1RESUtFiJkqV94GNovVC6d+ajuiz2CeqX990ooufYW6XMYtGp7rA0nuBlDpJX23/ WNnTrYU0wKLYMbe2Hn/bP5TgXtOWiKLcqAfzs7sRIWb1obwFQ4DcceaLZlaUfMFOQWxj PLfn4fV9w143r8JRIsXKqilK6kUNSt1FWyqrrDRZzOktnrDL3KNvJ0I+0aNgChvENXml Am8A== X-Gm-Message-State: ABuFfogWwNB32gwxDvz+qjnPv7RP1aKwb4RaMYidy5t3r0P/PI4sUmKa xQITMid+fMsgHJRNbAA/X96Tag== X-Google-Smtp-Source: ACcGV62DcDrsD72DRivvyy7YVSpOMjfeVzxdIwiEu/Jj9xLx8Vtl3bYtCK7p59apxFzzjxPjKK8w2g== X-Received: by 2002:a9d:4695:: with SMTP id z21mr9277036ote.335.1538921470932; Sun, 07 Oct 2018 07:11:10 -0700 (PDT) Received: from [10.206.18.85] ([205.153.92.177]) by smtp.googlemail.com with ESMTPSA id l56sm5151093otd.55.2018.10.07.07.11.04 (version=TLS1 cipher=AES128-SHA bits=128/128); Sun, 07 Oct 2018 07:11:10 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Sun, 07 Oct 2018 10:11:01 -0400 From: Carl Wallace To: Michael Richardson , , Message-ID: Thread-Topic: [EAT] [Rats] Real EAT implementations References: <7871DF5D-01E4-496A-B35D-82D1397B55AA@island-resort.com> <30469.1538847042@localhost> In-Reply-To: <30469.1538847042@localhost> Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Archived-At: Subject: Re: [Rats] [EAT] Real EAT implementations X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Oct 2018 14:11:14 -0000 On 10/6/18, 1:30 PM, "EAT on behalf of Michael Richardson" wrote: > >Laurence Lundblade wrote: > > I believe one of the area directors asked who=E2=80=99s going to implement > > these attestation schemes we standardize. [CW] I work on a product that consumes several different types of attestations in support of public key certificate issuance to phones and tablets. We would likely adopt standard formats, verification rules and bindings to certificate management protocols, where possible. We've had to roll our own mechanisms to work around lack of standards support in some cases (but in no case are we the source of an attestation, which may be the spirit of the question). > > One answer is Qualcomm=E2=80=99s > > already commercialized precursor implementation of EAT which is > > described very briefly in official marketing material on Qualcomm=E2=80=99= s > > web site as =E2=80=9CHardware Token=E2=80=9D. > >I see this as evidence: > 1) the market doesn't need/want a standard [CW] There are definitely gaps that would benefit from standardization and some proprietary mechanisms that could be improved by adopting the result of standards work, if vendors that generate attestations are willing. > 2) Qualcomm isn't going to implement our standard, they already have >their own. > >Now that could be trivially be refuted if we saw clear participation from >qualcomm, but I haven't seen it yet. But, maybe I missed it. > >I await the charter. >So far I haven't seen something that is concrete enough to be useful on >its own. > >-- >Michael Richardson , Sandelman Software Works > -=3D IPv6 IoT consulting =3D- > > > >_______________________________________________ >EAT mailing list >EAT@ietf.org >https://www.ietf.org/mailman/listinfo/eat From nobody Sun Oct 7 09:53:06 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB8D0130DE8; Sun, 7 Oct 2018 09:52:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.445 X-Spam-Level: X-Spam-Status: No, score=-2.445 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.456, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_FILL_THIS_FORM_SHORT=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=telefonica.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Yw0YYRw_RllS; Sun, 7 Oct 2018 09:52:51 -0700 (PDT) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-am5eur03on072f.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe08::72f]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B640B127333; Sun, 7 Oct 2018 09:52:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telefonica.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Qgo36lekQLGxgGFRuJcXLHswcmtIX31dal6hnaG6ohQ=; b=aAjAdA7lXftPLF3QZMUytQBOBSlKRLKzBh/Lns4vrekiC1U+F9wK4zGlAnTdEwELB7I+3M/mzw81i1xC2VH8nLHbVJse+2m0l4GYu7Sk769qQeR+Z5Jabl0yM1SWuRK+4WVziagBlIow+Wv34jEryPB117Lov33QLK6JNLWRa2k= Received: from DB3PR0602MB3788.eurprd06.prod.outlook.com (52.134.70.148) by DB3PR0602MB3724.eurprd06.prod.outlook.com (52.134.68.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1207.18; Sun, 7 Oct 2018 16:52:47 +0000 Received: from DB3PR0602MB3788.eurprd06.prod.outlook.com ([fe80::1df0:efe8:3e5:7acb]) by DB3PR0602MB3788.eurprd06.prod.outlook.com ([fe80::1df0:efe8:3e5:7acb%5]) with mapi id 15.20.1207.024; Sun, 7 Oct 2018 16:52:47 +0000 From: "Diego R. Lopez" To: Hannes Tschofenig , "eat@ietf.org" , "rats@ietf.org" CC: 'Benjamin Kaduk' Thread-Topic: [EAT] BOF Preparation Thread-Index: AQHUXPqPnzfpBSwbUUWjNsMW7Ci7FqUR7UfggAI2oYA= Date: Sun, 7 Oct 2018 16:52:47 +0000 Message-ID: <29147EFB-7A73-459F-8B6F-F4BC8898E5AF@telefonica.com> References: <199F12B4-011C-4656-84C8-8BEDC2589282@telefonica.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.2.180910 authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-originating-ip: [94.142.114.39] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DB3PR0602MB3724; 6:a6+xbrQG4ntcCGlEofw1ljwqZfLVJeQpb0rS8lEGS2pv3pw7tXPjzt5qnwERmuM6mVHApCwbClZLZ057V5cBOSWVJYAdPqy96962lyTHuxk9U2e7WLwfNrYN+PsdnzrXBJZuCpPK2gjLR5xO4LSG1y+sxDCHDOYVzJNOBhEA2VrX/ypdfhcoqhSbldJFZfoIrCQC0AO9+hUtpkZhn3lZJMTN/jXYK5sb1WhY9Ix6jnBQsUhou7pR7vdrksW6rJ0b/WuxzFd3ElQE3dS+7rDaqYQK10VHlgE+vWpMVaBBnZ6PIrdx/NWTa1ZsKqcbY56Y+8wyYUugpy6RsZo55e7Jc89N0QNW5xWuQEl813IlZKaq6dumvi8RDAyLz3TnYHx2P/eb+MwWJkSYEFGEW033OnD2uqnpOmiAYtN8U7bbeT8eMcNYzaZ3H9y59TyrPzUXg3OucOU5WkW5JaIIGG2Byg==; 5:tCoOnG983PZVOIaeRzIWzD8XLuEIZCfj4PjnJX0hd9u3TeLoj3kZNr6BI5idwM2gkFllKY1vZAm5DOAMypWoRqCOwQXD2OjxXN3Q9FEkkZRlL5rbkf0O4rlyXgRIac5reCVYb+mi29g1bqHQNrDlmvwsv53NcCUZLs41dBMHbrw=; 7:/MwxDvHYvQZfS5J5H4ifZl42RpbKo9D9Nob32vT9uYwrdxJP4PhrRQ9GseCrVSKU7mZteJgxlH4CMViaqGNH1H7NbngPUZHf7BtxueWtqy2M1Tv8/VdYBleBoUbsaP/D6YgpnJwCLa8A6qgN3l3br6o8nA6N8SM72JnoTXx6rcjlRZ8fF7BVoshfOduFqJ1u44ZK5IYrYHUw/C4VZSFr3BILfCbGfnTSq+DREm1oqLx6sAbX9j01c5pRbn3ocQsv x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 1dbfd7e1-11f9-4b59-fb65-08d62c754f58 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:DB3PR0602MB3724; x-ms-traffictypediagnostic: DB3PR0602MB3724: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(231250463719595)(128460861657000)(81160342030619)(40392960112811)(180628864354917)(240460790083961)(163750095850)(21748063052155)(28532068793085)(190501279198761); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3231355)(944501410)(52105095)(3002001)(6055026)(149066)(150057)(6041310)(20161123560045)(201703131423095)(201702281529075)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123562045)(20161123558120)(201708071742011)(7699051); SRVR:DB3PR0602MB3724; BCL:0; PCL:0; RULEID:; SRVR:DB3PR0602MB3724; x-forefront-prvs: 0818724663 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(39860400002)(346002)(366004)(396003)(376002)(252514010)(53754006)(40134004)(25724002)(189003)(199004)(40434004)(6506007)(53546011)(2616005)(68736007)(6246003)(66574009)(102836004)(606006)(36756003)(82746002)(14454004)(66066001)(7736002)(6512007)(446003)(6306002)(316002)(54896002)(76176011)(2201001)(11346002)(236005)(97736004)(186003)(26005)(476003)(53936002)(966005)(786003)(4326008)(86362001)(486006)(229853002)(2906002)(790700001)(99286004)(33656002)(58126008)(2900100001)(110136005)(8936002)(105586002)(5024004)(14444005)(2501003)(256004)(3846002)(6116002)(478600001)(6436002)(8676002)(25786009)(6486002)(5250100002)(106356001)(5660300001)(71190400001)(45080400002)(71200400001)(83716004)(81156014)(81166006); DIR:OUT; SFP:1102; SCL:1; SRVR:DB3PR0602MB3724; H:DB3PR0602MB3788.eurprd06.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: JRxK4A6bZ0+Y22RzjeleHA5NuS9zd9x7/wQCPOYZZU4NGvRMPBYUYF2rMhNPsWH84US1v3sDLkAI9tsWvHcX5EjnZS/dcKR8Bg1cqQDk7RSXEWe9NF+M3H3ZhvIQNRulECzEix2V03l/cXI+DtVNsiCbVLv4aiTPdHI/ZlAq8UrYtgQb2OEN8g1Yj55bePL+6FqCHd/k7leexcGWLoog07WggivtlJA/HUeUNS+uUjf/W+0rlh+RuUDAz+15mOHyiGVhpwRs4+4w03RVeNxkM0GZJh4LsLDw+/ajO4Mdd/7kj91GvQxCr6igflQoQR0x5hvNs2sTaZcty2MW5v7vu5BAsERy7El2hU7ARg/2zF4= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_29147EFB7A73459F8B6FF4BC8898E5AFtelefonicacom_" MIME-Version: 1.0 X-OriginatorOrg: telefonica.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1dbfd7e1-11f9-4b59-fb65-08d62c754f58 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Oct 2018 16:52:47.3261 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB3PR0602MB3724 Archived-At: Subject: Re: [Rats] [EAT] BOF Preparation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Oct 2018 16:52:57 -0000 --_000_29147EFB7A73459F8B6FF4BC8898E5AFtelefonicacom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSGFubmVzLA0KDQpXZSBhcmUgaW50ZXJlc3RlZCBpbiB1c2luZyB0aGUgYmFzZSB0ZWNobm9s b2d5ICh3aGF0ZXZlciBpcyBzdXBwb3J0ZWQgaW4gbG93IGxldmVsIHNvZnR3YXJlIG9yIG9wZXJh dGluZyBzeXN0ZW1zKSB0byBzdXBwb3J0IGF0dGVzdGF0aW9uIG9mIE5GViBkZXBsb3ltZW50cywg ZXNwZWNpYWxseSB0aG9zZSByZWxhdGVkIHdpdGggdGhlIGNvbGxhYm9yYXRpb24gb2YgdGhpcmQg cGFydGllczogd2l0aCB1bml2ZXJzYWwgRVBDLCBhbmQgZWRnZSBjb21wdXRpbmcgYXMgdGhlIG1h aW4gdXNlIGNhc2VzLiBBbmQsIHdoaWxlIGlzIHRydWUgd2UgYXJlIG5vdCBkZXZlbG9waW5nIHRo ZSBiYXNlIHNvZnR3YXJlLCB3ZSBhcmUgY29sbGFib3JhdGluZyB3aXRoIGFjYWRlbWljIHRlYW1z IHdvcmtpbmcgYXQgdGhlIGh5cGVydmlzb3IgYW5kIGNvbnRhaW5lciBwbGF0Zm9ybSBsZXZlbC4N Cg0KQmUgZ29vZGUsDQoNCi0tDQoiRXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIEluZmll cm5vIg0KDQpEciBEaWVnbyBSLiBMb3Bleg0KVGVsZWZvbmljYSBJK0QNCmh0dHBzOi8vd3d3Lmxp bmtlZGluLmNvbS9pbi9kcjJsb3Blei8NCg0KZS1tYWlsOiBkaWVnby5yLmxvcGV6QHRlbGVmb25p Y2EuY29tPG1haWx0bzpkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tPg0KVGVsOiAgICAgICAg ICszNCA5MTMgMTI5IDA0MQ0KTW9iaWxlOiAgKzM0IDY4MiAwNTEgMDkxDQotLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCk9uIDA2LzEwLzIwMTgsIDExOjA4LCAiSGFubmVzIFRz Y2hvZmVuaWciIDxIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPG1haWx0bzpIYW5uZXMuVHNjaG9m ZW5pZ0Bhcm0uY29tPj4gd3JvdGU6DQoNCkhpIERpZWdvLA0KDQpJIGd1ZXNzIFRlbGVmb25pY2Eg aXMgYSB1c2VyIG9mIHRoZSB0ZWNobm9sb2d5Ki4gSG93IHdvdWxkIGxldmVyYWdlIHRoZSByZXN1 bHRzPw0KDQpDaWFvDQpIYW5uZXMNCg0KKjogWW91IGFyZSBub3QgbWFudWZhY3R1cmluZyBjaGlw cywgZGV2ZWxvcGluZyBvcGVyYXRpbmcgc3lzdGVtcywgb3Igd3JpdGluZyBsb3cgbGV2ZWwgc29m dHdhcmUgKGxpa2UgZmlybXdhcmUpIHRoYXQgaW50ZWdyYXRlcyB0aGUgZGlzY3Vzc2VkIGF0dGVz dGF0aW9uIHRlY2hub2xvZ3kuIElzIHRoYXQgY29ycmVjdD8NCg0KRnJvbTogRGllZ28gUi4gTG9w ZXogPGRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb20+DQpTZW50OiBTYXR1cmRheSwgT2N0b2Jl ciA2LCAyMDE4IDEyOjI3IEFNDQpUbzogSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2Zl bmlnQGFybS5jb20+OyBlYXRAaWV0Zi5vcmc7IHJhdHNAaWV0Zi5vcmcNCkNjOiAnQmVuamFtaW4g S2FkdWsnIDxrYWR1a0BtaXQuZWR1Pg0KU3ViamVjdDogUmU6IFtFQVRdIEJPRiBQcmVwYXJhdGlv bg0KDQpIaSwNCg0KV2UgYXJlIGludGVyZXN0ZWQgaW4gZm9zdGVyaW5nIGF0dGVzdGF0aW9uIHRl Y2hub2xvZ2llcyBhYmxlIHRvIHN1cHBvcnQgYW5kIGxldmVyYWdlIG5ldHdvcmsgdmlydHVhbGl6 YXRpb24gdGVjaG5pcXVlcyAoeWVzLCBORlYgc3RyaWtlcyBiYWNr4oCmKSwgYW5kIGFyZSBpbiBj b250YWN0IHdpdGggb3RoZXIgY29tcGFuaWVzIHRoYXQgc2hhcmUgdGhlIHNhbWUgaW50ZXJlc3Qu DQoNCkkgd29u4oCZdCBtYWtlIGl0IHRvIEJhbmdrb2ssIGJ1dCB3aWxsIGJlIGhhcHB5IHRvIGhl bHAgaW4gYW55dGhpbmcgSSBjYW4gdGhyb3VnaCByZW1vdGUgcGFydGljaXBhdGlvbi4NCg0KQmUg Z29vZGUsDQoNCi0tDQoiRXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIEluZmllcm5vIg0K DQpEciBEaWVnbyBSLiBMb3Bleg0KVGVsZWZvbmljYSBJK0QNCmh0dHBzOi8vd3d3LmxpbmtlZGlu LmNvbS9pbi9kcjJsb3Blei8NCg0KZS1tYWlsOiBkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29t PG1haWx0bzpkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tPg0KVGVsOiAgICAgICAgICszNCA5 MTMgMTI5IDA0MQ0KTW9iaWxlOiAgKzM0IDY4MiAwNTEgMDkxDQotLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tDQoNCk9uIDA1LzEwLzIwMTgsIDE0OjMwLCAiRUFUIG9uIGJlaGFsZiBv ZiBIYW5uZXMgVHNjaG9mZW5pZyIgPGVhdC1ib3VuY2VzQGlldGYub3JnPG1haWx0bzplYXQtYm91 bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208bWFp bHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+PiB3cm90ZToNCg0KSGkgQmVuLCBIaSBCT0Yg Y2hhaXJzLCBIaSBhbGwsDQoNCkkgaGF2ZSBiZWVuIHRoaW5raW5nIGFib3V0IGhvdyB0byB0dXJu IHRoaXMgQm9GIGludG8gYSBzdWNjZXNzLiBJIHNlZSBhIGZldyBjaGFsbGVuZ2VzOg0KDQpUaGVy ZSBhcmUgZGlmZmVyZW50IGl0ZW1zIGluIHNjb3BlIG9mIHRoZSB3b3JrIGFuZCB3ZSAoQXJtKSBh cmUgaW50ZXJlc3RlZCBpbiBjb250cmlidXRpbmcgdG8gdGhvc2UgdGhhdCByZWxhdGUgdG8gdGhl IEVBVC9hdHRlc3RhdGlvbiB0b2tlbiB3b3JrLiBXZSBhcmUgaGFwcHkgdG8gZ2l2ZSBhIHByZXNl bnRhdGlvbiBhYm91dCB0aG9zZSBidXQgSSBoYXZlbuKAmXQgc2VlbiBhbnkgYWdlbmRhIGZvciB0 aGUgQm9GIHlldC4gV2hvIGlzIGluIGNoYXJnZSBvZiBwcmVwYXJpbmcgYW4gYWdlbmRhPyBJIGhh dmUgc2VlbiBCb0ZzIGZhaWwgd2hlcmUgdGhlIHByZXNlbnRhdGlvbnMgd2VyZW7igJl0IHdlbGwg YWxpZ25lZCBvciBub3QgY2xlYXJseSBkZW1vbnN0cmF0aW5nIGEgcmVhbC13b3JsZCBwcm9ibGVt Lg0KDQpBdCB0aGUgQm9GIHdlIHdpbGwgaGF2ZSB0byBkZW1vbnN0cmF0ZSB0aGF0IHRoZXJlIGFy ZSBjb21wYW5pZXMgaW52b2x2ZWQgd2hvIGFyZSBhY3R1YWxseSB3aWxsaW5nIHRvIGRvIHRoZSBo ZWF2eSBsaWZ0aW5nIHRvIHR1cm4gdGhpcyBlZmZvcnQgaW50byBhIHN1Y2Nlc3MuIFNpbmNlIHRo ZXJlIGFyZSB2ZXJ5IGRpZmZlcmVudCBpdGVtcyBsaXN0ZWQgb24gdGhlIHByb3Bvc2VkIGNoYXJ0 ZXIgdGV4dCBJIGFtIGN1cmlvdXMgd2hldGhlciB0aGVyZSBpcyByZWFzb25hYmxlIHN1cHBvcnQg Zm9yIGFsbCBvZiB0aGVtLiBJIGNhbiBvbmx5IHNwZWFrIGZvciBvdXIgaW50ZXJlc3QgaW4gdGhl IEVBVCBpdGVtcyBhbmQgd2UgYXJlIHdvcmtpbmcgd2l0aCBjb21wYW5pZXMgdG8gc3RhdGUgdGhl aXIgc3VwcG9ydCBvbiB0aGUgbWFpbGluZyBsaXN0LiBCdXQgdGhlIEJvRiBpcyBsaWtlbHkgZ29p bmcgdG8gZmFpbCBpZiB0aGVyZSBpcyBvbmx5IHN1cHBvcnQgZm9yIGEgc3Vic2V0IG9mIHRoZSBp dGVtcy4gV2hlcmUgYXJlIHdlIHdpdGggdGhlIHJlc3QgYW5kIHdobyBpcyByZWFjaGluZyBvdXQg dG8gd2hpY2ggcGFydCBvZiB0aGUgaW5kdXN0cnk/DQoNCkNpYW8NCkhhbm5lcw0KDQpJTVBPUlRB TlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRz IGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUg bm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1l ZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVy c29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1h dGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQoNCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQoNCkVzdGUgbWVuc2FqZSB5IHN1cyBhZGp1bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1 c2l2YW1lbnRlIGEgc3UgZGVzdGluYXRhcmlvLCBwdWVkZSBjb250ZW5lciBpbmZvcm1hY2nDs24g cHJpdmlsZWdpYWRhIG8gY29uZmlkZW5jaWFsIHkgZXMgcGFyYSB1c28gZXhjbHVzaXZvIGRlIGxh IHBlcnNvbmEgbyBlbnRpZGFkIGRlIGRlc3Rpbm8uIFNpIG5vIGVzIHVzdGVkLiBlbCBkZXN0aW5h dGFyaW8gaW5kaWNhZG8sIHF1ZWRhIG5vdGlmaWNhZG8gZGUgcXVlIGxhIGxlY3R1cmEsIHV0aWxp emFjacOzbiwgZGl2dWxnYWNpw7NuIHkvbyBjb3BpYSBzaW4gYXV0b3JpemFjacOzbiBwdWVkZSBl c3RhciBwcm9oaWJpZGEgZW4gdmlydHVkIGRlIGxhIGxlZ2lzbGFjacOzbiB2aWdlbnRlLiBTaSBo YSByZWNpYmlkbyBlc3RlIG1lbnNhamUgcG9yIGVycm9yLCBsZSByb2dhbW9zIHF1ZSBub3MgbG8g Y29tdW5pcXVlIGlubWVkaWF0YW1lbnRlIHBvciBlc3RhIG1pc21hIHbDrWEgeSBwcm9jZWRhIGEg c3UgZGVzdHJ1Y2Npw7NuLg0KDQpUaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMgdHJh bnNtaXNzaW9uIGlzIHByaXZpbGVnZWQgYW5kIGNvbmZpZGVudGlhbCBpbmZvcm1hdGlvbiBpbnRl bmRlZCBvbmx5IGZvciB0aGUgdXNlIG9mIHRoZSBpbmRpdmlkdWFsIG9yIGVudGl0eSBuYW1lZCBh Ym92ZS4gSWYgdGhlIHJlYWRlciBvZiB0aGlzIG1lc3NhZ2UgaXMgbm90IHRoZSBpbnRlbmRlZCBy ZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRoYXQgYW55IGRpc3NlbWluYXRpb24s IGRpc3RyaWJ1dGlvbiBvciBjb3B5aW5nIG9mIHRoaXMgY29tbXVuaWNhdGlvbiBpcyBzdHJpY3Rs eSBwcm9oaWJpdGVkLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIHRyYW5zbWlzc2lvbiBpbiBl cnJvciwgZG8gbm90IHJlYWQgaXQuIFBsZWFzZSBpbW1lZGlhdGVseSByZXBseSB0byB0aGUgc2Vu ZGVyIHRoYXQgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBjb21tdW5pY2F0aW9uIGluIGVycm9yIGFu ZCB0aGVuIGRlbGV0ZSBpdC4NCg0KRXN0YSBtZW5zYWdlbSBlIHNldXMgYW5leG9zIHNlIGRpcmln ZW0gZXhjbHVzaXZhbWVudGUgYW8gc2V1IGRlc3RpbmF0w6FyaW8sIHBvZGUgY29udGVyIGluZm9y bWHDp8OjbyBwcml2aWxlZ2lhZGEgb3UgY29uZmlkZW5jaWFsIGUgw6kgcGFyYSB1c28gZXhjbHVz aXZvIGRhIHBlc3NvYSBvdSBlbnRpZGFkZSBkZSBkZXN0aW5vLiBTZSBuw6NvIMOpIHZvc3NhIHNl bmhvcmlhIG8gZGVzdGluYXTDoXJpbyBpbmRpY2FkbywgZmljYSBub3RpZmljYWRvIGRlIHF1ZSBh IGxlaXR1cmEsIHV0aWxpemHDp8OjbywgZGl2dWxnYcOnw6NvIGUvb3UgY8OzcGlhIHNlbSBhdXRv cml6YcOnw6NvIHBvZGUgZXN0YXIgcHJvaWJpZGEgZW0gdmlydHVkZSBkYSBsZWdpc2xhw6fDo28g dmlnZW50ZS4gU2UgcmVjZWJldSBlc3RhIG1lbnNhZ2VtIHBvciBlcnJvLCByb2dhbW9zLWxoZSBx dWUgbm9zIG8gY29tdW5pcXVlIGltZWRpYXRhbWVudGUgcG9yIGVzdGEgbWVzbWEgdmlhIGUgcHJv Y2VkYSBhIHN1YSBkZXN0cnVpw6fDo28NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBv ZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5 IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVu dCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xv c2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBv c2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5r IHlvdS4NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0KRXN0ZSBtZW5zYWpl IHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUgYSBzdSBkZXN0aW5hdGFy aW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEgbyBjb25maWRlbmNp YWwgeSBlcyBwYXJhIHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUgZGVz dGluby4gU2kgbm8gZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEgbm90 aWZpY2FkbyBkZSBxdWUgbGEgbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24geS9v IGNvcGlhIHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0dWQg ZGUgbGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUgbWVuc2FqZSBw b3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRpYXRhbWVudGUg cG9yIGVzdGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24uDQoNClRoZSBp bmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Npb24gaXMgcHJpdmlsZWdlZCBh bmQgY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9ubHkgZm9yIHRoZSB1c2Ugb2Yg dGhlIGluZGl2aWR1YWwgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUgcmVhZGVyIG9mIHRo aXMgbWVzc2FnZSBpcyBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkg bm90aWZpZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwgZGlzdHJpYnV0aW9uIG9yIGNvcHlpbmcg b2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuIElmIHlvdSBoYXZl IHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4gUGxl YXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5b3UgaGF2ZSByZWNlaXZl ZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4gZGVsZXRlIGl0Lg0KDQpFc3Rh IG1lbnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBhbyBzZXUg ZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZpbGVnaWFkYSBvdSBj b25maWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlkYWRl IGRlIGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlvIGlu ZGljYWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUgcXVlIGEgbGVpdHVyYSwgdXRpbGl6YcOnw6NvLCBk aXZ1bGdhw6fDo28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBwcm9p YmlkYSBlbSB2aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1IGVzdGEg bWVuc2FnZW0gcG9yIGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBjb211bmlxdWUgaW1lZGlh dGFtZW50ZSBwb3IgZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEgc3VhIGRlc3RydWnDp8Ojbw0K --_000_29147EFB7A73459F8B6FF4BC8898E5AFtelefonicacom_ Content-Type: text/html; charset="utf-8" Content-ID: <4BC8A87B9E45C348BE3AFC3FB99B7FA2@eurprd06.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIg MTUgNSAyIDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1h bCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowY207DQoJbWFyZ2luLWJv dHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30N CmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3Jp dHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAu TXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3Jh cGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGNtOw0KCW1hcmdpbi1y aWdodDowY207DQoJbWFyZ2luLWJvdHRvbTowY207DQoJbWFyZ2luLWxlZnQ6MzYuMHB0Ow0KCW1h cmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1z b25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFs dDphdXRvOw0KCW1hcmdpbi1yaWdodDowY207DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87 DQoJbWFyZ2luLWxlZnQ6MGNtOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2lu ZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsN Cglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30N CnNwYW4uRW1haWxTdHlsZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFp bFN0eWxlMjINCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQouTXNvQ2hwRGVmYXVs dA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBw YWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzIuMHB0 IDcyLjBwdCA3Mi4wcHQgNzIuMHB0O30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2Vj dGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVm YXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48 IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxv OmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwh W2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRVMiIGxpbms9IiMwNTYzQzEiIHZsaW5r PSIjOTU0RjcyIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkhpIEhhbm5l cyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdCI+V2UgYXJlIGludGVyZXN0ZWQgaW4gdXNpbmcgdGhlIGJhc2UgdGVjaG5v bG9neSAod2hhdGV2ZXIgaXMgc3VwcG9ydGVkIGluIGxvdyBsZXZlbCBzb2Z0d2FyZSBvciBvcGVy YXRpbmcgc3lzdGVtcykgdG8gc3VwcG9ydCBhdHRlc3RhdGlvbiBvZiBORlYgZGVwbG95bWVudHMs IGVzcGVjaWFsbHkgdGhvc2UgcmVsYXRlZCB3aXRoIHRoZSBjb2xsYWJvcmF0aW9uDQogb2YgdGhp cmQgcGFydGllczogd2l0aCB1bml2ZXJzYWwgRVBDLCBhbmQgZWRnZSBjb21wdXRpbmcgYXMgdGhl IG1haW4gdXNlIGNhc2VzLiBBbmQsIHdoaWxlIGlzIHRydWUgd2UgYXJlIG5vdCBkZXZlbG9waW5n IHRoZSBiYXNlIHNvZnR3YXJlLCB3ZSBhcmUgY29sbGFib3JhdGluZyB3aXRoIGFjYWRlbWljIHRl YW1zIHdvcmtpbmcgYXQgdGhlIGh5cGVydmlzb3IgYW5kIGNvbnRhaW5lciBwbGF0Zm9ybSBsZXZl bC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1HQiIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdCI+QmUgZ29vZGUsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPi0tPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZxdW90 O0VzdGEgdmV6IG5vIGZhbGxhcmVtb3MsIERvY3RvciBJbmZpZXJubyZxdW90OzxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+RHIgRGllZ28gUi4gTG9wZXo8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdCI+VGVsZWZvbmljYSBJJiM0MztEPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxhIGhyZWY9 Imh0dHBzOi8vd3d3LmxpbmtlZGluLmNvbS9pbi9kcjJsb3Blei8iPmh0dHBzOi8vd3d3Lmxpbmtl ZGluLmNvbS9pbi9kcjJsb3Blei88L2E+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOzxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0Ij5lLW1haWw6Jm5ic3A7PC9zcGFuPjxzcGFuIGxhbmc9IkVOLUdCIiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdCI+PGEgaHJlZj0ibWFpbHRvOmRpZWdvLnIubG9wZXpAdGVs ZWZvbmljYS5jb20iPjxzcGFuIGxhbmc9IkVOLVVTIj48c3BhbiBsYW5nPSJFTi1VUyI+ZGllZ28u ci5sb3BlekB0ZWxlZm9uaWNhLmNvbTwvc3Bhbj48L3NwYW4+PC9hPjwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5UZWw6 Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAmIzQzOzM0IDkxMyAx MjkgMDQxPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tR0IiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5Nb2JpbGU6ICZuYnNwOyYjNDM7 MzQgNjgyIDA1MSAwOTE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+LS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTwvc3Bhbj48c3BhbiBsYW5nPSJFTi1HQiIg c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLUdCIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5PbiAwNi8xMC8yMDE4LCAxMTowOCwg JnF1b3Q7SGFubmVzIFRzY2hvZmVuaWcmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpIYW5uZXMu VHNjaG9mZW5pZ0Bhcm0uY29tIj5IYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPC9hPiZndDsgd3Jv dGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5I aSBEaWVnbywgPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkkgZ3Vlc3MgVGVsZWZvbmljYSBpcyBhIHVz ZXIgb2YgdGhlIHRlY2hub2xvZ3kqLiBIb3cgd291bGQgbGV2ZXJhZ2UgdGhlIHJlc3VsdHM/DQo8 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Q2lhbzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+SGFubmVzPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPio6IFlvdSBhcmUgbm90IG1hbnVmYWN0dXJpbmcgY2hpcHMsIGRldmVsb3Bpbmcgb3BlcmF0 aW5nIHN5c3RlbXMsIG9yIHdyaXRpbmcgbG93IGxldmVsIHNvZnR3YXJlIChsaWtlIGZpcm13YXJl KSB0aGF0IGludGVncmF0ZXMgdGhlIGRpc2N1c3NlZCBhdHRlc3RhdGlvbiB0ZWNobm9sb2d5LiBJ cyB0aGF0IGNvcnJlY3Q/DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxk aXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRk aW5nOjMuMHB0IDBjbSAwY20gMGNtIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPjxiPjxzcGFuIGxhbmc9IkVOLVVTIj5Gcm9tOjwvc3Bhbj48L2I+PHNw YW4gbGFuZz0iRU4tVVMiPiBEaWVnbyBSLiBMb3BleiAmbHQ7ZGllZ28uci5sb3BlekB0ZWxlZm9u aWNhLmNvbSZndDsNCjxicj4NCjxiPlNlbnQ6PC9iPiBTYXR1cmRheSwgT2N0b2JlciA2LCAyMDE4 IDEyOjI3IEFNPGJyPg0KPGI+VG86PC9iPiBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7SGFubmVzLlRz Y2hvZmVuaWdAYXJtLmNvbSZndDs7IGVhdEBpZXRmLm9yZzsgcmF0c0BpZXRmLm9yZzxicj4NCjxi PkNjOjwvYj4gJ0JlbmphbWluIEthZHVrJyAmbHQ7a2FkdWtAbWl0LmVkdSZndDs8YnI+DQo8Yj5T dWJqZWN0OjwvYj4gUmU6IFtFQVRdIEJPRiBQcmVwYXJhdGlvbjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5I aSw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPldlIGFyZSBpbnRlcmVz dGVkIGluIGZvc3RlcmluZyBhdHRlc3RhdGlvbiB0ZWNobm9sb2dpZXMgYWJsZSB0byBzdXBwb3J0 IGFuZCBsZXZlcmFnZSBuZXR3b3JrIHZpcnR1YWxpemF0aW9uIHRlY2huaXF1ZXMgKHllcywgTkZW IHN0cmlrZXMgYmFja+KApiksIGFuZCBhcmUgaW4gY29udGFjdCB3aXRoIG90aGVyIGNvbXBhbmll cw0KIHRoYXQgc2hhcmUgdGhlIHNhbWUgaW50ZXJlc3QuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0Ij5JIHdvbuKAmXQgbWFrZSBpdCB0byBCYW5na29rLCBidXQgd2lsbCBi ZSBoYXBweSB0byBoZWxwIGluIGFueXRoaW5nIEkgY2FuIHRocm91Z2ggcmVtb3RlIHBhcnRpY2lw YXRpb24uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5CZSBnb29kZSw8 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4tLTwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mcXVvdDtFc3RhIHZleiBubyBm YWxsYXJlbW9zLCBEb2N0b3IgSW5maWVybm8mcXVvdDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQiPkRyIERpZWdvIFIuIExvcGV6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQiPlRlbGVmb25pY2EgSSYjNDM7RDwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij48YSBocmVmPSJodHRwczovL3d3dy5saW5rZWRp bi5jb20vaW4vZHIybG9wZXovIj5odHRwczovL3d3dy5saW5rZWRpbi5jb20vaW4vZHIybG9wZXov PC9hPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+ZS1tYWls OiZuYnNwOzxhIGhyZWY9Im1haWx0bzpkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tIj48c3Bh biBsYW5nPSJFTi1VUyI+ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbTwvc3Bhbj48L2E+PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPlRlbDombmJzcDsmbmJz cDsmbmJzcDsgJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICYjNDM7MzQgOTEzIDEyOSAwNDE8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+TW9iaWxlOiAmbmJzcDsm IzQzOzM0IDY4MiAwNTEgMDkxPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdCI+LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDo3Mi4wcHQiPk9uIDA1LzEwLzIwMTgsIDE0OjMwLCAmcXVvdDtFQVQgb24gYmVoYWxm IG9mIEhhbm5lcyBUc2Nob2ZlbmlnJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86ZWF0LWJvdW5j ZXNAaWV0Zi5vcmciPmVhdC1ib3VuY2VzQGlldGYub3JnPC9hPiBvbiBiZWhhbGYgb2YNCjxhIGhy ZWY9Im1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tIj5IYW5uZXMuVHNjaG9mZW5pZ0Bh cm0uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQiPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6NzIuMHB0Ij5IaSBCZW4sIEhpIEJPRiBjaGFpcnMsIEhpIGFsbCwgPG86cD4NCjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQi PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjcyLjBwdCI+SSBoYXZlIGJlZW4gdGhpbmtpbmcgYWJvdXQgaG93IHRvIHR1cm4gdGhp cyBCb0YgaW50byBhIHN1Y2Nlc3MuIEkgc2VlIGEgZmV3IGNoYWxsZW5nZXM6PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDo3Mi4wcHQiPlRoZXJlIGFyZSBkaWZmZXJlbnQgaXRlbXMgaW4gc2NvcGUgb2YgdGhlIHdvcmsg YW5kIHdlIChBcm0pIGFyZSBpbnRlcmVzdGVkIGluIGNvbnRyaWJ1dGluZyB0byB0aG9zZSB0aGF0 IHJlbGF0ZSB0byB0aGUgRUFUL2F0dGVzdGF0aW9uIHRva2VuIHdvcmsuIFdlIGFyZSBoYXBweSB0 byBnaXZlIGEgcHJlc2VudGF0aW9uIGFib3V0IHRob3NlIGJ1dCBJIGhhdmVu4oCZdA0KIHNlZW4g YW55IGFnZW5kYSBmb3IgdGhlIEJvRiB5ZXQuIFdobyBpcyBpbiBjaGFyZ2Ugb2YgcHJlcGFyaW5n IGFuIGFnZW5kYT8gSSBoYXZlIHNlZW4gQm9GcyBmYWlsIHdoZXJlIHRoZSBwcmVzZW50YXRpb25z IHdlcmVu4oCZdCB3ZWxsIGFsaWduZWQgb3Igbm90IGNsZWFybHkgZGVtb25zdHJhdGluZyBhIHJl YWwtd29ybGQgcHJvYmxlbS4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjcyLjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij5BdCB0aGUgQm9GIHdlIHdp bGwgaGF2ZSB0byBkZW1vbnN0cmF0ZSB0aGF0IHRoZXJlIGFyZSBjb21wYW5pZXMgaW52b2x2ZWQg d2hvIGFyZSBhY3R1YWxseSB3aWxsaW5nIHRvIGRvIHRoZSBoZWF2eSBsaWZ0aW5nIHRvIHR1cm4g dGhpcyBlZmZvcnQgaW50byBhIHN1Y2Nlc3MuIFNpbmNlIHRoZXJlIGFyZSB2ZXJ5IGRpZmZlcmVu dCBpdGVtcyBsaXN0ZWQgb24gdGhlDQogcHJvcG9zZWQgY2hhcnRlciB0ZXh0IEkgYW0gY3VyaW91 cyB3aGV0aGVyIHRoZXJlIGlzIHJlYXNvbmFibGUgc3VwcG9ydCBmb3IgYWxsIG9mIHRoZW0uIEkg Y2FuIG9ubHkgc3BlYWsgZm9yIG91ciBpbnRlcmVzdCBpbiB0aGUgRUFUIGl0ZW1zIGFuZCB3ZSBh cmUgd29ya2luZyB3aXRoIGNvbXBhbmllcyB0byBzdGF0ZSB0aGVpciBzdXBwb3J0IG9uIHRoZSBt YWlsaW5nIGxpc3QuIEJ1dCB0aGUgQm9GIGlzIGxpa2VseSBnb2luZyB0byBmYWlsIGlmDQogdGhl cmUgaXMgb25seSBzdXBwb3J0IGZvciBhIHN1YnNldCBvZiB0aGUgaXRlbXMuIFdoZXJlIGFyZSB3 ZSB3aXRoIHRoZSByZXN0IGFuZCB3aG8gaXMgcmVhY2hpbmcgb3V0IHRvIHdoaWNoIHBhcnQgb2Yg dGhlIGluZHVzdHJ5Pw0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6NzIuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQiPkNpYW88bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDo3Mi4wcHQiPkhhbm5lczxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Ojcy LjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6NzIuMHB0Ij5JTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhp cyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNv IGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBs ZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRo ZQ0KIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2Us IG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlv dS4NCjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwi IGFsaWduPSJjZW50ZXIiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQ7dGV4dC1hbGlnbjpjZW50 ZXIiPg0KPGhyIHNpemU9IjAiIHdpZHRoPSIxMDAlIiBhbGlnbj0iY2VudGVyIj4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo3LjVwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOmdyYXkiPjxicj4NCkVzdGUgbWVuc2FqZSB5IHN1cyBhZGp1bnRvcyBzZSBkaXJp Z2VuIGV4Y2x1c2l2YW1lbnRlIGEgc3UgZGVzdGluYXRhcmlvLCBwdWVkZSBjb250ZW5lciBpbmZv cm1hY2nDs24gcHJpdmlsZWdpYWRhIG8gY29uZmlkZW5jaWFsIHkgZXMgcGFyYSB1c28gZXhjbHVz aXZvIGRlIGxhIHBlcnNvbmEgbyBlbnRpZGFkIGRlIGRlc3Rpbm8uIFNpIG5vIGVzIHVzdGVkLiBl bCBkZXN0aW5hdGFyaW8gaW5kaWNhZG8sIHF1ZWRhIG5vdGlmaWNhZG8gZGUgcXVlIGxhDQogbGVj dHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24geS9vIGNvcGlhIHNpbiBhdXRvcml6YWNp w7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0dWQgZGUgbGEgbGVnaXNsYWNpw7NuIHZp Z2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUgbWVuc2FqZSBwb3IgZXJyb3IsIGxlIHJvZ2Ftb3Mg cXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRpYXRhbWVudGUgcG9yIGVzdGEgbWlzbWEgdsOtYSB5 IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24uPGJyPg0KPGJyPg0KVGhlIGluZm9ybWF0aW9uIGNv bnRhaW5lZCBpbiB0aGlzIHRyYW5zbWlzc2lvbiBpcyBwcml2aWxlZ2VkIGFuZCBjb25maWRlbnRp YWwgaW5mb3JtYXRpb24gaW50ZW5kZWQgb25seSBmb3IgdGhlIHVzZSBvZiB0aGUgaW5kaXZpZHVh bCBvciBlbnRpdHkgbmFtZWQgYWJvdmUuIElmIHRoZSByZWFkZXIgb2YgdGhpcyBtZXNzYWdlIGlz IG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0 IGFueSBkaXNzZW1pbmF0aW9uLA0KIGRpc3RyaWJ1dGlvbiBvciBjb3B5aW5nIG9mIHRoaXMgY29t bXVuaWNhdGlvbiBpcyBzdHJpY3RseSBwcm9oaWJpdGVkLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0 aGlzIHRyYW5zbWlzc2lvbiBpbiBlcnJvciwgZG8gbm90IHJlYWQgaXQuIFBsZWFzZSBpbW1lZGlh dGVseSByZXBseSB0byB0aGUgc2VuZGVyIHRoYXQgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBjb21t dW5pY2F0aW9uIGluIGVycm9yIGFuZCB0aGVuIGRlbGV0ZSBpdC48YnI+DQo8YnI+DQpFc3RhIG1l bnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBhbyBzZXUgZGVz dGluYXTDoXJpbywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZpbGVnaWFkYSBvdSBjb25m aWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlkYWRlIGRl IGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlvIGluZGlj YWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUgcXVlIGENCiBsZWl0dXJhLCB1dGlsaXphw6fDo28sIGRp dnVsZ2HDp8OjbyBlL291IGPDs3BpYSBzZW0gYXV0b3JpemHDp8OjbyBwb2RlIGVzdGFyIHByb2li aWRhIGVtIHZpcnR1ZGUgZGEgbGVnaXNsYcOnw6NvIHZpZ2VudGUuIFNlIHJlY2ViZXUgZXN0YSBt ZW5zYWdlbSBwb3IgZXJybywgcm9nYW1vcy1saGUgcXVlIG5vcyBvIGNvbXVuaXF1ZSBpbWVkaWF0 YW1lbnRlIHBvciBlc3RhIG1lc21hIHZpYSBlIHByb2NlZGEgYSBzdWEgZGVzdHJ1acOnw6NvPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+SU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwg YW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2 aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90 aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUNCiBjb250 ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9y ZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJyPg0KPGhyPg0KPGZvbnQgZmFjZT0iQXJpYWwiIGNvbG9y PSJHcmF5IiBzaXplPSIxIj48YnI+DQpFc3RlIG1lbnNhamUgeSBzdXMgYWRqdW50b3Mgc2UgZGly aWdlbiBleGNsdXNpdmFtZW50ZSBhIHN1IGRlc3RpbmF0YXJpbywgcHVlZGUgY29udGVuZXIgaW5m b3JtYWNpw7NuIHByaXZpbGVnaWFkYSBvIGNvbmZpZGVuY2lhbCB5IGVzIHBhcmEgdXNvIGV4Y2x1 c2l2byBkZSBsYSBwZXJzb25hIG8gZW50aWRhZCBkZSBkZXN0aW5vLiBTaSBubyBlcyB1c3RlZC4g ZWwgZGVzdGluYXRhcmlvIGluZGljYWRvLCBxdWVkYSBub3RpZmljYWRvIGRlIHF1ZSBsYQ0KIGxl Y3R1cmEsIHV0aWxpemFjacOzbiwgZGl2dWxnYWNpw7NuIHkvbyBjb3BpYSBzaW4gYXV0b3JpemFj acOzbiBwdWVkZSBlc3RhciBwcm9oaWJpZGEgZW4gdmlydHVkIGRlIGxhIGxlZ2lzbGFjacOzbiB2 aWdlbnRlLiBTaSBoYSByZWNpYmlkbyBlc3RlIG1lbnNhamUgcG9yIGVycm9yLCBsZSByb2dhbW9z IHF1ZSBub3MgbG8gY29tdW5pcXVlIGlubWVkaWF0YW1lbnRlIHBvciBlc3RhIG1pc21hIHbDrWEg eSBwcm9jZWRhIGEgc3UgZGVzdHJ1Y2Npw7NuLjxicj4NCjxicj4NClRoZSBpbmZvcm1hdGlvbiBj b250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Npb24gaXMgcHJpdmlsZWdlZCBhbmQgY29uZmlkZW50 aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9ubHkgZm9yIHRoZSB1c2Ugb2YgdGhlIGluZGl2aWR1 YWwgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUgcmVhZGVyIG9mIHRoaXMgbWVzc2FnZSBp cyBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhh dCBhbnkgZGlzc2VtaW5hdGlvbiwNCiBkaXN0cmlidXRpb24gb3IgY29weWluZyBvZiB0aGlzIGNv bW11bmljYXRpb24gaXMgc3RyaWN0bHkgcHJvaGliaXRlZC4gSWYgeW91IGhhdmUgcmVjZWl2ZWQg dGhpcyB0cmFuc21pc3Npb24gaW4gZXJyb3IsIGRvIG5vdCByZWFkIGl0LiBQbGVhc2UgaW1tZWRp YXRlbHkgcmVwbHkgdG8gdGhlIHNlbmRlciB0aGF0IHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgY29t bXVuaWNhdGlvbiBpbiBlcnJvciBhbmQgdGhlbiBkZWxldGUgaXQuPGJyPg0KPGJyPg0KRXN0YSBt ZW5zYWdlbSBlIHNldXMgYW5leG9zIHNlIGRpcmlnZW0gZXhjbHVzaXZhbWVudGUgYW8gc2V1IGRl c3RpbmF0w6FyaW8sIHBvZGUgY29udGVyIGluZm9ybWHDp8OjbyBwcml2aWxlZ2lhZGEgb3UgY29u ZmlkZW5jaWFsIGUgw6kgcGFyYSB1c28gZXhjbHVzaXZvIGRhIHBlc3NvYSBvdSBlbnRpZGFkZSBk ZSBkZXN0aW5vLiBTZSBuw6NvIMOpIHZvc3NhIHNlbmhvcmlhIG8gZGVzdGluYXTDoXJpbyBpbmRp Y2FkbywgZmljYSBub3RpZmljYWRvIGRlIHF1ZSBhDQogbGVpdHVyYSwgdXRpbGl6YcOnw6NvLCBk aXZ1bGdhw6fDo28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBwcm9p YmlkYSBlbSB2aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1IGVzdGEg bWVuc2FnZW0gcG9yIGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBjb211bmlxdWUgaW1lZGlh dGFtZW50ZSBwb3IgZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEgc3VhIGRlc3RydWnDp8Ojbzxi cj4NCjwvZm9udD4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_29147EFB7A73459F8B6FF4BC8898E5AFtelefonicacom_-- From nobody Sun Oct 7 20:15:57 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 072A6128766; Sun, 7 Oct 2018 20:15:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bRc-JBmX26WC; Sun, 7 Oct 2018 20:15:46 -0700 (PDT) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40062.outbound.protection.outlook.com [40.107.4.62]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 992071200D7; Sun, 7 Oct 2018 20:15:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=NZmm66fJ9MzqBFrQOAwkPx80nAfiyzaNUiGuNy+QuQs=; b=LGcl/XWcjMG/1yNLK4lEsRZVdhWAmZyEBxtP9aLgIBy8G15C3Soqo6Z54Dfc0q1wYY29VY2hoWqAIfP7hoqy7Bi3wM0bXP9C5MhFh60i7gjEHuMtnd6e7ZBf/jGn7bKox3OeGWbYVGDBRLnsxoIntPe1EOkLIyQDNs13aW3GSdo= Received: from DB7PR08MB3401.eurprd08.prod.outlook.com (20.176.238.94) by DB7PR08MB3098.eurprd08.prod.outlook.com (52.134.110.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1207.21; Mon, 8 Oct 2018 03:15:43 +0000 Received: from DB7PR08MB3401.eurprd08.prod.outlook.com ([fe80::f4d7:1902:be2f:c087]) by DB7PR08MB3401.eurprd08.prod.outlook.com ([fe80::f4d7:1902:be2f:c087%4]) with mapi id 15.20.1207.024; Mon, 8 Oct 2018 03:15:42 +0000 From: Suresh Marisetty To: Hannes Tschofenig , Michael Richardson , "eat@ietf.org" , "rats@ietf.org" Thread-Topic: [EAT] [Rats] Real EAT implementations Thread-Index: AQHUXZpWDpOZ71LwM02HMmb6pZBuSqUTqvgAgAEDBYA= Date: Mon, 8 Oct 2018 03:15:42 +0000 Message-ID: References: <7871DF5D-01E4-496A-B35D-82D1397B55AA@island-resort.com> <30469.1538847042@localhost> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Suresh.Marisetty@arm.com; x-originating-ip: [107.196.102.252] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DB7PR08MB3098; 6:tYndAIoFNZQoh1bpRPFsQrcwLU4SfN0A+WSkG1HuXaJMpY/b8CWsMGqLmTznhT+jK8yuVARhGP1a12HLURun07+0HubO+dE/dh9rXpDw6QnbLkodEPdt5tcO2uY0B+csb8sNeRtz7ZqcCT8aTsRSVOypkq5n7qYoYNXda11baOwURzUgJ1IMjiie5rJfkmRZz3Nbk3CqlTnrzK822QyODRDQXZjIVO0BWTbnvzVCmye4Dyn3U2YEuAWEPCs8yvude8m9Mn6drJ6StgLB01T+d6yNABifW3IS6ylhZj55oeHmpNbZgQfKgrbcD9hfacYJkvceb8IyT/0nDuS+xSkDMfj7/JkG9g+ELtdkOcrwcgynC3omH/Oat6pC2uJ2IKEMeddWPyBemHVZm4yefvR9Op284um9+qFdT9EScU2d1kHHXRvZHqS2hx8Mi9xtVE6gJb+Fw0hQlvYOepF3psgscg==; 5:ex994y/nhjhj+XKs9FZfJpvimmsYfyzCBArTCksE9ObjglrwsAfFtEPVF37F4EBDE/EzpZTw87KRUthQm755yE8GOVy45E+1VTvhQq64nTppN5AeqnlTltCKFVuDYrFaSHqcDJecCT0xQ/K2DY79ywdKxBwC5rRxWbCnWn/bDlw=; 7:3WEfwSdACb0YQ9gw6ruvUGuj5B22ct0dDDH0aL84lNL61BOiQIBouQ1/XATYP7x6dPUP9tE4wVIlYzRj/IC/ItueH4957TQMtPi6nPPXH/WY95EgB8nP0tPWmq42zEY8bg+l37P6/Q68QDI3aiyyVPrSs8NVKLCgKhJQKJhoqWI3mxmPVog7w1Uy+77aMMvGNnGKL+r+dDjMf+d+YotTAyenvzdlWEtXk59UjP+qgh5O6cMRKGmVclgTircLc4Oo x-ms-exchange-antispam-srfa-diagnostics: SOS;SOR; x-ms-office365-filtering-correlation-id: 79aa3c48-3746-484a-42b9-08d62ccc54e4 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:DB7PR08MB3098; x-ms-traffictypediagnostic: DB7PR08MB3098: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705)(11711142671493)(180628864354917); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(3231355)(944501410)(52105095)(10201501046)(93006095)(93001095)(6055026)(149066)(150057)(6041310)(20161123564045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123558120)(201708071742011)(7699051); SRVR:DB7PR08MB3098; BCL:0; PCL:0; RULEID:; SRVR:DB7PR08MB3098; x-forefront-prvs: 081904387B x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(39850400004)(136003)(376002)(396003)(346002)(40434004)(199004)(189003)(13464003)(110136005)(316002)(8676002)(486006)(229853002)(74316002)(7736002)(305945005)(14454004)(256004)(2900100001)(7696005)(33656002)(6436002)(966005)(478600001)(53936002)(71200400001)(66066001)(68736007)(14444005)(99286004)(72206003)(9686003)(76176011)(5024004)(11346002)(476003)(2906002)(71190400001)(6306002)(55016002)(81166006)(81156014)(26005)(106356001)(105586002)(8936002)(5250100002)(102836004)(2501003)(3846002)(6116002)(5660300001)(53546011)(6246003)(186003)(86362001)(6506007)(25786009)(446003)(97736004); DIR:OUT; SFP:1101; SCL:1; SRVR:DB7PR08MB3098; H:DB7PR08MB3401.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: qf/KFXEh3zXqJ5aql79rTtF66W/bkggYZZFJNqZW+z0THrwUziWcGMSYeq7WqM/7ho9QxIvwP8+/1W7cD5/y/ZVY5GgLa6Cyic+446vtXIXtKymV+Z4yHsUJrMP10rPlFml9jNhIUCIdek1sGI4BiShEh0xIQeAUVBlBAfoSHDZ89siNUbw/WSAkBWiluHz1unJjXt8b9EOytx3JwCHBnri/8DHQv+nIvrjq31e5mvMbsz/YLM7nNkcbR8fE9Bgi+s/28sARB3GsnqcqY51npRvC1Yw0ZgL5YZEaT55+jkTsSjgub4X8VIEXL0lyWoFmm0aO04qJsvy3YvtmOy4Js0vkiQ3woy4dv21//Zc3udQ= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 79aa3c48-3746-484a-42b9-08d62ccc54e4 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Oct 2018 03:15:42.8074 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB7PR08MB3098 Archived-At: Subject: Re: [Rats] [EAT] Real EAT implementations X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Oct 2018 03:15:49 -0000 SEksDQoNCkxpa2UgSmVyZW15IGluZm9ybWVkIGluIGFub3RoZXIgdGhyZWFkLCBHbG9iYWxQbGF0 Zm9ybSBpcyBhbGlnbmluZyB3aXRoIHRoZXNlIHN0YW5kYXJkIGNsYWltcyBhbmQgd29ya2luZyBv biBBUEkgZGVmaW5pdGlvbiBhcyB3ZWxsIGFzIHBhcnQgb2YgdGhlIFRydXN0ZWQgUGxhdGZvcm0g U2VydmljZXMgY29tbWl0dGVlLg0KDQpJbiBzeW5jaCB1cCB3aXRoIGFib3ZlLCBBcm0gUGxhdGZv cm0gU2VjdXJpdHkgQXJjaGl0ZWN0dXJlIGlzIGFsc28gYWxpZ25pbmcgd2l0aCBpdC4NCg0KRGVm aW5pbmcgdGhlIGJhc2UgY2xhaW1zIGFuZCBzdGFuZGFyZGl6aW5nIHRoZW0gaXMgYSB3aW4td2lu IGluIHRoZSBJb1Qgc3BhY2Ugc3BlY2lmaWNhbGx5LCB0byByZWR1Y2UgbWFya2V0IGZyYWdtZW50 YXRpb24gYW5kIHByb21vdGUgaW50ZXJvcGVyYWJpbGl0eSB3aXRoIENsb3VkIFJlbHlpbmcgUGFy dGllcy9WZXJpZmllcnMuDQoNClRoYW5rcw0KU3VyZXNoIE1hcmlzZXR0eQ0KDQoNCi0tLS0tT3Jp Z2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBFQVQgPGVhdC1ib3VuY2VzQGlldGYub3JnPiBPbiBC ZWhhbGYgT2YgSGFubmVzIFRzY2hvZmVuaWcNClNlbnQ6IFN1bmRheSwgT2N0b2JlciA3LCAyMDE4 IDQ6NDQgQU0NClRvOiBNaWNoYWVsIFJpY2hhcmRzb24gPG1jcitpZXRmQHNhbmRlbG1hbi5jYT47 IGVhdEBpZXRmLm9yZzsgcmF0c0BpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtFQVRdIFtSYXRzXSBS ZWFsIEVBVCBpbXBsZW1lbnRhdGlvbnMNCg0KSGkgTWljaGFlbCwNCg0KQXJtIGhhcyBsYXVuY2hl ZCB0aGUgUGxhdGZvcm0gU2VjdXJpdHkgQXJjaGl0ZWN0dXJlIChQU0EpIGF0IEFybSBUZWNoQ29u IDIwMTcgd2l0aCB0aGUgZ29hbCB0byBpbXByb3ZlIElvVCBzZWN1cml0eS4NCkl0IGlzIGEgZmFp cmx5IGJyb2FkIGVmZm9ydCBjbHVzdGVyZWQgaW50byB0aHJlZSBhcmVhcywgbmFtZWx5IGFuIGFu YWx5c2lzLCBhcmNoaXRlY3R1cmUgYW5kIGltcGxlbWVudGF0aW9uIHBoYXNlLiBGb3IgdGhlIGZp cnN0IHBoYXNlIHdlIHByb3ZpZGUgdGVtcGxhdGVzIGZvciB0aHJlYXQgYW5hbHlzaXMgdG8gZGVy aXZlIHNlY3VyaXR5IHJlcXVpcmVtZW50cy4gRm9yIHRoZSBhcmNoaXRlY3R1cmUgcGhhc2Ugd2Ug b2ZmZXIgaGFyZHdhcmUgc3BlY2lmaWNhdGlvbnMuIEZvciB0aGUgdGhpcmQgcGhhc2Ugd2Ugb2Zm ZXIgY29kZS4NCg0KVGhlIExpbmFybyBmb3VuZGF0aW9uIGhhcyBzdGFydGVkIGEgcHJvamVjdCBm b3IgZmlybXdhcmUgZGV2ZWxvcG1lbnQgb24gdGhlc2UgQ29ydGV4IE0tY2xhc3MgZGV2aWNlcyAo Y2FsbGVkIFRydXN0ZWQgRmlybXdhcmUgTSwgb3IgVEYtTSksIHNlZSBodHRwczovL2NvbW11bml0 eS5hcm0uY29tL2lvdC9iL2Jsb2cvcG9zdHMvdGhlLW5leHQtc3RlcC1mb3ItcHNhLWFuZC1hLXNl Y3VyZS1pb3QtZnV0dXJlLiBUaGUgVEYtTSBpcyB0aGUgcGxhY2Ugd2hlcmUgd2UgYXJlIGltcGxl bWVudCB0aGUgRUFUIHRva2VuIGZ1bmN0aW9uYWxpdHkgKGFzIHBhcnQgb2YgdGhlIGF0dGVzdGF0 aW9uIEFQSSkuIFRoZXJlIGFyZSBhbHNvIG90aGVyIEFQSXMsIHN1Y2ggYXMgY3J5cHRvIGFuZCBz ZWN1cmUgc3RvcmFnZS4NClNpbmNlIHRoZSBhdHRlc3RhdGlvbiBBUEkgbm90IG9ubHkgYWxsb3dz IGFuIGFwcGxpY2F0aW9uIHRvIGFjY2VzcyBhdHRlc3RhdGlvbiBmdW5jdGlvbmFsaXR5IGxvY2Fs bHkgb24gdGhlIGRldmljZSBidXQgYWxzbyB0byBleHBvc2UgdGhlc2UgYXR0ZXN0YXRpb24gdG9r ZW5zIHRvIG90aGVyIHNlcnZpY2VzIHRoZXJlIGlzIGFuIGludGVyb3BlcmFiaWxpdHkgcHJvYmxl bS4gVGhlIFF1YWxjb21tLWRldmVsb3BlZCB0b2tlbiBmb3JtYXQsIHdoaWNoIHJlLXVzZXMgZXhp c3RpbmcgSUVURiB0ZWNobm9sb2d5LCBzaG93ZWQgdXAgYXQgdGhlIHJpZ2h0IHRpbWUgZm9yIHVz IGFuZCB3ZSBiZWxpZXZlIGl0IGlzIGEgZ29vZCBhcHByb2FjaC4gRm9yIHRoaXMgcmVhc29uIHdl IHN1cHBvcnQgZHJhZnQtaWV0Zi1tYW5keWFtLWVhdC4NCg0KVGhlIFRGLU0gaW1wbGVtZW50YXRp b24gYW5kIHRoZSB3b3JrIHdlIGRvIG9uIGF0dGVzdGF0aW9uIGZlZWxzIHByZXR0eSByZWFsIHRv IG1lLiBXZSBob3BlIHRoYXQgbWFueSBjb21wYW5pZXMgaW1wbGVtZW50aW5nIElvVCBwcm9kdWN0 cyB3YW50IHRvIG1ha2UgdXNlIG9mIHRoZSBURi1NIGNvZGUgYXMgYSBmb3VuZGF0aW9uIHRvIG1h a2UgdGhlaXIgZGV2aWNlcyBtb3JlIHNlY3VyZS4NCg0KQ2lhbw0KSGFubmVzDQoNClBTOiBNb3Jl IGRldGFpbHMgYWJvdXQgdGhlIFBTQSBjYW4gYmUgZm91bmQgYXQgaHR0cHM6Ly9wYWdlcy5hcm0u Y29tL3BzYS1yZXNvdXJjZXMuaHRtbC4gSWYgeW91IGhhcHBlbiB0byBiZSBpbiBTYW4gSm9zZSBp biB0aGUgd2VlayBvZiAxNnRoIC0gMTh0aCBPY3RvYmVyIEFybSBhbmQgaXRzIHBhcnRuZXJzIHdp bGwgdGFsayBhYm91dCB0aGUgcmVjZW50IGRldmVsb3BtZW50cyBhcm91bmQgdGhlIFBTQSAoYW5k IElvVCBzZWN1cml0eSBpbiBnZW5lcmFsKSBhdCBBcm0gVGVjaENvbi4NCg0KLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCkZyb206IEVBVCA8ZWF0LWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFs ZiBPZiBNaWNoYWVsIFJpY2hhcmRzb24NClNlbnQ6IFNhdHVyZGF5LCBPY3RvYmVyIDYsIDIwMTgg NzozMSBQTQ0KVG86IGVhdEBpZXRmLm9yZzsgcmF0c0BpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtF QVRdIFtSYXRzXSBSZWFsIEVBVCBpbXBsZW1lbnRhdGlvbnMNCg0KDQpMYXVyZW5jZSBMdW5kYmxh ZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT4gd3JvdGU6DQogICAgPiBJIGJlbGlldmUgb25lIG9m IHRoZSBhcmVhIGRpcmVjdG9ycyBhc2tlZCB3aG/igJlzIGdvaW5nIHRvIGltcGxlbWVudA0KICAg ID4gdGhlc2UgYXR0ZXN0YXRpb24gc2NoZW1lcyB3ZSBzdGFuZGFyZGl6ZS4gT25lIGFuc3dlciBp cyBRdWFsY29tbeKAmXMNCiAgICA+IGFscmVhZHkgY29tbWVyY2lhbGl6ZWQgcHJlY3Vyc29yIGlt cGxlbWVudGF0aW9uIG9mIEVBVCB3aGljaCBpcw0KICAgID4gZGVzY3JpYmVkIHZlcnkgYnJpZWZs eSBpbiBvZmZpY2lhbCBtYXJrZXRpbmcgbWF0ZXJpYWwgb24gUXVhbGNvbW3igJlzDQogICAgPiB3 ZWIgc2l0ZSBhcyDigJxIYXJkd2FyZSBUb2tlbuKAnS4NCg0KSSBzZWUgdGhpcyBhcyBldmlkZW5j ZToNCiAgMSkgdGhlIG1hcmtldCBkb2Vzbid0IG5lZWQvd2FudCBhIHN0YW5kYXJkDQogIDIpIFF1 YWxjb21tIGlzbid0IGdvaW5nIHRvIGltcGxlbWVudCBvdXIgc3RhbmRhcmQsIHRoZXkgYWxyZWFk eSBoYXZlIHRoZWlyIG93bi4NCg0KTm93IHRoYXQgY291bGQgYmUgdHJpdmlhbGx5IGJlIHJlZnV0 ZWQgaWYgd2Ugc2F3IGNsZWFyIHBhcnRpY2lwYXRpb24gZnJvbSBxdWFsY29tbSwgYnV0IEkgaGF2 ZW4ndCBzZWVuIGl0IHlldC4gIEJ1dCwgbWF5YmUgSSBtaXNzZWQgaXQuDQoNCkkgYXdhaXQgdGhl IGNoYXJ0ZXIuDQpTbyBmYXIgSSBoYXZlbid0IHNlZW4gc29tZXRoaW5nIHRoYXQgaXMgY29uY3Jl dGUgZW5vdWdoIHRvIGJlIHVzZWZ1bCBvbiBpdHMgb3duLg0KDQotLQ0KTWljaGFlbCBSaWNoYXJk c29uIDxtY3IrSUVURkBzYW5kZWxtYW4uY2E+LCBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MgIC09 IElQdjYgSW9UIGNvbnN1bHRpbmcgPS0NCg0KDQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250 ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBh bmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJl Y2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3Qg ZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55 IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0u IFRoYW5rIHlvdS4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fDQpFQVQgbWFpbGluZyBsaXN0DQpFQVRAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vZWF0DQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2Yg dGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBh bHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQs IHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3Nl IHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3Nl LCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5 b3UuDQo= From nobody Mon Oct 8 12:43:17 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD52A13106B; Mon, 8 Oct 2018 12:43:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.891 X-Spam-Level: X-Spam-Status: No, score=-1.891 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_FILL_THIS_FORM_SHORT=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 16mLP1IElklU; Mon, 8 Oct 2018 12:43:06 -0700 (PDT) Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-he1eur04on0611.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe0d::611]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 84037130FBE; Mon, 8 Oct 2018 12:43:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jFTdNcCnrxFM1sEzplPJPuGK1o4+Ij/1O0Brfwcy6i4=; b=leyf8OACMPJBy6x297V/JlpxxeSFy3szR1xrXSfV1G30dBjQ85DxS5ozDCF+TqCoJsqHPlDYnjXjew+Np/csPGnFRJVjj1/elZ1Ptu974N23RvQieH5/JQIlxhsZedjhQI5PIEXm9CS2RbMGI0VgUGMTQOyOBsQ7eevlGDJBxL0= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1775.eurprd08.prod.outlook.com (10.168.67.140) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1207.23; Mon, 8 Oct 2018 19:43:02 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::ed81:d01e:32bf:6116]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::ed81:d01e:32bf:6116%8]) with mapi id 15.20.1207.024; Mon, 8 Oct 2018 19:43:02 +0000 From: Hannes Tschofenig To: "Diego R. Lopez" , "eat@ietf.org" , "rats@ietf.org" CC: 'Benjamin Kaduk' Thread-Topic: [EAT] BOF Preparation Thread-Index: AQHUXPqPnzfpBSwbUUWjNsMW7Ci7FqUR7UfggAI2oYCAAUkcAA== Date: Mon, 8 Oct 2018 19:43:01 +0000 Message-ID: References: <199F12B4-011C-4656-84C8-8BEDC2589282@telefonica.com> <29147EFB-7A73-459F-8B6F-F4BC8898E5AF@telefonica.com> In-Reply-To: <29147EFB-7A73-459F-8B6F-F4BC8898E5AF@telefonica.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [67.79.14.234] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1775; 6:ZW4d5/6wF1Bmk3qXLoLjqbOA5AmC5C46JQj+4G+IWBsjiwRLrth8qq2OAvkdNr+60fPnqwgQNY8lH9Bu8MJPO49KTHcHk/agQIKacbygdklPtytZOuX47s6z/WAU35H2kchT9YtPeQePCp4GgoB9EznicK2/tcriIiujGidr8SAAq3pEFDvBvQ4mC3qgpKuzMDyGLDtvX0lXZsEYB6pPyUeMygfKcJD5HYviAzuNaXfhLUS7tXnIRoRBqKcXPeMxi80p9Zq5T6s+fMwAhoX60lD4PjQx7gyveeMX6lTpzB1cK1aI2yAnDqkY1cWEGWle+SREPZmBErkUmQ/Dwmhg4zjVYYweHfFh7dlvyh4lnL7lZ9h8MvDG2kIoXBloOi4p+TPRlA2a8qVDaxTwIh/KX88PH9F3kb2gLWwgce70g669Hi8JERv2z9nPDaZJu8RP+0q4VP3L2i6Cl3cf0IGyjQ==; 5:rpriU6KfixF1c8OkciUiRtE6JkiH4rGilbU8m4I7lL2it/PzSMw4ckJrh8Wx+BZhuYrP7tLl8gBQ7KDxTcXkKN3CG/9u1KDToWM7ACJAhoQpa71DDkK6+aTzdQz/VFzcDsw0ct8S7NZFPlVbIWl+VrNyPXoxdhTRFsaWO81q1Ig=; 7:SgIF4bKMKKtTK74Xtg52HypArdKnFP8e/ZVx9FA0x2OYzqV63ftdCGC1Ct60U8IY6NgfcSXT3Bv+7GLTdvdEFwgHhQ2Con9CEDIpo+8TYbyv+zhwycZx6r7il0FPyEWZl071EEOdr0IKd+zK3NjQqLlFMlT2QNnLsWsyWPuYDf8adoja7kvRGfVHFupuGFVm43zjiOfaIMZg/9xm7vhdj3E7yvAasaziezHVTBTQpIX8+kUrozgWTioCTTmQYkRR x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 3c91eb15-0a37-4e6a-660b-08d62d56424a x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1775; x-ms-traffictypediagnostic: VI1PR0801MB1775: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(40392960112811)(180628864354917)(240460790083961)(231250463719595)(128460861657000)(81160342030619)(163750095850)(21748063052155)(28532068793085)(190501279198761); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(3231355)(944501410)(52105095)(10201501046)(6055026)(149066)(150057)(6041310)(20161123562045)(20161123560045)(20161123558120)(20161123564045)(201703131423095)(201703031522075)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051); SRVR:VI1PR0801MB1775; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1775; x-forefront-prvs: 081904387B x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(979002)(396003)(376002)(136003)(346002)(39860400002)(366004)(252514010)(53754006)(199004)(189003)(40134004)(25724002)(40434004)(99286004)(7696005)(316002)(296002)(6436002)(54896002)(9686003)(236005)(6306002)(55016002)(790700001)(2900100001)(6116002)(33656002)(6506007)(53546011)(3846002)(5250100002)(2501003)(2906002)(105586002)(229853002)(110136005)(76176011)(478600001)(8936002)(97736004)(26005)(186003)(81156014)(8676002)(81166006)(102836004)(74316002)(68736007)(106356001)(86362001)(71190400001)(14444005)(5024004)(256004)(446003)(72206003)(66574009)(966005)(11346002)(476003)(71200400001)(45080400002)(486006)(14454004)(66066001)(25786009)(53936002)(2201001)(4326008)(606006)(6246003)(5660300001)(7736002)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1775; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: JAl64zxlCWd+g5XFnTbycTxCUG+x7+lTIxynAnoqkQ1cIv2KT2ykr60ZcA+HABxOipVcUzutN3SAG4JjL2t5rFijG+GH+46oVFYQKIABV59t158nafBfGL/IcmyaPh4DHUmEugx4v1cWmcT4UjzKQJ0AnJ9yRsKCRhArb+Oll0PZPZeVbEIgmSrOF6YngO4S6pmjsgUo8uMgQmGdQlSr+ZCOX1pOUKz2Scv4aKTOR2xZbntTv8CTbVfGVvGFe4i8WRXISVx3SaR3PGzCC4DHYHJiVhkJ6YPfl/b+YHNlecqB7nxazhCMswljjMJ1YLYk4Q5/gGHGXNPFp74Ee/5KgMwAWmOLHr5wQjKrcj/IYFU= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB2112A4349E1610A7B4E16A6BFAE60VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3c91eb15-0a37-4e6a-660b-08d62d56424a X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Oct 2018 19:43:01.9481 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1775 Archived-At: Subject: Re: [Rats] [EAT] BOF Preparation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Oct 2018 19:43:15 -0000 --_000_VI1PR0801MB2112A4349E1610A7B4E16A6BFAE60VI1PR0801MB2112_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzLCBEaWVnby4gVGhhdOKAmXMgdXNlZnVsIGlucHV0IG9uIHRoZSBzY2VuYXJpb3MgeW91 IGFyZSBsb29raW5nIGludG8uDQoNCg0KRnJvbTogRGllZ28gUi4gTG9wZXogPGRpZWdvLnIubG9w ZXpAdGVsZWZvbmljYS5jb20+DQpTZW50OiBTdW5kYXksIE9jdG9iZXIgNywgMjAxOCA2OjUzIFBN DQpUbzogSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+OyBlYXRA aWV0Zi5vcmc7IHJhdHNAaWV0Zi5vcmcNCkNjOiAnQmVuamFtaW4gS2FkdWsnIDxrYWR1a0BtaXQu ZWR1Pg0KU3ViamVjdDogUmU6IFtFQVRdIEJPRiBQcmVwYXJhdGlvbg0KDQpIaSBIYW5uZXMsDQoN CldlIGFyZSBpbnRlcmVzdGVkIGluIHVzaW5nIHRoZSBiYXNlIHRlY2hub2xvZ3kgKHdoYXRldmVy IGlzIHN1cHBvcnRlZCBpbiBsb3cgbGV2ZWwgc29mdHdhcmUgb3Igb3BlcmF0aW5nIHN5c3RlbXMp IHRvIHN1cHBvcnQgYXR0ZXN0YXRpb24gb2YgTkZWIGRlcGxveW1lbnRzLCBlc3BlY2lhbGx5IHRo b3NlIHJlbGF0ZWQgd2l0aCB0aGUgY29sbGFib3JhdGlvbiBvZiB0aGlyZCBwYXJ0aWVzOiB3aXRo IHVuaXZlcnNhbCBFUEMsIGFuZCBlZGdlIGNvbXB1dGluZyBhcyB0aGUgbWFpbiB1c2UgY2FzZXMu IEFuZCwgd2hpbGUgaXMgdHJ1ZSB3ZSBhcmUgbm90IGRldmVsb3BpbmcgdGhlIGJhc2Ugc29mdHdh cmUsIHdlIGFyZSBjb2xsYWJvcmF0aW5nIHdpdGggYWNhZGVtaWMgdGVhbXMgd29ya2luZyBhdCB0 aGUgaHlwZXJ2aXNvciBhbmQgY29udGFpbmVyIHBsYXRmb3JtIGxldmVsLg0KDQpCZSBnb29kZSwN Cg0KLS0NCiJFc3RhIHZleiBubyBmYWxsYXJlbW9zLCBEb2N0b3IgSW5maWVybm8iDQoNCkRyIERp ZWdvIFIuIExvcGV6DQpUZWxlZm9uaWNhIEkrRA0KaHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2lu L2RyMmxvcGV6Lw0KDQplLW1haWw6IGRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb208bWFpbHRv OmRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb20+DQpUZWw6ICAgICAgICAgKzM0IDkxMyAxMjkg MDQxDQpNb2JpbGU6ICArMzQgNjgyIDA1MSAwOTENCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0NCg0KT24gMDYvMTAvMjAxOCwgMTE6MDgsICJIYW5uZXMgVHNjaG9mZW5pZyIgPEhh bm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208bWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+ PiB3cm90ZToNCg0KSGkgRGllZ28sDQoNCkkgZ3Vlc3MgVGVsZWZvbmljYSBpcyBhIHVzZXIgb2Yg dGhlIHRlY2hub2xvZ3kqLiBIb3cgd291bGQgbGV2ZXJhZ2UgdGhlIHJlc3VsdHM/DQoNCkNpYW8N Ckhhbm5lcw0KDQoqOiBZb3UgYXJlIG5vdCBtYW51ZmFjdHVyaW5nIGNoaXBzLCBkZXZlbG9waW5n IG9wZXJhdGluZyBzeXN0ZW1zLCBvciB3cml0aW5nIGxvdyBsZXZlbCBzb2Z0d2FyZSAobGlrZSBm aXJtd2FyZSkgdGhhdCBpbnRlZ3JhdGVzIHRoZSBkaXNjdXNzZWQgYXR0ZXN0YXRpb24gdGVjaG5v bG9neS4gSXMgdGhhdCBjb3JyZWN0Pw0KDQpGcm9tOiBEaWVnbyBSLiBMb3BleiA8ZGllZ28uci5s b3BlekB0ZWxlZm9uaWNhLmNvbTxtYWlsdG86ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbT4+ DQpTZW50OiBTYXR1cmRheSwgT2N0b2JlciA2LCAyMDE4IDEyOjI3IEFNDQpUbzogSGFubmVzIFRz Y2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208bWFpbHRvOkhhbm5lcy5Uc2Nob2Zl bmlnQGFybS5jb20+PjsgZWF0QGlldGYub3JnPG1haWx0bzplYXRAaWV0Zi5vcmc+OyByYXRzQGll dGYub3JnPG1haWx0bzpyYXRzQGlldGYub3JnPg0KQ2M6ICdCZW5qYW1pbiBLYWR1aycgPGthZHVr QG1pdC5lZHU8bWFpbHRvOmthZHVrQG1pdC5lZHU+Pg0KU3ViamVjdDogUmU6IFtFQVRdIEJPRiBQ cmVwYXJhdGlvbg0KDQpIaSwNCg0KV2UgYXJlIGludGVyZXN0ZWQgaW4gZm9zdGVyaW5nIGF0dGVz dGF0aW9uIHRlY2hub2xvZ2llcyBhYmxlIHRvIHN1cHBvcnQgYW5kIGxldmVyYWdlIG5ldHdvcmsg dmlydHVhbGl6YXRpb24gdGVjaG5pcXVlcyAoeWVzLCBORlYgc3RyaWtlcyBiYWNr4oCmKSwgYW5k IGFyZSBpbiBjb250YWN0IHdpdGggb3RoZXIgY29tcGFuaWVzIHRoYXQgc2hhcmUgdGhlIHNhbWUg aW50ZXJlc3QuDQoNCkkgd29u4oCZdCBtYWtlIGl0IHRvIEJhbmdrb2ssIGJ1dCB3aWxsIGJlIGhh cHB5IHRvIGhlbHAgaW4gYW55dGhpbmcgSSBjYW4gdGhyb3VnaCByZW1vdGUgcGFydGljaXBhdGlv bi4NCg0KQmUgZ29vZGUsDQoNCi0tDQoiRXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIElu Zmllcm5vIg0KDQpEciBEaWVnbyBSLiBMb3Bleg0KVGVsZWZvbmljYSBJK0QNCmh0dHBzOi8vd3d3 LmxpbmtlZGluLmNvbS9pbi9kcjJsb3Blei8NCg0KZS1tYWlsOiBkaWVnby5yLmxvcGV6QHRlbGVm b25pY2EuY29tPG1haWx0bzpkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tPg0KVGVsOiAgICAg ICAgICszNCA5MTMgMTI5IDA0MQ0KTW9iaWxlOiAgKzM0IDY4MiAwNTEgMDkxDQotLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCk9uIDA1LzEwLzIwMTgsIDE0OjMwLCAiRUFUIG9u IGJlaGFsZiBvZiBIYW5uZXMgVHNjaG9mZW5pZyIgPGVhdC1ib3VuY2VzQGlldGYub3JnPG1haWx0 bzplYXQtYm91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIEhhbm5lcy5Uc2Nob2ZlbmlnQGFy bS5jb208bWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+PiB3cm90ZToNCg0KSGkgQmVu LCBIaSBCT0YgY2hhaXJzLCBIaSBhbGwsDQoNCkkgaGF2ZSBiZWVuIHRoaW5raW5nIGFib3V0IGhv dyB0byB0dXJuIHRoaXMgQm9GIGludG8gYSBzdWNjZXNzLiBJIHNlZSBhIGZldyBjaGFsbGVuZ2Vz Og0KDQpUaGVyZSBhcmUgZGlmZmVyZW50IGl0ZW1zIGluIHNjb3BlIG9mIHRoZSB3b3JrIGFuZCB3 ZSAoQXJtKSBhcmUgaW50ZXJlc3RlZCBpbiBjb250cmlidXRpbmcgdG8gdGhvc2UgdGhhdCByZWxh dGUgdG8gdGhlIEVBVC9hdHRlc3RhdGlvbiB0b2tlbiB3b3JrLiBXZSBhcmUgaGFwcHkgdG8gZ2l2 ZSBhIHByZXNlbnRhdGlvbiBhYm91dCB0aG9zZSBidXQgSSBoYXZlbuKAmXQgc2VlbiBhbnkgYWdl bmRhIGZvciB0aGUgQm9GIHlldC4gV2hvIGlzIGluIGNoYXJnZSBvZiBwcmVwYXJpbmcgYW4gYWdl bmRhPyBJIGhhdmUgc2VlbiBCb0ZzIGZhaWwgd2hlcmUgdGhlIHByZXNlbnRhdGlvbnMgd2VyZW7i gJl0IHdlbGwgYWxpZ25lZCBvciBub3QgY2xlYXJseSBkZW1vbnN0cmF0aW5nIGEgcmVhbC13b3Js ZCBwcm9ibGVtLg0KDQpBdCB0aGUgQm9GIHdlIHdpbGwgaGF2ZSB0byBkZW1vbnN0cmF0ZSB0aGF0 IHRoZXJlIGFyZSBjb21wYW5pZXMgaW52b2x2ZWQgd2hvIGFyZSBhY3R1YWxseSB3aWxsaW5nIHRv IGRvIHRoZSBoZWF2eSBsaWZ0aW5nIHRvIHR1cm4gdGhpcyBlZmZvcnQgaW50byBhIHN1Y2Nlc3Mu IFNpbmNlIHRoZXJlIGFyZSB2ZXJ5IGRpZmZlcmVudCBpdGVtcyBsaXN0ZWQgb24gdGhlIHByb3Bv c2VkIGNoYXJ0ZXIgdGV4dCBJIGFtIGN1cmlvdXMgd2hldGhlciB0aGVyZSBpcyByZWFzb25hYmxl IHN1cHBvcnQgZm9yIGFsbCBvZiB0aGVtLiBJIGNhbiBvbmx5IHNwZWFrIGZvciBvdXIgaW50ZXJl c3QgaW4gdGhlIEVBVCBpdGVtcyBhbmQgd2UgYXJlIHdvcmtpbmcgd2l0aCBjb21wYW5pZXMgdG8g c3RhdGUgdGhlaXIgc3VwcG9ydCBvbiB0aGUgbWFpbGluZyBsaXN0LiBCdXQgdGhlIEJvRiBpcyBs aWtlbHkgZ29pbmcgdG8gZmFpbCBpZiB0aGVyZSBpcyBvbmx5IHN1cHBvcnQgZm9yIGEgc3Vic2V0 IG9mIHRoZSBpdGVtcy4gV2hlcmUgYXJlIHdlIHdpdGggdGhlIHJlc3QgYW5kIHdobyBpcyByZWFj aGluZyBvdXQgdG8gd2hpY2ggcGFydCBvZiB0aGUgaW5kdXN0cnk/DQoNCkNpYW8NCkhhbm5lcw0K DQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0 dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElm IHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNl bmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkg b3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRo ZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQoNCl9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQoNCkVzdGUgbWVuc2FqZSB5IHN1cyBhZGp1bnRvcyBzZSBkaXJp Z2VuIGV4Y2x1c2l2YW1lbnRlIGEgc3UgZGVzdGluYXRhcmlvLCBwdWVkZSBjb250ZW5lciBpbmZv cm1hY2nDs24gcHJpdmlsZWdpYWRhIG8gY29uZmlkZW5jaWFsIHkgZXMgcGFyYSB1c28gZXhjbHVz aXZvIGRlIGxhIHBlcnNvbmEgbyBlbnRpZGFkIGRlIGRlc3Rpbm8uIFNpIG5vIGVzIHVzdGVkLiBl bCBkZXN0aW5hdGFyaW8gaW5kaWNhZG8sIHF1ZWRhIG5vdGlmaWNhZG8gZGUgcXVlIGxhIGxlY3R1 cmEsIHV0aWxpemFjacOzbiwgZGl2dWxnYWNpw7NuIHkvbyBjb3BpYSBzaW4gYXV0b3JpemFjacOz biBwdWVkZSBlc3RhciBwcm9oaWJpZGEgZW4gdmlydHVkIGRlIGxhIGxlZ2lzbGFjacOzbiB2aWdl bnRlLiBTaSBoYSByZWNpYmlkbyBlc3RlIG1lbnNhamUgcG9yIGVycm9yLCBsZSByb2dhbW9zIHF1 ZSBub3MgbG8gY29tdW5pcXVlIGlubWVkaWF0YW1lbnRlIHBvciBlc3RhIG1pc21hIHbDrWEgeSBw cm9jZWRhIGEgc3UgZGVzdHJ1Y2Npw7NuLg0KDQpUaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGlu IHRoaXMgdHJhbnNtaXNzaW9uIGlzIHByaXZpbGVnZWQgYW5kIGNvbmZpZGVudGlhbCBpbmZvcm1h dGlvbiBpbnRlbmRlZCBvbmx5IGZvciB0aGUgdXNlIG9mIHRoZSBpbmRpdmlkdWFsIG9yIGVudGl0 eSBuYW1lZCBhYm92ZS4gSWYgdGhlIHJlYWRlciBvZiB0aGlzIG1lc3NhZ2UgaXMgbm90IHRoZSBp bnRlbmRlZCByZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRoYXQgYW55IGRpc3Nl bWluYXRpb24sIGRpc3RyaWJ1dGlvbiBvciBjb3B5aW5nIG9mIHRoaXMgY29tbXVuaWNhdGlvbiBp cyBzdHJpY3RseSBwcm9oaWJpdGVkLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIHRyYW5zbWlz c2lvbiBpbiBlcnJvciwgZG8gbm90IHJlYWQgaXQuIFBsZWFzZSBpbW1lZGlhdGVseSByZXBseSB0 byB0aGUgc2VuZGVyIHRoYXQgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBjb21tdW5pY2F0aW9uIGlu IGVycm9yIGFuZCB0aGVuIGRlbGV0ZSBpdC4NCg0KRXN0YSBtZW5zYWdlbSBlIHNldXMgYW5leG9z IHNlIGRpcmlnZW0gZXhjbHVzaXZhbWVudGUgYW8gc2V1IGRlc3RpbmF0w6FyaW8sIHBvZGUgY29u dGVyIGluZm9ybWHDp8OjbyBwcml2aWxlZ2lhZGEgb3UgY29uZmlkZW5jaWFsIGUgw6kgcGFyYSB1 c28gZXhjbHVzaXZvIGRhIHBlc3NvYSBvdSBlbnRpZGFkZSBkZSBkZXN0aW5vLiBTZSBuw6NvIMOp IHZvc3NhIHNlbmhvcmlhIG8gZGVzdGluYXTDoXJpbyBpbmRpY2FkbywgZmljYSBub3RpZmljYWRv IGRlIHF1ZSBhIGxlaXR1cmEsIHV0aWxpemHDp8OjbywgZGl2dWxnYcOnw6NvIGUvb3UgY8OzcGlh IHNlbSBhdXRvcml6YcOnw6NvIHBvZGUgZXN0YXIgcHJvaWJpZGEgZW0gdmlydHVkZSBkYSBsZWdp c2xhw6fDo28gdmlnZW50ZS4gU2UgcmVjZWJldSBlc3RhIG1lbnNhZ2VtIHBvciBlcnJvLCByb2dh bW9zLWxoZSBxdWUgbm9zIG8gY29tdW5pcXVlIGltZWRpYXRhbWVudGUgcG9yIGVzdGEgbWVzbWEg dmlhIGUgcHJvY2VkYSBhIHN1YSBkZXN0cnVpw6fDo28NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBj b250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlh bCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVk IHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBu b3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3Ig YW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRp dW0uIFRoYW5rIHlvdS4NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0KRXN0 ZSBtZW5zYWplIHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUgYSBzdSBk ZXN0aW5hdGFyaW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEgbyBj b25maWRlbmNpYWwgeSBlcyBwYXJhIHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlk YWQgZGUgZGVzdGluby4gU2kgbm8gZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2Fkbywg cXVlZGEgbm90aWZpY2FkbyBkZSBxdWUgbGEgbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdh Y2nDs24geS9vIGNvcGlhIHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBl biB2aXJ0dWQgZGUgbGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUg bWVuc2FqZSBwb3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRp YXRhbWVudGUgcG9yIGVzdGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24u DQoNClRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Npb24gaXMgcHJp dmlsZWdlZCBhbmQgY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9ubHkgZm9yIHRo ZSB1c2Ugb2YgdGhlIGluZGl2aWR1YWwgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUgcmVh ZGVyIG9mIHRoaXMgbWVzc2FnZSBpcyBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFy ZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwgZGlzdHJpYnV0aW9uIG9y IGNvcHlpbmcgb2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuIElm IHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBub3QgcmVh ZCBpdC4gUGxlYXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5b3UgaGF2 ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4gZGVsZXRlIGl0 Lg0KDQpFc3RhIG1lbnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFtZW50 ZSBhbyBzZXUgZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZpbGVn aWFkYSBvdSBjb25maWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29hIG91 IGVudGlkYWRlIGRlIGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBkZXN0aW5h dMOhcmlvIGluZGljYWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUgcXVlIGEgbGVpdHVyYSwgdXRpbGl6 YcOnw6NvLCBkaXZ1bGdhw6fDo28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9kZSBl c3RhciBwcm9pYmlkYSBlbSB2aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSByZWNl YmV1IGVzdGEgbWVuc2FnZW0gcG9yIGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBjb211bmlx dWUgaW1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEgc3VhIGRlc3Ry dWnDp8Ojbw0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5k IGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxl Z2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5 IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMg dG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3Ig Y29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K --_000_VI1PR0801MB2112A4349E1610A7B4E16A6BFAE60VI1PR0801MB2112_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpEZW5nWGlhbjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsN CglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OiJcQERlbmdYaWFuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCi8qIFN0 eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9y bWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTox MS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFu Lk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6IzA1NjNDMTsN Cgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxp bmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Izk1NEY3MjsNCgl0 ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlz dFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0 Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbWFyZ2luLWJvdHRvbTow aW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1z aXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpwLm1zb25v cm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1z b25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0K CW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNp emU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uRW1h aWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjAN Cgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMt c2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5 bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCglj b2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTIyDQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRv d3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjQNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVw bHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4 dDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250 LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsN CgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtw YWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0K PG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwh W2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9 ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlv dXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1HQiIgbGluaz0i IzA1NjNDMSIgdmxpbms9IiM5NTRGNzIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcywgRGllZ28uIFRoYXTigJlzIHVzZWZ1bCBpbnB1dCBv biB0aGUgc2NlbmFyaW9zIHlvdSBhcmUgbG9va2luZyBpbnRvLg0KPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4g MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIGxhbmc9IkVOLVVTIj5Gcm9tOjwv c3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBEaWVnbyBSLiBMb3BleiAmbHQ7ZGllZ28uci5s b3BlekB0ZWxlZm9uaWNhLmNvbSZndDsNCjxicj4NCjxiPlNlbnQ6PC9iPiBTdW5kYXksIE9jdG9i ZXIgNywgMjAxOCA2OjUzIFBNPGJyPg0KPGI+VG86PC9iPiBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7 SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbSZndDs7IGVhdEBpZXRmLm9yZzsgcmF0c0BpZXRmLm9y Zzxicj4NCjxiPkNjOjwvYj4gJ0JlbmphbWluIEthZHVrJyAmbHQ7a2FkdWtAbWl0LmVkdSZndDs8 YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtFQVRdIEJPRiBQcmVwYXJhdGlvbjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0Ij5IaSBIYW5uZXMsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0Ij5XZSBhcmUgaW50ZXJlc3RlZCBpbiB1c2luZyB0aGUgYmFzZSB0ZWNobm9sb2d5ICh3 aGF0ZXZlciBpcyBzdXBwb3J0ZWQgaW4gbG93IGxldmVsIHNvZnR3YXJlIG9yIG9wZXJhdGluZyBz eXN0ZW1zKSB0byBzdXBwb3J0IGF0dGVzdGF0aW9uIG9mIE5GViBkZXBsb3ltZW50cywgZXNwZWNp YWxseSB0aG9zZSByZWxhdGVkIHdpdGggdGhlIGNvbGxhYm9yYXRpb24NCiBvZiB0aGlyZCBwYXJ0 aWVzOiB3aXRoIHVuaXZlcnNhbCBFUEMsIGFuZCBlZGdlIGNvbXB1dGluZyBhcyB0aGUgbWFpbiB1 c2UgY2FzZXMuIEFuZCwgd2hpbGUgaXMgdHJ1ZSB3ZSBhcmUgbm90IGRldmVsb3BpbmcgdGhlIGJh c2Ugc29mdHdhcmUsIHdlIGFyZSBjb2xsYWJvcmF0aW5nIHdpdGggYWNhZGVtaWMgdGVhbXMgd29y a2luZyBhdCB0aGUgaHlwZXJ2aXNvciBhbmQgY29udGFpbmVyIHBsYXRmb3JtIGxldmVsLjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+QmUgZ29vZGUsPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPi0tPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRVMi IHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mcXVvdDtFc3RhIHZleiBubyBmYWxsYXJlbW9zLCBE b2N0b3IgSW5maWVybm8mcXVvdDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOzxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVT IiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+RHIgRGllZ28gUi4gTG9wZXo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQiPlRlbGVmb25pY2EgSSYjNDM7RDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdCI+PGEgaHJlZj0iaHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2luL2RyMmxvcGV6LyI+aHR0 cHM6Ly93d3cubGlua2VkaW4uY29tL2luL2RyMmxvcGV6LzwvYT4mbmJzcDs8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+ZS1tYWls OiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+PGEgaHJlZj0ibWFp bHRvOmRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb20iPjxzcGFuIGxhbmc9IkVOLVVTIj5kaWVn by5yLmxvcGV6QHRlbGVmb25pY2EuY29tPC9zcGFuPjwvYT48L3NwYW4+PHNwYW4gbGFuZz0iRVMi IHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+VGVsOiZuYnNwOyZu YnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0MzszNCA5MTMgMTI5IDA0MTxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0Ij5Nb2JpbGU6ICZuYnNwOyYjNDM7MzQgNjgyIDA1MSAwOTE8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0Ij4tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIGxh bmc9IkVTIj5PbiAwNi8xMC8yMDE4LCAxMTowOCwgJnF1b3Q7SGFubmVzIFRzY2hvZmVuaWcmcXVv dDsgJmx0OzxhIGhyZWY9Im1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tIj5IYW5uZXMu VHNjaG9mZW5pZ0Bhcm0uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxz cGFuIGxhbmc9IkVTIj5IaSBEaWVnbywgPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIGxhbmc9IkVTIj4mbmJz cDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiPkkgZ3Vlc3MgVGVsZWZvbmljYSBpcyBhIHVz ZXIgb2YgdGhlIHRlY2hub2xvZ3kqLiBIb3cgd291bGQgbGV2ZXJhZ2UgdGhlIHJlc3VsdHM/DQo8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5n PSJFUyI+Q2lhbzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyI+SGFubmVzPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxzcGFuIGxhbmc9IkVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiPio6IFlv dSBhcmUgbm90IG1hbnVmYWN0dXJpbmcgY2hpcHMsIGRldmVsb3Bpbmcgb3BlcmF0aW5nIHN5c3Rl bXMsIG9yIHdyaXRpbmcgbG93IGxldmVsIHNvZnR3YXJlIChsaWtlIGZpcm13YXJlKSB0aGF0IGlu dGVncmF0ZXMgdGhlIGRpc2N1c3NlZCBhdHRlc3RhdGlvbiB0ZWNobm9sb2d5LiBJcyB0aGF0IGNv cnJlY3Q/DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlk ICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PGI+PHNwYW4gbGFuZz0iRU4tVVMiPkZy b206PC9zcGFuPjwvYj48c3BhbiBsYW5nPSJFTi1VUyI+IERpZWdvIFIuIExvcGV6ICZsdDs8YSBo cmVmPSJtYWlsdG86ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbSI+ZGllZ28uci5sb3BlekB0 ZWxlZm9uaWNhLmNvbTwvYT4mZ3Q7DQo8YnI+DQo8Yj5TZW50OjwvYj4gU2F0dXJkYXksIE9jdG9i ZXIgNiwgMjAxOCAxMjoyNyBBTTxicj4NCjxiPlRvOjwvYj4gSGFubmVzIFRzY2hvZmVuaWcgJmx0 OzxhIGhyZWY9Im1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tIj5IYW5uZXMuVHNjaG9m ZW5pZ0Bhcm0uY29tPC9hPiZndDs7DQo8YSBocmVmPSJtYWlsdG86ZWF0QGlldGYub3JnIj5lYXRA aWV0Zi5vcmc8L2E+OyA8YSBocmVmPSJtYWlsdG86cmF0c0BpZXRmLm9yZyI+cmF0c0BpZXRmLm9y ZzwvYT48YnI+DQo8Yj5DYzo8L2I+ICdCZW5qYW1pbiBLYWR1aycgJmx0OzxhIGhyZWY9Im1haWx0 bzprYWR1a0BtaXQuZWR1Ij5rYWR1a0BtaXQuZWR1PC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0Ojwv Yj4gUmU6IFtFQVRdIEJPRiBQcmVwYXJhdGlvbjwvc3Bhbj48c3BhbiBsYW5nPSJFUyI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyI+Jm5ic3A7PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+SGksPC9zcGFuPjxzcGFu IGxhbmc9IkVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBs YW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPldlIGFyZSBpbnRlcmVzdGVkIGluIGZv c3RlcmluZyBhdHRlc3RhdGlvbiB0ZWNobm9sb2dpZXMgYWJsZSB0byBzdXBwb3J0IGFuZCBsZXZl cmFnZSBuZXR3b3JrIHZpcnR1YWxpemF0aW9uIHRlY2huaXF1ZXMgKHllcywgTkZWIHN0cmlrZXMg YmFja+KApiksIGFuZCBhcmUgaW4gY29udGFjdCB3aXRoIG90aGVyDQogY29tcGFuaWVzIHRoYXQg c2hhcmUgdGhlIHNhbWUgaW50ZXJlc3QuPC9zcGFuPjxzcGFuIGxhbmc9IkVTIj48bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDs8L3NwYW4+ PHNwYW4gbGFuZz0iRVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQiPkkgd29u4oCZdCBtYWtlIGl0IHRvIEJhbmdrb2ssIGJ1dCB3aWxsIGJlIGhh cHB5IHRvIGhlbHAgaW4gYW55dGhpbmcgSSBjYW4gdGhyb3VnaCByZW1vdGUgcGFydGljaXBhdGlv bi48L3NwYW4+PHNwYW4gbGFuZz0iRVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyIgc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOzwvc3Bhbj48c3BhbiBsYW5nPSJFUyI+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+QmUgZ29vZGUs PC9zcGFuPjxzcGFuIGxhbmc9IkVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRVMiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4tLTwv c3Bhbj48c3BhbiBsYW5nPSJFUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdCI+JnF1b3Q7RXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIElu Zmllcm5vJnF1b3Q7PC9zcGFuPjxzcGFuIGxhbmc9IkVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFu Zz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0i RVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQi PkRyIERpZWdvIFIuIExvcGV6PC9zcGFuPjxzcGFuIGxhbmc9IkVTIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNw YW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5UZWxlZm9uaWNhIEkmIzQzO0Q8 L3NwYW4+PHNwYW4gbGFuZz0iRVMiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQiPjxhIGhyZWY9Imh0dHBzOi8vd3d3LmxpbmtlZGluLmNvbS9pbi9k cjJsb3Blei8iPmh0dHBzOi8vd3d3LmxpbmtlZGluLmNvbS9pbi9kcjJsb3Blei88L2E+Jm5ic3A7 PC9zcGFuPjxzcGFuIGxhbmc9IkVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiIHN0eWxl PSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDs8L3NwYW4+PHNwYW4gbGFuZz0iRVMiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPmUtbWFpbDombmJz cDs8YSBocmVmPSJtYWlsdG86ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbSI+PHNwYW4gbGFu Zz0iRU4tVVMiPmRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb208L3NwYW4+PC9hPjwvc3Bhbj48 c3BhbiBsYW5nPSJFUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdCI+VGVsOiZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgJiM0MzszNCA5MTMgMTI5IDA0MTwvc3Bhbj48c3BhbiBsYW5nPSJFUyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+TW9iaWxlOiAmbmJzcDsm IzQzOzM0IDY4MiAwNTEgMDkxPC9zcGFuPjxzcGFuIGxhbmc9IkVTIj48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPi0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08L3NwYW4+PHNwYW4gbGFuZz0iRVMiPjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOzwvc3Bhbj48 c3BhbiBsYW5nPSJFUyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIGxhbmc9IkVT Ij5PbiAwNS8xMC8yMDE4LCAxNDozMCwgJnF1b3Q7RUFUIG9uIGJlaGFsZiBvZiBIYW5uZXMgVHNj aG9mZW5pZyZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmVhdC1ib3VuY2VzQGlldGYub3JnIj5l YXQtYm91bmNlc0BpZXRmLm9yZzwvYT4gb24gYmVoYWxmIG9mDQo8YSBocmVmPSJtYWlsdG86SGFu bmVzLlRzY2hvZmVuaWdAYXJtLmNvbSI+SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTwvYT4mZ3Q7 IHdyb3RlOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBsYW5nPSJF UyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIGxhbmc9IkVTIj5IaSBCZW4sIEhp IEJPRiBjaGFpcnMsIEhpIGFsbCwNCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gbGFuZz0iRVMiPiZuYnNw OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDoxLjBpbiI+PHNwYW4gbGFuZz0iRVMiPkkgaGF2ZSBiZWVuIHRoaW5raW5nIGFib3V0 IGhvdyB0byB0dXJuIHRoaXMgQm9GIGludG8gYSBzdWNjZXNzLiBJIHNlZSBhIGZldyBjaGFsbGVu Z2VzOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gbGFuZz0iRVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNw YW4gbGFuZz0iRVMiPlRoZXJlIGFyZSBkaWZmZXJlbnQgaXRlbXMgaW4gc2NvcGUgb2YgdGhlIHdv cmsgYW5kIHdlIChBcm0pIGFyZSBpbnRlcmVzdGVkIGluIGNvbnRyaWJ1dGluZyB0byB0aG9zZSB0 aGF0IHJlbGF0ZSB0byB0aGUgRUFUL2F0dGVzdGF0aW9uIHRva2VuIHdvcmsuIFdlIGFyZSBoYXBw eSB0byBnaXZlIGEgcHJlc2VudGF0aW9uIGFib3V0IHRob3NlDQogYnV0IEkgaGF2ZW7igJl0IHNl ZW4gYW55IGFnZW5kYSBmb3IgdGhlIEJvRiB5ZXQuIFdobyBpcyBpbiBjaGFyZ2Ugb2YgcHJlcGFy aW5nIGFuIGFnZW5kYT8gSSBoYXZlIHNlZW4gQm9GcyBmYWlsIHdoZXJlIHRoZSBwcmVzZW50YXRp b25zIHdlcmVu4oCZdCB3ZWxsIGFsaWduZWQgb3Igbm90IGNsZWFybHkgZGVtb25zdHJhdGluZyBh IHJlYWwtd29ybGQgcHJvYmxlbS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gbGFuZz0iRVMiPiZuYnNw OzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDoxLjBpbiI+PHNwYW4gbGFuZz0iRVMiPkF0IHRoZSBCb0Ygd2Ugd2lsbCBoYXZlIHRv IGRlbW9uc3RyYXRlIHRoYXQgdGhlcmUgYXJlIGNvbXBhbmllcyBpbnZvbHZlZCB3aG8gYXJlIGFj dHVhbGx5IHdpbGxpbmcgdG8gZG8gdGhlIGhlYXZ5IGxpZnRpbmcgdG8gdHVybiB0aGlzIGVmZm9y dCBpbnRvIGEgc3VjY2Vzcy4gU2luY2UgdGhlcmUgYXJlIHZlcnkgZGlmZmVyZW50IGl0ZW1zDQog bGlzdGVkIG9uIHRoZSBwcm9wb3NlZCBjaGFydGVyIHRleHQgSSBhbSBjdXJpb3VzIHdoZXRoZXIg dGhlcmUgaXMgcmVhc29uYWJsZSBzdXBwb3J0IGZvciBhbGwgb2YgdGhlbS4gSSBjYW4gb25seSBz cGVhayBmb3Igb3VyIGludGVyZXN0IGluIHRoZSBFQVQgaXRlbXMgYW5kIHdlIGFyZSB3b3JraW5n IHdpdGggY29tcGFuaWVzIHRvIHN0YXRlIHRoZWlyIHN1cHBvcnQgb24gdGhlIG1haWxpbmcgbGlz dC4gQnV0IHRoZSBCb0YgaXMgbGlrZWx5IGdvaW5nDQogdG8gZmFpbCBpZiB0aGVyZSBpcyBvbmx5 IHN1cHBvcnQgZm9yIGEgc3Vic2V0IG9mIHRoZSBpdGVtcy4gV2hlcmUgYXJlIHdlIHdpdGggdGhl IHJlc3QgYW5kIHdobyBpcyByZWFjaGluZyBvdXQgdG8gd2hpY2ggcGFydCBvZiB0aGUgaW5kdXN0 cnk/DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIGxhbmc9IkVTIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxz cGFuIGxhbmc9IkVTIj5DaWFvPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBsYW5nPSJFUyI+SGFubmVzPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjEuMGluIj48c3BhbiBsYW5nPSJFUyI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBsYW5n PSJFUyI+SU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFu eSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2Vk LiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRo ZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdA0KIGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0 byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBj b3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVp biI+PHNwYW4gbGFuZz0iRVMiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5 bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPg0KPGRpdiBjbGFzcz0iTXNvTm9ybWFsIiBhbGlnbj0iY2Vu dGVyIiBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxzcGFuIGxhbmc9IkVTIj4NCjxociBzaXpl PSIxIiB3aWR0aD0iMTAwJSIgYWxpZ249ImNlbnRlciI+DQo8L3NwYW4+PC9kaXY+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5n PSJFUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjVwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOmdyYXkiPjxicj4NCkVzdGUgbWVuc2FqZSB5IHN1cyBhZGp1bnRv cyBzZSBkaXJpZ2VuIGV4Y2x1c2l2YW1lbnRlIGEgc3UgZGVzdGluYXRhcmlvLCBwdWVkZSBjb250 ZW5lciBpbmZvcm1hY2nDs24gcHJpdmlsZWdpYWRhIG8gY29uZmlkZW5jaWFsIHkgZXMgcGFyYSB1 c28gZXhjbHVzaXZvIGRlIGxhIHBlcnNvbmEgbyBlbnRpZGFkIGRlIGRlc3Rpbm8uIFNpIG5vIGVz IHVzdGVkLiBlbCBkZXN0aW5hdGFyaW8gaW5kaWNhZG8sIHF1ZWRhIG5vdGlmaWNhZG8gZGUgcXVl IGxhDQogbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24geS9vIGNvcGlhIHNpbiBh dXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0dWQgZGUgbGEgbGVnaXNs YWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUgbWVuc2FqZSBwb3IgZXJyb3IsIGxl IHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRpYXRhbWVudGUgcG9yIGVzdGEgbWlz bWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24uPGJyPg0KPGJyPg0KVGhlIGluZm9y bWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIHRyYW5zbWlzc2lvbiBpcyBwcml2aWxlZ2VkIGFuZCBj b25maWRlbnRpYWwgaW5mb3JtYXRpb24gaW50ZW5kZWQgb25seSBmb3IgdGhlIHVzZSBvZiB0aGUg aW5kaXZpZHVhbCBvciBlbnRpdHkgbmFtZWQgYWJvdmUuIElmIHRoZSByZWFkZXIgb2YgdGhpcyBt ZXNzYWdlIGlzIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCB5b3UgYXJlIGhlcmVieSBub3Rp ZmllZCB0aGF0IGFueSBkaXNzZW1pbmF0aW9uLA0KIGRpc3RyaWJ1dGlvbiBvciBjb3B5aW5nIG9m IHRoaXMgY29tbXVuaWNhdGlvbiBpcyBzdHJpY3RseSBwcm9oaWJpdGVkLiBJZiB5b3UgaGF2ZSBy ZWNlaXZlZCB0aGlzIHRyYW5zbWlzc2lvbiBpbiBlcnJvciwgZG8gbm90IHJlYWQgaXQuIFBsZWFz ZSBpbW1lZGlhdGVseSByZXBseSB0byB0aGUgc2VuZGVyIHRoYXQgeW91IGhhdmUgcmVjZWl2ZWQg dGhpcyBjb21tdW5pY2F0aW9uIGluIGVycm9yIGFuZCB0aGVuIGRlbGV0ZSBpdC48YnI+DQo8YnI+ DQpFc3RhIG1lbnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBh byBzZXUgZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZpbGVnaWFk YSBvdSBjb25maWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29hIG91IGVu dGlkYWRlIGRlIGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBkZXN0aW5hdMOh cmlvIGluZGljYWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUgcXVlIGENCiBsZWl0dXJhLCB1dGlsaXph w6fDo28sIGRpdnVsZ2HDp8OjbyBlL291IGPDs3BpYSBzZW0gYXV0b3JpemHDp8OjbyBwb2RlIGVz dGFyIHByb2liaWRhIGVtIHZpcnR1ZGUgZGEgbGVnaXNsYcOnw6NvIHZpZ2VudGUuIFNlIHJlY2Vi ZXUgZXN0YSBtZW5zYWdlbSBwb3IgZXJybywgcm9nYW1vcy1saGUgcXVlIG5vcyBvIGNvbXVuaXF1 ZSBpbWVkaWF0YW1lbnRlIHBvciBlc3RhIG1lc21hIHZpYSBlIHByb2NlZGEgYSBzdWEgZGVzdHJ1 acOnw6NvPC9zcGFuPjxzcGFuIGxhbmc9IkVTIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMi PklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0 YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYg eW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2Vu ZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QNCiBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55 IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0 aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRVMiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNlbnRlciIg c3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBsYW5nPSJFUyI+DQo8aHIgc2l6ZT0iMyIg d2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9zcGFuPjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6Ny41cHQ7Zm9udC1mYW1p bHk6JnF1b3Q7QXJpYWwmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjpncmF5Ij48YnI+DQpFc3RlIG1l bnNhamUgeSBzdXMgYWRqdW50b3Mgc2UgZGlyaWdlbiBleGNsdXNpdmFtZW50ZSBhIHN1IGRlc3Rp bmF0YXJpbywgcHVlZGUgY29udGVuZXIgaW5mb3JtYWNpw7NuIHByaXZpbGVnaWFkYSBvIGNvbmZp ZGVuY2lhbCB5IGVzIHBhcmEgdXNvIGV4Y2x1c2l2byBkZSBsYSBwZXJzb25hIG8gZW50aWRhZCBk ZSBkZXN0aW5vLiBTaSBubyBlcyB1c3RlZC4gZWwgZGVzdGluYXRhcmlvIGluZGljYWRvLCBxdWVk YSBub3RpZmljYWRvIGRlIHF1ZSBsYQ0KIGxlY3R1cmEsIHV0aWxpemFjacOzbiwgZGl2dWxnYWNp w7NuIHkvbyBjb3BpYSBzaW4gYXV0b3JpemFjacOzbiBwdWVkZSBlc3RhciBwcm9oaWJpZGEgZW4g dmlydHVkIGRlIGxhIGxlZ2lzbGFjacOzbiB2aWdlbnRlLiBTaSBoYSByZWNpYmlkbyBlc3RlIG1l bnNhamUgcG9yIGVycm9yLCBsZSByb2dhbW9zIHF1ZSBub3MgbG8gY29tdW5pcXVlIGlubWVkaWF0 YW1lbnRlIHBvciBlc3RhIG1pc21hIHbDrWEgeSBwcm9jZWRhIGEgc3UgZGVzdHJ1Y2Npw7NuLjxi cj4NCjxicj4NClRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Npb24g aXMgcHJpdmlsZWdlZCBhbmQgY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9ubHkg Zm9yIHRoZSB1c2Ugb2YgdGhlIGluZGl2aWR1YWwgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0 aGUgcmVhZGVyIG9mIHRoaXMgbWVzc2FnZSBpcyBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwg eW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwNCiBkaXN0cmli dXRpb24gb3IgY29weWluZyBvZiB0aGlzIGNvbW11bmljYXRpb24gaXMgc3RyaWN0bHkgcHJvaGli aXRlZC4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyB0cmFuc21pc3Npb24gaW4gZXJyb3IsIGRv IG5vdCByZWFkIGl0LiBQbGVhc2UgaW1tZWRpYXRlbHkgcmVwbHkgdG8gdGhlIHNlbmRlciB0aGF0 IHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgY29tbXVuaWNhdGlvbiBpbiBlcnJvciBhbmQgdGhlbiBk ZWxldGUgaXQuPGJyPg0KPGJyPg0KRXN0YSBtZW5zYWdlbSBlIHNldXMgYW5leG9zIHNlIGRpcmln ZW0gZXhjbHVzaXZhbWVudGUgYW8gc2V1IGRlc3RpbmF0w6FyaW8sIHBvZGUgY29udGVyIGluZm9y bWHDp8OjbyBwcml2aWxlZ2lhZGEgb3UgY29uZmlkZW5jaWFsIGUgw6kgcGFyYSB1c28gZXhjbHVz aXZvIGRhIHBlc3NvYSBvdSBlbnRpZGFkZSBkZSBkZXN0aW5vLiBTZSBuw6NvIMOpIHZvc3NhIHNl bmhvcmlhIG8gZGVzdGluYXTDoXJpbyBpbmRpY2FkbywgZmljYSBub3RpZmljYWRvIGRlIHF1ZSBh DQogbGVpdHVyYSwgdXRpbGl6YcOnw6NvLCBkaXZ1bGdhw6fDo28gZS9vdSBjw7NwaWEgc2VtIGF1 dG9yaXphw6fDo28gcG9kZSBlc3RhciBwcm9pYmlkYSBlbSB2aXJ0dWRlIGRhIGxlZ2lzbGHDp8Oj byB2aWdlbnRlLiBTZSByZWNlYmV1IGVzdGEgbWVuc2FnZW0gcG9yIGVycm8sIHJvZ2Ftb3MtbGhl IHF1ZSBub3MgbyBjb211bmlxdWUgaW1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtZXNtYSB2aWEgZSBw cm9jZWRhIGEgc3VhIGRlc3RydWnDp8Ojbzwvc3Bhbj48c3BhbiBsYW5nPSJFUyI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2Yg dGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBh bHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQs IHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3Nl IHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3Nl LA0KIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5r IHlvdS4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_VI1PR0801MB2112A4349E1610A7B4E16A6BFAE60VI1PR0801MB2112_-- From nobody Mon Oct 8 19:00:59 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8DB361310F4; Mon, 8 Oct 2018 19:00:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.49 X-Spam-Level: X-Spam-Status: No, score=-14.49 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_FILL_THIS_FORM_SHORT=0.01, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IKa3ADXmORkA; Mon, 8 Oct 2018 19:00:46 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0BFF01310E2; Mon, 8 Oct 2018 19:00:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=43408; q=dns/txt; s=iport; t=1539050446; x=1540260046; h=from:to:cc:subject:date:message-id:mime-version; bh=Rrt0g+R0lnFGzcl4Iq2YxITlh+WMEcZX+Lugv/F23nE=; b=ds0wATwjxrOQXblgAxOnOimS+2n1DhTWlwMAaCJT6IItUuwpHYhFIgP8 kvAkqoGkPYJFdySZ2FrIod8svGFt8dNv6qJpQE55Pa00rsWqAWo1QcFF1 S56gHYEj4clMByzYy9IY4QB7uskSdokIxhogfY3S4Rb2AJU4WU0tEk4fh A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ADAABEC7xb/5xdJa1kGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQcBAQEBAQGBUQQBAQEBAQsBgQ5NKmZ/KAqDa4gVjC+BaCWWaRSBZgs?= =?us-ascii?q?BASCBV4J1AheEJiE0DQ0BAwEBAgEBAm0cDIU5AQEDAiMKQQIJEgEGAhEDAQE?= =?us-ascii?q?BIQEGAwIEJwkUCQoEAQ0FH4MCAYEdZA+IZJtNgS4fhAwBBweFVAWKHIEdF4F?= =?us-ascii?q?BPyZsJwwTgkyDGwEBAYEkCQESARwKBwkIAQcFCgKCSTGCJgKIPRyFN49fCQK?= =?us-ascii?q?McVGDBheBTiKEQ4MOhjiHNI4ZAhEUgSUdOCc9cXAVOyoBgkGDOAECgkiKUm8?= =?us-ascii?q?BihGBH4EfAQE?= X-IronPort-AV: E=Sophos;i="5.54,358,1534809600"; d="scan'208,217";a="463577720" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 09 Oct 2018 02:00:44 +0000 Received: from XCH-ALN-011.cisco.com (xch-aln-011.cisco.com [173.36.7.21]) by rcdn-core-5.cisco.com (8.15.2/8.15.2) with ESMTPS id w9920imd006812 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 9 Oct 2018 02:00:44 GMT Received: from xch-aln-008.cisco.com (173.36.7.18) by XCH-ALN-011.cisco.com (173.36.7.21) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 8 Oct 2018 21:00:43 -0500 Received: from xch-aln-008.cisco.com ([173.36.7.18]) by XCH-ALN-008.cisco.com ([173.36.7.18]) with mapi id 15.00.1395.000; Mon, 8 Oct 2018 21:00:43 -0500 From: "Shwetha Bhandari (shwethab)" To: Hannes Tschofenig , "Diego R. Lopez" , "eat@ietf.org" , "rats@ietf.org" CC: "'Benjamin Kaduk'" , "Eric Voit (evoit)" Thread-Topic: [Rats] [EAT] BOF Preparation Thread-Index: AQHUX3PiyQmT6CocLke6OfpTrN0yTA== Date: Tue, 9 Oct 2018 02:00:43 +0000 Message-ID: <1AE74D0A-DB9A-4847-A3C9-F25A29CA1C5B@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/f.1a.0.160910 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.65.61.60] Content-Type: multipart/alternative; boundary="_000_1AE74D0ADB9A4847A3C9F25A29CA1C5Bciscocom_" MIME-Version: 1.0 X-Outbound-SMTP-Client: 173.36.7.21, xch-aln-011.cisco.com X-Outbound-Node: rcdn-core-5.cisco.com Archived-At: Subject: Re: [Rats] [EAT] BOF Preparation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Oct 2018 02:00:51 -0000 --_000_1AE74D0ADB9A4847A3C9F25A29CA1C5Bciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSGFubmVzLCBBbGwsDQoNCkEgbnVtYmVyIG9mIG5ldHdvcmtpbmcgdmVuZG9ycyBoYXZlIGV4 cHJlc3NlZCBpbnRlcmVzdCBpbiBjb250cmlidXRpbmcgdG8gYW5kIGltcGxlbWVudGluZyB0aGUg bW9kZWxzIG9uIHRoZSBuZXR3b3JrIGRldmljZXMgdG8gcHJvdmlkZSBjaGFsbGVuZ2UtcmVzcG9u c2UgYXMgd2VsbCBhcyB1bmlkaXJlY3Rpb25hbCBhdHRlc3RhdGlvbi4gIOKAnGRyYWZ0LWJpcmto b2x6LXlhbmctYmFzaWMtcmVtb3RlLWF0dGVzdGF0aW9u4oCdIHNob3dzIHNvbWUgb2YgdGhpcyBz dXBwb3J0Lg0KDQpBbHNvIGNvbW1lcmNpYWwgaW1wbGVtZW50YXRpb25zIG9mIGFwcGxpY2F0aW9u cyBleHBvc2luZyB0aGUgYm9vdCBpbnRlZ3JpdHkgb2YgZGV2aWNlcyBleGlzdC4gIEUuZy4sIHNl ZToNCmh0dHBzOi8vd3d3LmNpc2NvLmNvbS9jL2RhbS9lbi91cy90ZC9kb2NzL2Nsb3VkLXN5c3Rl bXMtbWFuYWdlbWVudC9hcHBsaWNhdGlvbi1wb2xpY3ktaW5mcmFzdHJ1Y3R1cmUtY29udHJvbGxl ci1lbnRlcnByaXNlLW1vZHVsZS8xLTUteC9pbnRlZ3JpdHlfdmVyaWZpY2F0aW9uL3JlbGVhc2Ut bm90ZXNfdmVyXzI3NS9DaXNjb19JVl9BcHBfUk5fMV81XzBfMjc1LnBkZg0KDQpBIHN0YW5kYXJk IGRhdGEgbW9kZWwgYW5kIGFueSBwcm90b2NvbCBleHRlbnNpb24ocykgZm9yIGludGVyb3BlcmFi aWxpdHkgdGhhdCBmaXRzIGluIHRoZSBleGlzdGluZyBuZXR3b3JrIG9wZXJhdGlvbnMgd2lsbCBi ZSBvZiBrZXkgdmFsdWUgaW4gZXhwb3NpbmcgcHJvb2Ygb2YgbmV0d29yayBkZXZpY2UgaW50ZWdy aXR5LiBBdCBDaXNjbywgd2UgYXJlIGdlYXJlZCB1cCB0byBwcm9ncmVzcyB0aGlzIHdvcmsuDQoN Cg0KVGhhbmtzLA0KU2h3ZXRoYQ0KRnJvbTogUkFUUyA8cmF0cy1ib3VuY2VzQGlldGYub3JnPiBv biBiZWhhbGYgb2YgSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+ DQpEYXRlOiBUdWVzZGF5LCBPY3RvYmVyIDksIDIwMTggYXQgMToxMyBBTQ0KVG86ICJEaWVnbyBS LiBMb3BleiIgPGRpZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb20+LCAiZWF0QGlldGYub3JnIiA8 ZWF0QGlldGYub3JnPiwgInJhdHNAaWV0Zi5vcmciIDxyYXRzQGlldGYub3JnPg0KQ2M6ICdCZW5q YW1pbiBLYWR1aycgPGthZHVrQG1pdC5lZHU+DQpTdWJqZWN0OiBSZTogW1JhdHNdIFtFQVRdIEJP RiBQcmVwYXJhdGlvbg0KDQpUaGFua3MsIERpZWdvLiBUaGF04oCZcyB1c2VmdWwgaW5wdXQgb24g dGhlIHNjZW5hcmlvcyB5b3UgYXJlIGxvb2tpbmcgaW50by4NCg0KDQpGcm9tOiBEaWVnbyBSLiBM b3BleiA8ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbT4NClNlbnQ6IFN1bmRheSwgT2N0b2Jl ciA3LCAyMDE4IDY6NTMgUE0NClRvOiBIYW5uZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVu aWdAYXJtLmNvbT47IGVhdEBpZXRmLm9yZzsgcmF0c0BpZXRmLm9yZw0KQ2M6ICdCZW5qYW1pbiBL YWR1aycgPGthZHVrQG1pdC5lZHU+DQpTdWJqZWN0OiBSZTogW0VBVF0gQk9GIFByZXBhcmF0aW9u DQoNCkhpIEhhbm5lcywNCg0KV2UgYXJlIGludGVyZXN0ZWQgaW4gdXNpbmcgdGhlIGJhc2UgdGVj aG5vbG9neSAod2hhdGV2ZXIgaXMgc3VwcG9ydGVkIGluIGxvdyBsZXZlbCBzb2Z0d2FyZSBvciBv cGVyYXRpbmcgc3lzdGVtcykgdG8gc3VwcG9ydCBhdHRlc3RhdGlvbiBvZiBORlYgZGVwbG95bWVu dHMsIGVzcGVjaWFsbHkgdGhvc2UgcmVsYXRlZCB3aXRoIHRoZSBjb2xsYWJvcmF0aW9uIG9mIHRo aXJkIHBhcnRpZXM6IHdpdGggdW5pdmVyc2FsIEVQQywgYW5kIGVkZ2UgY29tcHV0aW5nIGFzIHRo ZSBtYWluIHVzZSBjYXNlcy4gQW5kLCB3aGlsZSBpcyB0cnVlIHdlIGFyZSBub3QgZGV2ZWxvcGlu ZyB0aGUgYmFzZSBzb2Z0d2FyZSwgd2UgYXJlIGNvbGxhYm9yYXRpbmcgd2l0aCBhY2FkZW1pYyB0 ZWFtcyB3b3JraW5nIGF0IHRoZSBoeXBlcnZpc29yIGFuZCBjb250YWluZXIgcGxhdGZvcm0gbGV2 ZWwuDQoNCkJlIGdvb2RlLA0KDQotLQ0KIkVzdGEgdmV6IG5vIGZhbGxhcmVtb3MsIERvY3RvciBJ bmZpZXJubyINCg0KRHIgRGllZ28gUi4gTG9wZXoNClRlbGVmb25pY2EgSStEDQpodHRwczovL3d3 dy5saW5rZWRpbi5jb20vaW4vZHIybG9wZXovDQoNCmUtbWFpbDogZGllZ28uci5sb3BlekB0ZWxl Zm9uaWNhLmNvbTxtYWlsdG86ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbT4NClRlbDogICAg ICAgICArMzQgOTEzIDEyOSAwNDENCk1vYmlsZTogICszNCA2ODIgMDUxIDA5MQ0KLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpPbiAwNi8xMC8yMDE4LCAxMTowOCwgIkhhbm5l cyBUc2Nob2ZlbmlnIiA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTxtYWlsdG86SGFubmVzLlRz Y2hvZmVuaWdAYXJtLmNvbT4+IHdyb3RlOg0KDQpIaSBEaWVnbywNCg0KSSBndWVzcyBUZWxlZm9u aWNhIGlzIGEgdXNlciBvZiB0aGUgdGVjaG5vbG9neSouIEhvdyB3b3VsZCBsZXZlcmFnZSB0aGUg cmVzdWx0cz8NCg0KQ2lhbw0KSGFubmVzDQoNCio6IFlvdSBhcmUgbm90IG1hbnVmYWN0dXJpbmcg Y2hpcHMsIGRldmVsb3Bpbmcgb3BlcmF0aW5nIHN5c3RlbXMsIG9yIHdyaXRpbmcgbG93IGxldmVs IHNvZnR3YXJlIChsaWtlIGZpcm13YXJlKSB0aGF0IGludGVncmF0ZXMgdGhlIGRpc2N1c3NlZCBh dHRlc3RhdGlvbiB0ZWNobm9sb2d5LiBJcyB0aGF0IGNvcnJlY3Q/DQoNCkZyb206IERpZWdvIFIu IExvcGV6IDxkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tPG1haWx0bzpkaWVnby5yLmxvcGV6 QHRlbGVmb25pY2EuY29tPj4NClNlbnQ6IFNhdHVyZGF5LCBPY3RvYmVyIDYsIDIwMTggMTI6Mjcg QU0NClRvOiBIYW5uZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTxtYWls dG86SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4+OyBlYXRAaWV0Zi5vcmc8bWFpbHRvOmVhdEBp ZXRmLm9yZz47IHJhdHNAaWV0Zi5vcmc8bWFpbHRvOnJhdHNAaWV0Zi5vcmc+DQpDYzogJ0Jlbmph bWluIEthZHVrJyA8a2FkdWtAbWl0LmVkdTxtYWlsdG86a2FkdWtAbWl0LmVkdT4+DQpTdWJqZWN0 OiBSZTogW0VBVF0gQk9GIFByZXBhcmF0aW9uDQoNCkhpLA0KDQpXZSBhcmUgaW50ZXJlc3RlZCBp biBmb3N0ZXJpbmcgYXR0ZXN0YXRpb24gdGVjaG5vbG9naWVzIGFibGUgdG8gc3VwcG9ydCBhbmQg bGV2ZXJhZ2UgbmV0d29yayB2aXJ0dWFsaXphdGlvbiB0ZWNobmlxdWVzICh5ZXMsIE5GViBzdHJp a2VzIGJhY2vigKYpLCBhbmQgYXJlIGluIGNvbnRhY3Qgd2l0aCBvdGhlciBjb21wYW5pZXMgdGhh dCBzaGFyZSB0aGUgc2FtZSBpbnRlcmVzdC4NCg0KSSB3b27igJl0IG1ha2UgaXQgdG8gQmFuZ2tv aywgYnV0IHdpbGwgYmUgaGFwcHkgdG8gaGVscCBpbiBhbnl0aGluZyBJIGNhbiB0aHJvdWdoIHJl bW90ZSBwYXJ0aWNpcGF0aW9uLg0KDQpCZSBnb29kZSwNCg0KLS0NCiJFc3RhIHZleiBubyBmYWxs YXJlbW9zLCBEb2N0b3IgSW5maWVybm8iDQoNCkRyIERpZWdvIFIuIExvcGV6DQpUZWxlZm9uaWNh IEkrRA0KaHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2luL2RyMmxvcGV6Lw0KDQplLW1haWw6IGRp ZWdvLnIubG9wZXpAdGVsZWZvbmljYS5jb208bWFpbHRvOmRpZWdvLnIubG9wZXpAdGVsZWZvbmlj YS5jb20+DQpUZWw6ICAgICAgICAgKzM0IDkxMyAxMjkgMDQxDQpNb2JpbGU6ICArMzQgNjgyIDA1 MSAwOTENCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KT24gMDUvMTAvMjAx OCwgMTQ6MzAsICJFQVQgb24gYmVoYWxmIG9mIEhhbm5lcyBUc2Nob2ZlbmlnIiA8ZWF0LWJvdW5j ZXNAaWV0Zi5vcmc8bWFpbHRvOmVhdC1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgSGFu bmVzLlRzY2hvZmVuaWdAYXJtLmNvbTxtYWlsdG86SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4+ IHdyb3RlOg0KDQpIaSBCZW4sIEhpIEJPRiBjaGFpcnMsIEhpIGFsbCwNCg0KSSBoYXZlIGJlZW4g dGhpbmtpbmcgYWJvdXQgaG93IHRvIHR1cm4gdGhpcyBCb0YgaW50byBhIHN1Y2Nlc3MuIEkgc2Vl IGEgZmV3IGNoYWxsZW5nZXM6DQoNClRoZXJlIGFyZSBkaWZmZXJlbnQgaXRlbXMgaW4gc2NvcGUg b2YgdGhlIHdvcmsgYW5kIHdlIChBcm0pIGFyZSBpbnRlcmVzdGVkIGluIGNvbnRyaWJ1dGluZyB0 byB0aG9zZSB0aGF0IHJlbGF0ZSB0byB0aGUgRUFUL2F0dGVzdGF0aW9uIHRva2VuIHdvcmsuIFdl IGFyZSBoYXBweSB0byBnaXZlIGEgcHJlc2VudGF0aW9uIGFib3V0IHRob3NlIGJ1dCBJIGhhdmVu 4oCZdCBzZWVuIGFueSBhZ2VuZGEgZm9yIHRoZSBCb0YgeWV0LiBXaG8gaXMgaW4gY2hhcmdlIG9m IHByZXBhcmluZyBhbiBhZ2VuZGE/IEkgaGF2ZSBzZWVuIEJvRnMgZmFpbCB3aGVyZSB0aGUgcHJl c2VudGF0aW9ucyB3ZXJlbuKAmXQgd2VsbCBhbGlnbmVkIG9yIG5vdCBjbGVhcmx5IGRlbW9uc3Ry YXRpbmcgYSByZWFsLXdvcmxkIHByb2JsZW0uDQoNCkF0IHRoZSBCb0Ygd2Ugd2lsbCBoYXZlIHRv IGRlbW9uc3RyYXRlIHRoYXQgdGhlcmUgYXJlIGNvbXBhbmllcyBpbnZvbHZlZCB3aG8gYXJlIGFj dHVhbGx5IHdpbGxpbmcgdG8gZG8gdGhlIGhlYXZ5IGxpZnRpbmcgdG8gdHVybiB0aGlzIGVmZm9y dCBpbnRvIGEgc3VjY2Vzcy4gU2luY2UgdGhlcmUgYXJlIHZlcnkgZGlmZmVyZW50IGl0ZW1zIGxp c3RlZCBvbiB0aGUgcHJvcG9zZWQgY2hhcnRlciB0ZXh0IEkgYW0gY3VyaW91cyB3aGV0aGVyIHRo ZXJlIGlzIHJlYXNvbmFibGUgc3VwcG9ydCBmb3IgYWxsIG9mIHRoZW0uIEkgY2FuIG9ubHkgc3Bl YWsgZm9yIG91ciBpbnRlcmVzdCBpbiB0aGUgRUFUIGl0ZW1zIGFuZCB3ZSBhcmUgd29ya2luZyB3 aXRoIGNvbXBhbmllcyB0byBzdGF0ZSB0aGVpciBzdXBwb3J0IG9uIHRoZSBtYWlsaW5nIGxpc3Qu IEJ1dCB0aGUgQm9GIGlzIGxpa2VseSBnb2luZyB0byBmYWlsIGlmIHRoZXJlIGlzIG9ubHkgc3Vw cG9ydCBmb3IgYSBzdWJzZXQgb2YgdGhlIGl0ZW1zLiBXaGVyZSBhcmUgd2Ugd2l0aCB0aGUgcmVz dCBhbmQgd2hvIGlzIHJlYWNoaW5nIG91dCB0byB3aGljaCBwYXJ0IG9mIHRoZSBpbmR1c3RyeT8N Cg0KQ2lhbw0KSGFubmVzDQoNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlz IGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28g YmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxl YXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhl IGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9y IHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4N Cg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0KRXN0ZSBtZW5zYWplIHkgc3Vz IGFkanVudG9zIHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUgYSBzdSBkZXN0aW5hdGFyaW8sIHB1 ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEgbyBjb25maWRlbmNpYWwgeSBl cyBwYXJhIHVzbyBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUgZGVzdGluby4g U2kgbm8gZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEgbm90aWZpY2Fk byBkZSBxdWUgbGEgbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24geS9vIGNvcGlh IHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0dWQgZGUgbGEg bGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUgbWVuc2FqZSBwb3IgZXJy b3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRpYXRhbWVudGUgcG9yIGVz dGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24uDQoNClRoZSBpbmZvcm1h dGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Npb24gaXMgcHJpdmlsZWdlZCBhbmQgY29u ZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9ubHkgZm9yIHRoZSB1c2Ugb2YgdGhlIGlu ZGl2aWR1YWwgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJZiB0aGUgcmVhZGVyIG9mIHRoaXMgbWVz c2FnZSBpcyBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZp ZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwgZGlzdHJpYnV0aW9uIG9yIGNvcHlpbmcgb2YgdGhp cyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuIElmIHlvdSBoYXZlIHJlY2Vp dmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4gUGxlYXNlIGlt bWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5b3UgaGF2ZSByZWNlaXZlZCB0aGlz IGNvbW11bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4gZGVsZXRlIGl0Lg0KDQpFc3RhIG1lbnNh Z2VtIGUgc2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBhbyBzZXUgZGVzdGlu YXTDoXJpbywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZpbGVnaWFkYSBvdSBjb25maWRl bmNpYWwgZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlkYWRlIGRlIGRl c3Rpbm8uIFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlvIGluZGljYWRv LCBmaWNhIG5vdGlmaWNhZG8gZGUgcXVlIGEgbGVpdHVyYSwgdXRpbGl6YcOnw6NvLCBkaXZ1bGdh w6fDo28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBwcm9pYmlkYSBl bSB2aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1IGVzdGEgbWVuc2Fn ZW0gcG9yIGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBjb211bmlxdWUgaW1lZGlhdGFtZW50 ZSBwb3IgZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEgc3VhIGRlc3RydWnDp8Ojbw0KSU1QT1JU QU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50 cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJl IG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1t ZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVyIHBl cnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3Jt YXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KDQpfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXw0KDQpFc3RlIG1lbnNhamUgeSBzdXMgYWRqdW50b3Mgc2UgZGlyaWdlbiBleGNs dXNpdmFtZW50ZSBhIHN1IGRlc3RpbmF0YXJpbywgcHVlZGUgY29udGVuZXIgaW5mb3JtYWNpw7Nu IHByaXZpbGVnaWFkYSBvIGNvbmZpZGVuY2lhbCB5IGVzIHBhcmEgdXNvIGV4Y2x1c2l2byBkZSBs YSBwZXJzb25hIG8gZW50aWRhZCBkZSBkZXN0aW5vLiBTaSBubyBlcyB1c3RlZC4gZWwgZGVzdGlu YXRhcmlvIGluZGljYWRvLCBxdWVkYSBub3RpZmljYWRvIGRlIHF1ZSBsYSBsZWN0dXJhLCB1dGls aXphY2nDs24sIGRpdnVsZ2FjacOzbiB5L28gY29waWEgc2luIGF1dG9yaXphY2nDs24gcHVlZGUg ZXN0YXIgcHJvaGliaWRhIGVuIHZpcnR1ZCBkZSBsYSBsZWdpc2xhY2nDs24gdmlnZW50ZS4gU2kg aGEgcmVjaWJpZG8gZXN0ZSBtZW5zYWplIHBvciBlcnJvciwgbGUgcm9nYW1vcyBxdWUgbm9zIGxv IGNvbXVuaXF1ZSBpbm1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtaXNtYSB2w61hIHkgcHJvY2VkYSBh IHN1IGRlc3RydWNjacOzbi4NCg0KVGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIHRy YW5zbWlzc2lvbiBpcyBwcml2aWxlZ2VkIGFuZCBjb25maWRlbnRpYWwgaW5mb3JtYXRpb24gaW50 ZW5kZWQgb25seSBmb3IgdGhlIHVzZSBvZiB0aGUgaW5kaXZpZHVhbCBvciBlbnRpdHkgbmFtZWQg YWJvdmUuIElmIHRoZSByZWFkZXIgb2YgdGhpcyBtZXNzYWdlIGlzIG5vdCB0aGUgaW50ZW5kZWQg cmVjaXBpZW50LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0IGFueSBkaXNzZW1pbmF0aW9u LCBkaXN0cmlidXRpb24gb3IgY29weWluZyBvZiB0aGlzIGNvbW11bmljYXRpb24gaXMgc3RyaWN0 bHkgcHJvaGliaXRlZC4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyB0cmFuc21pc3Npb24gaW4g ZXJyb3IsIGRvIG5vdCByZWFkIGl0LiBQbGVhc2UgaW1tZWRpYXRlbHkgcmVwbHkgdG8gdGhlIHNl bmRlciB0aGF0IHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgY29tbXVuaWNhdGlvbiBpbiBlcnJvciBh bmQgdGhlbiBkZWxldGUgaXQuDQoNCkVzdGEgbWVuc2FnZW0gZSBzZXVzIGFuZXhvcyBzZSBkaXJp Z2VtIGV4Y2x1c2l2YW1lbnRlIGFvIHNldSBkZXN0aW5hdMOhcmlvLCBwb2RlIGNvbnRlciBpbmZv cm1hw6fDo28gcHJpdmlsZWdpYWRhIG91IGNvbmZpZGVuY2lhbCBlIMOpIHBhcmEgdXNvIGV4Y2x1 c2l2byBkYSBwZXNzb2Egb3UgZW50aWRhZGUgZGUgZGVzdGluby4gU2UgbsOjbyDDqSB2b3NzYSBz ZW5ob3JpYSBvIGRlc3RpbmF0w6FyaW8gaW5kaWNhZG8sIGZpY2Egbm90aWZpY2FkbyBkZSBxdWUg YSBsZWl0dXJhLCB1dGlsaXphw6fDo28sIGRpdnVsZ2HDp8OjbyBlL291IGPDs3BpYSBzZW0gYXV0 b3JpemHDp8OjbyBwb2RlIGVzdGFyIHByb2liaWRhIGVtIHZpcnR1ZGUgZGEgbGVnaXNsYcOnw6Nv IHZpZ2VudGUuIFNlIHJlY2ViZXUgZXN0YSBtZW5zYWdlbSBwb3IgZXJybywgcm9nYW1vcy1saGUg cXVlIG5vcyBvIGNvbXVuaXF1ZSBpbWVkaWF0YW1lbnRlIHBvciBlc3RhIG1lc21hIHZpYSBlIHBy b2NlZGEgYSBzdWEgZGVzdHJ1acOnw6NvDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMg b2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1h eSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGll bnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Ns b3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJw b3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFu ayB5b3UuDQo= --_000_1AE74D0ADB9A4847A3C9F25A29CA1C5Bciscocom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxuczptdj0iaHR0cDovL21hY1ZtbFNj aGVtYVVyaSIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiPg0KPGhlYWQ+ DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9InRleHQvaHRtbDsgY2hh cnNldD11dGYtOCI+DQo8bWV0YSBuYW1lPSJUaXRsZSIgY29udGVudD0iIj4NCjxtZXRhIG5hbWU9 IktleXdvcmRzIiBjb250ZW50PSIiPg0KPG1ldGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJN aWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQgbWVkaXVtKSI+DQo8IS0tW2lmICFtc29dPjxzdHls ZT52XDoqIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQpvXDoqIHtiZWhhdmlvcjp1cmwo I2RlZmF1bHQjVk1MKTt9DQp3XDoqIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQouc2hh cGUge2JlaGF2aW9yOnVybCgjZGVmYXVsdCNWTUwpO30NCjwvc3R5bGU+PCFbZW5kaWZdLS0+PHN0 eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1p bHk6QXJpYWw7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAyIDIgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6RGVuZ1hpYW47DQoJcGFub3NlLTE6MiAx IDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWls eTpQTWluZ0xpVTsNCglwYW5vc2UtMToyIDIgNSAwIDAgMCAwIDAgMCAwO30NCi8qIFN0eWxlIERl ZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJ e21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7 DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21z by1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojMDU2M0MxOw0KCXRleHQtZGVjb3JhdGlvbjp1 bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjojOTU0RjcyOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRl cmxpbmU7fQ0KcC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBkaXYuTXNv TGlzdFBhcmFncmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luLXRvcDowaW47 DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltYXJnaW4tYm90dG9tOjBpbjsNCgltYXJnaW4tbGVmdDou NWluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQt ZmFtaWx5OkNhbGlicmk7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9y bWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCglt YXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseTpDYWxpYnJp O30NCnNwYW4uRW1haWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQt ZmFtaWx5OkNhbGlicmk7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMA0K CXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseTpDYWxpYnJpOw0KCWNvbG9y OndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29u YWw7DQoJZm9udC1mYW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1h aWxTdHlsZTIyDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OkNhbGli cmk7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUyMw0KCXttc28tc3R5bGUt dHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseTpDYWxpYnJpOw0KCWNvbG9yOndpbmRvd3RleHQ7 fQ0Kc3Bhbi5FbWFpbFN0eWxlMjQNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJ Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4ubXNvSW5zDQoJ e21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCW1zby1zdHlsZS1uYW1lOiIiOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7DQoJY29sb3I6dGVhbDt9DQouTXNvQ2hwRGVmYXVsdA0KCXtt c28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdv cmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4w aW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48 L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgYmdjb2xvcj0id2hpdGUiIGxhbmc9IkVOLVVTIiBsaW5r PSIjMDU2M0MxIiB2bGluaz0iIzk1NEY3MiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvdXJpZXIiPkhp IEhhbm5lcywgQWxsLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb3VyaWVyIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q291 cmllciI+QSBudW1iZXIgb2YgbmV0d29ya2luZyB2ZW5kb3JzIGhhdmUgZXhwcmVzc2VkIGludGVy ZXN0IGluIGNvbnRyaWJ1dGluZyB0byBhbmQgaW1wbGVtZW50aW5nIHRoZSBtb2RlbHMgb24gdGhl IG5ldHdvcmsgZGV2aWNlcyB0byBwcm92aWRlIGNoYWxsZW5nZS1yZXNwb25zZSBhcyB3ZWxsIGFz IHVuaWRpcmVjdGlvbmFsIGF0dGVzdGF0aW9uLiZuYnNwOyDigJxkcmFmdC1iaXJraG9sei15YW5n LWJhc2ljLXJlbW90ZS1hdHRlc3RhdGlvbuKAnQ0KIHNob3dzIHNvbWUgb2YgdGhpcyBzdXBwb3J0 LiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1mYW1pbHk6Q291cmllciI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvdXJpZXIiPkFsc28g Y29tbWVyY2lhbCBpbXBsZW1lbnRhdGlvbnMgb2YgYXBwbGljYXRpb25zIGV4cG9zaW5nIHRoZSBi b290IGludGVncml0eSBvZiBkZXZpY2VzIGV4aXN0LiZuYnNwOyBFLmcuLCBzZWU6PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OkNvdXJpZXIiPjxhIGhyZWY9Imh0dHBzOi8vd3d3LmNpc2NvLmNvbS9jL2RhbS9lbi91cy90 ZC9kb2NzL2Nsb3VkLXN5c3RlbXMtbWFuYWdlbWVudC9hcHBsaWNhdGlvbi1wb2xpY3ktaW5mcmFz dHJ1Y3R1cmUtY29udHJvbGxlci1lbnRlcnByaXNlLW1vZHVsZS8xLTUteC9pbnRlZ3JpdHlfdmVy aWZpY2F0aW9uL3JlbGVhc2Utbm90ZXNfdmVyXzI3NS9DaXNjb19JVl9BcHBfUk5fMV81XzBfMjc1 LnBkZiI+aHR0cHM6Ly93d3cuY2lzY28uY29tL2MvZGFtL2VuL3VzL3RkL2RvY3MvY2xvdWQtc3lz dGVtcy1tYW5hZ2VtZW50L2FwcGxpY2F0aW9uLXBvbGljeS1pbmZyYXN0cnVjdHVyZS1jb250cm9s bGVyLWVudGVycHJpc2UtbW9kdWxlLzEtNS14L2ludGVncml0eV92ZXJpZmljYXRpb24vcmVsZWFz ZS1ub3Rlc192ZXJfMjc1L0Npc2NvX0lWX0FwcF9STl8xXzVfMF8yNzUucGRmPC9hPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTpDb3VyaWVyIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q291cmllciI+QSBzdGFuZGFyZCBkYXRh IG1vZGVsIGFuZCBhbnkgcHJvdG9jb2wgZXh0ZW5zaW9uKHMpIGZvciBpbnRlcm9wZXJhYmlsaXR5 IHRoYXQgZml0cyBpbiB0aGUgZXhpc3RpbmcgbmV0d29yayBvcGVyYXRpb25zIHdpbGwgYmUgb2Yg a2V5IHZhbHVlIGluIGV4cG9zaW5nIHByb29mIG9mIG5ldHdvcmsgZGV2aWNlIGludGVncml0eS4g QXQgQ2lzY28sIHdlIGFyZQ0KIGdlYXJlZCB1cCB0byBwcm9ncmVzcyB0aGlzIHdvcmsuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OkNvdXJpZXIiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb3VyaWVyIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6Q291cmllciI+VGhhbmtzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb3VyaWVyIj5TaHdldGhhPG86cD48 L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xp ZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj5Gcm9tOiA8L3NwYW4+PC9iPjxz cGFuIHN0eWxlPSJjb2xvcjpibGFjayI+UkFUUyAmbHQ7cmF0cy1ib3VuY2VzQGlldGYub3JnJmd0 OyBvbiBiZWhhbGYgb2YgSGFubmVzIFRzY2hvZmVuaWcgJmx0O0hhbm5lcy5Uc2Nob2ZlbmlnQGFy bS5jb20mZ3Q7PGJyPg0KPGI+RGF0ZTogPC9iPlR1ZXNkYXksIE9jdG9iZXIgOSwgMjAxOCBhdCAx OjEzIEFNPGJyPg0KPGI+VG86IDwvYj4mcXVvdDtEaWVnbyBSLiBMb3BleiZxdW90OyAmbHQ7ZGll Z28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbSZndDssICZxdW90O2VhdEBpZXRmLm9yZyZxdW90OyAm bHQ7ZWF0QGlldGYub3JnJmd0OywgJnF1b3Q7cmF0c0BpZXRmLm9yZyZxdW90OyAmbHQ7cmF0c0Bp ZXRmLm9yZyZndDs8YnI+DQo8Yj5DYzogPC9iPidCZW5qYW1pbiBLYWR1aycgJmx0O2thZHVrQG1p dC5lZHUmZ3Q7PGJyPg0KPGI+U3ViamVjdDogPC9iPlJlOiBbUmF0c10gW0VBVF0gQk9GIFByZXBh cmF0aW9uPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PlRoYW5rcywgRGllZ28uIFRoYXTigJlzIHVzZWZ1bCBpbnB1dCBvbiB0aGUgc2NlbmFyaW9zIHlv dSBhcmUgbG9va2luZyBpbnRvLg0KPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29s aWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxiPkZyb206PC9iPiBEaWVnbyBSLiBMb3BleiAmbHQ7ZGllZ28uci5sb3BlekB0 ZWxlZm9uaWNhLmNvbSZndDsgPGJyPg0KPGI+U2VudDo8L2I+IFN1bmRheSwgT2N0b2JlciA3LCAy MDE4IDY6NTMgUE08YnI+DQo8Yj5Ubzo8L2I+IEhhbm5lcyBUc2Nob2ZlbmlnICZsdDtIYW5uZXMu VHNjaG9mZW5pZ0Bhcm0uY29tJmd0OzsgZWF0QGlldGYub3JnOyByYXRzQGlldGYub3JnPGJyPg0K PGI+Q2M6PC9iPiAnQmVuamFtaW4gS2FkdWsnICZsdDtrYWR1a0BtaXQuZWR1Jmd0Ozxicj4NCjxi PlN1YmplY3Q6PC9iPiBSZTogW0VBVF0gQk9GIFByZXBhcmF0aW9uPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+SGkg SGFubmVzLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+V2UgYXJl IGludGVyZXN0ZWQgaW4gdXNpbmcgdGhlIGJhc2UgdGVjaG5vbG9neSAod2hhdGV2ZXIgaXMgc3Vw cG9ydGVkIGluIGxvdyBsZXZlbCBzb2Z0d2FyZSBvciBvcGVyYXRpbmcgc3lzdGVtcykgdG8gc3Vw cG9ydCBhdHRlc3RhdGlvbiBvZiBORlYgZGVwbG95bWVudHMsIGVzcGVjaWFsbHkgdGhvc2UgcmVs YXRlZCB3aXRoIHRoZSBjb2xsYWJvcmF0aW9uDQogb2YgdGhpcmQgcGFydGllczogd2l0aCB1bml2 ZXJzYWwgRVBDLCBhbmQgZWRnZSBjb21wdXRpbmcgYXMgdGhlIG1haW4gdXNlIGNhc2VzLiBBbmQs IHdoaWxlIGlzIHRydWUgd2UgYXJlIG5vdCBkZXZlbG9waW5nIHRoZSBiYXNlIHNvZnR3YXJlLCB3 ZSBhcmUgY29sbGFib3JhdGluZyB3aXRoIGFjYWRlbWljIHRlYW1zIHdvcmtpbmcgYXQgdGhlIGh5 cGVydmlzb3IgYW5kIGNvbnRhaW5lciBwbGF0Zm9ybSBsZXZlbC48L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkJlIGdvb2RlLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4tLTwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdCI+JnF1b3Q7RXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9yIEluZmllcm5v JnF1b3Q7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQiPkRyIERpZWdvIFIuIExvcGV6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 Ij5UZWxlZm9uaWNhIEkmIzQzO0Q8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxhIGhyZWY9 Imh0dHBzOi8vd3d3LmxpbmtlZGluLmNvbS9pbi9kcjJsb3Blei8iPmh0dHBzOi8vd3d3Lmxpbmtl ZGluLmNvbS9pbi9kcjJsb3Blei88L2E+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPmUtbWFpbDombmJzcDs8L3NwYW4+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxhIGhyZWY9Im1haWx0bzpkaWVnby5yLmxv cGV6QHRlbGVmb25pY2EuY29tIj5kaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tPC9hPjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0Ij5UZWw6Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyAmIzQzOzM0IDkxMyAxMjkgMDQxPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPk1vYmlsZTogJm5ic3A7 JiM0MzszNCA2ODIgMDUxIDA5MTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPi0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiPk9uIDA2LzEwLzIwMTgsIDExOjA4LCAm cXVvdDtIYW5uZXMgVHNjaG9mZW5pZyZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhhbm5lcy5U c2Nob2ZlbmlnQGFybS5jb20iPkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208L2E+Jmd0OyB3cm90 ZTo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiPkhpIERpZWdvLCA8L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+PHNwYW4gbGFuZz0iRVMiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyI+ SSBndWVzcyBUZWxlZm9uaWNhIGlzIGEgdXNlciBvZiB0aGUgdGVjaG5vbG9neSouIEhvdyB3b3Vs ZCBsZXZlcmFnZSB0aGUgcmVzdWx0cz8NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0Oi41aW4iPjxzcGFuIGxhbmc9IkVTIj5DaWFvPC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIGxh bmc9IkVTIj5IYW5uZXM8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj48c3BhbiBsYW5nPSJFUyI+KjogWW91IGFyZSBub3QgbWFudWZhY3R1cmluZyBjaGlwcywg ZGV2ZWxvcGluZyBvcGVyYXRpbmcgc3lzdGVtcywgb3Igd3JpdGluZyBsb3cgbGV2ZWwgc29mdHdh cmUgKGxpa2UgZmlybXdhcmUpIHRoYXQgaW50ZWdyYXRlcyB0aGUgZGlzY3Vzc2VkIGF0dGVzdGF0 aW9uIHRlY2hub2xvZ3kuIElzIHRoYXQgY29ycmVjdD8NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5n PSJFUyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBp biAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48Yj5Gcm9tOjwvYj4gRGllZ28gUi4gTG9wZXogJmx0OzxhIGhyZWY9Im1haWx0bzpkaWVnby5y LmxvcGV6QHRlbGVmb25pY2EuY29tIj5kaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tPC9hPiZn dDsNCjxicj4NCjxiPlNlbnQ6PC9iPiBTYXR1cmRheSwgT2N0b2JlciA2LCAyMDE4IDEyOjI3IEFN PGJyPg0KPGI+VG86PC9iPiBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhh bm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20iPkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208L2E+Jmd0 OzsNCjxhIGhyZWY9Im1haWx0bzplYXRAaWV0Zi5vcmciPmVhdEBpZXRmLm9yZzwvYT47IDxhIGhy ZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj5yYXRzQGlldGYub3JnPC9hPjxicj4NCjxiPkNjOjwv Yj4gJ0JlbmphbWluIEthZHVrJyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmthZHVrQG1pdC5lZHUiPmth ZHVrQG1pdC5lZHU8L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0VBVF0gQk9GIFBy ZXBhcmF0aW9uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIGxhbmc9IkVTIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5IaSw8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5XZSBh cmUgaW50ZXJlc3RlZCBpbiBmb3N0ZXJpbmcgYXR0ZXN0YXRpb24gdGVjaG5vbG9naWVzIGFibGUg dG8gc3VwcG9ydCBhbmQgbGV2ZXJhZ2UgbmV0d29yayB2aXJ0dWFsaXphdGlvbiB0ZWNobmlxdWVz ICh5ZXMsIE5GViBzdHJpa2VzIGJhY2vigKYpLCBhbmQgYXJlIGluIGNvbnRhY3Qgd2l0aCBvdGhl cg0KIGNvbXBhbmllcyB0aGF0IHNoYXJlIHRoZSBzYW1lIGludGVyZXN0Ljwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48 c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWlu Ij48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPkkgd29u4oCZdCBtYWtl IGl0IHRvIEJhbmdrb2ssIGJ1dCB3aWxsIGJlIGhhcHB5IHRvIGhlbHAgaW4gYW55dGhpbmcgSSBj YW4gdGhyb3VnaCByZW1vdGUgcGFydGljaXBhdGlvbi48L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFuZz0i RVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gbGFu Zz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5CZSBnb29kZSw8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNw YW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+LS08L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mcXVvdDtFc3Rh IHZleiBubyBmYWxsYXJlbW9zLCBEb2N0b3IgSW5maWVybm8mcXVvdDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNw YW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+ PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6MTAuMHB0Ij5EciBEaWVnbyBSLiBMb3Bl ejwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPlRl bGVmb25pY2EgSSYjNDM7RDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQiPjxhIGhyZWY9Imh0dHBzOi8vd3d3LmxpbmtlZGluLmNvbS9pbi9kcjJsb3Bl ei8iPmh0dHBzOi8vd3d3LmxpbmtlZGluLmNvbS9pbi9kcjJsb3Blei88L2E+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+ZS1tYWls OiZuYnNwOzxhIGhyZWY9Im1haWx0bzpkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tIj48c3Bh biBsYW5nPSJFTi1VUyI+ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbTwvc3Bhbj48L2E+PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+VGVsOiZu YnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJiM0MzszNCA5MTMgMTI5 IDA0MTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQi Pk1vYmlsZTogJm5ic3A7JiM0MzszNCA2ODIgMDUxIDA5MTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxz cGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+LS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBsYW5n PSJFUyI+T24gMDUvMTAvMjAxOCwgMTQ6MzAsICZxdW90O0VBVCBvbiBiZWhhbGYgb2YgSGFubmVz IFRzY2hvZmVuaWcmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzplYXQtYm91bmNlc0BpZXRmLm9y ZyI+ZWF0LWJvdW5jZXNAaWV0Zi5vcmc8L2E+IG9uIGJlaGFsZiBvZg0KPGEgaHJlZj0ibWFpbHRv Okhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20iPkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208L2E+ Jmd0OyB3cm90ZTo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gbGFu Zz0iRVMiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBsYW5nPSJFUyI+SGkgQmVu LCBIaSBCT0YgY2hhaXJzLCBIaSBhbGwsDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIGxhbmc9IkVTIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIGxhbmc9IkVTIj5JIGhhdmUgYmVlbiB0aGlua2luZyBh Ym91dCBob3cgdG8gdHVybiB0aGlzIEJvRiBpbnRvIGEgc3VjY2Vzcy4gSSBzZWUgYSBmZXcgY2hh bGxlbmdlczo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIGxhbmc9IkVTIj4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4i PjxzcGFuIGxhbmc9IkVTIj5UaGVyZSBhcmUgZGlmZmVyZW50IGl0ZW1zIGluIHNjb3BlIG9mIHRo ZSB3b3JrIGFuZCB3ZSAoQXJtKSBhcmUgaW50ZXJlc3RlZCBpbiBjb250cmlidXRpbmcgdG8gdGhv c2UgdGhhdCByZWxhdGUgdG8gdGhlIEVBVC9hdHRlc3RhdGlvbiB0b2tlbiB3b3JrLiBXZSBhcmUg aGFwcHkgdG8gZ2l2ZSBhIHByZXNlbnRhdGlvbiBhYm91dCB0aG9zZQ0KIGJ1dCBJIGhhdmVu4oCZ dCBzZWVuIGFueSBhZ2VuZGEgZm9yIHRoZSBCb0YgeWV0LiBXaG8gaXMgaW4gY2hhcmdlIG9mIHBy ZXBhcmluZyBhbiBhZ2VuZGE/IEkgaGF2ZSBzZWVuIEJvRnMgZmFpbCB3aGVyZSB0aGUgcHJlc2Vu dGF0aW9ucyB3ZXJlbuKAmXQgd2VsbCBhbGlnbmVkIG9yIG5vdCBjbGVhcmx5IGRlbW9uc3RyYXRp bmcgYSByZWFsLXdvcmxkIHByb2JsZW0uDQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIGxhbmc9IkVTIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MS4waW4iPjxzcGFuIGxhbmc9IkVTIj5BdCB0aGUgQm9GIHdlIHdpbGwgaGF2 ZSB0byBkZW1vbnN0cmF0ZSB0aGF0IHRoZXJlIGFyZSBjb21wYW5pZXMgaW52b2x2ZWQgd2hvIGFy ZSBhY3R1YWxseSB3aWxsaW5nIHRvIGRvIHRoZSBoZWF2eSBsaWZ0aW5nIHRvIHR1cm4gdGhpcyBl ZmZvcnQgaW50byBhIHN1Y2Nlc3MuIFNpbmNlIHRoZXJlIGFyZSB2ZXJ5IGRpZmZlcmVudCBpdGVt cw0KIGxpc3RlZCBvbiB0aGUgcHJvcG9zZWQgY2hhcnRlciB0ZXh0IEkgYW0gY3VyaW91cyB3aGV0 aGVyIHRoZXJlIGlzIHJlYXNvbmFibGUgc3VwcG9ydCBmb3IgYWxsIG9mIHRoZW0uIEkgY2FuIG9u bHkgc3BlYWsgZm9yIG91ciBpbnRlcmVzdCBpbiB0aGUgRUFUIGl0ZW1zIGFuZCB3ZSBhcmUgd29y a2luZyB3aXRoIGNvbXBhbmllcyB0byBzdGF0ZSB0aGVpciBzdXBwb3J0IG9uIHRoZSBtYWlsaW5n IGxpc3QuIEJ1dCB0aGUgQm9GIGlzIGxpa2VseSBnb2luZw0KIHRvIGZhaWwgaWYgdGhlcmUgaXMg b25seSBzdXBwb3J0IGZvciBhIHN1YnNldCBvZiB0aGUgaXRlbXMuIFdoZXJlIGFyZSB3ZSB3aXRo IHRoZSByZXN0IGFuZCB3aG8gaXMgcmVhY2hpbmcgb3V0IHRvIHdoaWNoIHBhcnQgb2YgdGhlIGlu ZHVzdHJ5Pw0KPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj48c3BhbiBsYW5nPSJFUyI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGlu Ij48c3BhbiBsYW5nPSJFUyI+Q2lhbzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4gbGFuZz0iRVMiPkhhbm5l czwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDoxLjBpbiI+PHNwYW4gbGFuZz0iRVMiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+PHNwYW4g bGFuZz0iRVMiPklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFu ZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmls ZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlm eSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QNCiBkaXNjbG9zZSB0aGUgY29udGVu dHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUg b3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 Oi41aW4iPjxzcGFuIGxhbmc9IkVTIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2 IHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249 ImNlbnRlciIgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48c3BhbiBsYW5nPSJFUyI+DQo8aHIg c2l6ZT0iMSIgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9zcGFuPjwvZGl2Pg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4g bGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6Ny41cHQ7Zm9udC1mYW1pbHk6QXJpYWw7Y29sb3I6 Z3JheSI+PGJyPg0KRXN0ZSBtZW5zYWplIHkgc3VzIGFkanVudG9zIHNlIGRpcmlnZW4gZXhjbHVz aXZhbWVudGUgYSBzdSBkZXN0aW5hdGFyaW8sIHB1ZWRlIGNvbnRlbmVyIGluZm9ybWFjacOzbiBw cml2aWxlZ2lhZGEgbyBjb25maWRlbmNpYWwgeSBlcyBwYXJhIHVzbyBleGNsdXNpdm8gZGUgbGEg cGVyc29uYSBvIGVudGlkYWQgZGUgZGVzdGluby4gU2kgbm8gZXMgdXN0ZWQuIGVsIGRlc3RpbmF0 YXJpbyBpbmRpY2FkbywgcXVlZGEgbm90aWZpY2FkbyBkZSBxdWUgbGENCiBsZWN0dXJhLCB1dGls aXphY2nDs24sIGRpdnVsZ2FjacOzbiB5L28gY29waWEgc2luIGF1dG9yaXphY2nDs24gcHVlZGUg ZXN0YXIgcHJvaGliaWRhIGVuIHZpcnR1ZCBkZSBsYSBsZWdpc2xhY2nDs24gdmlnZW50ZS4gU2kg aGEgcmVjaWJpZG8gZXN0ZSBtZW5zYWplIHBvciBlcnJvciwgbGUgcm9nYW1vcyBxdWUgbm9zIGxv IGNvbXVuaXF1ZSBpbm1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtaXNtYSB2w61hIHkgcHJvY2VkYSBh IHN1IGRlc3RydWNjacOzbi48L3NwYW4+PHNwYW4gbGFuZz0iRVMiIHN0eWxlPSJmb250LXNpemU6 Ny41cHQ7Zm9udC1mYW1pbHk6UE1pbmdMaVU7Y29sb3I6Z3JheSI+PGJyPg0KPGJyPg0KPC9zcGFu PjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjcuNXB0O2ZvbnQtZmFtaWx5OkFyaWFs O2NvbG9yOmdyYXkiPlRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFuc21pc3Np b24gaXMgcHJpdmlsZWdlZCBhbmQgY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVuZGVkIG9u bHkgZm9yIHRoZSB1c2Ugb2YgdGhlIGluZGl2aWR1YWwgb3IgZW50aXR5IG5hbWVkIGFib3ZlLiBJ ZiB0aGUgcmVhZGVyIG9mIHRoaXMgbWVzc2FnZQ0KIGlzIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBp ZW50LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0IGFueSBkaXNzZW1pbmF0aW9uLCBkaXN0 cmlidXRpb24gb3IgY29weWluZyBvZiB0aGlzIGNvbW11bmljYXRpb24gaXMgc3RyaWN0bHkgcHJv aGliaXRlZC4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyB0cmFuc21pc3Npb24gaW4gZXJyb3Is IGRvIG5vdCByZWFkIGl0LiBQbGVhc2UgaW1tZWRpYXRlbHkgcmVwbHkgdG8gdGhlIHNlbmRlciB0 aGF0DQogeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBjb21tdW5pY2F0aW9uIGluIGVycm9yIGFuZCB0 aGVuIGRlbGV0ZSBpdC48YnI+DQo8YnI+DQpFc3RhIG1lbnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2Ug ZGlyaWdlbSBleGNsdXNpdmFtZW50ZSBhbyBzZXUgZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIg aW5mb3JtYcOnw6NvIHByaXZpbGVnaWFkYSBvdSBjb25maWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBl eGNsdXNpdm8gZGEgcGVzc29hIG91IGVudGlkYWRlIGRlIGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9z c2Egc2VuaG9yaWEgbyBkZXN0aW5hdMOhcmlvIGluZGljYWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUg cXVlIGENCiBsZWl0dXJhLCB1dGlsaXphw6fDo28sIGRpdnVsZ2HDp8OjbyBlL291IGPDs3BpYSBz ZW0gYXV0b3JpemHDp8OjbyBwb2RlIGVzdGFyIHByb2liaWRhIGVtIHZpcnR1ZGUgZGEgbGVnaXNs YcOnw6NvIHZpZ2VudGUuIFNlIHJlY2ViZXUgZXN0YSBtZW5zYWdlbSBwb3IgZXJybywgcm9nYW1v cy1saGUgcXVlIG5vcyBvIGNvbXVuaXF1ZSBpbWVkaWF0YW1lbnRlIHBvciBlc3RhIG1lc21hIHZp YSBlIHByb2NlZGEgYSBzdWEgZGVzdHJ1acOnw6NvPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIGxhbmc9IkVT Ij5JTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0 dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElm IHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNl bmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90DQogZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFu eSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkg dGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVTIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIi IHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PHNwYW4gbGFuZz0iRVMiPg0KPGhyIHNpemU9IjMi IHdpZHRoPSIxMDAlIiBhbGlnbj0iY2VudGVyIj4NCjwvc3Bhbj48L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVTIiBzdHlsZT0iZm9udC1zaXplOjcuNXB0O2ZvbnQtZmFt aWx5OkFyaWFsO2NvbG9yOmdyYXkiPjxicj4NCkVzdGUgbWVuc2FqZSB5IHN1cyBhZGp1bnRvcyBz ZSBkaXJpZ2VuIGV4Y2x1c2l2YW1lbnRlIGEgc3UgZGVzdGluYXRhcmlvLCBwdWVkZSBjb250ZW5l ciBpbmZvcm1hY2nDs24gcHJpdmlsZWdpYWRhIG8gY29uZmlkZW5jaWFsIHkgZXMgcGFyYSB1c28g ZXhjbHVzaXZvIGRlIGxhIHBlcnNvbmEgbyBlbnRpZGFkIGRlIGRlc3Rpbm8uIFNpIG5vIGVzIHVz dGVkLiBlbCBkZXN0aW5hdGFyaW8gaW5kaWNhZG8sIHF1ZWRhIG5vdGlmaWNhZG8gZGUgcXVlIGxh DQogbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24geS9vIGNvcGlhIHNpbiBhdXRv cml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0dWQgZGUgbGEgbGVnaXNsYWNp w7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUgbWVuc2FqZSBwb3IgZXJyb3IsIGxlIHJv Z2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRpYXRhbWVudGUgcG9yIGVzdGEgbWlzbWEg dsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24uPC9zcGFuPjxzcGFuIGxhbmc9IkVTIiBz dHlsZT0iZm9udC1zaXplOjcuNXB0O2ZvbnQtZmFtaWx5OlBNaW5nTGlVO2NvbG9yOmdyYXkiPjxi cj4NCjxicj4NCjwvc3Bhbj48c3BhbiBsYW5nPSJFUyIgc3R5bGU9ImZvbnQtc2l6ZTo3LjVwdDtm b250LWZhbWlseTpBcmlhbDtjb2xvcjpncmF5Ij5UaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGlu IHRoaXMgdHJhbnNtaXNzaW9uIGlzIHByaXZpbGVnZWQgYW5kIGNvbmZpZGVudGlhbCBpbmZvcm1h dGlvbiBpbnRlbmRlZCBvbmx5IGZvciB0aGUgdXNlIG9mIHRoZSBpbmRpdmlkdWFsIG9yIGVudGl0 eSBuYW1lZCBhYm92ZS4gSWYgdGhlIHJlYWRlciBvZiB0aGlzIG1lc3NhZ2UNCiBpcyBub3QgdGhl IGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgZGlz c2VtaW5hdGlvbiwgZGlzdHJpYnV0aW9uIG9yIGNvcHlpbmcgb2YgdGhpcyBjb21tdW5pY2F0aW9u IGlzIHN0cmljdGx5IHByb2hpYml0ZWQuIElmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNt aXNzaW9uIGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4gUGxlYXNlIGltbWVkaWF0ZWx5IHJlcGx5 IHRvIHRoZSBzZW5kZXIgdGhhdA0KIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgY29tbXVuaWNhdGlv biBpbiBlcnJvciBhbmQgdGhlbiBkZWxldGUgaXQuPGJyPg0KPGJyPg0KRXN0YSBtZW5zYWdlbSBl IHNldXMgYW5leG9zIHNlIGRpcmlnZW0gZXhjbHVzaXZhbWVudGUgYW8gc2V1IGRlc3RpbmF0w6Fy aW8sIHBvZGUgY29udGVyIGluZm9ybWHDp8OjbyBwcml2aWxlZ2lhZGEgb3UgY29uZmlkZW5jaWFs IGUgw6kgcGFyYSB1c28gZXhjbHVzaXZvIGRhIHBlc3NvYSBvdSBlbnRpZGFkZSBkZSBkZXN0aW5v LiBTZSBuw6NvIMOpIHZvc3NhIHNlbmhvcmlhIG8gZGVzdGluYXTDoXJpbyBpbmRpY2FkbywgZmlj YSBub3RpZmljYWRvIGRlIHF1ZSBhDQogbGVpdHVyYSwgdXRpbGl6YcOnw6NvLCBkaXZ1bGdhw6fD o28gZS9vdSBjw7NwaWEgc2VtIGF1dG9yaXphw6fDo28gcG9kZSBlc3RhciBwcm9pYmlkYSBlbSB2 aXJ0dWRlIGRhIGxlZ2lzbGHDp8OjbyB2aWdlbnRlLiBTZSByZWNlYmV1IGVzdGEgbWVuc2FnZW0g cG9yIGVycm8sIHJvZ2Ftb3MtbGhlIHF1ZSBub3MgbyBjb211bmlxdWUgaW1lZGlhdGFtZW50ZSBw b3IgZXN0YSBtZXNtYSB2aWEgZSBwcm9jZWRhIGEgc3VhIGRlc3RydWnDp8Ojbzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+SU1QT1JUQU5U IE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50cyBh cmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5v dCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRp YXRlbHkNCiBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVy c29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1h dGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_1AE74D0ADB9A4847A3C9F25A29CA1C5Bciscocom_-- From nobody Tue Oct 9 08:42:07 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED7E913135A; Tue, 9 Oct 2018 08:41:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.997 X-Spam-Level: X-Spam-Status: No, score=-1.997 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HK_RANDOM_ENVFROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YD538eBCdZ1b; Tue, 9 Oct 2018 08:41:48 -0700 (PDT) Received: from mail-yw1-xc35.google.com (mail-yw1-xc35.google.com [IPv6:2607:f8b0:4864:20::c35]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F2279131340; Tue, 9 Oct 2018 08:41:47 -0700 (PDT) Received: by mail-yw1-xc35.google.com with SMTP id s73-v6so822319ywg.11; Tue, 09 Oct 2018 08:41:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=rAmeefUsRXostoilk1bs50yyZQom8yUfWR8Ot+zLWdY=; b=XbB2xsCOLC1T21Q8/ZRxGU9iar8rFYLQc1Qz+Ku/Pwy6h0AoOFB5AesawJk50vv6UV 8KgsdkLqO8anYEPPdqf0EBWSYDDxntFqhTqp4xPWfTExyrowoIdWPXXeZcc8+1HOMMPG mll/Uum7rUyicADY6jgk0AIzYCEyAkbYu1Pmoo7aTGcMpwWJoB+gGG9D7W0XRnQHQG4W Mvp1mHMHF56HQp1ZULpkG46iM+LX10Yapn1DESi4kPo8FMzumRS6qdNXGDiqxSB5D+f1 70B3XvY5So2r7Mm8TKOqbKVYxQnfs8kygezeh3144EHbFzxU+XPBLoMnj1s2Nt3XeFMp lY/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=rAmeefUsRXostoilk1bs50yyZQom8yUfWR8Ot+zLWdY=; b=Gc55C9NrsfI3oLkUBA8uDz7cCi0GMuDHEJzfi+4xq/m48A//4pMaUFDonoA5yuj/Be 4WF4z5im+JLafjjd1s99C/AdpSBBbi8Zgu/NxVS9dG4GudszuF3fnRGxaYkcobj9wqYW UnyM5e8uTXlaLnNxQ1gm9ytS4zEyeBVHUJpxDPo0Q8HjZDXpUefJO23rl8dEmcaKPK6X LGbgUYfTfSm8n6eHpDIJvwgsQAnnVXlTfn3WXDTwnN3mNhHEloqB75DlM7ISVd++eerP ztZ7qYrbx4nDExLXAzPut8TSgpQxiE+8VDbIx6URpU18Tks/LZMFFDnvNvmewZGA5get 9OoQ== X-Gm-Message-State: ABuFfogMpyDcxNdRyDMXDE1j+mow0qbJbtV8V4HV7i8pAdLQNLWKnEhk YWLGUQ5AMUwQg+ldj1W0C+AE1xjlgbVSg4MhkIg= X-Google-Smtp-Source: ACcGV61Trgwz4j5NH0183z0xcmA3k/Gr7KRAQj8UmH2BVbXbuiztYq4xheUiGtcyedMKkRuho1srnnecTzuXQ93bGNY= X-Received: by 2002:a0d:e110:: with SMTP id k16-v6mr16226006ywe.78.1539099706876; Tue, 09 Oct 2018 08:41:46 -0700 (PDT) MIME-Version: 1.0 References: <1AE74D0A-DB9A-4847-A3C9-F25A29CA1C5B@cisco.com> In-Reply-To: <1AE74D0A-DB9A-4847-A3C9-F25A29CA1C5B@cisco.com> From: Jessica Fitzgerald-McKay Date: Tue, 9 Oct 2018 11:41:34 -0400 Message-ID: To: shwethab@cisco.com Cc: Hannes.Tschofenig@arm.com, "Diego R. Lopez" , eat@ietf.org, rats@ietf.org, "Eric Voit (evoit)" , kaduk@mit.edu, "Fitzgerald-McKay, Jessica M" Content-Type: multipart/alternative; boundary="0000000000004d69df0577cd9348" Archived-At: Subject: Re: [Rats] [EAT] BOF Preparation X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Oct 2018 15:41:59 -0000 --0000000000004d69df0577cd9348 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable All, Wanted to weigh in while we are still scoping this work. I'd be interested in seeing RATS address solutions that meet supply chain risk and cyber hygiene use cases. For example, knowing that the device on the network is the one you are expecting, knowing what it is running and that it's code has not been modified, being able to compare an expected posture to the current posture of the device, and so forth. Being able to answer these questions in a vendor-neutral way is critical for networks with diverse infrastructure. Thanks, Jess On Mon, Oct 8, 2018 at 10:00 PM Shwetha Bhandari (shwethab) < shwethab@cisco.com> wrote: > Hi Hannes, All, > > > > A number of networking vendors have expressed interest in contributing to > and implementing the models on the network devices to provide > challenge-response as well as unidirectional attestation. > =E2=80=9Cdraft-birkholz-yang-basic-remote-attestation=E2=80=9D shows some= of this support. > > > > Also commercial implementations of applications exposing the boot > integrity of devices exist. E.g., see: > > > https://www.cisco.com/c/dam/en/us/td/docs/cloud-systems-management/applic= ation-policy-infrastructure-controller-enterprise-module/1-5-x/integrity_ve= rification/release-notes_ver_275/Cisco_IV_App_RN_1_5_0_275.pdf > > > > A standard data model and any protocol extension(s) for interoperability > that fits in the existing network operations will be of key value in > exposing proof of network device integrity. At Cisco, we are geared up to > progress this work. > > > > > > Thanks, > > Shwetha > > *From: *RATS on behalf of Hannes Tschofenig < > Hannes.Tschofenig@arm.com> > *Date: *Tuesday, October 9, 2018 at 1:13 AM > *To: *"Diego R. Lopez" , "eat@ietf.org" < > eat@ietf.org>, "rats@ietf.org" > *Cc: *'Benjamin Kaduk' > *Subject: *Re: [Rats] [EAT] BOF Preparation > > > > Thanks, Diego. That=E2=80=99s useful input on the scenarios you are looki= ng into. > > > > > > *From:* Diego R. Lopez > *Sent:* Sunday, October 7, 2018 6:53 PM > *To:* Hannes Tschofenig ; eat@ietf.org; > rats@ietf.org > *Cc:* 'Benjamin Kaduk' > *Subject:* Re: [EAT] BOF Preparation > > > > Hi Hannes, > > > > We are interested in using the base technology (whatever is supported in > low level software or operating systems) to support attestation of NFV > deployments, especially those related with the collaboration of third > parties: with universal EPC, and edge computing as the main use cases. An= d, > while is true we are not developing the base software, we are collaborati= ng > with academic teams working at the hypervisor and container platform leve= l. > > > > Be goode, > > > > -- > > "Esta vez no fallaremos, Doctor Infierno" > > > > Dr Diego R. Lopez > > Telefonica I+D > > https://www.linkedin.com/in/dr2lopez/ > > > > e-mail: diego.r.lopez@telefonica.com > > Tel: +34 913 129 041 > > Mobile: +34 682 051 091 > > ---------------------------------- > > > > On 06/10/2018, 11:08, "Hannes Tschofenig" > wrote: > > > > Hi Diego, > > > > I guess Telefonica is a user of the technology*. How would leverage the > results? > > > > Ciao > > Hannes > > > > *: You are not manufacturing chips, developing operating systems, or > writing low level software (like firmware) that integrates the discussed > attestation technology. Is that correct? > > > > *From:* Diego R. Lopez > *Sent:* Saturday, October 6, 2018 12:27 AM > *To:* Hannes Tschofenig ; eat@ietf.org; > rats@ietf.org > *Cc:* 'Benjamin Kaduk' > *Subject:* Re: [EAT] BOF Preparation > > > > Hi, > > > > We are interested in fostering attestation technologies able to support > and leverage network virtualization techniques (yes, NFV strikes back=E2= =80=A6), > and are in contact with other companies that share the same interest. > > > > I won=E2=80=99t make it to Bangkok, but will be happy to help in anything= I can > through remote participation. > > > > Be goode, > > > > -- > > "Esta vez no fallaremos, Doctor Infierno" > > > > Dr Diego R. Lopez > > Telefonica I+D > > https://www.linkedin.com/in/dr2lopez/ > > > > e-mail: diego.r.lopez@telefonica.com > > Tel: +34 913 129 041 > > Mobile: +34 682 051 091 > > ---------------------------------- > > > > On 05/10/2018, 14:30, "EAT on behalf of Hannes Tschofenig" < > eat-bounces@ietf.org on behalf of Hannes.Tschofenig@arm.com> wrote: > > > > Hi Ben, Hi BOF chairs, Hi all, > > > > I have been thinking about how to turn this BoF into a success. I see a > few challenges: > > > > There are different items in scope of the work and we (Arm) are intereste= d > in contributing to those that relate to the EAT/attestation token work. W= e > are happy to give a presentation about those but I haven=E2=80=99t seen a= ny agenda > for the BoF yet. Who is in charge of preparing an agenda? I have seen BoF= s > fail where the presentations weren=E2=80=99t well aligned or not clearly > demonstrating a real-world problem. > > > > At the BoF we will have to demonstrate that there are companies involved > who are actually willing to do the heavy lifting to turn this effort into= a > success. Since there are very different items listed on the proposed > charter text I am curious whether there is reasonable support for all of > them. I can only speak for our interest in the EAT items and we are worki= ng > with companies to state their support on the mailing list. But the BoF is > likely going to fail if there is only support for a subset of the items. > Where are we with the rest and who is reaching out to which part of the > industry? > > > > Ciao > > Hannes > > > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy th= e > information in any medium. Thank you. > > > ------------------------------ > > > Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, > puede contener informaci=C3=B3n privilegiada o confidencial y es para uso > exclusivo de la persona o entidad de destino. Si no es usted. el > destinatario indicado, queda notificado de que la lectura, utilizaci=C3= =B3n, > divulgaci=C3=B3n y/o copia sin autorizaci=C3=B3n puede estar prohibida en= virtud de > la legislaci=C3=B3n vigente. Si ha recibido este mensaje por error, le ro= gamos > que nos lo comunique inmediatamente por esta misma v=C3=ADa y proceda a s= u > destrucci=C3=B3n. > > The information contained in this transmission is privileged and > confidential information intended only for the use of the individual or > entity named above. If the reader of this message is not the intended > recipient, you are hereby notified that any dissemination, distribution o= r > copying of this communication is strictly prohibited. If you have receive= d > this transmission in error, do not read it. Please immediately reply to t= he > sender that you have received this communication in error and then delete > it. > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinat=C3= =A1rio, > pode conter informa=C3=A7=C3=A3o privilegiada ou confidencial e =C3=A9 pa= ra uso exclusivo > da pessoa ou entidade de destino. Se n=C3=A3o =C3=A9 vossa senhoria o des= tinat=C3=A1rio > indicado, fica notificado de que a leitura, utiliza=C3=A7=C3=A3o, divulga= =C3=A7=C3=A3o e/ou > c=C3=B3pia sem autoriza=C3=A7=C3=A3o pode estar proibida em virtude da le= gisla=C3=A7=C3=A3o vigente. > Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique > imediatamente por esta mesma via e proceda a sua destrui=C3=A7=C3=A3o > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy th= e > information in any medium. Thank you. > > > ------------------------------ > > > Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, > puede contener informaci=C3=B3n privilegiada o confidencial y es para uso > exclusivo de la persona o entidad de destino. Si no es usted. el > destinatario indicado, queda notificado de que la lectura, utilizaci=C3= =B3n, > divulgaci=C3=B3n y/o copia sin autorizaci=C3=B3n puede estar prohibida en= virtud de > la legislaci=C3=B3n vigente. Si ha recibido este mensaje por error, le ro= gamos > que nos lo comunique inmediatamente por esta misma v=C3=ADa y proceda a s= u > destrucci=C3=B3n. > > The information contained in this transmission is privileged and > confidential information intended only for the use of the individual or > entity named above. If the reader of this message is not the intended > recipient, you are hereby notified that any dissemination, distribution o= r > copying of this communication is strictly prohibited. If you have receive= d > this transmission in error, do not read it. Please immediately reply to t= he > sender that you have received this communication in error and then delete > it. > > Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinat=C3= =A1rio, > pode conter informa=C3=A7=C3=A3o privilegiada ou confidencial e =C3=A9 pa= ra uso exclusivo > da pessoa ou entidade de destino. Se n=C3=A3o =C3=A9 vossa senhoria o des= tinat=C3=A1rio > indicado, fica notificado de que a leitura, utiliza=C3=A7=C3=A3o, divulga= =C3=A7=C3=A3o e/ou > c=C3=B3pia sem autoriza=C3=A7=C3=A3o pode estar proibida em virtude da le= gisla=C3=A7=C3=A3o vigente. > Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique > imediatamente por esta mesma via e proceda a sua destrui=C3=A7=C3=A3o > > IMPORTANT NOTICE: The contents of this email and any attachments are > confidential and may also be privileged. If you are not the intended > recipient, please notify the sender immediately and do not disclose the > contents to any other person, use it for any purpose, or store or copy th= e > information in any medium. Thank you. > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat > --0000000000004d69df0577cd9348 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Al= l,
Wanted = to weigh in while we are still scoping this work. I'd be interested in = seeing RATS address solutions that meet supply chain risk and cyber hygiene= use cases. For example, knowing that the device on the network is the one = you are expecting, knowing what it is running and that it's code has no= t been modified, being able to compare an expected posture to the current p= osture of the device, and so forth. Being able to answer these questions in= a vendor-neutral way is critical for networks with diverse infrastructure.=

Than= ks,
Jess

On Mon, Oct 8= , 2018 at 10:00 PM Shwetha Bhandari (shwethab) <shwethab@cisco.com> wrote:

Hi Hannes, All,<= u>

=C2=A0=

A number of netw= orking vendors have expressed interest in contributing to and implementing = the models on the network devices to provide challenge-response as well as = unidirectional attestation.=C2=A0 =E2=80=9Cdraft-birkholz-yang-basic-remote= -attestation=E2=80=9D shows some of this support.

=C2=A0=

Also commercial = implementations of applications exposing the boot integrity of devices exis= t.=C2=A0 E.g., see:

= https://www.cisco.com/c/dam/en/us/td/docs/cloud-systems-management/applicat= ion-policy-infrastructure-controller-enterprise-module/1-5-x/integrity_veri= fication/release-notes_ver_275/Cisco_IV_App_RN_1_5_0_275.pdf<= /u>

=C2=A0=

A standard data = model and any protocol extension(s) for interoperability that fits in the e= xisting network operations will be of key value in exposing proof of networ= k device integrity. At Cisco, we are geared up to progress this work.

=C2=A0=

=C2=A0=

Thanks,

Shwetha

From: RATS <rats-bounces@ietf.org> on behalf of Hannes Tschofen= ig <Hanne= s.Tschofenig@arm.com>
Date: Tuesday, October 9, 2018 at 1:13 AM
To: "Diego R. Lopez" <diego.r.lopez@telefonica.com>, &quo= t;eat@ietf.org" = <eat@ietf.org>,= "rats@ietf.org= " <rats@ietf.org= >
Cc: 'Benjamin Kaduk' <kaduk@mit.edu>
Subject: Re: [Rats] [EAT] BOF Preparation

=C2=A0

Thanks, Diego. That=E2=80=99s useful input on the sc= enarios you are looking into.

=C2=A0

=C2=A0

=C2=A0

Hi Hannes,

=C2=A0

We are interested i= n using the base technology (whatever is supported in low level software or= operating systems) to support attestation of NFV deployments, especially t= hose related with the collaboration of third parties: with universal EPC, and edge computing as the main use c= ases. And, while is true we are not developing the base software, we are co= llaborating with academic teams working at the hypervisor and container pla= tform level.

=C2=A0

Be goode,=

=C2=A0

--

"E= sta vez no fallaremos, Doctor Infierno"

=C2=A0<= /span>

Dr Dieg= o R. Lopez

Telefon= ica I+D

https://www.li= nkedin.com/in/dr2lopez/=C2=A0

=C2=A0<= /span>

e-mail:= =C2=A0diego.r.lopez@telefonica.com

Tel:=C2=A0=C2=A0=C2= =A0 =C2=A0=C2=A0=C2=A0=C2=A0 +34 913 129 041

Mobile: =C2=A0+34 6= 82 051 091

-------------------= ---------------

=C2=A0

On 06/1= 0/2018, 11:08, "Hannes Tschofenig" <Hannes.Tschofenig@arm.com> wrot= e:

=C2=A0<= /span>

Hi Dieg= o,

=C2=A0<= /span>

I guess= Telefonica is a user of the technology*. How would leverage the results?

=C2=A0<= /span>

Ciao

Hannes<= /span>

=C2=A0<= /span>

*: You = are not manufacturing chips, developing operating systems, or writing low l= evel software (like firmware) that integrates the discussed attestation tec= hnology. Is that correct?

=C2=A0<= /span>

From: Diego R. Lop= ez <di= ego.r.lopez@telefonica.com>
Sent: Saturday, October 6, 2018 12:27 AM
To: Hannes Tschofenig <Hannes.Tschofenig@arm.com>; eat@ietf.org; rats@ietf.org
Cc: 'Benjamin Kaduk' <kaduk@mit.edu>
Subject: Re: [EAT] BOF Preparation

=C2=A0<= /span>

Hi,

=C2=A0

We are interested in fostering attestation technologi= es able to support and leverage network virtualization techniques (yes, NFV= strikes back=E2=80=A6), and are in contact with other companies that share the same interest.

=C2=A0

I won=E2=80=99t make it to Bangkok, but will be happy= to help in anything I can through remote participation.

=C2=A0

Be goode,

=C2=A0

--

"Esta vez no fallaremos, Doctor Infierno"

=C2=A0

Dr Diego R. Lopez

Telefonica I+D

https://www.linkedin.com/in/dr2lopez/=C2=A0

=C2=A0

e-mail:=C2=A0diego.r.lopez@telefonica.com=

Tel:=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A0=C2=A0 +34 9= 13 129 041

Mobile: =C2=A0+34 682 051 091

----------------------------------

=C2=A0

On 05/= 10/2018, 14:30, "EAT on behalf of Hannes Tschofenig" <eat-bounces@ietf.org= on behalf of Hannes.Tscho= fenig@arm.com> wrote:

=C2=A0=

Hi Ben= , Hi BOF chairs, Hi all,

=C2=A0=

I have= been thinking about how to turn this BoF into a success. I see a few chall= enges:

=C2=A0=

There = are different items in scope of the work and we (Arm) are interested in con= tributing to those that relate to the EAT/attestation token work. We are ha= ppy to give a presentation about those but I haven=E2=80=99t seen any agenda for the BoF yet. Who is in charge of= preparing an agenda? I have seen BoFs fail where the presentations weren= =E2=80=99t well aligned or not clearly demonstrating a real-world problem.

=C2=A0=

At the= BoF we will have to demonstrate that there are companies involved who are = actually willing to do the heavy lifting to turn this effort into a success= . Since there are very different items listed on the proposed charter text I am curious whether there is reasonab= le support for all of them. I can only speak for our interest in the EAT it= ems and we are working with companies to state their support on the mailing= list. But the BoF is likely going to fail if there is only support for a subset of the items. Where are we w= ith the rest and who is reaching out to which part of the industry?

=C2=A0=

Ciao

Hannes=

=C2=A0=

IMPORT= ANT NOTICE: The contents of this email and any attachments are confidential= and may also be privileged. If you are not the intended recipient, please = notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or stor= e or copy the information in any medium. Thank you.

=C2=A0<= /span>


Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, pu= ede contener informaci=C3=B3n privilegiada o confidencial y es para uso exc= lusivo de la persona o entidad de destino. Si no es usted. el destinatario = indicado, queda notificado de que la lectura, utilizaci=C3=B3n, divulgaci=C3=B3n y/o copia sin autorizaci=C3=B3= n puede estar prohibida en virtud de la legislaci=C3=B3n vigente. Si ha rec= ibido este mensaje por error, le rogamos que nos lo comunique inmediatament= e por esta misma v=C3=ADa y proceda a su destrucci=C3=B3n.

The information contained in this transmission is privileged and confi= dential information intended only for the use of the individual or entity n= amed above. If the reader of this message is not the intended recipient, you are hereby notified that any disseminat= ion, distribution or copying of this communication is strictly prohibited. = If you have received this transmission in error, do not read it. Please imm= ediately reply to the sender that you have received this communication in error and then delete it.

Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinat=C3=A1= rio, pode conter informa=C3=A7=C3=A3o privilegiada ou confidencial e =C3=A9= para uso exclusivo da pessoa ou entidade de destino. Se n=C3=A3o =C3=A9 vo= ssa senhoria o destinat=C3=A1rio indicado, fica notificado de que a leitura, utiliza=C3=A7=C3=A3o, divulga=C3=A7=C3=A3o e/ou c=C3=B3pia sem au= toriza=C3=A7=C3=A3o pode estar proibida em virtude da legisla=C3=A7=C3=A3o = vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique= imediatamente por esta mesma via e proceda a sua destrui=C3=A7=C3=A3o

IMPORTA= NT NOTICE: The contents of this email and any attachments are confidential = and may also be privileged. If you are not the intended recipient, please n= otify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or stor= e or copy the information in any medium. Thank you.

=C2=A0


Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, pu= ede contener informaci=C3=B3n privilegiada o confidencial y es para uso exc= lusivo de la persona o entidad de destino. Si no es usted. el destinatario = indicado, queda notificado de que la lectura, utilizaci=C3=B3n, divulgaci=C3=B3n y/o copia sin autorizaci=C3=B3= n puede estar prohibida en virtud de la legislaci=C3=B3n vigente. Si ha rec= ibido este mensaje por error, le rogamos que nos lo comunique inmediatament= e por esta misma v=C3=ADa y proceda a su destrucci=C3=B3n.

The information contained in this transmission is privileged and confi= dential information intended only for the use of the individual or entity n= amed above. If the reader of this message is not the intended recipient, you are hereby notified that any disseminat= ion, distribution or copying of this communication is strictly prohibited. = If you have received this transmission in error, do not read it. Please imm= ediately reply to the sender that you have received this communication in error and then delete it.

Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinat=C3=A1= rio, pode conter informa=C3=A7=C3=A3o privilegiada ou confidencial e =C3=A9= para uso exclusivo da pessoa ou entidade de destino. Se n=C3=A3o =C3=A9 vo= ssa senhoria o destinat=C3=A1rio indicado, fica notificado de que a leitura, utiliza=C3=A7=C3=A3o, divulga=C3=A7=C3=A3o e/ou c=C3=B3pia sem au= toriza=C3=A7=C3=A3o pode estar proibida em virtude da legisla=C3=A7=C3=A3o = vigente. Se recebeu esta mensagem por erro, rogamos-lhe que nos o comunique= imediatamente por esta mesma via e proceda a sua destrui=C3=A7=C3=A3o

IMPORTANT NOTICE: The contents of this email and any a= ttachments are confidential and may also be privileged. If you are not the = intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpo= se, or store or copy the information in any medium. Thank you.

_______________________________________________
EAT mailing list
EAT@ietf.org
https://www.ietf.org/mailman/listinfo/eat
--0000000000004d69df0577cd9348-- From nobody Thu Oct 11 09:50:05 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03CE2130EBB; Thu, 11 Oct 2018 09:50:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vtHbgZjmBcwt; Thu, 11 Oct 2018 09:50:01 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36FCA130EC5; Thu, 11 Oct 2018 09:50:00 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9BGntjc014637 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Thu, 11 Oct 2018 18:49:57 +0200 Received: from [192.168.1.84] (75.13.86.31) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Thu, 11 Oct 2018 18:49:50 +0200 To: "rats@ietf.org" CC: Laurence Lundblade , "eat@ietf.org" References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> From: Henk Birkholz Message-ID: Date: Thu, 11 Oct 2018 18:49:46 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [75.13.86.31] Archived-At: Subject: Re: [Rats] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Oct 2018 16:50:04 -0000 Hi all, sorry for the delay. Please find an updated charter proposal here: > https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter.md The BoF proponents tried to merge all comments and proposals on keystores, existing solutions, provenance & device characteristics, etc that were raised on the list - and align them in homogeneous fashion. This draft is intended to focus the discussion and improve the wording. Viele Grüße, Henk On 10/06/2018 08:23 AM, Laurence Lundblade wrote: > Hi Henk, > > Bangkok IETF is getting close, will you be able to update the charter for the attestation BoF to properly include EAT? I sent you some text that just needs to be pasted along with some comments. It doesn’t look like there’s been any updates. > > LL > From nobody Thu Oct 11 13:08:06 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02C19130EDB; Thu, 11 Oct 2018 13:08:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G94q6dzVWbtM; Thu, 11 Oct 2018 13:08:02 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [176.58.120.209]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01BFC130EC3; Thu, 11 Oct 2018 13:08:01 -0700 (PDT) Received: from dooku.sandelman.ca (unknown [142.169.78.216]) by relay.sandelman.ca (Postfix) with ESMTPS id BBB731F95B; Thu, 11 Oct 2018 20:07:59 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 002AD14B5; Thu, 11 Oct 2018 16:07:52 -0400 (EDT) From: Michael Richardson To: Henk Birkholz cc: "rats\@ietf.org" , "eat\@ietf.org" , Laurence Lundblade In-reply-to: References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> Comments: In-reply-to Henk Birkholz message dated "Thu, 11 Oct 2018 18:49:46 +0200." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Thu, 11 Oct 2018 16:07:52 -0400 Message-ID: <28763.1539288472@dooku.sandelman.ca> Archived-At: Subject: Re: [Rats] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Oct 2018 20:08:05 -0000 --=-=-= Content-Type: text/plain re: "Information Elements (IE)" If you have some wiggle room (i.e. you aren't trying to align with some other pre-existing standards work elsehwere), it might be worth using another term, as I think that this term is used for layer-2 extensions in 802.15.4 networks. I think that some people will be confused by this. I think your usage is very much a layer 6+ (abstract) concept. I found the introduction to be meaningful only to those who already know what it is about. I suggest the following edits. I make some of them just that the charter will continue to meaningful in a year or two. Introduction Remote ATtestation ProcedureS (RATS) are included in network protocols to provide the basis for establishing trustworthy exchanges with a device. RATS expose trusted claim sets to detailed Attestation Evidence that enables a Verifying Party to retrace every step that led to its current Operational State. A consequence of this retracing is that it is possible to appraise the trustworthiness of a device. Application of RATS encompasses infrastructure supporting financial transactions, critical infrastructure, constrained-node environments, or the management of end-user devices. Measured file execution procedures (including the now deprecated term Secure Boot) provide the basis for conveying additional device characteristics that enable a Verifying Party to assess that a device is a Trusted System: one that operates as expected, does what is required, and does not do other things. Various Roots of Trust (e.g. for Measurement, for Reporting, or for Verification) provide the foundation to enable Implicit Attestation (the fact that a secret key is accessible implies specific meaning) and Explicit Attestation, which uses the output of Measured file execution as Attestation Evidence which along with event Log details can be used to can ratify that the device is actually a Trusted System. Problem Statement (1) We need a standard way to establish a sufficient level of confidence that a communication partner is with a trustworthy endpoint. This is a fundamental challenge. a) In 2018, there were no agreed upon standards that define a minimal set of Reference Values and Attestation Evidence that distinguishes a trustworthy execution environment over one that isn't. b) There isn't agreement on how to convey it appropriately, how to appraise evidence and how to present the appraisal results in an interoperable fashion. In essence, there is increasing demand for an overall communication, trust and assurance model to establish trust in potentially lying endpoints that is not currently met by other standards. (2) In 2018, there are no common, standard ways for Relying Parties to know the provenance and characteristics of a device (e.g., an end-user device, platform or endpoint, servers, IoT devices, device subsystems and sub-modules) that may be requesting services. As a result, in 2018, a Relying Party would be unable to tell if a device is trying to mimic the identity of another device or some of its characteristics. For instance, distinguishing between a secure wallet and INSERT SOMETHING would be relevant for a financial transaction. In 2018 there are existing domain-specific ways to do this, such as TCG TPM Attestation, FIDO Alliance attestation and Android Keystore Attestation. (3) Risk engines collect large amounts of information from a device in order to determine whether it is allowed access to data, a financial transaction or to perform other risk-sensitive operations. Agreement over the syntax and semantics of provenance and characteristics is essential for interoperability. Attestation provenance and characteristics represented via IE require proper definitions as Assertions. Standardized assertions promote increased - possibly ubiquitous - interoperability. Assertions also must be believable, for example, via Evidence that proves Assertion veracity. ... Goals > Syntax for each Assertion in CBOR, JSON, YANG, and potentially others > [reintroduce terminology here? TARGET 2 @everyone, please chime in > here} The only two have missed are XML and ASN.1, and I don't see that as a bug. Writing in YANG, it's all mappable there if someone wants to do this. I think you will also be using YANG for data at rest (yang-data), rather than accessed by API. This seems an increasingly common usage. >Deliverables > Attestation information flows, consolidated terminology and corresponding > taxonomies (overview/architecture to be developed in parallel with solution > documents; can be separate document or go into 2, 3, 4 below) In a break from the waterfall method of requirements, use-cases and then protocols (or rather, in this case, artifact formats), I suggest that that each be worked on in parallel, and that the terminology and architecture documents be constrained to be published *LAST*. But, the WG should issue WG Consensus Calls on the documents at intervals such that the text is in them can be considered authoritative enough to answer questions in the protocol. Note that I cut out a bunch of text from the Introduction. It didn't help me understand the purpose of the group. Also I note that IE is never used again after the first paragraph, so I think you could just call them artifacts. -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | network architect [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [ -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAlu/rZgACgkQlUzhVv38 QpAS2wf8CUK7hYWaKl+q8I/M+JmWV+iMtjH4fjY7vJ2ETnUC3Q9J2r1JPV03Yelr RYu76r8jY2pgnFJh9yAmrycHvdY8IuH1A+LbnUf3nJbWNO1I0Y2ihJSBkBz9Btt/ 6Pcsqh9FeofT4URQmMUJAzQ//mp5fWx20lF4DdWwmSsy46DVi4c0jjvjysPSPvhh 82o9CgtP0m2Gpf0r2yZEOcnBWo4Ud7eDViB+wl1P/JzYkL43jjn9JauC9+HwwXEe ru41/l9kja8cRvFDKn15Cfao9UUiKIHj7x1A8w1MDE+zrbJNlNJFps2n29NrU3hF VaFOuxRJeHNDWw5p7IcU7LEnrJ3qqg== =q1C6 -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Oct 11 13:43:25 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96584124C04; Thu, 11 Oct 2018 13:43:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0H6pXo1oeKxB; Thu, 11 Oct 2018 13:43:22 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F31071277CC; Thu, 11 Oct 2018 13:43:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost2.informatik.uni-bremen.de [IPv6:2001:638:708:30c8:406a:91ff:fe74:f2b7]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w9BKhDxc028365; Thu, 11 Oct 2018 22:43:18 +0200 (CEST) Received: from client-0223.vpn.uni-bremen.de (client-0223.vpn.uni-bremen.de [134.102.107.223]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 42WNG93yn1z1Bq8; Thu, 11 Oct 2018 22:43:13 +0200 (CEST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: <28763.1539288472@dooku.sandelman.ca> Date: Thu, 11 Oct 2018 22:43:12 +0200 Cc: Henk Birkholz , "rats@ietf.org" , Laurence Lundblade , "eat@ietf.org" X-Mao-Original-Outgoing-Id: 560983390.9626679-0aec4371ce3ad6f1ae9edc0d916b4b68 Content-Transfer-Encoding: quoted-printable Message-Id: <1F260DEF-6A53-40A7-AFA5-EF7C18AA46C6@tzi.org> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <28763.1539288472@dooku.sandelman.ca> To: Michael Richardson X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Oct 2018 20:43:24 -0000 On Oct 11, 2018, at 22:07, Michael Richardson = wrote: >=20 > re: "Information Elements (IE)" >=20 > If you have some wiggle room (i.e. you aren't trying to align with = some other > pre-existing standards work elsehwere), it might be worth using = another term, > as I think that this term is used for layer-2 extensions in 802.15.4 > networks. I prefer =E2=80=9Cdata item=E2=80=9D (about half the number of = syllables), but maybe this is too much of a CBOR term. >> Deliverables >> Attestation information flows, consolidated terminology and = corresponding >> taxonomies (overview/architecture to be developed in parallel with = solution >> documents; can be separate document or go into 2, 3, 4 below) >=20 > In a break from the waterfall method of requirements, use-cases and = then > protocols (or rather, in this case, artifact formats), I suggest that = that > each be worked on in parallel, Absolutely! (This may now be so obvious to the charter authors that = they neglected to state it.) > and that the terminology and architecture > documents be constrained to be published *LAST*. Well, at the same time, because the other documents will want to use the = terms. > But, the WG should issue WG > Consensus Calls on the documents at intervals such that the text is in = them > can be considered authoritative enough to answer questions in the = protocol. The charter doesn=E2=80=99t go into a lot of details of how the WG = should work =E2=80=94 that is normally not part of the IESG-WG contract = (which we call charter). But doing this in a sequence of milestones may = be a good suggestion. > Note that I cut out a bunch of text from the Introduction. It didn't = help me > understand the purpose of the group. Also I note that IE is never = used again > after the first paragraph, so I think you could just call them = artifacts. Works for me, too. Gr=C3=BC=C3=9Fe, Carsten From nobody Thu Oct 11 13:56:46 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 897071286D9 for ; Thu, 11 Oct 2018 13:56:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m9x7zsfxPuwX for ; Thu, 11 Oct 2018 13:56:43 -0700 (PDT) Received: from mail-qt1-x829.google.com (mail-qt1-x829.google.com [IPv6:2607:f8b0:4864:20::829]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B053127598 for ; Thu, 11 Oct 2018 13:56:43 -0700 (PDT) Received: by mail-qt1-x829.google.com with SMTP id d8-v6so11552091qtk.13 for ; Thu, 11 Oct 2018 13:56:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version:content-transfer-encoding; bh=HKCbH/mE3TJXOBo/x2l5Vz1zLEBbt5ZnHGCHNgbjmfs=; b=pnrtGWBa+7ePtqpLHzWMpJ1mXCwET7atjQ+t9nRwmb6IeFCVL+8xnZmKIcUBVE6lat RbXRFaA+8ZC+J5fE1Galwuoenu3E+VEMZTqePY3LFcWvRcfGJgdWV5tYLVIWquASQBNC owbd1ghzwFqDXUnhLB0WfgOELB2mIAquIYtII= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version :content-transfer-encoding; bh=HKCbH/mE3TJXOBo/x2l5Vz1zLEBbt5ZnHGCHNgbjmfs=; b=KrL/c4zkFAA7tl8+0KHX1Yx/6gf808XeAY8BVXBKRzot2PPrZHp/E1WvsVbDx7TlzP A1VnbkVUxj6/N5tDc4JR0n6fHjBBxzEGcrNJ+HXm11gTI829h3xZ5M0VvsqyNOnnbETa eWiKNJTwFg9XlJ+eXUPONODZCwIGCg+jGeQztwh8dprVANZmz1XnJsbaX6bEd1mEkfNn s50SUt3DK8hCiWY++3MPiGUhfoZXUWNtkk7xWdVtI1IWqEcdf1Rx7NROzlm+SlSj8l7X 4cgwyeFxIOA+UMqnoTppfnAHWPD2RNt8fum+OlTYqoS93mZWOx1B8HAFa99CuQVNZVyC /h8A== X-Gm-Message-State: ABuFfogDsopyI+C/eJYJrS+S0oEqhdteWyL3ArNqhuHiSGs00HiajW+/ oo6PdK6RSdzAoqbqAKOYDJ91BpCLGRU= X-Google-Smtp-Source: ACcGV63DNbhaedj9bdtX898xxnAsCs0RWJWfZzH94SYFSUKS3JO4742Y3xt+UIgfHmcgVFL+QyEx6Q== X-Received: by 2002:aed:2867:: with SMTP id r94-v6mr3235324qtd.112.1539291402098; Thu, 11 Oct 2018 13:56:42 -0700 (PDT) Received: from [10.73.240.229] (pat_11.qualcomm.com. [192.35.156.11]) by smtp.googlemail.com with ESMTPSA id 140-v6sm14300067qkj.13.2018.10.11.13.56.36 (version=TLS1 cipher=AES128-SHA bits=128/128); Thu, 11 Oct 2018 13:56:41 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Thu, 11 Oct 2018 13:56:30 -0700 From: Carl Wallace To: Henk Birkholz , "rats@ietf.org" CC: "eat@ietf.org" , Laurence Lundblade Message-ID: Thread-Topic: [Rats] Attestation BoF charter updates? References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> In-Reply-To: Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Archived-At: Subject: Re: [Rats] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Oct 2018 20:56:45 -0000 As with the earlier draft, there are many references to verify and verifier in the lead up to the deliverable but no deliverables describing verification rules. I'd like to see rules in one of these documents and think it worth citing in the deliverables. Are bindings to certificate management protocols out of scope? On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" wrote: >Hi all, > >sorry for the delay. Please find an updated charter proposal here: > >> https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter.md > >The BoF proponents tried to merge all comments and proposals on >keystores, existing solutions, provenance & device characteristics, etc >that were raised on the list - and align them in homogeneous fashion. > >This draft is intended to focus the discussion and improve the wording. > >Viele Gr=C3=BC=C3=9Fe, > >Henk > >On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >> Hi Henk, >>=20 >> Bangkok IETF is getting close, will you be able to update the charter >>for the attestation BoF to properly include EAT? I sent you some text >>that just needs to be pasted along with some comments. It doesn=E2=80=99t look >>like there=E2=80=99s been any updates. >>=20 >> LL >>=20 > >_______________________________________________ >RATS mailing list >RATS@ietf.org >https://www.ietf.org/mailman/listinfo/rats From nobody Mon Oct 15 07:53:53 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4CC62130E84; Mon, 15 Oct 2018 07:53:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aritzqrGoECe; Mon, 15 Oct 2018 07:53:48 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97259130E48; Mon, 15 Oct 2018 07:53:46 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9FErhIf023549 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Oct 2018 16:53:44 +0200 Received: from [172.20.8.9] (88.157.232.34) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Mon, 15 Oct 2018 16:53:38 +0200 To: "rats@ietf.org" , "Jeremy O'Donoghue" , Denis CC: "eat@ietf.org" References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> From: Henk Birkholz Message-ID: Date: Mon, 15 Oct 2018 16:53:37 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [88.157.232.34] Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Oct 2018 14:53:52 -0000 Hi Jeremy & Denis, all these points of view have merit, I think. Please have a look at these quotes: > knowing the provenance of the device > having the entity creator/manufacturer provide a set of claims which can be verified > to know the characteristics of a device by issuing to the device a public key certificate which will only be issued to the device if it fulfills an expected set of functionalities. To me, these descriptions seem to have different intents, scope or audience and require most certainly different work-flows, but semantically and in consequence representation-wise they also seem quite related. If you think of an identity document as a set of claims (potentially including a public key), that is signed and that can match one or more things, maybe all three types highlighted above are actually covered by the same identity document concept? With respect to identity documents, I think it is safe so say that we can find common ground here rather easily. That said, the way how these identity documents come into existence, when and how they are deployed on the thing or associated with multiple things is another question. We most certainly do not want to end up with a "signing fool" that does not add value to the level of confidence (I am quoting Ned Smith here). This has to be fleshed out explicitly for each scenario and the parts that are reused in every scenario should get special attention in the upcoming RATS architecture draft. Identifying claims aggregated in an identity document most certainly can include device characteristics, public key(s), or claims about the intended functions and capabilities of the thing. Claims can even originate from Claimants that are not the thing itself, but external entities providing an assertion (e.g. these things are CC-certified). All different composites of identifying claims have a specific shared intend in this context though, I think: expressing Attestation Provenance (again - one for one or more things of the same kind). And all of them originate from Claimants and therefore use a root of trust of measurement, I think. That said, establishing trustworthy knowledge about attestation provenance is only the first step and provides the foundation for more complex attestation procedures. In any case, this seem to be required by every scenario that was highlighted so far and therefore will most certainly be covered in a deliverable. IHTH, Henk On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: > On 12 Oct 2018, at 14:33, Denis > wrote: >> The "Problem Statement" continues as follows: >> >> (2) Today, there is no common, standard way for Relying Parties to >> know the provenance and characteristics of a device (e.g., an end-user >> device, >> platform or endpoint, servers, IoT devices, device subsystems and >> sub-modules) that may be requesting services. >> >> Knowing the provenance of the device is not always necessary. What is >> important is to know that a specific set of functions is (securely) >> supported by the device. >> There already exists a common way to know the characteristics of a >> device by issuing to the device a public key certificate which will >> only be issued to the device >> if it fulfills an expected set of functionalities. In such a case a >> syntax for a trusted claim sets**is not needed. >> > This is indeed a possible way to address the problem, but suffers from > challenges which come down to: > > - Who issues such certificates. An option is that there is some form of > security certification behind this issuance otherwise it is of very > limited value. > - In order to capture the wide variety of different devices (I prefer > "entity" here as it is more general than "device"), many different forms > of such certificates would be required. This ends up being much the same > thing as a set of claims. > > Given the multiplicity of entities for which attestation might be > useful, it seems to me that having the entity creator/manufacturer > provide a set of claims which can be verified is more flexible than > requiring a certificate. It seems likely to me that where a formal > security certification is needed there will be a certificate issued by > the Certifying Body as one of the claims about an entity, but I can > think of many cases (supply chain management, to take just one example) > where provenance is by far the most useful information. > > I'm not in favour of changes to the charter in this direction. >> >> The simplest cases should also be part of the framework. >> >> Note: I personally appreciate that privacy is an aspect that >> will/should be taken into consideration. >> >> Denis >> >>> As with the earlier draft, there are many references to verify and >>> verifier in the lead up to the deliverable but no deliverables describing >>> verification rules. I'd like to see rules in one of these documents and >>> think it worth citing in the deliverables. Are bindings to certificate >>> management protocols out of scope? >>> >>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" >>> wrote: >>> >>>> Hi all, >>>> >>>> sorry for the delay. Please find an updated charter proposal here: >>>> >>>>> https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter.md >>>> The BoF proponents tried to merge all comments and proposals on >>>> keystores, existing solutions, provenance & device characteristics, etc >>>> that were raised on the list - and align them in homogeneous fashion. >>>> >>>> This draft is intended to focus the discussion and improve the wording. >>>> >>>> Viele Grüße, >>>> >>>> Henk >>>> >>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >>>>> Hi Henk, >>>>> >>>>> Bangkok IETF is getting close, will you be able to update the charter >>>>> for the attestation BoF to properly include EAT? I sent you some text >>>>> that just needs to be pasted along with some comments. It doesn’t look >>>>> like there’s been any updates. >>>>> >>>>> LL >>>>> >>>> _______________________________________________ >>>> RATS mailing list >>>> RATS@ietf.org >>>> https://www.ietf.org/mailman/listinfo/rats >>> _______________________________________________ >>> EAT mailing list >>> EAT@ietf.org >>> https://www.ietf.org/mailman/listinfo/eat >> >> >> _______________________________________________ >> EAT mailing list >> EAT@ietf.org >> https://www.ietf.org/mailman/listinfo/eat > > > > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat > From nobody Mon Oct 15 08:53:35 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F07E130E9C; Mon, 15 Oct 2018 08:53:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZMdu5DgsTCPV; Mon, 15 Oct 2018 08:53:26 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F0354130E50; Mon, 15 Oct 2018 08:53:22 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9FFrJAH025865 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 15 Oct 2018 17:53:20 +0200 Received: from [172.20.8.9] (88.157.232.34) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Mon, 15 Oct 2018 17:53:13 +0200 To: "rats@ietf.org" CC: "eat@ietf.org" From: Henk Birkholz Message-ID: <266d6b08-120f-2340-cc01-1ac4b57d47d7@sit.fraunhofer.de> Date: Mon, 15 Oct 2018 17:53:13 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [88.157.232.34] Archived-At: Subject: [Rats] Update to the refactored charter draft (including recent updates) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Oct 2018 15:53:28 -0000 Hi all, most of the recent comments and some that we missed are now incorporated into the charter text. If anyone feels misrepresented or totally misunderstood even, please do not hesitate to comment. > https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter.md Viele Grüße, Henk From nobody Mon Oct 15 08:59:39 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 64E1B130EA2; Mon, 15 Oct 2018 08:59:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TRyYzjWsV5jY; Mon, 15 Oct 2018 08:59:36 -0700 (PDT) Received: from mga12.intel.com (mga12.intel.com [192.55.52.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62789130E9C; Mon, 15 Oct 2018 08:59:36 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga001.jf.intel.com ([10.7.209.18]) by fmsmga106.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Oct 2018 08:59:35 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.54,385,1534834800"; d="scan'208";a="99586512" Received: from orsmsx104.amr.corp.intel.com ([10.22.225.131]) by orsmga001.jf.intel.com with ESMTP; 15 Oct 2018 08:59:35 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.251]) by ORSMSX104.amr.corp.intel.com ([169.254.4.129]) with mapi id 14.03.0319.002; Mon, 15 Oct 2018 08:59:35 -0700 From: "Smith, Ned" To: Henk Birkholz , "rats@ietf.org" , Jeremy O'Donoghue , Denis CC: "eat@ietf.org" Thread-Topic: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates? Thread-Index: AQHUZJbnIP3n6SY5DUiHYjY92eJ1aaUg/QyA Date: Mon, 15 Oct 2018 15:59:35 +0000 Message-ID: <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.2.180910 x-originating-ip: [10.252.26.134] Content-Type: text/plain; charset="utf-8" Content-ID: <0460EB5A34490E4684D7BFA451BBB7B5@intel.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Oct 2018 15:59:38 -0000 SSBhZ3JlZSB3aXRoIEhlbmsncyBvYnNlcnZhdGlvbiB0aGF0IHRoZXJlIGlzIG9wcG9ydHVuaXR5 IHRvIGZpbmQgY29tbW9uIGdyb3VuZCBvbiBpZGVudGl0eSBhcyBpZGVudGl0eSBjYW4gYmUgYSBj b2xsZWN0aW9uIG9mIGF0dHJpYnV0ZXMsIHRoYXQgaWYgc2lnbmVkLCBiZWNvbWVzIGEgc2V0IG9m IHZlcmlmaWFibGUgY2xhaW1zIChhYm91dCBpZGVudGl0eSBhdHRyaWJ1dGVzKS4gQXR0ZXN0YXRp b24gaGFzIGEgc2ltaWxhciBzdHJ1Y3R1cmUgaW4gdGhhdCBpdCBjb25zaXN0cyBvZiBhIHNldCBv ZiBhdHRyaWJ1dGVzLCB0aGF0IGlmIHNpZ25lZCBiZWNvbWVzIGEgc2V0IG9mIHZlcmlmaWFibGUg Y2xhaW1zLiBUaGUgbWFpbiBkaWZmZXJlbmNlIGJldHdlZW4gaWRlbnRpdHkgYW5kIGF0dGVzdGF0 aW9uIGF0dHJpYnV0ZXMgaXMgd2hldGhlciB0aGUgYXR0cmlidXRlIHNlbWFudGljYWxseSByZWxh dGUgdG8gdHJ1c3QgKHZzLiBpZGVudGl0eSkuIEZvciBleGFtcGxlLCBjbGFpbXMgb2Ygc2VjdXJp dHkgY2VydGlmaWNhdGlvbiBjb21wbGlhbmNlIHJlc29uYXRlcyBhcyBhdHRlc3RhdGlvbi4gDQoN Ckl0IG1heSBiZSBwb3NzaWJsZSB0byBjb21iaW5lIGEgc2V0IG9mIGF0dGVzdGF0aW9uIGF0dHJp YnV0ZXMgaW4gc3VjaCBhIHdheSB0aGF0IHRoZSBjb21iaW5hdGlvbiB1bmlxdWVseSBpZGVudGlm aWVzIGFuIGVudGl0eS4gQnV0IHRoYXQgZG9lc24ndCBtYWtlIGl0IGFuIGlkZW50aXR5IHN5c3Rl bSBwZXIgc2UgYW5kIHNob3VsZG4ndCBjYXVzZSBhIGNvbmZsaWN0IGluIGNoYXJ0ZXIgZ29hbHMg d2l0aCByZXNwZWN0IHRvIG90aGVyIGlkZW50aXR5IGZvY3VzZWQgZWZmb3J0cyBpbiBJRVRGLiAN Cg0KQWxzbywgaW5jbHVzaW9uIG9mIGF0dHJpYnV0ZXMgdGhhdCBkb24ndCBoYXZlIHNlbWFudGlj cyB0aGF0IHJlYXNvbmFibHkgcmVsYXRlIHRvIHRydXN0IHNob3VsZCBub3QgYmUgb2YgaW50ZXJl c3QgdG8gYSB3b3JraW5nIGdyb3VwIGZvY3VzZWQgb24gYXR0ZXN0YXRpb24uDQoNCi1OZWQNCg0K 77u/T24gMTAvMTUvMTgsIDM6NTMgUE0sICJFQVQgb24gYmVoYWxmIG9mIEhlbmsgQmlya2hvbHoi IDxlYXQtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgaGVuay5iaXJraG9sekBzaXQuZnJh dW5ob2Zlci5kZT4gd3JvdGU6DQoNCiAgICBIaSBKZXJlbXkgJiBEZW5pcywNCiAgICANCiAgICBh bGwgdGhlc2UgcG9pbnRzIG9mIHZpZXcgaGF2ZSBtZXJpdCwgSSB0aGluay4NCiAgICANCiAgICBQ bGVhc2UgaGF2ZSBhIGxvb2sgYXQgdGhlc2UgcXVvdGVzOg0KICAgIA0KICAgID4ga25vd2luZyB0 aGUgcHJvdmVuYW5jZSBvZiB0aGUgZGV2aWNlDQogICAgDQogICAgPiBoYXZpbmcgdGhlIGVudGl0 eSBjcmVhdG9yL21hbnVmYWN0dXJlciBwcm92aWRlIGEgc2V0IG9mIGNsYWltcyB3aGljaCBjYW4g YmUgdmVyaWZpZWQNCiAgICANCiAgICA+IHRvIGtub3cgdGhlIGNoYXJhY3RlcmlzdGljcyBvZiBh IGRldmljZSBieSBpc3N1aW5nIHRvIHRoZSBkZXZpY2UgYSBwdWJsaWMga2V5IGNlcnRpZmljYXRl IHdoaWNoIHdpbGwgb25seSBiZSBpc3N1ZWQgdG8gdGhlIGRldmljZSBpZiBpdCBmdWxmaWxscyBh biBleHBlY3RlZCBzZXQgb2YgZnVuY3Rpb25hbGl0aWVzLg0KICAgIA0KICAgIFRvIG1lLCB0aGVz ZSBkZXNjcmlwdGlvbnMgc2VlbSB0byBoYXZlIGRpZmZlcmVudCBpbnRlbnRzLCBzY29wZSBvciAN CiAgICBhdWRpZW5jZSBhbmQgcmVxdWlyZSBtb3N0IGNlcnRhaW5seSBkaWZmZXJlbnQgd29yay1m bG93cywgYnV0IA0KICAgIHNlbWFudGljYWxseSBhbmQgaW4gY29uc2VxdWVuY2UgcmVwcmVzZW50 YXRpb24td2lzZSB0aGV5IGFsc28gc2VlbSBxdWl0ZSANCiAgICByZWxhdGVkLg0KICAgIA0KICAg IElmIHlvdSB0aGluayBvZiBhbiBpZGVudGl0eSBkb2N1bWVudCBhcyBhIHNldCBvZiBjbGFpbXMg KHBvdGVudGlhbGx5IA0KICAgIGluY2x1ZGluZyBhIHB1YmxpYyBrZXkpLCB0aGF0IGlzIHNpZ25l ZCBhbmQgdGhhdCBjYW4gbWF0Y2ggb25lIG9yIG1vcmUgDQogICAgdGhpbmdzLCBtYXliZSBhbGwg dGhyZWUgdHlwZXMgaGlnaGxpZ2h0ZWQgYWJvdmUgYXJlIGFjdHVhbGx5IGNvdmVyZWQgYnkgDQog ICAgdGhlIHNhbWUgaWRlbnRpdHkgZG9jdW1lbnQgY29uY2VwdD8NCiAgICANCiAgICBXaXRoIHJl c3BlY3QgdG8gaWRlbnRpdHkgZG9jdW1lbnRzLCBJIHRoaW5rIGl0IGlzIHNhZmUgc28gc2F5IHRo YXQgd2UgDQogICAgY2FuIGZpbmQgY29tbW9uIGdyb3VuZCBoZXJlIHJhdGhlciBlYXNpbHkuIFRo YXQgc2FpZCwgdGhlIHdheSBob3cgdGhlc2UgDQogICAgaWRlbnRpdHkgZG9jdW1lbnRzIGNvbWUg aW50byBleGlzdGVuY2UsIHdoZW4gYW5kIGhvdyB0aGV5IGFyZSBkZXBsb3llZCANCiAgICBvbiB0 aGUgdGhpbmcgb3IgYXNzb2NpYXRlZCB3aXRoIG11bHRpcGxlIHRoaW5ncyBpcyBhbm90aGVyIHF1 ZXN0aW9uLiBXZSANCiAgICBtb3N0IGNlcnRhaW5seSBkbyBub3Qgd2FudCB0byBlbmQgdXAgd2l0 aCBhICJzaWduaW5nIGZvb2wiIHRoYXQgZG9lcyBub3QgDQogICAgYWRkIHZhbHVlIHRvIHRoZSBs ZXZlbCBvZiBjb25maWRlbmNlIChJIGFtIHF1b3RpbmcgTmVkIFNtaXRoIGhlcmUpLg0KICAgIA0K ICAgIFRoaXMgaGFzIHRvIGJlIGZsZXNoZWQgb3V0IGV4cGxpY2l0bHkgZm9yIGVhY2ggc2NlbmFy aW8gYW5kIHRoZSBwYXJ0cyANCiAgICB0aGF0IGFyZSByZXVzZWQgaW4gZXZlcnkgc2NlbmFyaW8g c2hvdWxkIGdldCBzcGVjaWFsIGF0dGVudGlvbiBpbiB0aGUgDQogICAgdXBjb21pbmcgUkFUUyBh cmNoaXRlY3R1cmUgZHJhZnQuDQogICAgDQogICAgSWRlbnRpZnlpbmcgY2xhaW1zIGFnZ3JlZ2F0 ZWQgaW4gYW4gaWRlbnRpdHkgZG9jdW1lbnQgbW9zdCBjZXJ0YWlubHkgY2FuIA0KICAgIGluY2x1 ZGUgZGV2aWNlIGNoYXJhY3RlcmlzdGljcywgcHVibGljIGtleShzKSwgb3IgY2xhaW1zIGFib3V0 IHRoZSANCiAgICBpbnRlbmRlZCBmdW5jdGlvbnMgYW5kIGNhcGFiaWxpdGllcyBvZiB0aGUgdGhp bmcuIENsYWltcyBjYW4gZXZlbiANCiAgICBvcmlnaW5hdGUgZnJvbSBDbGFpbWFudHMgdGhhdCBh cmUgbm90IHRoZSB0aGluZyBpdHNlbGYsIGJ1dCBleHRlcm5hbCANCiAgICBlbnRpdGllcyBwcm92 aWRpbmcgYW4gYXNzZXJ0aW9uIChlLmcuIHRoZXNlIHRoaW5ncyBhcmUgQ0MtY2VydGlmaWVkKS4N CiAgICANCiAgICBBbGwgZGlmZmVyZW50IGNvbXBvc2l0ZXMgb2YgaWRlbnRpZnlpbmcgY2xhaW1z IGhhdmUgYSBzcGVjaWZpYyBzaGFyZWQgDQogICAgaW50ZW5kIGluIHRoaXMgY29udGV4dCB0aG91 Z2gsIEkgdGhpbms6IGV4cHJlc3NpbmcgQXR0ZXN0YXRpb24gDQogICAgUHJvdmVuYW5jZSAoYWdh aW4gLSBvbmUgZm9yIG9uZSBvciBtb3JlIHRoaW5ncyBvZiB0aGUgc2FtZSBraW5kKS4gQW5kIA0K ICAgIGFsbCBvZiB0aGVtIG9yaWdpbmF0ZSBmcm9tIENsYWltYW50cyBhbmQgdGhlcmVmb3JlIHVz ZSBhIHJvb3Qgb2YgdHJ1c3QgDQogICAgb2YgbWVhc3VyZW1lbnQsIEkgdGhpbmsuDQogICAgDQog ICAgVGhhdCBzYWlkLCBlc3RhYmxpc2hpbmcgdHJ1c3R3b3J0aHkga25vd2xlZGdlIGFib3V0IGF0 dGVzdGF0aW9uIA0KICAgIHByb3ZlbmFuY2UgaXMgb25seSB0aGUgZmlyc3Qgc3RlcCBhbmQgcHJv dmlkZXMgdGhlIGZvdW5kYXRpb24gZm9yIG1vcmUgDQogICAgY29tcGxleCBhdHRlc3RhdGlvbiBw cm9jZWR1cmVzLiBJbiBhbnkgY2FzZSwgdGhpcyBzZWVtIHRvIGJlIHJlcXVpcmVkIGJ5IA0KICAg IGV2ZXJ5IHNjZW5hcmlvIHRoYXQgd2FzIGhpZ2hsaWdodGVkIHNvIGZhciBhbmQgdGhlcmVmb3Jl IHdpbGwgbW9zdCANCiAgICBjZXJ0YWlubHkgYmUgY292ZXJlZCBpbiBhIGRlbGl2ZXJhYmxlLg0K ICAgIA0KICAgIElIVEgsDQogICAgDQogICAgSGVuaw0KICAgIA0KICAgIA0KICAgIE9uIDEwLzE1 LzIwMTggMTI6MjIgUE0sIEplcmVteSBPJ0Rvbm9naHVlIHdyb3RlOg0KICAgID4gT24gMTIgT2N0 IDIwMTgsIGF0IDE0OjMzLCBEZW5pcyA8ZGVuaXMuaWV0ZkBmcmVlLmZyIA0KICAgID4gPG1haWx0 bzpkZW5pcy5pZXRmQGZyZWUuZnI+PiB3cm90ZToNCiAgICA+PiBUaGUgIlByb2JsZW0gU3RhdGVt ZW50IiBjb250aW51ZXMgYXMgZm9sbG93czoNCiAgICA+Pg0KICAgID4+ICgyKSBUb2RheSwgdGhl cmUgaXMgbm8gY29tbW9uLCBzdGFuZGFyZCB3YXkgZm9yIFJlbHlpbmcgUGFydGllcyB0byANCiAg ICA+PiBrbm93IHRoZSBwcm92ZW5hbmNlIGFuZCBjaGFyYWN0ZXJpc3RpY3Mgb2YgYSBkZXZpY2Ug KGUuZy4sIGFuIGVuZC11c2VyIA0KICAgID4+IGRldmljZSwNCiAgICA+PiBwbGF0Zm9ybSBvciBl bmRwb2ludCwgc2VydmVycywgSW9UIGRldmljZXMsIGRldmljZSBzdWJzeXN0ZW1zIGFuZCANCiAg ICA+PiBzdWItbW9kdWxlcykgdGhhdCBtYXkgYmUgcmVxdWVzdGluZyBzZXJ2aWNlcy4NCiAgICA+ Pg0KICAgID4+IEtub3dpbmcgdGhlIHByb3ZlbmFuY2Ugb2YgdGhlIGRldmljZSBpcyBub3QgYWx3 YXlzIG5lY2Vzc2FyeS4gV2hhdCBpcyANCiAgICA+PiBpbXBvcnRhbnQgaXMgdG8ga25vdyB0aGF0 IGEgc3BlY2lmaWMgc2V0IG9mIGZ1bmN0aW9ucyBpcyAoc2VjdXJlbHkpIA0KICAgID4+IHN1cHBv cnRlZCBieSB0aGUgZGV2aWNlLg0KICAgID4+IFRoZXJlIGFscmVhZHkgZXhpc3RzIGEgY29tbW9u IHdheSB0byBrbm93IHRoZSBjaGFyYWN0ZXJpc3RpY3Mgb2YgYSANCiAgICA+PiBkZXZpY2UgYnkg aXNzdWluZyB0byB0aGUgZGV2aWNlIGEgcHVibGljIGtleSBjZXJ0aWZpY2F0ZSB3aGljaCB3aWxs IA0KICAgID4+IG9ubHkgYmUgaXNzdWVkIHRvIHRoZSBkZXZpY2UNCiAgICA+PiBpZiBpdCBmdWxm aWxscyBhbiBleHBlY3RlZCBzZXQgb2YgZnVuY3Rpb25hbGl0aWVzLiBJbiBzdWNoIGEgY2FzZSBh IA0KICAgID4+IHN5bnRheCBmb3IgYSB0cnVzdGVkIGNsYWltIHNldHMqKmlzIG5vdCBuZWVkZWQu DQogICAgPj4NCiAgICA+IFRoaXMgaXMgaW5kZWVkIGEgcG9zc2libGUgd2F5IHRvIGFkZHJlc3Mg dGhlIHByb2JsZW0sIGJ1dCBzdWZmZXJzIGZyb20gDQogICAgPiBjaGFsbGVuZ2VzIHdoaWNoIGNv bWUgZG93biB0bzoNCiAgICA+IA0KICAgID4gLSBXaG8gaXNzdWVzIHN1Y2ggY2VydGlmaWNhdGVz LiBBbiBvcHRpb24gaXMgdGhhdCB0aGVyZSBpcyBzb21lIGZvcm0gb2YgDQogICAgPiBzZWN1cml0 eSBjZXJ0aWZpY2F0aW9uIGJlaGluZCB0aGlzIGlzc3VhbmNlIG90aGVyd2lzZSBpdCBpcyBvZiB2 ZXJ5IA0KICAgID4gbGltaXRlZCB2YWx1ZS4NCiAgICA+IC0gSW4gb3JkZXIgdG8gY2FwdHVyZSB0 aGUgd2lkZSB2YXJpZXR5IG9mIGRpZmZlcmVudCBkZXZpY2VzIChJIHByZWZlciANCiAgICA+ICJl bnRpdHkiIGhlcmUgYXMgaXQgaXMgbW9yZSBnZW5lcmFsIHRoYW4gImRldmljZSIpLCBtYW55IGRp ZmZlcmVudCBmb3JtcyANCiAgICA+IG9mIHN1Y2ggY2VydGlmaWNhdGVzIHdvdWxkIGJlIHJlcXVp cmVkLiBUaGlzIGVuZHMgdXAgYmVpbmcgbXVjaCB0aGUgc2FtZSANCiAgICA+IHRoaW5nIGFzIGEg c2V0IG9mIGNsYWltcy4NCiAgICA+IA0KICAgID4gR2l2ZW4gdGhlIG11bHRpcGxpY2l0eSBvZiBl bnRpdGllcyBmb3Igd2hpY2ggYXR0ZXN0YXRpb24gbWlnaHQgYmUgDQogICAgPiB1c2VmdWwsIGl0 IHNlZW1zIHRvIG1lIHRoYXQgaGF2aW5nIHRoZSBlbnRpdHkgY3JlYXRvci9tYW51ZmFjdHVyZXIg DQogICAgPiBwcm92aWRlIGEgc2V0IG9mIGNsYWltcyB3aGljaCBjYW4gYmUgdmVyaWZpZWQgaXMg bW9yZSBmbGV4aWJsZSB0aGFuIA0KICAgID4gcmVxdWlyaW5nIGEgY2VydGlmaWNhdGUuIEl0IHNl ZW1zIGxpa2VseSB0byBtZSB0aGF0IHdoZXJlIGEgZm9ybWFsIA0KICAgID4gc2VjdXJpdHkgY2Vy dGlmaWNhdGlvbiBpcyBuZWVkZWQgdGhlcmUgd2lsbCBiZSBhIGNlcnRpZmljYXRlIGlzc3VlZCBi eSANCiAgICA+IHRoZSBDZXJ0aWZ5aW5nIEJvZHkgYXMgb25lIG9mIHRoZSBjbGFpbXMgYWJvdXQg YW4gZW50aXR5LCBidXQgSSBjYW4gDQogICAgPiB0aGluayBvZiBtYW55IGNhc2VzIChzdXBwbHkg Y2hhaW4gbWFuYWdlbWVudCwgdG8gdGFrZSBqdXN0IG9uZSBleGFtcGxlKSANCiAgICA+IHdoZXJl IHByb3ZlbmFuY2UgaXMgYnkgZmFyIHRoZSBtb3N0IHVzZWZ1bCBpbmZvcm1hdGlvbi4NCiAgICA+ IA0KICAgID4gSSdtIG5vdCBpbiBmYXZvdXIgb2YgY2hhbmdlcyB0byB0aGUgY2hhcnRlciBpbiB0 aGlzIGRpcmVjdGlvbi4NCiAgICA+Pg0KICAgID4+IFRoZSBzaW1wbGVzdCBjYXNlcyBzaG91bGQg YWxzbyBiZSBwYXJ0IG9mIHRoZSBmcmFtZXdvcmsuDQogICAgPj4NCiAgICA+PiBOb3RlOiBJIHBl cnNvbmFsbHkgYXBwcmVjaWF0ZSB0aGF0IHByaXZhY3kgaXMgYW4gYXNwZWN0IHRoYXQgDQogICAg Pj4gd2lsbC9zaG91bGQgYmUgdGFrZW4gaW50byBjb25zaWRlcmF0aW9uLg0KICAgID4+DQogICAg Pj4gRGVuaXMNCiAgICA+Pg0KICAgID4+PiBBcyB3aXRoIHRoZSBlYXJsaWVyIGRyYWZ0LCB0aGVy ZSBhcmUgbWFueSByZWZlcmVuY2VzIHRvIHZlcmlmeSBhbmQNCiAgICA+Pj4gdmVyaWZpZXIgaW4g dGhlIGxlYWQgdXAgdG8gdGhlIGRlbGl2ZXJhYmxlIGJ1dCBubyBkZWxpdmVyYWJsZXMgZGVzY3Jp YmluZw0KICAgID4+PiB2ZXJpZmljYXRpb24gcnVsZXMuIEknZCBsaWtlIHRvIHNlZSBydWxlcyBp biBvbmUgb2YgdGhlc2UgZG9jdW1lbnRzIGFuZA0KICAgID4+PiB0aGluayBpdCB3b3J0aCBjaXRp bmcgaW4gdGhlIGRlbGl2ZXJhYmxlcy4gQXJlIGJpbmRpbmdzIHRvIGNlcnRpZmljYXRlDQogICAg Pj4+IG1hbmFnZW1lbnQgcHJvdG9jb2xzIG91dCBvZiBzY29wZT8NCiAgICA+Pj4NCiAgICA+Pj4g T24gMTAvMTEvMTgsIDk6NDkgQU0sICJSQVRTIG9uIGJlaGFsZiBvZiBIZW5rIEJpcmtob2x6Ig0K ICAgID4+PiA8cmF0cy1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBoZW5rLmJpcmtob2x6 QHNpdC5mcmF1bmhvZmVyLmRlPiAgd3JvdGU6DQogICAgPj4+DQogICAgPj4+PiBIaSBhbGwsDQog ICAgPj4+Pg0KICAgID4+Pj4gc29ycnkgZm9yIHRoZSBkZWxheS4gUGxlYXNlIGZpbmQgYW4gdXBk YXRlZCBjaGFydGVyIHByb3Bvc2FsIGhlcmU6DQogICAgPj4+Pg0KICAgID4+Pj4+IGh0dHBzOi8v Z2l0aHViLmNvbS9pZXRmLXJhdHMvY2hhcnRlci9ibG9iL1JDMi9pZXRmLXJhdHMtY2hhcnRlci5t ZA0KICAgID4+Pj4gVGhlIEJvRiBwcm9wb25lbnRzIHRyaWVkIHRvIG1lcmdlIGFsbCBjb21tZW50 cyBhbmQgcHJvcG9zYWxzIG9uDQogICAgPj4+PiBrZXlzdG9yZXMsIGV4aXN0aW5nIHNvbHV0aW9u cywgcHJvdmVuYW5jZSAmIGRldmljZSBjaGFyYWN0ZXJpc3RpY3MsIGV0Yw0KICAgID4+Pj4gdGhh dCB3ZXJlIHJhaXNlZCBvbiB0aGUgbGlzdCAtIGFuZCBhbGlnbiB0aGVtIGluIGhvbW9nZW5lb3Vz IGZhc2hpb24uDQogICAgPj4+Pg0KICAgID4+Pj4gVGhpcyBkcmFmdCBpcyBpbnRlbmRlZCB0byBm b2N1cyB0aGUgZGlzY3Vzc2lvbiBhbmQgaW1wcm92ZSB0aGUgd29yZGluZy4NCiAgICA+Pj4+DQog ICAgPj4+PiBWaWVsZSBHcsO8w59lLA0KICAgID4+Pj4NCiAgICA+Pj4+IEhlbmsNCiAgICA+Pj4+ DQogICAgPj4+PiBPbiAxMC8wNi8yMDE4IDA4OjIzIEFNLCBMYXVyZW5jZSBMdW5kYmxhZGUgd3Jv dGU6DQogICAgPj4+Pj4gSGkgSGVuaywNCiAgICA+Pj4+Pg0KICAgID4+Pj4+IEJhbmdrb2sgSUVU RiBpcyBnZXR0aW5nIGNsb3NlLCB3aWxsIHlvdSBiZSBhYmxlIHRvIHVwZGF0ZSB0aGUgY2hhcnRl cg0KICAgID4+Pj4+IGZvciB0aGUgYXR0ZXN0YXRpb24gQm9GIHRvIHByb3Blcmx5IGluY2x1ZGUg RUFUPyAgSSBzZW50IHlvdSBzb21lIHRleHQNCiAgICA+Pj4+PiB0aGF0IGp1c3QgbmVlZHMgdG8g YmUgcGFzdGVkIGFsb25nIHdpdGggc29tZSBjb21tZW50cy4gSXQgZG9lc27igJl0IGxvb2sNCiAg ICA+Pj4+PiBsaWtlIHRoZXJl4oCZcyBiZWVuIGFueSB1cGRhdGVzLg0KICAgID4+Pj4+DQogICAg Pj4+Pj4gTEwNCiAgICA+Pj4+Pg0KICAgID4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCiAgICA+Pj4+IFJBVFMgbWFpbGluZyBsaXN0DQogICAgPj4+ PiBSQVRTQGlldGYub3JnDQogICAgPj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL3JhdHMNCiAgICA+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCiAgICA+Pj4gRUFUIG1haWxpbmcgbGlzdA0KICAgID4+PiBFQVRAaWV0Zi5v cmcNCiAgICA+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCiAg ICA+Pg0KICAgID4+DQogICAgPj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCiAgICA+PiBFQVQgbWFpbGluZyBsaXN0DQogICAgPj4gRUFUQGlldGYub3Jn IDxtYWlsdG86RUFUQGlldGYub3JnPg0KICAgID4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vZWF0DQogICAgPiANCiAgICA+IA0KICAgID4gDQogICAgPiBfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgID4gRUFUIG1haWxpbmcg bGlzdA0KICAgID4gRUFUQGlldGYub3JnDQogICAgPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL2VhdA0KICAgID4gDQogICAgDQogICAgX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICBFQVQgbWFpbGluZyBsaXN0DQogICAgRUFU QGlldGYub3JnDQogICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQN CiAgICANCg0K From nobody Mon Oct 15 10:49:50 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E320130ED8; Mon, 15 Oct 2018 10:49:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nyZerFg-wDkV; Mon, 15 Oct 2018 10:49:40 -0700 (PDT) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-he1eur02on0624.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe05::624]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 855EB130ED3; Mon, 15 Oct 2018 10:49:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=y9a34Xh+bIJ3+xcyCQBVUPsc3kezd+TlN/VjRKaB4BI=; b=RZHk+XhHcOq5+rtwfEqm5mJndpZZw8ucKtvT1zZztK0cxTikF2r2DrL9ABmcbMu+E6z3GRdHJi7n8hnXFvE4Lus55HXLQ4HApBZBy/MebzV1Br/HFUXKO90JqCzCeZ7YoaOXaALP8F0XQEVpqvKfY9fTp7R9ZvaMnhPv4yRxQZ8= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1775.eurprd08.prod.outlook.com (10.168.67.140) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1228.25; Mon, 15 Oct 2018 17:49:36 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::ed81:d01e:32bf:6116]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::ed81:d01e:32bf:6116%8]) with mapi id 15.20.1228.027; Mon, 15 Oct 2018 17:49:36 +0000 From: Hannes Tschofenig To: "Smith, Ned" , Henk Birkholz , "rats@ietf.org" , Jeremy O'Donoghue , Denis CC: "eat@ietf.org" Thread-Topic: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates? Thread-Index: AQHUZJbpM4Ce0LXhe06/YLi9zHRd7qUgdvSAgAAWyDA= Date: Mon, 15 Oct 2018 17:49:35 +0000 Message-ID: References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> In-Reply-To: <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [156.39.191.64] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1775; 6:YHPSpkFHTtk2r8d4gVS6sIEGil2VpVzNl+kCOxafYCo34iYZHSEYNrfkBhLB634eqjd/c7ssSuS4UZvigIxiCaD+UMQKdfM+mc5RtV59dMydcri6vdQ9X06DklfZ+imEMJXatkbV6tkF9Uopqpk32Z6V9qtpeOITdHV/Bs34PFQG0+IQgPAPphi74wxP7X6rUBdEXvi/uJ71URbgKEhyPtGLH4nX5pe+eSbr5BqOshRddz1cl1GEohdp1QWvRdnBOA8ZMFqf3Zn8kmEmjcIvVNSt0463x6yZkW4kkK9hQPYZ6gXp63dQEPHqNLDreCNzDW4pnfpZ6DvPlYBpotfBQOUQmMCwMTS8c2OAc2qbv9D/iTWpoj1+ZRaHdSIqo38dOaaLBmX/FNtglj16mqQf88+497Ya2kiqmPmKisZusJa8mK4GQYNpMx9cajFCyCBaXyeFhOTNh4HAW6UBddQSRA==; 5:fL3xQX3JxnwuNo2rf4ReWqghakKfnIPd2lVi2QgQRmNdVXPnBOpaiGc90GZkOczkYbC5TTyUxBSX4GPEA5chQdOJCz/TUSKkcE5jdNECvYT2PYWLPEmxXgMQY6gJ4wcAf4TOrCdGT4lhpEzs68lFTBhoSLFnjoD3TmGLul/e0DQ=; 7:v84TADiqDVJeMJ+MMc7a/EbDGuriRQYent03YwlilqeZxuxp/wBuEprm9MIFx8h4BqqBR1H3WnKgYCaOcLC+H48nZ7eJttP0PEQ3133Fm6N7nmsVNzoSC0KFlc0XilSXAyHcaH3z5hlnfseUqlNsjQlDZmhXuyvz1DjoB+dsf+vRqKtUeCH0vSEoiN7omiSVBAwyhjW10eR586b1gX9WMD9RK68ZBhy8kadO7vPd0Dyxq81SokYB0hVCyYjb7nGc x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 58bf7b4e-c32e-4c35-bf00-08d632c69263 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1775; x-ms-traffictypediagnostic: VI1PR0801MB1775: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705)(166708455590820)(191636701735510); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(3231355)(944501410)(52105095)(10201501046)(93006095)(93001095)(6055026)(149066)(150057)(6041310)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123558120)(20161123562045)(201708071742011)(7699051); SRVR:VI1PR0801MB1775; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1775; x-forefront-prvs: 0826B2F01B x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(39860400002)(346002)(376002)(136003)(366004)(189003)(199004)(40434004)(13464003)(53754006)(26005)(71200400001)(6246003)(2906002)(71190400001)(186003)(93886005)(486006)(66066001)(2900100001)(476003)(14454004)(446003)(11346002)(97736004)(6306002)(316002)(15650500001)(110136005)(55016002)(5660300001)(9686003)(86362001)(53936002)(6436002)(74316002)(305945005)(7736002)(4326008)(229853002)(25786009)(106356001)(72206003)(105586002)(6116002)(561944003)(3846002)(33656002)(81156014)(8936002)(81166006)(6506007)(76176011)(2501003)(5024004)(7696005)(966005)(5250100002)(8676002)(478600001)(256004)(99286004)(68736007)(14444005)(102836004)(53546011)(15866825006); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1775; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: R1zMPp+SU9YyipuJzf3r9H3W9DaSEEKtk9qdwK8hS/tNcp4W+YYJJ8JYmmPRnVHvUe6jW6ercR1Ieb39cirVLDT/KV4eYUWZgzqpHIcLUFF25BQMQCRVFGqOSzZvz9kdDYy1+jILomZXEDqLM6YffekkaD2R0IGwDEBqBSG5uzhpcR7PvScXIgcUZNsyLl7LnWrbAhCUi9kCsQZZuz3xMEqhZfwaNUWO9Xz5qbVGh0CG/9UcD65FC28AOwMjoJlbwPBpLn/0OA2HYs9QI8rrrBSbroqDQ96bwXlBtsshRqBT7G8VXHpR/mEZ/RFvKw+eI2qwy/62UnK1DCh9ttpqZpQZExbuIBhSYHNvBok2TOE= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 58bf7b4e-c32e-4c35-bf00-08d632c69263 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Oct 2018 17:49:35.9306 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1775 Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Oct 2018 17:49:43 -0000 SGVyZSBhcmUgbXkgNSBjZW50cyBvbiB0aGUgdGVybSAnaWRlbnRpdHknLg0KDQpJIGhhdmUgYmVl biB3b3JraW5nIG9uIGlkZW50aXR5IG1hbmFnZW1lbnQgZm9yIG1hbnkgeWVhcnMgKHBhcnRpYWxs eSBiZWNhdXNlIG9mIG15IE9BdXRoIGNvLWNoYWlyIHJvbGUpIGFuZCBJIGhhdmUgbm90aWNlZCB0 aGF0IHRoZSB1c2Ugb2YgdGhlIHRlcm0gImlkZW50aXR5IiB0ZW5kcyB0byBjb25mdXNlIG1vcmUg dGhhbiBpdCBoZWxwcyAoZXZlbiBtb3JlIHNvIHdoZW4gdGhlIHRlcm0gaXMgYXBwbGllZCB0byBk ZXZpY2VzIGFuZCBzb2Z0d2FyZSByYXRoZXIgdGhhbiBodW1hbnMpLg0KDQpJIGJlbGlldmUgd2Ug Y291bGQgZ2V0IGF3YXkgd2l0aCBkZXNjcmliaW5nIHdoYXQgd2Ugd2FudCB3aXRob3V0IGV2ZXIg dXNpbmcgdGhlIHRlcm0uDQoNCkluIHRoaXMgY29udGV4dCBJIHdvdWxkIGFyZ3VlIHRoYXQgd2Ug YXJlIGFib3V0IGlkZW50aWZ5aW5nIGRpZmZlcmVudCBjb21wb25lbnRzLCBzdWNoIGFzIGhhcmR3 YXJlIGFuZCBzb2Z0d2FyZS4NCg0KQ2lhbw0KSGFubmVzDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQpGcm9tOiBFQVQgPGVhdC1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgU21p dGgsIE5lZA0KU2VudDogTW9uZGF5LCBPY3RvYmVyIDE1LCAyMDE4IDk6MDAgQU0NClRvOiBIZW5r IEJpcmtob2x6IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPjsgcmF0c0BpZXRmLm9y ZzsgSmVyZW15IE8nRG9ub2dodWUgPGpvZG9ub2doQHF0aS5xdWFsY29tbS5jb20+OyBEZW5pcyA8 ZGVuaXMuaWV0ZkBmcmVlLmZyPg0KQ2M6IGVhdEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtFQVRd IFtFWFRFUk5BTF0gUmU6IFtSYXRzXSBBdHRlc3RhdGlvbiBCb0YgY2hhcnRlciB1cGRhdGVzPw0K DQpJIGFncmVlIHdpdGggSGVuaydzIG9ic2VydmF0aW9uIHRoYXQgdGhlcmUgaXMgb3Bwb3J0dW5p dHkgdG8gZmluZCBjb21tb24gZ3JvdW5kIG9uIGlkZW50aXR5IGFzIGlkZW50aXR5IGNhbiBiZSBh IGNvbGxlY3Rpb24gb2YgYXR0cmlidXRlcywgdGhhdCBpZiBzaWduZWQsIGJlY29tZXMgYSBzZXQg b2YgdmVyaWZpYWJsZSBjbGFpbXMgKGFib3V0IGlkZW50aXR5IGF0dHJpYnV0ZXMpLiBBdHRlc3Rh dGlvbiBoYXMgYSBzaW1pbGFyIHN0cnVjdHVyZSBpbiB0aGF0IGl0IGNvbnNpc3RzIG9mIGEgc2V0 IG9mIGF0dHJpYnV0ZXMsIHRoYXQgaWYgc2lnbmVkIGJlY29tZXMgYSBzZXQgb2YgdmVyaWZpYWJs ZSBjbGFpbXMuIFRoZSBtYWluIGRpZmZlcmVuY2UgYmV0d2VlbiBpZGVudGl0eSBhbmQgYXR0ZXN0 YXRpb24gYXR0cmlidXRlcyBpcyB3aGV0aGVyIHRoZSBhdHRyaWJ1dGUgc2VtYW50aWNhbGx5IHJl bGF0ZSB0byB0cnVzdCAodnMuIGlkZW50aXR5KS4gRm9yIGV4YW1wbGUsIGNsYWltcyBvZiBzZWN1 cml0eSBjZXJ0aWZpY2F0aW9uIGNvbXBsaWFuY2UgcmVzb25hdGVzIGFzIGF0dGVzdGF0aW9uLg0K DQpJdCBtYXkgYmUgcG9zc2libGUgdG8gY29tYmluZSBhIHNldCBvZiBhdHRlc3RhdGlvbiBhdHRy aWJ1dGVzIGluIHN1Y2ggYSB3YXkgdGhhdCB0aGUgY29tYmluYXRpb24gdW5pcXVlbHkgaWRlbnRp ZmllcyBhbiBlbnRpdHkuIEJ1dCB0aGF0IGRvZXNuJ3QgbWFrZSBpdCBhbiBpZGVudGl0eSBzeXN0 ZW0gcGVyIHNlIGFuZCBzaG91bGRuJ3QgY2F1c2UgYSBjb25mbGljdCBpbiBjaGFydGVyIGdvYWxz IHdpdGggcmVzcGVjdCB0byBvdGhlciBpZGVudGl0eSBmb2N1c2VkIGVmZm9ydHMgaW4gSUVURi4N Cg0KQWxzbywgaW5jbHVzaW9uIG9mIGF0dHJpYnV0ZXMgdGhhdCBkb24ndCBoYXZlIHNlbWFudGlj cyB0aGF0IHJlYXNvbmFibHkgcmVsYXRlIHRvIHRydXN0IHNob3VsZCBub3QgYmUgb2YgaW50ZXJl c3QgdG8gYSB3b3JraW5nIGdyb3VwIGZvY3VzZWQgb24gYXR0ZXN0YXRpb24uDQoNCi1OZWQNCg0K 77u/T24gMTAvMTUvMTgsIDM6NTMgUE0sICJFQVQgb24gYmVoYWxmIG9mIEhlbmsgQmlya2hvbHoi IDxlYXQtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgaGVuay5iaXJraG9sekBzaXQuZnJh dW5ob2Zlci5kZT4gd3JvdGU6DQoNCiAgICBIaSBKZXJlbXkgJiBEZW5pcywNCg0KICAgIGFsbCB0 aGVzZSBwb2ludHMgb2YgdmlldyBoYXZlIG1lcml0LCBJIHRoaW5rLg0KDQogICAgUGxlYXNlIGhh dmUgYSBsb29rIGF0IHRoZXNlIHF1b3RlczoNCg0KICAgID4ga25vd2luZyB0aGUgcHJvdmVuYW5j ZSBvZiB0aGUgZGV2aWNlDQoNCiAgICA+IGhhdmluZyB0aGUgZW50aXR5IGNyZWF0b3IvbWFudWZh Y3R1cmVyIHByb3ZpZGUgYSBzZXQgb2YgY2xhaW1zIHdoaWNoIGNhbiBiZSB2ZXJpZmllZA0KDQog ICAgPiB0byBrbm93IHRoZSBjaGFyYWN0ZXJpc3RpY3Mgb2YgYSBkZXZpY2UgYnkgaXNzdWluZyB0 byB0aGUgZGV2aWNlIGEgcHVibGljIGtleSBjZXJ0aWZpY2F0ZSB3aGljaCB3aWxsIG9ubHkgYmUg aXNzdWVkIHRvIHRoZSBkZXZpY2UgaWYgaXQgZnVsZmlsbHMgYW4gZXhwZWN0ZWQgc2V0IG9mIGZ1 bmN0aW9uYWxpdGllcy4NCg0KICAgIFRvIG1lLCB0aGVzZSBkZXNjcmlwdGlvbnMgc2VlbSB0byBo YXZlIGRpZmZlcmVudCBpbnRlbnRzLCBzY29wZSBvcg0KICAgIGF1ZGllbmNlIGFuZCByZXF1aXJl IG1vc3QgY2VydGFpbmx5IGRpZmZlcmVudCB3b3JrLWZsb3dzLCBidXQNCiAgICBzZW1hbnRpY2Fs bHkgYW5kIGluIGNvbnNlcXVlbmNlIHJlcHJlc2VudGF0aW9uLXdpc2UgdGhleSBhbHNvIHNlZW0g cXVpdGUNCiAgICByZWxhdGVkLg0KDQogICAgSWYgeW91IHRoaW5rIG9mIGFuIGlkZW50aXR5IGRv Y3VtZW50IGFzIGEgc2V0IG9mIGNsYWltcyAocG90ZW50aWFsbHkNCiAgICBpbmNsdWRpbmcgYSBw dWJsaWMga2V5KSwgdGhhdCBpcyBzaWduZWQgYW5kIHRoYXQgY2FuIG1hdGNoIG9uZSBvciBtb3Jl DQogICAgdGhpbmdzLCBtYXliZSBhbGwgdGhyZWUgdHlwZXMgaGlnaGxpZ2h0ZWQgYWJvdmUgYXJl IGFjdHVhbGx5IGNvdmVyZWQgYnkNCiAgICB0aGUgc2FtZSBpZGVudGl0eSBkb2N1bWVudCBjb25j ZXB0Pw0KDQogICAgV2l0aCByZXNwZWN0IHRvIGlkZW50aXR5IGRvY3VtZW50cywgSSB0aGluayBp dCBpcyBzYWZlIHNvIHNheSB0aGF0IHdlDQogICAgY2FuIGZpbmQgY29tbW9uIGdyb3VuZCBoZXJl IHJhdGhlciBlYXNpbHkuIFRoYXQgc2FpZCwgdGhlIHdheSBob3cgdGhlc2UNCiAgICBpZGVudGl0 eSBkb2N1bWVudHMgY29tZSBpbnRvIGV4aXN0ZW5jZSwgd2hlbiBhbmQgaG93IHRoZXkgYXJlIGRl cGxveWVkDQogICAgb24gdGhlIHRoaW5nIG9yIGFzc29jaWF0ZWQgd2l0aCBtdWx0aXBsZSB0aGlu Z3MgaXMgYW5vdGhlciBxdWVzdGlvbi4gV2UNCiAgICBtb3N0IGNlcnRhaW5seSBkbyBub3Qgd2Fu dCB0byBlbmQgdXAgd2l0aCBhICJzaWduaW5nIGZvb2wiIHRoYXQgZG9lcyBub3QNCiAgICBhZGQg dmFsdWUgdG8gdGhlIGxldmVsIG9mIGNvbmZpZGVuY2UgKEkgYW0gcXVvdGluZyBOZWQgU21pdGgg aGVyZSkuDQoNCiAgICBUaGlzIGhhcyB0byBiZSBmbGVzaGVkIG91dCBleHBsaWNpdGx5IGZvciBl YWNoIHNjZW5hcmlvIGFuZCB0aGUgcGFydHMNCiAgICB0aGF0IGFyZSByZXVzZWQgaW4gZXZlcnkg c2NlbmFyaW8gc2hvdWxkIGdldCBzcGVjaWFsIGF0dGVudGlvbiBpbiB0aGUNCiAgICB1cGNvbWlu ZyBSQVRTIGFyY2hpdGVjdHVyZSBkcmFmdC4NCg0KICAgIElkZW50aWZ5aW5nIGNsYWltcyBhZ2dy ZWdhdGVkIGluIGFuIGlkZW50aXR5IGRvY3VtZW50IG1vc3QgY2VydGFpbmx5IGNhbg0KICAgIGlu Y2x1ZGUgZGV2aWNlIGNoYXJhY3RlcmlzdGljcywgcHVibGljIGtleShzKSwgb3IgY2xhaW1zIGFi b3V0IHRoZQ0KICAgIGludGVuZGVkIGZ1bmN0aW9ucyBhbmQgY2FwYWJpbGl0aWVzIG9mIHRoZSB0 aGluZy4gQ2xhaW1zIGNhbiBldmVuDQogICAgb3JpZ2luYXRlIGZyb20gQ2xhaW1hbnRzIHRoYXQg YXJlIG5vdCB0aGUgdGhpbmcgaXRzZWxmLCBidXQgZXh0ZXJuYWwNCiAgICBlbnRpdGllcyBwcm92 aWRpbmcgYW4gYXNzZXJ0aW9uIChlLmcuIHRoZXNlIHRoaW5ncyBhcmUgQ0MtY2VydGlmaWVkKS4N Cg0KICAgIEFsbCBkaWZmZXJlbnQgY29tcG9zaXRlcyBvZiBpZGVudGlmeWluZyBjbGFpbXMgaGF2 ZSBhIHNwZWNpZmljIHNoYXJlZA0KICAgIGludGVuZCBpbiB0aGlzIGNvbnRleHQgdGhvdWdoLCBJ IHRoaW5rOiBleHByZXNzaW5nIEF0dGVzdGF0aW9uDQogICAgUHJvdmVuYW5jZSAoYWdhaW4gLSBv bmUgZm9yIG9uZSBvciBtb3JlIHRoaW5ncyBvZiB0aGUgc2FtZSBraW5kKS4gQW5kDQogICAgYWxs IG9mIHRoZW0gb3JpZ2luYXRlIGZyb20gQ2xhaW1hbnRzIGFuZCB0aGVyZWZvcmUgdXNlIGEgcm9v dCBvZiB0cnVzdA0KICAgIG9mIG1lYXN1cmVtZW50LCBJIHRoaW5rLg0KDQogICAgVGhhdCBzYWlk LCBlc3RhYmxpc2hpbmcgdHJ1c3R3b3J0aHkga25vd2xlZGdlIGFib3V0IGF0dGVzdGF0aW9uDQog ICAgcHJvdmVuYW5jZSBpcyBvbmx5IHRoZSBmaXJzdCBzdGVwIGFuZCBwcm92aWRlcyB0aGUgZm91 bmRhdGlvbiBmb3IgbW9yZQ0KICAgIGNvbXBsZXggYXR0ZXN0YXRpb24gcHJvY2VkdXJlcy4gSW4g YW55IGNhc2UsIHRoaXMgc2VlbSB0byBiZSByZXF1aXJlZCBieQ0KICAgIGV2ZXJ5IHNjZW5hcmlv IHRoYXQgd2FzIGhpZ2hsaWdodGVkIHNvIGZhciBhbmQgdGhlcmVmb3JlIHdpbGwgbW9zdA0KICAg IGNlcnRhaW5seSBiZSBjb3ZlcmVkIGluIGEgZGVsaXZlcmFibGUuDQoNCiAgICBJSFRILA0KDQog ICAgSGVuaw0KDQoNCiAgICBPbiAxMC8xNS8yMDE4IDEyOjIyIFBNLCBKZXJlbXkgTydEb25vZ2h1 ZSB3cm90ZToNCiAgICA+IE9uIDEyIE9jdCAyMDE4LCBhdCAxNDozMywgRGVuaXMgPGRlbmlzLmll dGZAZnJlZS5mcg0KICAgID4gPG1haWx0bzpkZW5pcy5pZXRmQGZyZWUuZnI+PiB3cm90ZToNCiAg ICA+PiBUaGUgIlByb2JsZW0gU3RhdGVtZW50IiBjb250aW51ZXMgYXMgZm9sbG93czoNCiAgICA+ Pg0KICAgID4+ICgyKSBUb2RheSwgdGhlcmUgaXMgbm8gY29tbW9uLCBzdGFuZGFyZCB3YXkgZm9y IFJlbHlpbmcgUGFydGllcyB0bw0KICAgID4+IGtub3cgdGhlIHByb3ZlbmFuY2UgYW5kIGNoYXJh Y3RlcmlzdGljcyBvZiBhIGRldmljZSAoZS5nLiwgYW4gZW5kLXVzZXINCiAgICA+PiBkZXZpY2Us DQogICAgPj4gcGxhdGZvcm0gb3IgZW5kcG9pbnQsIHNlcnZlcnMsIElvVCBkZXZpY2VzLCBkZXZp Y2Ugc3Vic3lzdGVtcyBhbmQNCiAgICA+PiBzdWItbW9kdWxlcykgdGhhdCBtYXkgYmUgcmVxdWVz dGluZyBzZXJ2aWNlcy4NCiAgICA+Pg0KICAgID4+IEtub3dpbmcgdGhlIHByb3ZlbmFuY2Ugb2Yg dGhlIGRldmljZSBpcyBub3QgYWx3YXlzIG5lY2Vzc2FyeS4gV2hhdCBpcw0KICAgID4+IGltcG9y dGFudCBpcyB0byBrbm93IHRoYXQgYSBzcGVjaWZpYyBzZXQgb2YgZnVuY3Rpb25zIGlzIChzZWN1 cmVseSkNCiAgICA+PiBzdXBwb3J0ZWQgYnkgdGhlIGRldmljZS4NCiAgICA+PiBUaGVyZSBhbHJl YWR5IGV4aXN0cyBhIGNvbW1vbiB3YXkgdG8ga25vdyB0aGUgY2hhcmFjdGVyaXN0aWNzIG9mIGEN CiAgICA+PiBkZXZpY2UgYnkgaXNzdWluZyB0byB0aGUgZGV2aWNlIGEgcHVibGljIGtleSBjZXJ0 aWZpY2F0ZSB3aGljaCB3aWxsDQogICAgPj4gb25seSBiZSBpc3N1ZWQgdG8gdGhlIGRldmljZQ0K ICAgID4+IGlmIGl0IGZ1bGZpbGxzIGFuIGV4cGVjdGVkIHNldCBvZiBmdW5jdGlvbmFsaXRpZXMu IEluIHN1Y2ggYSBjYXNlIGENCiAgICA+PiBzeW50YXggZm9yIGEgdHJ1c3RlZCBjbGFpbSBzZXRz KippcyBub3QgbmVlZGVkLg0KICAgID4+DQogICAgPiBUaGlzIGlzIGluZGVlZCBhIHBvc3NpYmxl IHdheSB0byBhZGRyZXNzIHRoZSBwcm9ibGVtLCBidXQgc3VmZmVycyBmcm9tDQogICAgPiBjaGFs bGVuZ2VzIHdoaWNoIGNvbWUgZG93biB0bzoNCiAgICA+DQogICAgPiAtIFdobyBpc3N1ZXMgc3Vj aCBjZXJ0aWZpY2F0ZXMuIEFuIG9wdGlvbiBpcyB0aGF0IHRoZXJlIGlzIHNvbWUgZm9ybSBvZg0K ICAgID4gc2VjdXJpdHkgY2VydGlmaWNhdGlvbiBiZWhpbmQgdGhpcyBpc3N1YW5jZSBvdGhlcndp c2UgaXQgaXMgb2YgdmVyeQ0KICAgID4gbGltaXRlZCB2YWx1ZS4NCiAgICA+IC0gSW4gb3JkZXIg dG8gY2FwdHVyZSB0aGUgd2lkZSB2YXJpZXR5IG9mIGRpZmZlcmVudCBkZXZpY2VzIChJIHByZWZl cg0KICAgID4gImVudGl0eSIgaGVyZSBhcyBpdCBpcyBtb3JlIGdlbmVyYWwgdGhhbiAiZGV2aWNl IiksIG1hbnkgZGlmZmVyZW50IGZvcm1zDQogICAgPiBvZiBzdWNoIGNlcnRpZmljYXRlcyB3b3Vs ZCBiZSByZXF1aXJlZC4gVGhpcyBlbmRzIHVwIGJlaW5nIG11Y2ggdGhlIHNhbWUNCiAgICA+IHRo aW5nIGFzIGEgc2V0IG9mIGNsYWltcy4NCiAgICA+DQogICAgPiBHaXZlbiB0aGUgbXVsdGlwbGlj aXR5IG9mIGVudGl0aWVzIGZvciB3aGljaCBhdHRlc3RhdGlvbiBtaWdodCBiZQ0KICAgID4gdXNl ZnVsLCBpdCBzZWVtcyB0byBtZSB0aGF0IGhhdmluZyB0aGUgZW50aXR5IGNyZWF0b3IvbWFudWZh Y3R1cmVyDQogICAgPiBwcm92aWRlIGEgc2V0IG9mIGNsYWltcyB3aGljaCBjYW4gYmUgdmVyaWZp ZWQgaXMgbW9yZSBmbGV4aWJsZSB0aGFuDQogICAgPiByZXF1aXJpbmcgYSBjZXJ0aWZpY2F0ZS4g SXQgc2VlbXMgbGlrZWx5IHRvIG1lIHRoYXQgd2hlcmUgYSBmb3JtYWwNCiAgICA+IHNlY3VyaXR5 IGNlcnRpZmljYXRpb24gaXMgbmVlZGVkIHRoZXJlIHdpbGwgYmUgYSBjZXJ0aWZpY2F0ZSBpc3N1 ZWQgYnkNCiAgICA+IHRoZSBDZXJ0aWZ5aW5nIEJvZHkgYXMgb25lIG9mIHRoZSBjbGFpbXMgYWJv dXQgYW4gZW50aXR5LCBidXQgSSBjYW4NCiAgICA+IHRoaW5rIG9mIG1hbnkgY2FzZXMgKHN1cHBs eSBjaGFpbiBtYW5hZ2VtZW50LCB0byB0YWtlIGp1c3Qgb25lIGV4YW1wbGUpDQogICAgPiB3aGVy ZSBwcm92ZW5hbmNlIGlzIGJ5IGZhciB0aGUgbW9zdCB1c2VmdWwgaW5mb3JtYXRpb24uDQogICAg Pg0KICAgID4gSSdtIG5vdCBpbiBmYXZvdXIgb2YgY2hhbmdlcyB0byB0aGUgY2hhcnRlciBpbiB0 aGlzIGRpcmVjdGlvbi4NCiAgICA+Pg0KICAgID4+IFRoZSBzaW1wbGVzdCBjYXNlcyBzaG91bGQg YWxzbyBiZSBwYXJ0IG9mIHRoZSBmcmFtZXdvcmsuDQogICAgPj4NCiAgICA+PiBOb3RlOiBJIHBl cnNvbmFsbHkgYXBwcmVjaWF0ZSB0aGF0IHByaXZhY3kgaXMgYW4gYXNwZWN0IHRoYXQNCiAgICA+ PiB3aWxsL3Nob3VsZCBiZSB0YWtlbiBpbnRvIGNvbnNpZGVyYXRpb24uDQogICAgPj4NCiAgICA+ PiBEZW5pcw0KICAgID4+DQogICAgPj4+IEFzIHdpdGggdGhlIGVhcmxpZXIgZHJhZnQsIHRoZXJl IGFyZSBtYW55IHJlZmVyZW5jZXMgdG8gdmVyaWZ5IGFuZA0KICAgID4+PiB2ZXJpZmllciBpbiB0 aGUgbGVhZCB1cCB0byB0aGUgZGVsaXZlcmFibGUgYnV0IG5vIGRlbGl2ZXJhYmxlcyBkZXNjcmli aW5nDQogICAgPj4+IHZlcmlmaWNhdGlvbiBydWxlcy4gSSdkIGxpa2UgdG8gc2VlIHJ1bGVzIGlu IG9uZSBvZiB0aGVzZSBkb2N1bWVudHMgYW5kDQogICAgPj4+IHRoaW5rIGl0IHdvcnRoIGNpdGlu ZyBpbiB0aGUgZGVsaXZlcmFibGVzLiBBcmUgYmluZGluZ3MgdG8gY2VydGlmaWNhdGUNCiAgICA+ Pj4gbWFuYWdlbWVudCBwcm90b2NvbHMgb3V0IG9mIHNjb3BlPw0KICAgID4+Pg0KICAgID4+PiBP biAxMC8xMS8xOCwgOTo0OSBBTSwgIlJBVFMgb24gYmVoYWxmIG9mIEhlbmsgQmlya2hvbHoiDQog ICAgPj4+IDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGhlbmsuYmlya2hvbHpA c2l0LmZyYXVuaG9mZXIuZGU+ICB3cm90ZToNCiAgICA+Pj4NCiAgICA+Pj4+IEhpIGFsbCwNCiAg ICA+Pj4+DQogICAgPj4+PiBzb3JyeSBmb3IgdGhlIGRlbGF5LiBQbGVhc2UgZmluZCBhbiB1cGRh dGVkIGNoYXJ0ZXIgcHJvcG9zYWwgaGVyZToNCiAgICA+Pj4+DQogICAgPj4+Pj4gaHR0cHM6Ly9n aXRodWIuY29tL2lldGYtcmF0cy9jaGFydGVyL2Jsb2IvUkMyL2lldGYtcmF0cy1jaGFydGVyLm1k DQogICAgPj4+PiBUaGUgQm9GIHByb3BvbmVudHMgdHJpZWQgdG8gbWVyZ2UgYWxsIGNvbW1lbnRz IGFuZCBwcm9wb3NhbHMgb24NCiAgICA+Pj4+IGtleXN0b3JlcywgZXhpc3Rpbmcgc29sdXRpb25z LCBwcm92ZW5hbmNlICYgZGV2aWNlIGNoYXJhY3RlcmlzdGljcywgZXRjDQogICAgPj4+PiB0aGF0 IHdlcmUgcmFpc2VkIG9uIHRoZSBsaXN0IC0gYW5kIGFsaWduIHRoZW0gaW4gaG9tb2dlbmVvdXMg ZmFzaGlvbi4NCiAgICA+Pj4+DQogICAgPj4+PiBUaGlzIGRyYWZ0IGlzIGludGVuZGVkIHRvIGZv Y3VzIHRoZSBkaXNjdXNzaW9uIGFuZCBpbXByb3ZlIHRoZSB3b3JkaW5nLg0KICAgID4+Pj4NCiAg ICA+Pj4+IFZpZWxlIEdyw7zDn2UsDQogICAgPj4+Pg0KICAgID4+Pj4gSGVuaw0KICAgID4+Pj4N CiAgICA+Pj4+IE9uIDEwLzA2LzIwMTggMDg6MjMgQU0sIExhdXJlbmNlIEx1bmRibGFkZSB3cm90 ZToNCiAgICA+Pj4+PiBIaSBIZW5rLA0KICAgID4+Pj4+DQogICAgPj4+Pj4gQmFuZ2tvayBJRVRG IGlzIGdldHRpbmcgY2xvc2UsIHdpbGwgeW91IGJlIGFibGUgdG8gdXBkYXRlIHRoZSBjaGFydGVy DQogICAgPj4+Pj4gZm9yIHRoZSBhdHRlc3RhdGlvbiBCb0YgdG8gcHJvcGVybHkgaW5jbHVkZSBF QVQ/ICBJIHNlbnQgeW91IHNvbWUgdGV4dA0KICAgID4+Pj4+IHRoYXQganVzdCBuZWVkcyB0byBi ZSBwYXN0ZWQgYWxvbmcgd2l0aCBzb21lIGNvbW1lbnRzLiBJdCBkb2VzbuKAmXQgbG9vaw0KICAg ID4+Pj4+IGxpa2UgdGhlcmXigJlzIGJlZW4gYW55IHVwZGF0ZXMuDQogICAgPj4+Pj4NCiAgICA+ Pj4+PiBMTA0KICAgID4+Pj4+DQogICAgPj4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0KICAgID4+Pj4gUkFUUyBtYWlsaW5nIGxpc3QNCiAgICA+Pj4+ IFJBVFNAaWV0Zi5vcmcNCiAgICA+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vcmF0cw0KICAgID4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXw0KICAgID4+PiBFQVQgbWFpbGluZyBsaXN0DQogICAgPj4+IEVBVEBpZXRmLm9y Zw0KICAgID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KICAg ID4+DQogICAgPj4NCiAgICA+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXw0KICAgID4+IEVBVCBtYWlsaW5nIGxpc3QNCiAgICA+PiBFQVRAaWV0Zi5vcmcg PG1haWx0bzpFQVRAaWV0Zi5vcmc+DQogICAgPj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9lYXQNCiAgICA+DQogICAgPg0KICAgID4NCiAgICA+IF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgPiBFQVQgbWFpbGluZyBsaXN0 DQogICAgPiBFQVRAaWV0Zi5vcmcNCiAgICA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vZWF0DQogICAgPg0KDQogICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCiAgICBFQVQgbWFpbGluZyBsaXN0DQogICAgRUFUQGlldGYub3Jn DQogICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCg0KDQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KRUFUIG1haWxpbmcg bGlzdA0KRUFUQGlldGYub3JnDQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2VhdA0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFu eSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2Vk LiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRo ZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8g YW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29w eSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K From nobody Mon Oct 15 12:30:27 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C3CE130DDA; Mon, 15 Oct 2018 12:30:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hsM6nZg7wJhS; Mon, 15 Oct 2018 12:30:21 -0700 (PDT) Received: from smtp6-g21.free.fr (smtp6-g21.free.fr [212.27.42.6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7192A124C04; Mon, 15 Oct 2018 12:30:21 -0700 (PDT) Received: from [192.168.0.13] (unknown [88.182.125.39]) by smtp6-g21.free.fr (Postfix) with ESMTP id CA8F478035D; Mon, 15 Oct 2018 21:30:18 +0200 (CEST) To: Hannes Tschofenig , Henk Birkholz , "Smith, Ned" , "rats@ietf.org" , Jeremy O'Donoghue Cc: "eat@ietf.org" References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> From: Denis Message-ID: Date: Mon, 15 Oct 2018 21:30:14 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------3DE62EEE1C8718F6F6D04B70" Content-Language: en-US Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Oct 2018 19:30:25 -0000 This is a multi-part message in MIME format. --------------3DE62EEE1C8718F6F6D04B70 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit > Here are my 5 cents on the term 'identity'. > > I have been working on identity management for many years (partially because of my OAuth co-chair role) and I have noticed that the use of the term "identity" tends to confuse more than it helps (even more so when the term is applied to devices and software rather than humans). > > I believe we could get away with describing what we want without ever using the term. > > In this context I would argue that we are about identifying different components, such as hardware and software. > > Ciao > Hannes +1 The single sentence where currently the word "identity" is being used is: As a result, in 2018, a Relying Party would be unable to tell if a device is trying to mimic the identity of another device or some of its characteristics. This could be rephrased as: As a result, in 2018, there is no common way allowing Relying Parties to tell if some data originates from a trustworthy device designed to support a specific set of operations/functionalities or not . The text currently states: 2) In 2018, there are no common, standard ways for Relying Parties to know the provenance and characteristics of a device (e.g., an end-user device, platform or endpoint, servers, IoT devices, device subsystems and sub-modules) that may be requesting services. As already said on this list, knowing the provenance of a device is not always necessary (but may be useful in some cases). The key point is to know the characteristics of the device. This could be rephrased as: 2) In 2018, there are no common, standard ways for Relying Parties to know the characteristics of a device (e.g., an end-user device, platform or endpoint, servers, IoT devices, device subsystems and sub-modules) that may be requesting services. Probably a typo in the following sentence: (1) A standardized way to establish a sufficient level of confidence that some data originates from a trustworthy device (e.g., platforms, servers, user endpoints, IoT devices, device subsystems or subcomponents) designed to support a specific set of operations/functionalities /a communication partner is a trustworthy endpoint./ The end of the sentence (i.e. "a communication partner is a trustworthy endpoint.") looks odd and should probably be deleted. The goals are currently limited to the definition of the content of the Assertions. A key point is the way to verify/validate an Attestation. The more complex is the content of an Attestation, the more complex it will be to validate it by a RP. A framework for validating the Attestations should also be part of the charter. Denis Note:At this stage, I still see no text to address both simple cases (e.g. FIDO attestations) and more complex cases. > > -----Original Message----- > From: EAT On Behalf Of Smith, Ned > Sent: Monday, October 15, 2018 9:00 AM > To: Henk Birkholz ; rats@ietf.org; Jeremy O'Donoghue ; Denis > Cc: eat@ietf.org > Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates? > > I agree with Henk's observation that there is opportunity to find common ground on identity as identity can be a collection of attributes, that if signed, becomes a set of verifiable claims (about identity attributes). Attestation has a similar structure in that it consists of a set of attributes, that if signed becomes a set of verifiable claims. The main difference between identity and attestation attributes is whether the attribute semantically relate to trust (vs. identity). For example, claims of security certification compliance resonates as attestation. > > It may be possible to combine a set of attestation attributes in such a way that the combination uniquely identifies an entity. But that doesn't make it an identity system per se and shouldn't cause a conflict in charter goals with respect to other identity focused efforts in IETF. > > Also, inclusion of attributes that don't have semantics that reasonably relate to trust should not be of interest to a working group focused on attestation. > > -Ned > > On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" wrote: > > Hi Jeremy & Denis, > > all these points of view have merit, I think. > > Please have a look at these quotes: > > > knowing the provenance of the device > > > having the entity creator/manufacturer provide a set of claims which can be verified > > > to know the characteristics of a device by issuing to the device a public key certificate which will only be issued to the device if it fulfills an expected set of functionalities. > > To me, these descriptions seem to have different intents, scope or > audience and require most certainly different work-flows, but > semantically and in consequence representation-wise they also seem quite > related. > > If you think of an identity document as a set of claims (potentially > including a public key), that is signed and that can match one or more > things, maybe all three types highlighted above are actually covered by > the same identity document concept? > > With respect to identity documents, I think it is safe so say that we > can find common ground here rather easily. That said, the way how these > identity documents come into existence, when and how they are deployed > on the thing or associated with multiple things is another question. We > most certainly do not want to end up with a "signing fool" that does not > add value to the level of confidence (I am quoting Ned Smith here). > > This has to be fleshed out explicitly for each scenario and the parts > that are reused in every scenario should get special attention in the > upcoming RATS architecture draft. > > Identifying claims aggregated in an identity document most certainly can > include device characteristics, public key(s), or claims about the > intended functions and capabilities of the thing. Claims can even > originate from Claimants that are not the thing itself, but external > entities providing an assertion (e.g. these things are CC-certified). > > All different composites of identifying claims have a specific shared > intend in this context though, I think: expressing Attestation > Provenance (again - one for one or more things of the same kind). And > all of them originate from Claimants and therefore use a root of trust > of measurement, I think. > > That said, establishing trustworthy knowledge about attestation > provenance is only the first step and provides the foundation for more > complex attestation procedures. In any case, this seem to be required by > every scenario that was highlighted so far and therefore will most > certainly be covered in a deliverable. > > IHTH, > > Henk > > > On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: > > On 12 Oct 2018, at 14:33, Denis > > wrote: > >> The "Problem Statement" continues as follows: > >> > >> (2) Today, there is no common, standard way for Relying Parties to > >> know the provenance and characteristics of a device (e.g., an end-user > >> device, > >> platform or endpoint, servers, IoT devices, device subsystems and > >> sub-modules) that may be requesting services. > >> > >> Knowing the provenance of the device is not always necessary. What is > >> important is to know that a specific set of functions is (securely) > >> supported by the device. > >> There already exists a common way to know the characteristics of a > >> device by issuing to the device a public key certificate which will > >> only be issued to the device > >> if it fulfills an expected set of functionalities. In such a case a > >> syntax for a trusted claim sets**is not needed. > >> > > This is indeed a possible way to address the problem, but suffers from > > challenges which come down to: > > > > - Who issues such certificates. An option is that there is some form of > > security certification behind this issuance otherwise it is of very > > limited value. > > - In order to capture the wide variety of different devices (I prefer > > "entity" here as it is more general than "device"), many different forms > > of such certificates would be required. This ends up being much the same > > thing as a set of claims. > > > > Given the multiplicity of entities for which attestation might be > > useful, it seems to me that having the entity creator/manufacturer > > provide a set of claims which can be verified is more flexible than > > requiring a certificate. It seems likely to me that where a formal > > security certification is needed there will be a certificate issued by > > the Certifying Body as one of the claims about an entity, but I can > > think of many cases (supply chain management, to take just one example) > > where provenance is by far the most useful information. > > > > I'm not in favour of changes to the charter in this direction. > >> > >> The simplest cases should also be part of the framework. > >> > >> Note: I personally appreciate that privacy is an aspect that > >> will/should be taken into consideration. > >> > >> Denis > >> > >>> As with the earlier draft, there are many references to verify and > >>> verifier in the lead up to the deliverable but no deliverables describing > >>> verification rules. I'd like to see rules in one of these documents and > >>> think it worth citing in the deliverables. Are bindings to certificate > >>> management protocols out of scope? > >>> > >>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" > >>> wrote: > >>> > >>>> Hi all, > >>>> > >>>> sorry for the delay. Please find an updated charter proposal here: > >>>> > >>>>> https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter.md > >>>> The BoF proponents tried to merge all comments and proposals on > >>>> keystores, existing solutions, provenance & device characteristics, etc > >>>> that were raised on the list - and align them in homogeneous fashion. > >>>> > >>>> This draft is intended to focus the discussion and improve the wording. > >>>> > >>>> Viele Grüße, > >>>> > >>>> Henk > >>>> > >>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: > >>>>> Hi Henk, > >>>>> > >>>>> Bangkok IETF is getting close, will you be able to update the charter > >>>>> for the attestation BoF to properly include EAT? I sent you some text > >>>>> that just needs to be pasted along with some comments. It doesn’t look > >>>>> like there’s been any updates. > >>>>> > >>>>> LL > >>>>> > >>>> _______________________________________________ > >>>> RATS mailing list > >>>> RATS@ietf.org > >>>> https://www.ietf.org/mailman/listinfo/rats > >>> _______________________________________________ > >>> EAT mailing list > >>> EAT@ietf.org > >>> https://www.ietf.org/mailman/listinfo/eat > >> > >> > >> _______________________________________________ > >> EAT mailing list > >> EAT@ietf.org > >> https://www.ietf.org/mailman/listinfo/eat > > > > > > > > _______________________________________________ > > EAT mailing list > > EAT@ietf.org > > https://www.ietf.org/mailman/listinfo/eat > > > > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat > > > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. --------------3DE62EEE1C8718F6F6D04B70 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit 
Here are my 5 cents on the term 'identity'.

I have been working on identity management for many years (partially because of my OAuth co-chair role) and I have noticed that the use of the term "identity" tends to confuse more than it helps (even more so when the term is applied to devices and software rather than humans).

I believe we could get away with describing what we want without ever using the term.

In this context I would argue that we are about identifying different components, such as hardware and software.

Ciao
Hannes

+1

The single sentence where currently the word "identity" is being used is:

As a result, in 2018, a Relying Party would be unable to tell if a device is trying to mimic the identity of another device or some of its characteristics.

This could be rephrased as:
As a result, in 2018, there is no common way allowing Relying Parties to tell if some data originates from a trustworthy device
designed to support a specific set of operations/functionalities or not .
The text currently states:

2) In 2018, there are no common, standard ways for Relying Parties to know the provenance and characteristics of a device
(e.g., an end-user device, platform or endpoint, servers, IoT devices, device subsystems and sub-modules) that may be requesting services.

As already said on this list, knowing the provenance of a device is not always necessary (but may be useful in some cases).
The key point is to know the characteristics of the device.

This could be rephrased as:

2) In 2018, there are no common, standard ways for Relying Parties to know the characteristics of a device (e.g., an end-user device, platform or endpoint,
servers, IoT devices, device subsystems and sub-modules) that may be requesting services.

Probably a typo in the following sentence:

(1) A standardized way to establish a sufficient level of confidence that some data originates from a trustworthy device (e.g., platforms, servers,
user endpoints, IoT devices, device subsystems or subcomponents) designed to support a specific set of operations/functionalities a communication partner is a trustworthy endpoint.

The end of the sentence (i.e. "a communication partner is a trustworthy endpoint.") looks odd and should probably be deleted.

The goals are currently limited to the definition of the content of the Assertions. A key point is the way to verify/validate an Attestation.
The more complex is the content of an Attestation, the more complex it will be to validate it by a RP.

A framework for validating the Attestations should also be part of the charter.

Denis


Note: At this stage, I still see no text to address both simple cases (e.g. FIDO attestations) and more complex cases.

 

-----Original Message-----
From: EAT <eat-bounces@ietf.org> On Behalf Of Smith, Ned
Sent: Monday, October 15, 2018 9:00 AM
To: Henk Birkholz <henk.birkholz@sit.fraunhofer.de>; rats@ietf.org; Jeremy O'Donoghue <jodonogh@qti.qualcomm.com>; Denis <denis.ietf@free.fr>
Cc: eat@ietf.org
Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates?

I agree with Henk's observation that there is opportunity to find common ground on identity as identity can be a collection of attributes, that if signed, becomes a set of verifiable claims (about identity attributes). Attestation has a similar structure in that it consists of a set of attributes, that if signed becomes a set of verifiable claims. The main difference between identity and attestation attributes is whether the attribute semantically relate to trust (vs. identity). For example, claims of security certification compliance resonates as attestation.

It may be possible to combine a set of attestation attributes in such a way that the combination uniquely identifies an entity. But that doesn't make it an identity system per se and shouldn't cause a conflict in charter goals with respect to other identity focused efforts in IETF.

Also, inclusion of attributes that don't have semantics that reasonably relate to trust should not be of interest to a working group focused on attestation.

-Ned

On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" <eat-bounces@ietf.org on behalf of henk.birkholz@sit.fraunhofer.de> wrote:

    Hi Jeremy & Denis,

    all these points of view have merit, I think.

    Please have a look at these quotes:

    > knowing the provenance of the device

    > having the entity creator/manufacturer provide a set of claims which can be verified

    > to know the characteristics of a device by issuing to the device a public key certificate which will only be issued to the device if it fulfills an expected set of functionalities.

    To me, these descriptions seem to have different intents, scope or
    audience and require most certainly different work-flows, but
    semantically and in consequence representation-wise they also seem quite
    related.

    If you think of an identity document as a set of claims (potentially
    including a public key), that is signed and that can match one or more
    things, maybe all three types highlighted above are actually covered by
    the same identity document concept?

    With respect to identity documents, I think it is safe so say that we
    can find common ground here rather easily. That said, the way how these
    identity documents come into existence, when and how they are deployed
    on the thing or associated with multiple things is another question. We
    most certainly do not want to end up with a "signing fool" that does not
    add value to the level of confidence (I am quoting Ned Smith here).

    This has to be fleshed out explicitly for each scenario and the parts
    that are reused in every scenario should get special attention in the
    upcoming RATS architecture draft.

    Identifying claims aggregated in an identity document most certainly can
    include device characteristics, public key(s), or claims about the
    intended functions and capabilities of the thing. Claims can even
    originate from Claimants that are not the thing itself, but external
    entities providing an assertion (e.g. these things are CC-certified).

    All different composites of identifying claims have a specific shared
    intend in this context though, I think: expressing Attestation
    Provenance (again - one for one or more things of the same kind). And
    all of them originate from Claimants and therefore use a root of trust
    of measurement, I think.

    That said, establishing trustworthy knowledge about attestation
    provenance is only the first step and provides the foundation for more
    complex attestation procedures. In any case, this seem to be required by
    every scenario that was highlighted so far and therefore will most
    certainly be covered in a deliverable.

    IHTH,

    Henk


    On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote:
    > On 12 Oct 2018, at 14:33, Denis <denis.ietf@free.fr
    > <mailto:denis.ietf@free.fr>> wrote:
    >> The "Problem Statement" continues as follows:
    >>
    >> (2) Today, there is no common, standard way for Relying Parties to
    >> know the provenance and characteristics of a device (e.g., an end-user
    >> device,
    >> platform or endpoint, servers, IoT devices, device subsystems and
    >> sub-modules) that may be requesting services.
    >>
    >> Knowing the provenance of the device is not always necessary. What is
    >> important is to know that a specific set of functions is (securely)
    >> supported by the device.
    >> There already exists a common way to know the characteristics of a
    >> device by issuing to the device a public key certificate which will
    >> only be issued to the device
    >> if it fulfills an expected set of functionalities. In such a case a
    >> syntax for a trusted claim sets**is not needed.
    >>
    > This is indeed a possible way to address the problem, but suffers from
    > challenges which come down to:
    >
    > - Who issues such certificates. An option is that there is some form of
    > security certification behind this issuance otherwise it is of very
    > limited value.
    > - In order to capture the wide variety of different devices (I prefer
    > "entity" here as it is more general than "device"), many different forms
    > of such certificates would be required. This ends up being much the same
    > thing as a set of claims.
    >
    > Given the multiplicity of entities for which attestation might be
    > useful, it seems to me that having the entity creator/manufacturer
    > provide a set of claims which can be verified is more flexible than
    > requiring a certificate. It seems likely to me that where a formal
    > security certification is needed there will be a certificate issued by
    > the Certifying Body as one of the claims about an entity, but I can
    > think of many cases (supply chain management, to take just one example)
    > where provenance is by far the most useful information.
    >
    > I'm not in favour of changes to the charter in this direction.
    >>
    >> The simplest cases should also be part of the framework.
    >>
    >> Note: I personally appreciate that privacy is an aspect that
    >> will/should be taken into consideration.
    >>
    >> Denis
    >>
    >>> As with the earlier draft, there are many references to verify and
    >>> verifier in the lead up to the deliverable but no deliverables describing
    >>> verification rules. I'd like to see rules in one of these documents and
    >>> think it worth citing in the deliverables. Are bindings to certificate
    >>> management protocols out of scope?
    >>>
    >>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz"
    >>> <rats-bounces@ietf.org on behalf of henk.birkholz@sit.fraunhofer.de>  wrote:
    >>>
    >>>> Hi all,
    >>>>
    >>>> sorry for the delay. Please find an updated charter proposal here:
    >>>>
    >>>>> https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter.md
    >>>> The BoF proponents tried to merge all comments and proposals on
    >>>> keystores, existing solutions, provenance & device characteristics, etc
    >>>> that were raised on the list - and align them in homogeneous fashion.
    >>>>
    >>>> This draft is intended to focus the discussion and improve the wording.
    >>>>
    >>>> Viele Grüße,
    >>>>
    >>>> Henk
    >>>>
    >>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote:
    >>>>> Hi Henk,
    >>>>>
    >>>>> Bangkok IETF is getting close, will you be able to update the charter
    >>>>> for the attestation BoF to properly include EAT?  I sent you some text
    >>>>> that just needs to be pasted along with some comments. It doesn’t look
    >>>>> like there’s been any updates.
    >>>>>
    >>>>> LL
    >>>>>
    >>>> _______________________________________________
    >>>> RATS mailing list
    >>>> RATS@ietf.org
    >>>> https://www.ietf.org/mailman/listinfo/rats
    >>> _______________________________________________
    >>> EAT mailing list
    >>> EAT@ietf.org
    >>> https://www.ietf.org/mailman/listinfo/eat
    >>
    >>
    >> _______________________________________________
    >> EAT mailing list
    >> EAT@ietf.org <mailto:EAT@ietf.org>
    >> https://www.ietf.org/mailman/listinfo/eat
    >
    >
    >
    > _______________________________________________
    > EAT mailing list
    > EAT@ietf.org
    > https://www.ietf.org/mailman/listinfo/eat
    >

    _______________________________________________
    EAT mailing list
    EAT@ietf.org
    https://www.ietf.org/mailman/listinfo/eat


_______________________________________________
EAT mailing list
EAT@ietf.org
https://www.ietf.org/mailman/listinfo/eat
IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.


--------------3DE62EEE1C8718F6F6D04B70-- From nobody Mon Oct 15 12:33:41 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 372B4130DDA; Mon, 15 Oct 2018 12:33:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wZH47wy-s988; Mon, 15 Oct 2018 12:33:36 -0700 (PDT) Received: from alexa-out-sd-01.qualcomm.com (alexa-out-sd-01.qualcomm.com [199.106.114.38]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 07452124C04; Mon, 15 Oct 2018 12:33:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1539632016; x=1571168016; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=q8PHdeUECB+EdWfxNM1/zJMLxesoNYS/9HDKkQz//f0=; b=jIjyJPtL6/pK0gcW7xFzharxnKixxhxtRYjWbuSgV84YcX/T3wNivDA0 mUeBBUX3kbITYogq2cTIwRXui7tv9KRMdPTA8evxAEbey5G5cX/opPjgz xcGSovTo6mqkMkvfMCeUJMOAKN9q7wyDNorm7ZXi9ebB/itGNjvwJTdR2 I=; X-IronPort-AV: E=Sophos;i="5.54,385,1534834800"; d="scan'208";a="11083663" Received: from unknown (HELO ironmsg01-sd.qualcomm.com) ([10.53.140.141]) by alexa-out-sd-01.qualcomm.com with ESMTP; 15 Oct 2018 12:33:35 -0700 Received: from nasanexm01a.na.qualcomm.com ([10.85.0.81]) by ironmsg01-sd.qualcomm.com with ESMTP/TLS/AES256-SHA; 15 Oct 2018 12:33:35 -0700 Received: from NASANEXM01C.na.qualcomm.com (10.85.0.83) by nasanexm01a.na.qualcomm.com (10.85.0.81) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Mon, 15 Oct 2018 12:33:34 -0700 Received: from NASANEXM01C.na.qualcomm.com ([10.85.0.83]) by NASANEXM01C.na.qualcomm.com ([10.85.0.83]) with mapi id 15.00.1365.000; Mon, 15 Oct 2018 12:33:34 -0700 From: Giridhar Mandyam To: "rats@ietf.org" CC: "eat@ietf.org" Thread-Topic: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates? Thread-Index: AQHUZJbtGjr1m3VJ70OezQYmdnYjXqUg7E2AgAAevID//6T1wA== Date: Mon, 15 Oct 2018 19:33:34 +0000 Message-ID: References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.80.80.8] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Oct 2018 19:33:39 -0000 U29ycnkgdG8gc3dpdGNoIHRvcGljcy4NCg0KSnVzdCBwb3N0ZWQgbXkgcmVxdWVzdGVkIGNoYW5n ZXMgYXQgaHR0cHM6Ly9naXRodWIuY29tL2lldGYtcmF0cy9jaGFydGVyL3B1bGwvMS4NCg0KMiBh cmVhcyB0byBjb25zaWRlcjoNCg0KYSkgTWFueSByZXNvdXJjZS1jb25zdHJhaW5lZCBkZXZpY2Vz IHdpbGwgbm90IHN1cHBvcnQgSW50ZXJuZXQgQ29ubmVjdGl2aXR5LiAgVGhpcyBkb2VzIG5vdCBt ZWFuIHRoYXQgcmVtb3RlIGF0dGVzdGF0aW9uIGlzIG5vdCBwb3NzaWJsZS4gIEl0IGp1c3QgbWVh bnMgdGhhdCB0aGlzIGVmZm9ydCB3aWxsIGJlIG1vcmUgYnJvYWRseSBhcHBsaWNhYmxlIGlmIGFu IGludGVyb3BlcmFibGUgZm9ybWF0IGZvciAnQXR0ZXN0YXRpb24gRXZpZGVuY2UnIHJlc3VsdHMg dGhhdCBjYW4gYmUgY29udmV5ZWQgb3ZlciBtdWx0aXBsZSBwcm90b2NvbHMsIG5vdCBqdXN0IHRo ZSBpbnRlcm5ldC4gIEVBVCB3YXMgZGVzaWduZWQgd2l0aCB0aGlzIGdvYWwgaW4gbWluZC4NCg0K YikgTG9jYWwgYXR0ZXN0YXRpb24gaXMgbW9yZSB0aGFuIGp1c3Qgb24tZGV2aWNlLiAgV2UgaGF2 ZSBzZWVuIGdhdGV3YXlzIGluIHRoZSBtYXJrZXQgdGhhdCBhbGxvdyBmb3IgcmVtb3RlIGFkbWlu aXN0cmF0aW9uIG9mIGRldmljZXMgaW4gYSBsb2NhbCBuZXR3b3JrIHRoYXQgbWF5IG9ubHkgY29t bXVuaWNhdGUgdmlhIHNob3J0LXJhbmdlIHByb3RvY29scyBzdWNoIGFzIEJsdWV0b290aCBvciBa aWdiZWUuICBTdWNoIGdhdGV3YXlzIG1heSB2ZXJ5IHdlbGwgYWxzbyBzZXJ2ZSBhcyB2ZXJpZmll cnMgb24gYmVoYWxmIG9mIGEgcmVtb3RlIHJlbHlpbmcgcGFydHkuDQoNCi1HaXJpIE1hbmR5YW0N Cg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEVBVCA8ZWF0LWJvdW5jZXNAaWV0 Zi5vcmc+IE9uIEJlaGFsZiBPZiBIYW5uZXMgVHNjaG9mZW5pZw0KU2VudDogTW9uZGF5LCBPY3Rv YmVyIDE1LCAyMDE4IDEwOjUwIEFNDQpUbzogU21pdGgsIE5lZCA8bmVkLnNtaXRoQGludGVsLmNv bT47IEhlbmsgQmlya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+OyByYXRz QGlldGYub3JnOyBKZXJlbXkgTydEb25vZ2h1ZSA8am9kb25vZ2hAcXRpLnF1YWxjb21tLmNvbT47 IERlbmlzIDxkZW5pcy5pZXRmQGZyZWUuZnI+DQpDYzogZWF0QGlldGYub3JnDQpTdWJqZWN0OiBS ZTogW0VBVF0gW0VYVEVSTkFMXSBSZTogW1JhdHNdIEF0dGVzdGF0aW9uIEJvRiBjaGFydGVyIHVw ZGF0ZXM/DQoNCkhlcmUgYXJlIG15IDUgY2VudHMgb24gdGhlIHRlcm0gJ2lkZW50aXR5Jy4NCg0K SSBoYXZlIGJlZW4gd29ya2luZyBvbiBpZGVudGl0eSBtYW5hZ2VtZW50IGZvciBtYW55IHllYXJz IChwYXJ0aWFsbHkgYmVjYXVzZSBvZiBteSBPQXV0aCBjby1jaGFpciByb2xlKSBhbmQgSSBoYXZl IG5vdGljZWQgdGhhdCB0aGUgdXNlIG9mIHRoZSB0ZXJtICJpZGVudGl0eSIgdGVuZHMgdG8gY29u ZnVzZSBtb3JlIHRoYW4gaXQgaGVscHMgKGV2ZW4gbW9yZSBzbyB3aGVuIHRoZSB0ZXJtIGlzIGFw cGxpZWQgdG8gZGV2aWNlcyBhbmQgc29mdHdhcmUgcmF0aGVyIHRoYW4gaHVtYW5zKS4NCg0KSSBi ZWxpZXZlIHdlIGNvdWxkIGdldCBhd2F5IHdpdGggZGVzY3JpYmluZyB3aGF0IHdlIHdhbnQgd2l0 aG91dCBldmVyIHVzaW5nIHRoZSB0ZXJtLg0KDQpJbiB0aGlzIGNvbnRleHQgSSB3b3VsZCBhcmd1 ZSB0aGF0IHdlIGFyZSBhYm91dCBpZGVudGlmeWluZyBkaWZmZXJlbnQgY29tcG9uZW50cywgc3Vj aCBhcyBoYXJkd2FyZSBhbmQgc29mdHdhcmUuDQoNCkNpYW8NCkhhbm5lcw0KDQotLS0tLU9yaWdp bmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogRUFUIDxlYXQtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVo YWxmIE9mIFNtaXRoLCBOZWQNClNlbnQ6IE1vbmRheSwgT2N0b2JlciAxNSwgMjAxOCA5OjAwIEFN DQpUbzogSGVuayBCaXJraG9seiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT47IHJh dHNAaWV0Zi5vcmc7IEplcmVteSBPJ0Rvbm9naHVlIDxqb2Rvbm9naEBxdGkucXVhbGNvbW0uY29t PjsgRGVuaXMgPGRlbmlzLmlldGZAZnJlZS5mcj4NCkNjOiBlYXRAaWV0Zi5vcmcNClN1YmplY3Q6 IFJlOiBbRUFUXSBbRVhURVJOQUxdIFJlOiBbUmF0c10gQXR0ZXN0YXRpb24gQm9GIGNoYXJ0ZXIg dXBkYXRlcz8NCg0KSSBhZ3JlZSB3aXRoIEhlbmsncyBvYnNlcnZhdGlvbiB0aGF0IHRoZXJlIGlz IG9wcG9ydHVuaXR5IHRvIGZpbmQgY29tbW9uIGdyb3VuZCBvbiBpZGVudGl0eSBhcyBpZGVudGl0 eSBjYW4gYmUgYSBjb2xsZWN0aW9uIG9mIGF0dHJpYnV0ZXMsIHRoYXQgaWYgc2lnbmVkLCBiZWNv bWVzIGEgc2V0IG9mIHZlcmlmaWFibGUgY2xhaW1zIChhYm91dCBpZGVudGl0eSBhdHRyaWJ1dGVz KS4gQXR0ZXN0YXRpb24gaGFzIGEgc2ltaWxhciBzdHJ1Y3R1cmUgaW4gdGhhdCBpdCBjb25zaXN0 cyBvZiBhIHNldCBvZiBhdHRyaWJ1dGVzLCB0aGF0IGlmIHNpZ25lZCBiZWNvbWVzIGEgc2V0IG9m IHZlcmlmaWFibGUgY2xhaW1zLiBUaGUgbWFpbiBkaWZmZXJlbmNlIGJldHdlZW4gaWRlbnRpdHkg YW5kIGF0dGVzdGF0aW9uIGF0dHJpYnV0ZXMgaXMgd2hldGhlciB0aGUgYXR0cmlidXRlIHNlbWFu dGljYWxseSByZWxhdGUgdG8gdHJ1c3QgKHZzLiBpZGVudGl0eSkuIEZvciBleGFtcGxlLCBjbGFp bXMgb2Ygc2VjdXJpdHkgY2VydGlmaWNhdGlvbiBjb21wbGlhbmNlIHJlc29uYXRlcyBhcyBhdHRl c3RhdGlvbi4NCg0KSXQgbWF5IGJlIHBvc3NpYmxlIHRvIGNvbWJpbmUgYSBzZXQgb2YgYXR0ZXN0 YXRpb24gYXR0cmlidXRlcyBpbiBzdWNoIGEgd2F5IHRoYXQgdGhlIGNvbWJpbmF0aW9uIHVuaXF1 ZWx5IGlkZW50aWZpZXMgYW4gZW50aXR5LiBCdXQgdGhhdCBkb2Vzbid0IG1ha2UgaXQgYW4gaWRl bnRpdHkgc3lzdGVtIHBlciBzZSBhbmQgc2hvdWxkbid0IGNhdXNlIGEgY29uZmxpY3QgaW4gY2hh cnRlciBnb2FscyB3aXRoIHJlc3BlY3QgdG8gb3RoZXIgaWRlbnRpdHkgZm9jdXNlZCBlZmZvcnRz IGluIElFVEYuDQoNCkFsc28sIGluY2x1c2lvbiBvZiBhdHRyaWJ1dGVzIHRoYXQgZG9uJ3QgaGF2 ZSBzZW1hbnRpY3MgdGhhdCByZWFzb25hYmx5IHJlbGF0ZSB0byB0cnVzdCBzaG91bGQgbm90IGJl IG9mIGludGVyZXN0IHRvIGEgd29ya2luZyBncm91cCBmb2N1c2VkIG9uIGF0dGVzdGF0aW9uLg0K DQotTmVkDQoNCu+7v09uIDEwLzE1LzE4LCAzOjUzIFBNLCAiRUFUIG9uIGJlaGFsZiBvZiBIZW5r IEJpcmtob2x6IiA8ZWF0LWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGhlbmsuYmlya2hv bHpAc2l0LmZyYXVuaG9mZXIuZGU+IHdyb3RlOg0KDQogICAgSGkgSmVyZW15ICYgRGVuaXMsDQoN CiAgICBhbGwgdGhlc2UgcG9pbnRzIG9mIHZpZXcgaGF2ZSBtZXJpdCwgSSB0aGluay4NCg0KICAg IFBsZWFzZSBoYXZlIGEgbG9vayBhdCB0aGVzZSBxdW90ZXM6DQoNCiAgICA+IGtub3dpbmcgdGhl IHByb3ZlbmFuY2Ugb2YgdGhlIGRldmljZQ0KDQogICAgPiBoYXZpbmcgdGhlIGVudGl0eSBjcmVh dG9yL21hbnVmYWN0dXJlciBwcm92aWRlIGEgc2V0IG9mIGNsYWltcyB3aGljaCBjYW4gYmUgdmVy aWZpZWQNCg0KICAgID4gdG8ga25vdyB0aGUgY2hhcmFjdGVyaXN0aWNzIG9mIGEgZGV2aWNlIGJ5 IGlzc3VpbmcgdG8gdGhlIGRldmljZSBhIHB1YmxpYyBrZXkgY2VydGlmaWNhdGUgd2hpY2ggd2ls bCBvbmx5IGJlIGlzc3VlZCB0byB0aGUgZGV2aWNlIGlmIGl0IGZ1bGZpbGxzIGFuIGV4cGVjdGVk IHNldCBvZiBmdW5jdGlvbmFsaXRpZXMuDQoNCiAgICBUbyBtZSwgdGhlc2UgZGVzY3JpcHRpb25z IHNlZW0gdG8gaGF2ZSBkaWZmZXJlbnQgaW50ZW50cywgc2NvcGUgb3INCiAgICBhdWRpZW5jZSBh bmQgcmVxdWlyZSBtb3N0IGNlcnRhaW5seSBkaWZmZXJlbnQgd29yay1mbG93cywgYnV0DQogICAg c2VtYW50aWNhbGx5IGFuZCBpbiBjb25zZXF1ZW5jZSByZXByZXNlbnRhdGlvbi13aXNlIHRoZXkg YWxzbyBzZWVtIHF1aXRlDQogICAgcmVsYXRlZC4NCg0KICAgIElmIHlvdSB0aGluayBvZiBhbiBp ZGVudGl0eSBkb2N1bWVudCBhcyBhIHNldCBvZiBjbGFpbXMgKHBvdGVudGlhbGx5DQogICAgaW5j bHVkaW5nIGEgcHVibGljIGtleSksIHRoYXQgaXMgc2lnbmVkIGFuZCB0aGF0IGNhbiBtYXRjaCBv bmUgb3IgbW9yZQ0KICAgIHRoaW5ncywgbWF5YmUgYWxsIHRocmVlIHR5cGVzIGhpZ2hsaWdodGVk IGFib3ZlIGFyZSBhY3R1YWxseSBjb3ZlcmVkIGJ5DQogICAgdGhlIHNhbWUgaWRlbnRpdHkgZG9j dW1lbnQgY29uY2VwdD8NCg0KICAgIFdpdGggcmVzcGVjdCB0byBpZGVudGl0eSBkb2N1bWVudHMs IEkgdGhpbmsgaXQgaXMgc2FmZSBzbyBzYXkgdGhhdCB3ZQ0KICAgIGNhbiBmaW5kIGNvbW1vbiBn cm91bmQgaGVyZSByYXRoZXIgZWFzaWx5LiBUaGF0IHNhaWQsIHRoZSB3YXkgaG93IHRoZXNlDQog ICAgaWRlbnRpdHkgZG9jdW1lbnRzIGNvbWUgaW50byBleGlzdGVuY2UsIHdoZW4gYW5kIGhvdyB0 aGV5IGFyZSBkZXBsb3llZA0KICAgIG9uIHRoZSB0aGluZyBvciBhc3NvY2lhdGVkIHdpdGggbXVs dGlwbGUgdGhpbmdzIGlzIGFub3RoZXIgcXVlc3Rpb24uIFdlDQogICAgbW9zdCBjZXJ0YWlubHkg ZG8gbm90IHdhbnQgdG8gZW5kIHVwIHdpdGggYSAic2lnbmluZyBmb29sIiB0aGF0IGRvZXMgbm90 DQogICAgYWRkIHZhbHVlIHRvIHRoZSBsZXZlbCBvZiBjb25maWRlbmNlIChJIGFtIHF1b3Rpbmcg TmVkIFNtaXRoIGhlcmUpLg0KDQogICAgVGhpcyBoYXMgdG8gYmUgZmxlc2hlZCBvdXQgZXhwbGlj aXRseSBmb3IgZWFjaCBzY2VuYXJpbyBhbmQgdGhlIHBhcnRzDQogICAgdGhhdCBhcmUgcmV1c2Vk IGluIGV2ZXJ5IHNjZW5hcmlvIHNob3VsZCBnZXQgc3BlY2lhbCBhdHRlbnRpb24gaW4gdGhlDQog ICAgdXBjb21pbmcgUkFUUyBhcmNoaXRlY3R1cmUgZHJhZnQuDQoNCiAgICBJZGVudGlmeWluZyBj bGFpbXMgYWdncmVnYXRlZCBpbiBhbiBpZGVudGl0eSBkb2N1bWVudCBtb3N0IGNlcnRhaW5seSBj YW4NCiAgICBpbmNsdWRlIGRldmljZSBjaGFyYWN0ZXJpc3RpY3MsIHB1YmxpYyBrZXkocyksIG9y IGNsYWltcyBhYm91dCB0aGUNCiAgICBpbnRlbmRlZCBmdW5jdGlvbnMgYW5kIGNhcGFiaWxpdGll cyBvZiB0aGUgdGhpbmcuIENsYWltcyBjYW4gZXZlbg0KICAgIG9yaWdpbmF0ZSBmcm9tIENsYWlt YW50cyB0aGF0IGFyZSBub3QgdGhlIHRoaW5nIGl0c2VsZiwgYnV0IGV4dGVybmFsDQogICAgZW50 aXRpZXMgcHJvdmlkaW5nIGFuIGFzc2VydGlvbiAoZS5nLiB0aGVzZSB0aGluZ3MgYXJlIENDLWNl cnRpZmllZCkuDQoNCiAgICBBbGwgZGlmZmVyZW50IGNvbXBvc2l0ZXMgb2YgaWRlbnRpZnlpbmcg Y2xhaW1zIGhhdmUgYSBzcGVjaWZpYyBzaGFyZWQNCiAgICBpbnRlbmQgaW4gdGhpcyBjb250ZXh0 IHRob3VnaCwgSSB0aGluazogZXhwcmVzc2luZyBBdHRlc3RhdGlvbg0KICAgIFByb3ZlbmFuY2Ug KGFnYWluIC0gb25lIGZvciBvbmUgb3IgbW9yZSB0aGluZ3Mgb2YgdGhlIHNhbWUga2luZCkuIEFu ZA0KICAgIGFsbCBvZiB0aGVtIG9yaWdpbmF0ZSBmcm9tIENsYWltYW50cyBhbmQgdGhlcmVmb3Jl IHVzZSBhIHJvb3Qgb2YgdHJ1c3QNCiAgICBvZiBtZWFzdXJlbWVudCwgSSB0aGluay4NCg0KICAg IFRoYXQgc2FpZCwgZXN0YWJsaXNoaW5nIHRydXN0d29ydGh5IGtub3dsZWRnZSBhYm91dCBhdHRl c3RhdGlvbg0KICAgIHByb3ZlbmFuY2UgaXMgb25seSB0aGUgZmlyc3Qgc3RlcCBhbmQgcHJvdmlk ZXMgdGhlIGZvdW5kYXRpb24gZm9yIG1vcmUNCiAgICBjb21wbGV4IGF0dGVzdGF0aW9uIHByb2Nl ZHVyZXMuIEluIGFueSBjYXNlLCB0aGlzIHNlZW0gdG8gYmUgcmVxdWlyZWQgYnkNCiAgICBldmVy eSBzY2VuYXJpbyB0aGF0IHdhcyBoaWdobGlnaHRlZCBzbyBmYXIgYW5kIHRoZXJlZm9yZSB3aWxs IG1vc3QNCiAgICBjZXJ0YWlubHkgYmUgY292ZXJlZCBpbiBhIGRlbGl2ZXJhYmxlLg0KDQogICAg SUhUSCwNCg0KICAgIEhlbmsNCg0KDQogICAgT24gMTAvMTUvMjAxOCAxMjoyMiBQTSwgSmVyZW15 IE8nRG9ub2dodWUgd3JvdGU6DQogICAgPiBPbiAxMiBPY3QgMjAxOCwgYXQgMTQ6MzMsIERlbmlz IDxkZW5pcy5pZXRmQGZyZWUuZnINCiAgICA+IDxtYWlsdG86ZGVuaXMuaWV0ZkBmcmVlLmZyPj4g d3JvdGU6DQogICAgPj4gVGhlICJQcm9ibGVtIFN0YXRlbWVudCIgY29udGludWVzIGFzIGZvbGxv d3M6DQogICAgPj4NCiAgICA+PiAoMikgVG9kYXksIHRoZXJlIGlzIG5vIGNvbW1vbiwgc3RhbmRh cmQgd2F5IGZvciBSZWx5aW5nIFBhcnRpZXMgdG8NCiAgICA+PiBrbm93IHRoZSBwcm92ZW5hbmNl IGFuZCBjaGFyYWN0ZXJpc3RpY3Mgb2YgYSBkZXZpY2UgKGUuZy4sIGFuIGVuZC11c2VyDQogICAg Pj4gZGV2aWNlLA0KICAgID4+IHBsYXRmb3JtIG9yIGVuZHBvaW50LCBzZXJ2ZXJzLCBJb1QgZGV2 aWNlcywgZGV2aWNlIHN1YnN5c3RlbXMgYW5kDQogICAgPj4gc3ViLW1vZHVsZXMpIHRoYXQgbWF5 IGJlIHJlcXVlc3Rpbmcgc2VydmljZXMuDQogICAgPj4NCiAgICA+PiBLbm93aW5nIHRoZSBwcm92 ZW5hbmNlIG9mIHRoZSBkZXZpY2UgaXMgbm90IGFsd2F5cyBuZWNlc3NhcnkuIFdoYXQgaXMNCiAg ICA+PiBpbXBvcnRhbnQgaXMgdG8ga25vdyB0aGF0IGEgc3BlY2lmaWMgc2V0IG9mIGZ1bmN0aW9u cyBpcyAoc2VjdXJlbHkpDQogICAgPj4gc3VwcG9ydGVkIGJ5IHRoZSBkZXZpY2UuDQogICAgPj4g VGhlcmUgYWxyZWFkeSBleGlzdHMgYSBjb21tb24gd2F5IHRvIGtub3cgdGhlIGNoYXJhY3Rlcmlz dGljcyBvZiBhDQogICAgPj4gZGV2aWNlIGJ5IGlzc3VpbmcgdG8gdGhlIGRldmljZSBhIHB1Ymxp YyBrZXkgY2VydGlmaWNhdGUgd2hpY2ggd2lsbA0KICAgID4+IG9ubHkgYmUgaXNzdWVkIHRvIHRo ZSBkZXZpY2UNCiAgICA+PiBpZiBpdCBmdWxmaWxscyBhbiBleHBlY3RlZCBzZXQgb2YgZnVuY3Rp b25hbGl0aWVzLiBJbiBzdWNoIGEgY2FzZSBhDQogICAgPj4gc3ludGF4IGZvciBhIHRydXN0ZWQg Y2xhaW0gc2V0cyoqaXMgbm90IG5lZWRlZC4NCiAgICA+Pg0KICAgID4gVGhpcyBpcyBpbmRlZWQg YSBwb3NzaWJsZSB3YXkgdG8gYWRkcmVzcyB0aGUgcHJvYmxlbSwgYnV0IHN1ZmZlcnMgZnJvbQ0K ICAgID4gY2hhbGxlbmdlcyB3aGljaCBjb21lIGRvd24gdG86DQogICAgPg0KICAgID4gLSBXaG8g aXNzdWVzIHN1Y2ggY2VydGlmaWNhdGVzLiBBbiBvcHRpb24gaXMgdGhhdCB0aGVyZSBpcyBzb21l IGZvcm0gb2YNCiAgICA+IHNlY3VyaXR5IGNlcnRpZmljYXRpb24gYmVoaW5kIHRoaXMgaXNzdWFu Y2Ugb3RoZXJ3aXNlIGl0IGlzIG9mIHZlcnkNCiAgICA+IGxpbWl0ZWQgdmFsdWUuDQogICAgPiAt IEluIG9yZGVyIHRvIGNhcHR1cmUgdGhlIHdpZGUgdmFyaWV0eSBvZiBkaWZmZXJlbnQgZGV2aWNl cyAoSSBwcmVmZXINCiAgICA+ICJlbnRpdHkiIGhlcmUgYXMgaXQgaXMgbW9yZSBnZW5lcmFsIHRo YW4gImRldmljZSIpLCBtYW55IGRpZmZlcmVudCBmb3Jtcw0KICAgID4gb2Ygc3VjaCBjZXJ0aWZp Y2F0ZXMgd291bGQgYmUgcmVxdWlyZWQuIFRoaXMgZW5kcyB1cCBiZWluZyBtdWNoIHRoZSBzYW1l DQogICAgPiB0aGluZyBhcyBhIHNldCBvZiBjbGFpbXMuDQogICAgPg0KICAgID4gR2l2ZW4gdGhl IG11bHRpcGxpY2l0eSBvZiBlbnRpdGllcyBmb3Igd2hpY2ggYXR0ZXN0YXRpb24gbWlnaHQgYmUN CiAgICA+IHVzZWZ1bCwgaXQgc2VlbXMgdG8gbWUgdGhhdCBoYXZpbmcgdGhlIGVudGl0eSBjcmVh dG9yL21hbnVmYWN0dXJlcg0KICAgID4gcHJvdmlkZSBhIHNldCBvZiBjbGFpbXMgd2hpY2ggY2Fu IGJlIHZlcmlmaWVkIGlzIG1vcmUgZmxleGlibGUgdGhhbg0KICAgID4gcmVxdWlyaW5nIGEgY2Vy dGlmaWNhdGUuIEl0IHNlZW1zIGxpa2VseSB0byBtZSB0aGF0IHdoZXJlIGEgZm9ybWFsDQogICAg PiBzZWN1cml0eSBjZXJ0aWZpY2F0aW9uIGlzIG5lZWRlZCB0aGVyZSB3aWxsIGJlIGEgY2VydGlm aWNhdGUgaXNzdWVkIGJ5DQogICAgPiB0aGUgQ2VydGlmeWluZyBCb2R5IGFzIG9uZSBvZiB0aGUg Y2xhaW1zIGFib3V0IGFuIGVudGl0eSwgYnV0IEkgY2FuDQogICAgPiB0aGluayBvZiBtYW55IGNh c2VzIChzdXBwbHkgY2hhaW4gbWFuYWdlbWVudCwgdG8gdGFrZSBqdXN0IG9uZSBleGFtcGxlKQ0K ICAgID4gd2hlcmUgcHJvdmVuYW5jZSBpcyBieSBmYXIgdGhlIG1vc3QgdXNlZnVsIGluZm9ybWF0 aW9uLg0KICAgID4NCiAgICA+IEknbSBub3QgaW4gZmF2b3VyIG9mIGNoYW5nZXMgdG8gdGhlIGNo YXJ0ZXIgaW4gdGhpcyBkaXJlY3Rpb24uDQogICAgPj4NCiAgICA+PiBUaGUgc2ltcGxlc3QgY2Fz ZXMgc2hvdWxkIGFsc28gYmUgcGFydCBvZiB0aGUgZnJhbWV3b3JrLg0KICAgID4+DQogICAgPj4g Tm90ZTogSSBwZXJzb25hbGx5IGFwcHJlY2lhdGUgdGhhdCBwcml2YWN5IGlzIGFuIGFzcGVjdCB0 aGF0DQogICAgPj4gd2lsbC9zaG91bGQgYmUgdGFrZW4gaW50byBjb25zaWRlcmF0aW9uLg0KICAg ID4+DQogICAgPj4gRGVuaXMNCiAgICA+Pg0KICAgID4+PiBBcyB3aXRoIHRoZSBlYXJsaWVyIGRy YWZ0LCB0aGVyZSBhcmUgbWFueSByZWZlcmVuY2VzIHRvIHZlcmlmeSBhbmQNCiAgICA+Pj4gdmVy aWZpZXIgaW4gdGhlIGxlYWQgdXAgdG8gdGhlIGRlbGl2ZXJhYmxlIGJ1dCBubyBkZWxpdmVyYWJs ZXMgZGVzY3JpYmluZw0KICAgID4+PiB2ZXJpZmljYXRpb24gcnVsZXMuIEknZCBsaWtlIHRvIHNl ZSBydWxlcyBpbiBvbmUgb2YgdGhlc2UgZG9jdW1lbnRzIGFuZA0KICAgID4+PiB0aGluayBpdCB3 b3J0aCBjaXRpbmcgaW4gdGhlIGRlbGl2ZXJhYmxlcy4gQXJlIGJpbmRpbmdzIHRvIGNlcnRpZmlj YXRlDQogICAgPj4+IG1hbmFnZW1lbnQgcHJvdG9jb2xzIG91dCBvZiBzY29wZT8NCiAgICA+Pj4N CiAgICA+Pj4gT24gMTAvMTEvMTgsIDk6NDkgQU0sICJSQVRTIG9uIGJlaGFsZiBvZiBIZW5rIEJp cmtob2x6Ig0KICAgID4+PiA8cmF0cy1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBoZW5r LmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPiAgd3JvdGU6DQogICAgPj4+DQogICAgPj4+PiBI aSBhbGwsDQogICAgPj4+Pg0KICAgID4+Pj4gc29ycnkgZm9yIHRoZSBkZWxheS4gUGxlYXNlIGZp bmQgYW4gdXBkYXRlZCBjaGFydGVyIHByb3Bvc2FsIGhlcmU6DQogICAgPj4+Pg0KICAgID4+Pj4+ IGh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMvY2hhcnRlci9ibG9iL1JDMi9pZXRmLXJhdHMt Y2hhcnRlci5tZA0KICAgID4+Pj4gVGhlIEJvRiBwcm9wb25lbnRzIHRyaWVkIHRvIG1lcmdlIGFs bCBjb21tZW50cyBhbmQgcHJvcG9zYWxzIG9uDQogICAgPj4+PiBrZXlzdG9yZXMsIGV4aXN0aW5n IHNvbHV0aW9ucywgcHJvdmVuYW5jZSAmIGRldmljZSBjaGFyYWN0ZXJpc3RpY3MsIGV0Yw0KICAg ID4+Pj4gdGhhdCB3ZXJlIHJhaXNlZCBvbiB0aGUgbGlzdCAtIGFuZCBhbGlnbiB0aGVtIGluIGhv bW9nZW5lb3VzIGZhc2hpb24uDQogICAgPj4+Pg0KICAgID4+Pj4gVGhpcyBkcmFmdCBpcyBpbnRl bmRlZCB0byBmb2N1cyB0aGUgZGlzY3Vzc2lvbiBhbmQgaW1wcm92ZSB0aGUgd29yZGluZy4NCiAg ICA+Pj4+DQogICAgPj4+PiBWaWVsZSBHcsO8w59lLA0KICAgID4+Pj4NCiAgICA+Pj4+IEhlbmsN CiAgICA+Pj4+DQogICAgPj4+PiBPbiAxMC8wNi8yMDE4IDA4OjIzIEFNLCBMYXVyZW5jZSBMdW5k YmxhZGUgd3JvdGU6DQogICAgPj4+Pj4gSGkgSGVuaywNCiAgICA+Pj4+Pg0KICAgID4+Pj4+IEJh bmdrb2sgSUVURiBpcyBnZXR0aW5nIGNsb3NlLCB3aWxsIHlvdSBiZSBhYmxlIHRvIHVwZGF0ZSB0 aGUgY2hhcnRlcg0KICAgID4+Pj4+IGZvciB0aGUgYXR0ZXN0YXRpb24gQm9GIHRvIHByb3Blcmx5 IGluY2x1ZGUgRUFUPyAgSSBzZW50IHlvdSBzb21lIHRleHQNCiAgICA+Pj4+PiB0aGF0IGp1c3Qg bmVlZHMgdG8gYmUgcGFzdGVkIGFsb25nIHdpdGggc29tZSBjb21tZW50cy4gSXQgZG9lc27igJl0 IGxvb2sNCiAgICA+Pj4+PiBsaWtlIHRoZXJl4oCZcyBiZWVuIGFueSB1cGRhdGVzLg0KICAgID4+ Pj4+DQogICAgPj4+Pj4gTEwNCiAgICA+Pj4+Pg0KICAgID4+Pj4gX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICA+Pj4+IFJBVFMgbWFpbGluZyBsaXN0 DQogICAgPj4+PiBSQVRTQGlldGYub3JnDQogICAgPj4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL3JhdHMNCiAgICA+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCiAgICA+Pj4gRUFUIG1haWxpbmcgbGlzdA0KICAgID4+PiBF QVRAaWV0Zi5vcmcNCiAgICA+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9lYXQNCiAgICA+Pg0KICAgID4+DQogICAgPj4gX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCiAgICA+PiBFQVQgbWFpbGluZyBsaXN0DQogICAgPj4gRUFU QGlldGYub3JnIDxtYWlsdG86RUFUQGlldGYub3JnPg0KICAgID4+IGh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vZWF0DQogICAgPg0KICAgID4NCiAgICA+DQogICAgPiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgID4gRUFUIG1h aWxpbmcgbGlzdA0KICAgID4gRUFUQGlldGYub3JnDQogICAgPiBodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KICAgID4NCg0KICAgIF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgRUFUIG1haWxpbmcgbGlzdA0KICAgIEVB VEBpZXRmLm9yZw0KICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0 DQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkVB VCBtYWlsaW5nIGxpc3QNCkVBVEBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9lYXQNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVt YWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUg cHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNl IG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNv bnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0 b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpFQVQgbWFpbGlu ZyBsaXN0DQpFQVRAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vZWF0DQo= From nobody Tue Oct 16 05:25:04 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADAD1130DE2; Tue, 16 Oct 2018 05:25:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WdLqxgJgAuYl; Tue, 16 Oct 2018 05:25:00 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B59A6130DDB; Tue, 16 Oct 2018 05:24:57 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9GCOrLq002856 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 16 Oct 2018 14:24:54 +0200 Received: from [172.20.8.9] (88.157.232.34) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Tue, 16 Oct 2018 14:24:48 +0200 To: Giridhar Mandyam , "rats@ietf.org" CC: "eat@ietf.org" References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> From: Henk Birkholz Message-ID: Date: Tue, 16 Oct 2018 14:24:47 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [88.157.232.34] Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Oct 2018 12:25:04 -0000 Hello Giridhar, I totally agree that attestation procedures do not always use network protocols as conveyance methods. In a composite device, e.g. a network equipment chassis, there can be a component hierarchy in which each component can be associated with an attester role and/or verifier role; enabling (mutual) attestation between each component/sub-component relationship using various kinds of interconnects (and none of them have to be IP). Keeping that in mind when designing data models and corresponding serializations is important. For remote attestation via network protocols it might not be the most important thing, though. There are most certainly "on behalf" roles, provided that there is a "trusted path" relationship (quoting orange book here) via which the attestation procedure could be behave like a local one. I am not sure, if I see a "verifiers on behalf of a remote relying party" scenario, but in general, I'd agree with the concept. In summary, if the attester and the verifier are connected via a "trusted path" then it is essentially local attestation. Unfortunately, you issued the pull request on master, the current version is in the RC2 branch: > https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter.md We are currently trimming the text, refactoring the content by using more generic terminology, and cut out about half of the content (wrt to the master branch) in order to segregate problem statements and goals into phases. The current version referenced above is intended to be become phase one. Viele Grüße, Henk On 10/15/2018 09:33 PM, Giridhar Mandyam wrote: > Sorry to switch topics. > > Just posted my requested changes at https://github.com/ietf-rats/charter/pull/1. > > 2 areas to consider: > > a) Many resource-constrained devices will not support Internet Connectivity. This does not mean that remote attestation is not possible. It just means that this effort will be more broadly applicable if an interoperable format for 'Attestation Evidence' results that can be conveyed over multiple protocols, not just the internet. EAT was designed with this goal in mind. > > b) Local attestation is more than just on-device. We have seen gateways in the market that allow for remote administration of devices in a local network that may only communicate via short-range protocols such as Bluetooth or Zigbee. Such gateways may very well also serve as verifiers on behalf of a remote relying party. > > -Giri Mandyam > > -----Original Message----- > From: EAT On Behalf Of Hannes Tschofenig > Sent: Monday, October 15, 2018 10:50 AM > To: Smith, Ned ; Henk Birkholz ; rats@ietf.org; Jeremy O'Donoghue ; Denis > Cc: eat@ietf.org > Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates? > > Here are my 5 cents on the term 'identity'. > > I have been working on identity management for many years (partially because of my OAuth co-chair role) and I have noticed that the use of the term "identity" tends to confuse more than it helps (even more so when the term is applied to devices and software rather than humans). > > I believe we could get away with describing what we want without ever using the term. > > In this context I would argue that we are about identifying different components, such as hardware and software. > > Ciao > Hannes > > -----Original Message----- > From: EAT On Behalf Of Smith, Ned > Sent: Monday, October 15, 2018 9:00 AM > To: Henk Birkholz ; rats@ietf.org; Jeremy O'Donoghue ; Denis > Cc: eat@ietf.org > Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates? > > I agree with Henk's observation that there is opportunity to find common ground on identity as identity can be a collection of attributes, that if signed, becomes a set of verifiable claims (about identity attributes). Attestation has a similar structure in that it consists of a set of attributes, that if signed becomes a set of verifiable claims. The main difference between identity and attestation attributes is whether the attribute semantically relate to trust (vs. identity). For example, claims of security certification compliance resonates as attestation. > > It may be possible to combine a set of attestation attributes in such a way that the combination uniquely identifies an entity. But that doesn't make it an identity system per se and shouldn't cause a conflict in charter goals with respect to other identity focused efforts in IETF. > > Also, inclusion of attributes that don't have semantics that reasonably relate to trust should not be of interest to a working group focused on attestation. > > -Ned > > On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" wrote: > > Hi Jeremy & Denis, > > all these points of view have merit, I think. > > Please have a look at these quotes: > > > knowing the provenance of the device > > > having the entity creator/manufacturer provide a set of claims which can be verified > > > to know the characteristics of a device by issuing to the device a public key certificate which will only be issued to the device if it fulfills an expected set of functionalities. > > To me, these descriptions seem to have different intents, scope or > audience and require most certainly different work-flows, but > semantically and in consequence representation-wise they also seem quite > related. > > If you think of an identity document as a set of claims (potentially > including a public key), that is signed and that can match one or more > things, maybe all three types highlighted above are actually covered by > the same identity document concept? > > With respect to identity documents, I think it is safe so say that we > can find common ground here rather easily. That said, the way how these > identity documents come into existence, when and how they are deployed > on the thing or associated with multiple things is another question. We > most certainly do not want to end up with a "signing fool" that does not > add value to the level of confidence (I am quoting Ned Smith here). > > This has to be fleshed out explicitly for each scenario and the parts > that are reused in every scenario should get special attention in the > upcoming RATS architecture draft. > > Identifying claims aggregated in an identity document most certainly can > include device characteristics, public key(s), or claims about the > intended functions and capabilities of the thing. Claims can even > originate from Claimants that are not the thing itself, but external > entities providing an assertion (e.g. these things are CC-certified). > > All different composites of identifying claims have a specific shared > intend in this context though, I think: expressing Attestation > Provenance (again - one for one or more things of the same kind). And > all of them originate from Claimants and therefore use a root of trust > of measurement, I think. > > That said, establishing trustworthy knowledge about attestation > provenance is only the first step and provides the foundation for more > complex attestation procedures. In any case, this seem to be required by > every scenario that was highlighted so far and therefore will most > certainly be covered in a deliverable. > > IHTH, > > Henk > > > On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: > > On 12 Oct 2018, at 14:33, Denis > > wrote: > >> The "Problem Statement" continues as follows: > >> > >> (2) Today, there is no common, standard way for Relying Parties to > >> know the provenance and characteristics of a device (e.g., an end-user > >> device, > >> platform or endpoint, servers, IoT devices, device subsystems and > >> sub-modules) that may be requesting services. > >> > >> Knowing the provenance of the device is not always necessary. What is > >> important is to know that a specific set of functions is (securely) > >> supported by the device. > >> There already exists a common way to know the characteristics of a > >> device by issuing to the device a public key certificate which will > >> only be issued to the device > >> if it fulfills an expected set of functionalities. In such a case a > >> syntax for a trusted claim sets**is not needed. > >> > > This is indeed a possible way to address the problem, but suffers from > > challenges which come down to: > > > > - Who issues such certificates. An option is that there is some form of > > security certification behind this issuance otherwise it is of very > > limited value. > > - In order to capture the wide variety of different devices (I prefer > > "entity" here as it is more general than "device"), many different forms > > of such certificates would be required. This ends up being much the same > > thing as a set of claims. > > > > Given the multiplicity of entities for which attestation might be > > useful, it seems to me that having the entity creator/manufacturer > > provide a set of claims which can be verified is more flexible than > > requiring a certificate. It seems likely to me that where a formal > > security certification is needed there will be a certificate issued by > > the Certifying Body as one of the claims about an entity, but I can > > think of many cases (supply chain management, to take just one example) > > where provenance is by far the most useful information. > > > > I'm not in favour of changes to the charter in this direction. > >> > >> The simplest cases should also be part of the framework. > >> > >> Note: I personally appreciate that privacy is an aspect that > >> will/should be taken into consideration. > >> > >> Denis > >> > >>> As with the earlier draft, there are many references to verify and > >>> verifier in the lead up to the deliverable but no deliverables describing > >>> verification rules. I'd like to see rules in one of these documents and > >>> think it worth citing in the deliverables. Are bindings to certificate > >>> management protocols out of scope? > >>> > >>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" > >>> wrote: > >>> > >>>> Hi all, > >>>> > >>>> sorry for the delay. Please find an updated charter proposal here: > >>>> > >>>>> https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter.md > >>>> The BoF proponents tried to merge all comments and proposals on > >>>> keystores, existing solutions, provenance & device characteristics, etc > >>>> that were raised on the list - and align them in homogeneous fashion. > >>>> > >>>> This draft is intended to focus the discussion and improve the wording. > >>>> > >>>> Viele Grüße, > >>>> > >>>> Henk > >>>> > >>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: > >>>>> Hi Henk, > >>>>> > >>>>> Bangkok IETF is getting close, will you be able to update the charter > >>>>> for the attestation BoF to properly include EAT? I sent you some text > >>>>> that just needs to be pasted along with some comments. It doesn’t look > >>>>> like there’s been any updates. > >>>>> > >>>>> LL > >>>>> > >>>> _______________________________________________ > >>>> RATS mailing list > >>>> RATS@ietf.org > >>>> https://www.ietf.org/mailman/listinfo/rats > >>> _______________________________________________ > >>> EAT mailing list > >>> EAT@ietf.org > >>> https://www.ietf.org/mailman/listinfo/eat > >> > >> > >> _______________________________________________ > >> EAT mailing list > >> EAT@ietf.org > >> https://www.ietf.org/mailman/listinfo/eat > > > > > > > > _______________________________________________ > > EAT mailing list > > EAT@ietf.org > > https://www.ietf.org/mailman/listinfo/eat > > > > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat > > > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat > IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Tue Oct 16 06:11:54 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8071F130DC9; Tue, 16 Oct 2018 06:11:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vXUAGM2BmwgG; Tue, 16 Oct 2018 06:11:50 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D5DF012D4EE; Tue, 16 Oct 2018 06:11:48 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9GDBgMM004435 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 16 Oct 2018 15:11:43 +0200 Received: from [172.20.8.9] (88.157.232.34) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Tue, 16 Oct 2018 15:11:37 +0200 To: Denis , Hannes Tschofenig , "Smith, Ned" , "rats@ietf.org" , "Jeremy O'Donoghue" , "rats@ietf.org" CC: "eat@ietf.org" References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> From: Henk Birkholz Message-ID: <9c1cd678-de0f-8a72-5917-3aa23b8a01c4@sit.fraunhofer.de> Date: Tue, 16 Oct 2018 15:11:35 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [88.157.232.34] Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Oct 2018 13:11:53 -0000 Hi Denis, I just pulled in your first proposal as an example in paragraph five. I am a bit concerned to drop the intent of establishing a believable context about attestation provenance. As you referred, for example, to FIDO - I think that is the intent there, is it not? Laurence proposed the terms "provenance and characteristics" as high level terms and all proponents agreed to use these. If this is a relevant disabler for a specific usage scenario, we might have to reconsider that. We cut out differentiating simple cases and more complex cases to reduce the complexity of the charter text for now. If that is counterproductive, we would like to get more input on that, please. Viele Grüße, Henk On 10/15/2018 09:30 PM, Denis wrote: >> Here are my 5 cents on the term 'identity'. >> >> I have been working on identity management for many years (partially because of my OAuth co-chair role) and I have noticed that the use of the term "identity" tends to confuse more than it helps (even more so when the term is applied to devices and software rather than humans). >> >> I believe we could get away with describing what we want without ever using the term. >> >> In this context I would argue that we are about identifying different components, such as hardware and software. >> >> Ciao >> Hannes > > +1 > > The single sentence where currently the word "identity" is being used is: > > As a result, in 2018, a Relying Party would be unable to tell if a > device is trying to mimic the identity of another device or some of > its characteristics. > > This could be rephrased as: > > As a result, in 2018, there is no common way allowing Relying > Parties to tell if some data originates from a trustworthy device > designed to support a specific set of operations/functionalities or > not . > > The text currently states: > > 2) In 2018, there are no common, standard ways for Relying Parties > to know the provenance and characteristics of a device > (e.g., an end-user device, platform or endpoint, servers, IoT > devices, device subsystems and sub-modules) that may be requesting > services. > > As already said on this list, knowing the provenance of a device is not > always necessary (but may be useful in some cases). > The key point is to know the characteristics of the device. > > This could be rephrased as: > > 2) In 2018, there are no common, standard ways for Relying Parties > to know the characteristics of a device (e.g., an end-user device, > platform or endpoint, > servers, IoT devices, device subsystems and sub-modules) that may be > requesting services. > > Probably a typo in the following sentence: > > (1) A standardized way to establish a sufficient level of confidence > that some data originates from a trustworthy device (e.g., > platforms, servers, > user endpoints, IoT devices, device subsystems or subcomponents) > designed to support a specific set of operations/functionalities /a > communication partner is a trustworthy endpoint./ > > The end of the sentence (i.e. "a communication partner is a trustworthy > endpoint.") looks odd and should probably be deleted. > > The goals are currently limited to the definition of the content of the > Assertions. A key point is the way to verify/validate an Attestation. > The more complex is the content of an Attestation, the more complex it > will be to validate it by a RP. > > A framework for validating the Attestations should also be part of the > charter. > > Denis > > > Note:At this stage, I still see no text to address both simple cases > (e.g. FIDO attestations) and more complex cases. > >> -----Original Message----- >> From: EAT On Behalf Of Smith, Ned >> Sent: Monday, October 15, 2018 9:00 AM >> To: Henk Birkholz;rats@ietf.org; Jeremy O'Donoghue; Denis >> Cc:eat@ietf.org >> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates? >> >> I agree with Henk's observation that there is opportunity to find common ground on identity as identity can be a collection of attributes, that if signed, becomes a set of verifiable claims (about identity attributes). Attestation has a similar structure in that it consists of a set of attributes, that if signed becomes a set of verifiable claims. The main difference between identity and attestation attributes is whether the attribute semantically relate to trust (vs. identity). For example, claims of security certification compliance resonates as attestation. >> >> It may be possible to combine a set of attestation attributes in such a way that the combination uniquely identifies an entity. But that doesn't make it an identity system per se and shouldn't cause a conflict in charter goals with respect to other identity focused efforts in IETF. >> >> Also, inclusion of attributes that don't have semantics that reasonably relate to trust should not be of interest to a working group focused on attestation. >> >> -Ned >> >> On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" wrote: >> >> Hi Jeremy & Denis, >> >> all these points of view have merit, I think. >> >> Please have a look at these quotes: >> >> > knowing the provenance of the device >> >> > having the entity creator/manufacturer provide a set of claims which can be verified >> >> > to know the characteristics of a device by issuing to the device a public key certificate which will only be issued to the device if it fulfills an expected set of functionalities. >> >> To me, these descriptions seem to have different intents, scope or >> audience and require most certainly different work-flows, but >> semantically and in consequence representation-wise they also seem quite >> related. >> >> If you think of an identity document as a set of claims (potentially >> including a public key), that is signed and that can match one or more >> things, maybe all three types highlighted above are actually covered by >> the same identity document concept? >> >> With respect to identity documents, I think it is safe so say that we >> can find common ground here rather easily. That said, the way how these >> identity documents come into existence, when and how they are deployed >> on the thing or associated with multiple things is another question. We >> most certainly do not want to end up with a "signing fool" that does not >> add value to the level of confidence (I am quoting Ned Smith here). >> >> This has to be fleshed out explicitly for each scenario and the parts >> that are reused in every scenario should get special attention in the >> upcoming RATS architecture draft. >> >> Identifying claims aggregated in an identity document most certainly can >> include device characteristics, public key(s), or claims about the >> intended functions and capabilities of the thing. Claims can even >> originate from Claimants that are not the thing itself, but external >> entities providing an assertion (e.g. these things are CC-certified). >> >> All different composites of identifying claims have a specific shared >> intend in this context though, I think: expressing Attestation >> Provenance (again - one for one or more things of the same kind). And >> all of them originate from Claimants and therefore use a root of trust >> of measurement, I think. >> >> That said, establishing trustworthy knowledge about attestation >> provenance is only the first step and provides the foundation for more >> complex attestation procedures. In any case, this seem to be required by >> every scenario that was highlighted so far and therefore will most >> certainly be covered in a deliverable. >> >> IHTH, >> >> Henk >> >> >> On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: >> > On 12 Oct 2018, at 14:33, Denis > wrote: >> >> The "Problem Statement" continues as follows: >> >> >> >> (2) Today, there is no common, standard way for Relying Parties to >> >> know the provenance and characteristics of a device (e.g., an end-user >> >> device, >> >> platform or endpoint, servers, IoT devices, device subsystems and >> >> sub-modules) that may be requesting services. >> >> >> >> Knowing the provenance of the device is not always necessary. What is >> >> important is to know that a specific set of functions is (securely) >> >> supported by the device. >> >> There already exists a common way to know the characteristics of a >> >> device by issuing to the device a public key certificate which will >> >> only be issued to the device >> >> if it fulfills an expected set of functionalities. In such a case a >> >> syntax for a trusted claim sets**is not needed. >> >> >> > This is indeed a possible way to address the problem, but suffers from >> > challenges which come down to: >> > >> > - Who issues such certificates. An option is that there is some form of >> > security certification behind this issuance otherwise it is of very >> > limited value. >> > - In order to capture the wide variety of different devices (I prefer >> > "entity" here as it is more general than "device"), many different forms >> > of such certificates would be required. This ends up being much the same >> > thing as a set of claims. >> > >> > Given the multiplicity of entities for which attestation might be >> > useful, it seems to me that having the entity creator/manufacturer >> > provide a set of claims which can be verified is more flexible than >> > requiring a certificate. It seems likely to me that where a formal >> > security certification is needed there will be a certificate issued by >> > the Certifying Body as one of the claims about an entity, but I can >> > think of many cases (supply chain management, to take just one example) >> > where provenance is by far the most useful information. >> > >> > I'm not in favour of changes to the charter in this direction. >> >> >> >> The simplest cases should also be part of the framework. >> >> >> >> Note: I personally appreciate that privacy is an aspect that >> >> will/should be taken into consideration. >> >> >> >> Denis >> >> >> >>> As with the earlier draft, there are many references to verify and >> >>> verifier in the lead up to the deliverable but no deliverables describing >> >>> verification rules. I'd like to see rules in one of these documents and >> >>> think it worth citing in the deliverables. Are bindings to certificate >> >>> management protocols out of scope? >> >>> >> >>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" >> >>> wrote: >> >>> >> >>>> Hi all, >> >>>> >> >>>> sorry for the delay. Please find an updated charter proposal here: >> >>>> >> >>>>>https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter.md >> >>>> The BoF proponents tried to merge all comments and proposals on >> >>>> keystores, existing solutions, provenance & device characteristics, etc >> >>>> that were raised on the list - and align them in homogeneous fashion. >> >>>> >> >>>> This draft is intended to focus the discussion and improve the wording. >> >>>> >> >>>> Viele Grüße, >> >>>> >> >>>> Henk >> >>>> >> >>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >> >>>>> Hi Henk, >> >>>>> >> >>>>> Bangkok IETF is getting close, will you be able to update the charter >> >>>>> for the attestation BoF to properly include EAT? I sent you some text >> >>>>> that just needs to be pasted along with some comments. It doesn’t look >> >>>>> like there’s been any updates. >> >>>>> >> >>>>> LL >> >>>>> >> >>>> _______________________________________________ >> >>>> RATS mailing list >> >>>>RATS@ietf.org >> >>>>https://www.ietf.org/mailman/listinfo/rats >> >>> _______________________________________________ >> >>> EAT mailing list >> >>>EAT@ietf.org >> >>>https://www.ietf.org/mailman/listinfo/eat >> >> >> >> >> >> _______________________________________________ >> >> EAT mailing list >> >>EAT@ietf.org >> >>https://www.ietf.org/mailman/listinfo/eat >> > >> > >> > >> > _______________________________________________ >> > EAT mailing list >> >EAT@ietf.org >> >https://www.ietf.org/mailman/listinfo/eat >> > >> >> _______________________________________________ >> EAT mailing list >> EAT@ietf.org >> https://www.ietf.org/mailman/listinfo/eat >> >> >> _______________________________________________ >> EAT mailing list >> EAT@ietf.org >> https://www.ietf.org/mailman/listinfo/eat >> IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you. > > From nobody Tue Oct 16 06:52:19 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1102312D4EE; Tue, 16 Oct 2018 06:52:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W_-vV6I0_kLr; Tue, 16 Oct 2018 06:52:00 -0700 (PDT) Received: from mga11.intel.com (mga11.intel.com [192.55.52.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02836130DEC; Tue, 16 Oct 2018 06:51:59 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga005.jf.intel.com ([10.7.209.41]) by fmsmga102.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 16 Oct 2018 06:51:59 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.54,388,1534834800"; d="scan'208";a="266134872" Received: from orsmsx110.amr.corp.intel.com ([10.22.240.8]) by orsmga005.jf.intel.com with ESMTP; 16 Oct 2018 06:51:58 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.251]) by ORSMSX110.amr.corp.intel.com ([169.254.10.20]) with mapi id 14.03.0319.002; Tue, 16 Oct 2018 06:51:58 -0700 From: "Smith, Ned" To: Hannes Tschofenig , Henk Birkholz , "rats@ietf.org" , "Jeremy O'Donoghue" , Denis CC: "eat@ietf.org" Thread-Topic: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates? Thread-Index: AQHUZJbnIP3n6SY5DUiHYjY92eJ1aaUg/QyAgAAN/YCAAWCsgA== Date: Tue, 16 Oct 2018 13:51:57 +0000 Message-ID: <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.2.180910 x-originating-ip: [10.252.5.236] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Oct 2018 13:52:17 -0000 QWdyZWUgd2l0aCBIYW5uZXMgdGhhdCBpZGVudGl0eSBkaXNjdXNzaW9uIGNhbiBsZWFkIHRvIGNv bmZ1c2lvbiBhcyBpZGVudGl0eSBpcyBvZnRlbiBoaWdobHkgZGVwZW5kZW50IG9uIHNvbWUgc29y dCBvZiBjb250ZXh0IChkb21haW4gb2YgaW50ZXJwcmV0YXRpb24pLiANCg0KSW4gb3JkZXIgdG8g aGF2ZSBwcm9kdWN0aXZlIGNvbnZlcnNhdGlvbiBhYm91dCBhdHRlc3RhdGlvbiBhbmQgaWRlbnRp dHksIGl0IG1heSBiZSBpbXBvcnRhbnQgdG8gdW5kZXJzdGFuZCB0aGF0IGF0dGVzdGF0aW9uIHNl bWFudGljcyBzZXRzIHRoZSBjb250ZXh0IGZvciBpZGVudGl0eS4gDQoNCiogQXR0ZXN0YXRpb24g YXR0cmlidXRlcyBoYXZlIHRydXN0IHNlbWFudGljcyAoYW5kIHRydXN0IHNlbWFudGljcyBhcmUg aW50ZXJwcmV0ZWQgdGhyb3VnaCB0aGUgZXllcyBvZiB0aGUgdmVyaWZpZXIpLiBJZGVudGl0eSBh dHRyaWJ1dGVzIG1heSBhbHNvIGhhdmUgdHJ1c3Qgc2VtYW50aWNzIChpbiBhZGRpdGlvbiB0byBp ZGVudGl0eSBzZW1hbnRpY3MpIGhlbmNlIGNhbiBiZSByZWdhcmRlZCBhcyBwbGF5aW5nIGEgcm9s ZSBpbiBib3RoIGlkZW50aXR5IGFuZCBhdHRlc3RhdGlvbi4gU2luY2UgUkFUUyBzaG91bGQgYmUg aW50ZXJlc3RlZCBwcmltYXJpbHkgaW4gdHJ1c3Qgc2VtYW50aWNzLCBpdCBtYWtlcyBzZW5zZSB0 byB1bmRlcnN0YW5kLCBkaXNjdXNzIGFuZCBjb25zaWRlciBpZGVudGl0eSBpbiB0ZXJtcyBvZiBp dHMgdHJ1c3Qgc2VtYW50aWNzLiBIZW5jZSBpZGVudGl0eSBhdHRyaWJ1dGVzIGFyZSBvbmx5IGlu dGVyZXN0aW5nIHRvIFJBVFMgaWYgdGhleSBhcmUgdXNlZnVsIGZvciBldmFsdWF0aW5nIHRydXN0 IHNlbWFudGljcy4NCg0KKiBJbiBhIGNsb3NlZCBlY29zeXN0ZW0sIHRoZSB0cnVzdCBjaGFyYWN0 ZXJpc3RpY3MgYW5kIHByb3BlcnRpZXMgbWF5IGJlIGltcGxpZWQgYmVjYXVzZSB0aGVyZSBvZnRl biBleGlzdHMgb3V0LW9mLWJhbmQgcHJvY2Vzc2VzIHRoYXQgZW5zdXJlIHRoZSBjaGFyYWN0ZXJp c3RpY3MgYXJlIGFwcGxpZWQgKGZvciBleGFtcGxlLCBpZiBhbiBJVCBvcmdhbml6YXRpb24gc2V0 cyBhIHBvbGljeSB0aGF0IGFsbCBhc3ltbWV0cmljIGtleXMgYXJlIHRvIGJlIGhhcmRlbmVkIHVz aW5nIGEgc21hcnRjYXJkLCB0aGV5IGNhbiBhcHBseSBhIGRlcGxveW1lbnQgcHJvY2VzcyB3aGVy ZSB0aGUgSVQgcHJvZmVzc2lvbmFsIHZlcmlmaWVzIHRoZSBzbWFydGNhcmQgaXMgdXNlZCBkdXJp bmcgZW5yb2xsbWVudC4pIEJ1dCBpbiBhIG5vbi1jbG9zZWQgZWNvc3lzdGVtLCB0aGVyZSBpc24n dCBhbiBhc3N1bXB0aW9uIHRoYXQgb3V0LW9mLWJhbmQgcHJvY2Vzc2VzIGV4aXN0LiBBdHRlc3Rh dGlvbiBhdHRlbXB0cyB0byBtYWtlIGV4cGxpY2l0IHdoYXQgb3RoZXJ3aXNlIGlzIGltcGxpY2l0 IGFuZCB0aGVyZWZvcmUgc3ViamVjdCB0byBtaXNpbnRlcnByZXRhdGlvbiBpZiB0aGUgdmVyaWZp ZXIsIHJlbHlpbmcgcGFydHkgYW5kIGF0dGVzdGVyIGFyZSBub3QgcGFydCBvZiB0aGUgc2FtZSBj bG9zZWQgZWNvc3lzdGVtLiBJbXBsaWNpdCBhdHRlc3RhdGlvbiB0aGVyZWZvcmUgY2FuIGxlYWQg dG8gc2VtYW50aWMgY29uZnVzaW9uIGlmIHdlJ3JlIG5vdCBjYXJlZnVsLiBUaGVyZWZvcmUsIHRo ZSByaWdvciBvZiB0cmVhdGluZyBpbXBsaWNpdCBhdHRlc3RhdGlvbiBjbGFpbXMgKGFzc2VydGlv bnMgYXNzdW1lZCB0byBleGlzdCBidXQgbm90IGV4cGxpY2l0bHkgbmFtZWQpIHNob3VsZCBuZXZl cnRoZWxlc3MgYmUgZGVmaW5lZCBleHBsaWNpdGx5LiBUaGVuLCBpZiB0aGVyZSBpcyBhIG5lZWQg Zm9yIGltcGxpY2l0IGF0dGVzdGF0aW9uLCB0aGUgc3BlY2lmaWNhdGlvbnMgdGhhdCBkZXNjcmli ZSB0aGVtIGNhbiBkZXNjcmliZSB0aGVtIGluIHRlcm1zIG9mIGFuIGV4cGxpY2l0IGRlZmluaXRp b24uIA0KDQoqIEluIHRoZSBjb250ZXh0IG9mIGFzc2VydGluZyB0cnVzdCBjaGFyYWN0ZXJpc3Rp Y3MsIHRoZSB2ZXJpZmllciBuZWVkcyB0byBrbm93IHRoYXQgYSBzZXQgb2YgY2hhcmFjdGVyaXN0 aWNzIGFwcGxpZXMgdG8gdGhlIGluc3RhbmNlIG9mIHRoZSBlbmRwb2ludCBiZWluZyBldmFsdWF0 ZWQgKGFrYSB0aGUgYXR0ZXN0ZXIpLiAoT3RoZXJ3aXNlIGEgTUlUTSBjb3VsZCBzdXBwbHkgY2hh cmFjdGVyaXN0aWNzIHRoYXQgbWF5IGJlIHZhbGlkLCBidXQgZG9u4oCZdCBhcHBseSB0byB0aGUg c3BlY2lmaWMgaW5zdGFuY2UpLiBDb25zZXF1ZW50bHksIGl0IG1ha2VzIHNlbnNlIHRvIGNvbnNp ZGVyIHRoYXQgKmF0dGVzdGF0aW9uKiBrZXlzIGFyZSBuZWVkZWQgdG8gYXV0aGVudGljYXRlIHRo ZSBlbmRwb2ludCBiZWluZyBldmFsdWF0ZWQuIFRoaXMgZG9lc24ndCBpbXBseSBhbiBpZGVudGl0 eSBrZXkgY291bGRuJ3QgZG91YmxlIGFzIGFuIGF0dGVzdGF0aW9uIGtleS4gQnV0IGlmIGl0IGRv ZXMsIHdlIGNhcmUgYWJvdXQgaXRzIHJlbGV2YW5jZSB0byB0aGUgYXR0ZXN0ZXIgZW5kcG9pbnQu DQoNCi1OZWQNCg0K77u/T24gMTAvMTUvMTgsIDY6NDkgUE0sICJIYW5uZXMgVHNjaG9mZW5pZyIg PEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+IHdyb3RlOg0KDQogICAgSGVyZSBhcmUgbXkgNSBj ZW50cyBvbiB0aGUgdGVybSAnaWRlbnRpdHknLg0KICAgIA0KICAgIEkgaGF2ZSBiZWVuIHdvcmtp bmcgb24gaWRlbnRpdHkgbWFuYWdlbWVudCBmb3IgbWFueSB5ZWFycyAocGFydGlhbGx5IGJlY2F1 c2Ugb2YgbXkgT0F1dGggY28tY2hhaXIgcm9sZSkgYW5kIEkgaGF2ZSBub3RpY2VkIHRoYXQgdGhl IHVzZSBvZiB0aGUgdGVybSAiaWRlbnRpdHkiIHRlbmRzIHRvIGNvbmZ1c2UgbW9yZSB0aGFuIGl0 IGhlbHBzIChldmVuIG1vcmUgc28gd2hlbiB0aGUgdGVybSBpcyBhcHBsaWVkIHRvIGRldmljZXMg YW5kIHNvZnR3YXJlIHJhdGhlciB0aGFuIGh1bWFucykuDQogICAgDQogICAgSSBiZWxpZXZlIHdl IGNvdWxkIGdldCBhd2F5IHdpdGggZGVzY3JpYmluZyB3aGF0IHdlIHdhbnQgd2l0aG91dCBldmVy IHVzaW5nIHRoZSB0ZXJtLg0KICAgIA0KICAgIEluIHRoaXMgY29udGV4dCBJIHdvdWxkIGFyZ3Vl IHRoYXQgd2UgYXJlIGFib3V0IGlkZW50aWZ5aW5nIGRpZmZlcmVudCBjb21wb25lbnRzLCBzdWNo IGFzIGhhcmR3YXJlIGFuZCBzb2Z0d2FyZS4NCiAgICANCiAgICBDaWFvDQogICAgSGFubmVzDQog ICAgDQogICAgLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCiAgICBGcm9tOiBFQVQgPGVhdC1i b3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgU21pdGgsIE5lZA0KICAgIFNlbnQ6IE1vbmRh eSwgT2N0b2JlciAxNSwgMjAxOCA5OjAwIEFNDQogICAgVG86IEhlbmsgQmlya2hvbHogPGhlbmsu Ymlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+OyByYXRzQGlldGYub3JnOyBKZXJlbXkgTydEb25v Z2h1ZSA8am9kb25vZ2hAcXRpLnF1YWxjb21tLmNvbT47IERlbmlzIDxkZW5pcy5pZXRmQGZyZWUu ZnI+DQogICAgQ2M6IGVhdEBpZXRmLm9yZw0KICAgIFN1YmplY3Q6IFJlOiBbRUFUXSBbRVhURVJO QUxdIFJlOiBbUmF0c10gQXR0ZXN0YXRpb24gQm9GIGNoYXJ0ZXIgdXBkYXRlcz8NCiAgICANCiAg ICBJIGFncmVlIHdpdGggSGVuaydzIG9ic2VydmF0aW9uIHRoYXQgdGhlcmUgaXMgb3Bwb3J0dW5p dHkgdG8gZmluZCBjb21tb24gZ3JvdW5kIG9uIGlkZW50aXR5IGFzIGlkZW50aXR5IGNhbiBiZSBh IGNvbGxlY3Rpb24gb2YgYXR0cmlidXRlcywgdGhhdCBpZiBzaWduZWQsIGJlY29tZXMgYSBzZXQg b2YgdmVyaWZpYWJsZSBjbGFpbXMgKGFib3V0IGlkZW50aXR5IGF0dHJpYnV0ZXMpLiBBdHRlc3Rh dGlvbiBoYXMgYSBzaW1pbGFyIHN0cnVjdHVyZSBpbiB0aGF0IGl0IGNvbnNpc3RzIG9mIGEgc2V0 IG9mIGF0dHJpYnV0ZXMsIHRoYXQgaWYgc2lnbmVkIGJlY29tZXMgYSBzZXQgb2YgdmVyaWZpYWJs ZSBjbGFpbXMuIFRoZSBtYWluIGRpZmZlcmVuY2UgYmV0d2VlbiBpZGVudGl0eSBhbmQgYXR0ZXN0 YXRpb24gYXR0cmlidXRlcyBpcyB3aGV0aGVyIHRoZSBhdHRyaWJ1dGUgc2VtYW50aWNhbGx5IHJl bGF0ZSB0byB0cnVzdCAodnMuIGlkZW50aXR5KS4gRm9yIGV4YW1wbGUsIGNsYWltcyBvZiBzZWN1 cml0eSBjZXJ0aWZpY2F0aW9uIGNvbXBsaWFuY2UgcmVzb25hdGVzIGFzIGF0dGVzdGF0aW9uLg0K ICAgIA0KICAgIEl0IG1heSBiZSBwb3NzaWJsZSB0byBjb21iaW5lIGEgc2V0IG9mIGF0dGVzdGF0 aW9uIGF0dHJpYnV0ZXMgaW4gc3VjaCBhIHdheSB0aGF0IHRoZSBjb21iaW5hdGlvbiB1bmlxdWVs eSBpZGVudGlmaWVzIGFuIGVudGl0eS4gQnV0IHRoYXQgZG9lc24ndCBtYWtlIGl0IGFuIGlkZW50 aXR5IHN5c3RlbSBwZXIgc2UgYW5kIHNob3VsZG4ndCBjYXVzZSBhIGNvbmZsaWN0IGluIGNoYXJ0 ZXIgZ29hbHMgd2l0aCByZXNwZWN0IHRvIG90aGVyIGlkZW50aXR5IGZvY3VzZWQgZWZmb3J0cyBp biBJRVRGLg0KICAgIA0KICAgIEFsc28sIGluY2x1c2lvbiBvZiBhdHRyaWJ1dGVzIHRoYXQgZG9u J3QgaGF2ZSBzZW1hbnRpY3MgdGhhdCByZWFzb25hYmx5IHJlbGF0ZSB0byB0cnVzdCBzaG91bGQg bm90IGJlIG9mIGludGVyZXN0IHRvIGEgd29ya2luZyBncm91cCBmb2N1c2VkIG9uIGF0dGVzdGF0 aW9uLg0KICAgIA0KICAgIC1OZWQNCiAgICANCiAgICBPbiAxMC8xNS8xOCwgMzo1MyBQTSwgIkVB VCBvbiBiZWhhbGYgb2YgSGVuayBCaXJraG9seiIgPGVhdC1ib3VuY2VzQGlldGYub3JnIG9uIGJl aGFsZiBvZiBoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPiB3cm90ZToNCiAgICANCiAg ICAgICAgSGkgSmVyZW15ICYgRGVuaXMsDQogICAgDQogICAgICAgIGFsbCB0aGVzZSBwb2ludHMg b2YgdmlldyBoYXZlIG1lcml0LCBJIHRoaW5rLg0KICAgIA0KICAgICAgICBQbGVhc2UgaGF2ZSBh IGxvb2sgYXQgdGhlc2UgcXVvdGVzOg0KICAgIA0KICAgICAgICA+IGtub3dpbmcgdGhlIHByb3Zl bmFuY2Ugb2YgdGhlIGRldmljZQ0KICAgIA0KICAgICAgICA+IGhhdmluZyB0aGUgZW50aXR5IGNy ZWF0b3IvbWFudWZhY3R1cmVyIHByb3ZpZGUgYSBzZXQgb2YgY2xhaW1zIHdoaWNoIGNhbiBiZSB2 ZXJpZmllZA0KICAgIA0KICAgICAgICA+IHRvIGtub3cgdGhlIGNoYXJhY3RlcmlzdGljcyBvZiBh IGRldmljZSBieSBpc3N1aW5nIHRvIHRoZSBkZXZpY2UgYSBwdWJsaWMga2V5IGNlcnRpZmljYXRl IHdoaWNoIHdpbGwgb25seSBiZSBpc3N1ZWQgdG8gdGhlIGRldmljZSBpZiBpdCBmdWxmaWxscyBh biBleHBlY3RlZCBzZXQgb2YgZnVuY3Rpb25hbGl0aWVzLg0KICAgIA0KICAgICAgICBUbyBtZSwg dGhlc2UgZGVzY3JpcHRpb25zIHNlZW0gdG8gaGF2ZSBkaWZmZXJlbnQgaW50ZW50cywgc2NvcGUg b3INCiAgICAgICAgYXVkaWVuY2UgYW5kIHJlcXVpcmUgbW9zdCBjZXJ0YWlubHkgZGlmZmVyZW50 IHdvcmstZmxvd3MsIGJ1dA0KICAgICAgICBzZW1hbnRpY2FsbHkgYW5kIGluIGNvbnNlcXVlbmNl IHJlcHJlc2VudGF0aW9uLXdpc2UgdGhleSBhbHNvIHNlZW0gcXVpdGUNCiAgICAgICAgcmVsYXRl ZC4NCiAgICANCiAgICAgICAgSWYgeW91IHRoaW5rIG9mIGFuIGlkZW50aXR5IGRvY3VtZW50IGFz IGEgc2V0IG9mIGNsYWltcyAocG90ZW50aWFsbHkNCiAgICAgICAgaW5jbHVkaW5nIGEgcHVibGlj IGtleSksIHRoYXQgaXMgc2lnbmVkIGFuZCB0aGF0IGNhbiBtYXRjaCBvbmUgb3IgbW9yZQ0KICAg ICAgICB0aGluZ3MsIG1heWJlIGFsbCB0aHJlZSB0eXBlcyBoaWdobGlnaHRlZCBhYm92ZSBhcmUg YWN0dWFsbHkgY292ZXJlZCBieQ0KICAgICAgICB0aGUgc2FtZSBpZGVudGl0eSBkb2N1bWVudCBj b25jZXB0Pw0KICAgIA0KICAgICAgICBXaXRoIHJlc3BlY3QgdG8gaWRlbnRpdHkgZG9jdW1lbnRz LCBJIHRoaW5rIGl0IGlzIHNhZmUgc28gc2F5IHRoYXQgd2UNCiAgICAgICAgY2FuIGZpbmQgY29t bW9uIGdyb3VuZCBoZXJlIHJhdGhlciBlYXNpbHkuIFRoYXQgc2FpZCwgdGhlIHdheSBob3cgdGhl c2UNCiAgICAgICAgaWRlbnRpdHkgZG9jdW1lbnRzIGNvbWUgaW50byBleGlzdGVuY2UsIHdoZW4g YW5kIGhvdyB0aGV5IGFyZSBkZXBsb3llZA0KICAgICAgICBvbiB0aGUgdGhpbmcgb3IgYXNzb2Np YXRlZCB3aXRoIG11bHRpcGxlIHRoaW5ncyBpcyBhbm90aGVyIHF1ZXN0aW9uLiBXZQ0KICAgICAg ICBtb3N0IGNlcnRhaW5seSBkbyBub3Qgd2FudCB0byBlbmQgdXAgd2l0aCBhICJzaWduaW5nIGZv b2wiIHRoYXQgZG9lcyBub3QNCiAgICAgICAgYWRkIHZhbHVlIHRvIHRoZSBsZXZlbCBvZiBjb25m aWRlbmNlIChJIGFtIHF1b3RpbmcgTmVkIFNtaXRoIGhlcmUpLg0KICAgIA0KICAgICAgICBUaGlz IGhhcyB0byBiZSBmbGVzaGVkIG91dCBleHBsaWNpdGx5IGZvciBlYWNoIHNjZW5hcmlvIGFuZCB0 aGUgcGFydHMNCiAgICAgICAgdGhhdCBhcmUgcmV1c2VkIGluIGV2ZXJ5IHNjZW5hcmlvIHNob3Vs ZCBnZXQgc3BlY2lhbCBhdHRlbnRpb24gaW4gdGhlDQogICAgICAgIHVwY29taW5nIFJBVFMgYXJj aGl0ZWN0dXJlIGRyYWZ0Lg0KICAgIA0KICAgICAgICBJZGVudGlmeWluZyBjbGFpbXMgYWdncmVn YXRlZCBpbiBhbiBpZGVudGl0eSBkb2N1bWVudCBtb3N0IGNlcnRhaW5seSBjYW4NCiAgICAgICAg aW5jbHVkZSBkZXZpY2UgY2hhcmFjdGVyaXN0aWNzLCBwdWJsaWMga2V5KHMpLCBvciBjbGFpbXMg YWJvdXQgdGhlDQogICAgICAgIGludGVuZGVkIGZ1bmN0aW9ucyBhbmQgY2FwYWJpbGl0aWVzIG9m IHRoZSB0aGluZy4gQ2xhaW1zIGNhbiBldmVuDQogICAgICAgIG9yaWdpbmF0ZSBmcm9tIENsYWlt YW50cyB0aGF0IGFyZSBub3QgdGhlIHRoaW5nIGl0c2VsZiwgYnV0IGV4dGVybmFsDQogICAgICAg IGVudGl0aWVzIHByb3ZpZGluZyBhbiBhc3NlcnRpb24gKGUuZy4gdGhlc2UgdGhpbmdzIGFyZSBD Qy1jZXJ0aWZpZWQpLg0KICAgIA0KICAgICAgICBBbGwgZGlmZmVyZW50IGNvbXBvc2l0ZXMgb2Yg aWRlbnRpZnlpbmcgY2xhaW1zIGhhdmUgYSBzcGVjaWZpYyBzaGFyZWQNCiAgICAgICAgaW50ZW5k IGluIHRoaXMgY29udGV4dCB0aG91Z2gsIEkgdGhpbms6IGV4cHJlc3NpbmcgQXR0ZXN0YXRpb24N CiAgICAgICAgUHJvdmVuYW5jZSAoYWdhaW4gLSBvbmUgZm9yIG9uZSBvciBtb3JlIHRoaW5ncyBv ZiB0aGUgc2FtZSBraW5kKS4gQW5kDQogICAgICAgIGFsbCBvZiB0aGVtIG9yaWdpbmF0ZSBmcm9t IENsYWltYW50cyBhbmQgdGhlcmVmb3JlIHVzZSBhIHJvb3Qgb2YgdHJ1c3QNCiAgICAgICAgb2Yg bWVhc3VyZW1lbnQsIEkgdGhpbmsuDQogICAgDQogICAgICAgIFRoYXQgc2FpZCwgZXN0YWJsaXNo aW5nIHRydXN0d29ydGh5IGtub3dsZWRnZSBhYm91dCBhdHRlc3RhdGlvbg0KICAgICAgICBwcm92 ZW5hbmNlIGlzIG9ubHkgdGhlIGZpcnN0IHN0ZXAgYW5kIHByb3ZpZGVzIHRoZSBmb3VuZGF0aW9u IGZvciBtb3JlDQogICAgICAgIGNvbXBsZXggYXR0ZXN0YXRpb24gcHJvY2VkdXJlcy4gSW4gYW55 IGNhc2UsIHRoaXMgc2VlbSB0byBiZSByZXF1aXJlZCBieQ0KICAgICAgICBldmVyeSBzY2VuYXJp byB0aGF0IHdhcyBoaWdobGlnaHRlZCBzbyBmYXIgYW5kIHRoZXJlZm9yZSB3aWxsIG1vc3QNCiAg ICAgICAgY2VydGFpbmx5IGJlIGNvdmVyZWQgaW4gYSBkZWxpdmVyYWJsZS4NCiAgICANCiAgICAg ICAgSUhUSCwNCiAgICANCiAgICAgICAgSGVuaw0KICAgIA0KICAgIA0KICAgICAgICBPbiAxMC8x NS8yMDE4IDEyOjIyIFBNLCBKZXJlbXkgTydEb25vZ2h1ZSB3cm90ZToNCiAgICAgICAgPiBPbiAx MiBPY3QgMjAxOCwgYXQgMTQ6MzMsIERlbmlzIDxkZW5pcy5pZXRmQGZyZWUuZnINCiAgICAgICAg PiA8bWFpbHRvOmRlbmlzLmlldGZAZnJlZS5mcj4+IHdyb3RlOg0KICAgICAgICA+PiBUaGUgIlBy b2JsZW0gU3RhdGVtZW50IiBjb250aW51ZXMgYXMgZm9sbG93czoNCiAgICAgICAgPj4NCiAgICAg ICAgPj4gKDIpIFRvZGF5LCB0aGVyZSBpcyBubyBjb21tb24sIHN0YW5kYXJkIHdheSBmb3IgUmVs eWluZyBQYXJ0aWVzIHRvDQogICAgICAgID4+IGtub3cgdGhlIHByb3ZlbmFuY2UgYW5kIGNoYXJh Y3RlcmlzdGljcyBvZiBhIGRldmljZSAoZS5nLiwgYW4gZW5kLXVzZXINCiAgICAgICAgPj4gZGV2 aWNlLA0KICAgICAgICA+PiBwbGF0Zm9ybSBvciBlbmRwb2ludCwgc2VydmVycywgSW9UIGRldmlj ZXMsIGRldmljZSBzdWJzeXN0ZW1zIGFuZA0KICAgICAgICA+PiBzdWItbW9kdWxlcykgdGhhdCBt YXkgYmUgcmVxdWVzdGluZyBzZXJ2aWNlcy4NCiAgICAgICAgPj4NCiAgICAgICAgPj4gS25vd2lu ZyB0aGUgcHJvdmVuYW5jZSBvZiB0aGUgZGV2aWNlIGlzIG5vdCBhbHdheXMgbmVjZXNzYXJ5LiBX aGF0IGlzDQogICAgICAgID4+IGltcG9ydGFudCBpcyB0byBrbm93IHRoYXQgYSBzcGVjaWZpYyBz ZXQgb2YgZnVuY3Rpb25zIGlzIChzZWN1cmVseSkNCiAgICAgICAgPj4gc3VwcG9ydGVkIGJ5IHRo ZSBkZXZpY2UuDQogICAgICAgID4+IFRoZXJlIGFscmVhZHkgZXhpc3RzIGEgY29tbW9uIHdheSB0 byBrbm93IHRoZSBjaGFyYWN0ZXJpc3RpY3Mgb2YgYQ0KICAgICAgICA+PiBkZXZpY2UgYnkgaXNz dWluZyB0byB0aGUgZGV2aWNlIGEgcHVibGljIGtleSBjZXJ0aWZpY2F0ZSB3aGljaCB3aWxsDQog ICAgICAgID4+IG9ubHkgYmUgaXNzdWVkIHRvIHRoZSBkZXZpY2UNCiAgICAgICAgPj4gaWYgaXQg ZnVsZmlsbHMgYW4gZXhwZWN0ZWQgc2V0IG9mIGZ1bmN0aW9uYWxpdGllcy4gSW4gc3VjaCBhIGNh c2UgYQ0KICAgICAgICA+PiBzeW50YXggZm9yIGEgdHJ1c3RlZCBjbGFpbSBzZXRzKippcyBub3Qg bmVlZGVkLg0KICAgICAgICA+Pg0KICAgICAgICA+IFRoaXMgaXMgaW5kZWVkIGEgcG9zc2libGUg d2F5IHRvIGFkZHJlc3MgdGhlIHByb2JsZW0sIGJ1dCBzdWZmZXJzIGZyb20NCiAgICAgICAgPiBj aGFsbGVuZ2VzIHdoaWNoIGNvbWUgZG93biB0bzoNCiAgICAgICAgPg0KICAgICAgICA+IC0gV2hv IGlzc3VlcyBzdWNoIGNlcnRpZmljYXRlcy4gQW4gb3B0aW9uIGlzIHRoYXQgdGhlcmUgaXMgc29t ZSBmb3JtIG9mDQogICAgICAgID4gc2VjdXJpdHkgY2VydGlmaWNhdGlvbiBiZWhpbmQgdGhpcyBp c3N1YW5jZSBvdGhlcndpc2UgaXQgaXMgb2YgdmVyeQ0KICAgICAgICA+IGxpbWl0ZWQgdmFsdWUu DQogICAgICAgID4gLSBJbiBvcmRlciB0byBjYXB0dXJlIHRoZSB3aWRlIHZhcmlldHkgb2YgZGlm ZmVyZW50IGRldmljZXMgKEkgcHJlZmVyDQogICAgICAgID4gImVudGl0eSIgaGVyZSBhcyBpdCBp cyBtb3JlIGdlbmVyYWwgdGhhbiAiZGV2aWNlIiksIG1hbnkgZGlmZmVyZW50IGZvcm1zDQogICAg ICAgID4gb2Ygc3VjaCBjZXJ0aWZpY2F0ZXMgd291bGQgYmUgcmVxdWlyZWQuIFRoaXMgZW5kcyB1 cCBiZWluZyBtdWNoIHRoZSBzYW1lDQogICAgICAgID4gdGhpbmcgYXMgYSBzZXQgb2YgY2xhaW1z Lg0KICAgICAgICA+DQogICAgICAgID4gR2l2ZW4gdGhlIG11bHRpcGxpY2l0eSBvZiBlbnRpdGll cyBmb3Igd2hpY2ggYXR0ZXN0YXRpb24gbWlnaHQgYmUNCiAgICAgICAgPiB1c2VmdWwsIGl0IHNl ZW1zIHRvIG1lIHRoYXQgaGF2aW5nIHRoZSBlbnRpdHkgY3JlYXRvci9tYW51ZmFjdHVyZXINCiAg ICAgICAgPiBwcm92aWRlIGEgc2V0IG9mIGNsYWltcyB3aGljaCBjYW4gYmUgdmVyaWZpZWQgaXMg bW9yZSBmbGV4aWJsZSB0aGFuDQogICAgICAgID4gcmVxdWlyaW5nIGEgY2VydGlmaWNhdGUuIEl0 IHNlZW1zIGxpa2VseSB0byBtZSB0aGF0IHdoZXJlIGEgZm9ybWFsDQogICAgICAgID4gc2VjdXJp dHkgY2VydGlmaWNhdGlvbiBpcyBuZWVkZWQgdGhlcmUgd2lsbCBiZSBhIGNlcnRpZmljYXRlIGlz c3VlZCBieQ0KICAgICAgICA+IHRoZSBDZXJ0aWZ5aW5nIEJvZHkgYXMgb25lIG9mIHRoZSBjbGFp bXMgYWJvdXQgYW4gZW50aXR5LCBidXQgSSBjYW4NCiAgICAgICAgPiB0aGluayBvZiBtYW55IGNh c2VzIChzdXBwbHkgY2hhaW4gbWFuYWdlbWVudCwgdG8gdGFrZSBqdXN0IG9uZSBleGFtcGxlKQ0K ICAgICAgICA+IHdoZXJlIHByb3ZlbmFuY2UgaXMgYnkgZmFyIHRoZSBtb3N0IHVzZWZ1bCBpbmZv cm1hdGlvbi4NCiAgICAgICAgPg0KICAgICAgICA+IEknbSBub3QgaW4gZmF2b3VyIG9mIGNoYW5n ZXMgdG8gdGhlIGNoYXJ0ZXIgaW4gdGhpcyBkaXJlY3Rpb24uDQogICAgICAgID4+DQogICAgICAg ID4+IFRoZSBzaW1wbGVzdCBjYXNlcyBzaG91bGQgYWxzbyBiZSBwYXJ0IG9mIHRoZSBmcmFtZXdv cmsuDQogICAgICAgID4+DQogICAgICAgID4+IE5vdGU6IEkgcGVyc29uYWxseSBhcHByZWNpYXRl IHRoYXQgcHJpdmFjeSBpcyBhbiBhc3BlY3QgdGhhdA0KICAgICAgICA+PiB3aWxsL3Nob3VsZCBi ZSB0YWtlbiBpbnRvIGNvbnNpZGVyYXRpb24uDQogICAgICAgID4+DQogICAgICAgID4+IERlbmlz DQogICAgICAgID4+DQogICAgICAgID4+PiBBcyB3aXRoIHRoZSBlYXJsaWVyIGRyYWZ0LCB0aGVy ZSBhcmUgbWFueSByZWZlcmVuY2VzIHRvIHZlcmlmeSBhbmQNCiAgICAgICAgPj4+IHZlcmlmaWVy IGluIHRoZSBsZWFkIHVwIHRvIHRoZSBkZWxpdmVyYWJsZSBidXQgbm8gZGVsaXZlcmFibGVzIGRl c2NyaWJpbmcNCiAgICAgICAgPj4+IHZlcmlmaWNhdGlvbiBydWxlcy4gSSdkIGxpa2UgdG8gc2Vl IHJ1bGVzIGluIG9uZSBvZiB0aGVzZSBkb2N1bWVudHMgYW5kDQogICAgICAgID4+PiB0aGluayBp dCB3b3J0aCBjaXRpbmcgaW4gdGhlIGRlbGl2ZXJhYmxlcy4gQXJlIGJpbmRpbmdzIHRvIGNlcnRp ZmljYXRlDQogICAgICAgID4+PiBtYW5hZ2VtZW50IHByb3RvY29scyBvdXQgb2Ygc2NvcGU/DQog ICAgICAgID4+Pg0KICAgICAgICA+Pj4gT24gMTAvMTEvMTgsIDk6NDkgQU0sICJSQVRTIG9uIGJl aGFsZiBvZiBIZW5rIEJpcmtob2x6Ig0KICAgICAgICA+Pj4gPHJhdHMtYm91bmNlc0BpZXRmLm9y ZyBvbiBiZWhhbGYgb2YgaGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4gIHdyb3RlOg0K ICAgICAgICA+Pj4NCiAgICAgICAgPj4+PiBIaSBhbGwsDQogICAgICAgID4+Pj4NCiAgICAgICAg Pj4+PiBzb3JyeSBmb3IgdGhlIGRlbGF5LiBQbGVhc2UgZmluZCBhbiB1cGRhdGVkIGNoYXJ0ZXIg cHJvcG9zYWwgaGVyZToNCiAgICAgICAgPj4+Pg0KICAgICAgICA+Pj4+PiBodHRwczovL2dpdGh1 Yi5jb20vaWV0Zi1yYXRzL2NoYXJ0ZXIvYmxvYi9SQzIvaWV0Zi1yYXRzLWNoYXJ0ZXIubWQNCiAg ICAgICAgPj4+PiBUaGUgQm9GIHByb3BvbmVudHMgdHJpZWQgdG8gbWVyZ2UgYWxsIGNvbW1lbnRz IGFuZCBwcm9wb3NhbHMgb24NCiAgICAgICAgPj4+PiBrZXlzdG9yZXMsIGV4aXN0aW5nIHNvbHV0 aW9ucywgcHJvdmVuYW5jZSAmIGRldmljZSBjaGFyYWN0ZXJpc3RpY3MsIGV0Yw0KICAgICAgICA+ Pj4+IHRoYXQgd2VyZSByYWlzZWQgb24gdGhlIGxpc3QgLSBhbmQgYWxpZ24gdGhlbSBpbiBob21v Z2VuZW91cyBmYXNoaW9uLg0KICAgICAgICA+Pj4+DQogICAgICAgID4+Pj4gVGhpcyBkcmFmdCBp cyBpbnRlbmRlZCB0byBmb2N1cyB0aGUgZGlzY3Vzc2lvbiBhbmQgaW1wcm92ZSB0aGUgd29yZGlu Zy4NCiAgICAgICAgPj4+Pg0KICAgICAgICA+Pj4+IFZpZWxlIEdyw7zDn2UsDQogICAgICAgID4+ Pj4NCiAgICAgICAgPj4+PiBIZW5rDQogICAgICAgID4+Pj4NCiAgICAgICAgPj4+PiBPbiAxMC8w Ni8yMDE4IDA4OjIzIEFNLCBMYXVyZW5jZSBMdW5kYmxhZGUgd3JvdGU6DQogICAgICAgID4+Pj4+ IEhpIEhlbmssDQogICAgICAgID4+Pj4+DQogICAgICAgID4+Pj4+IEJhbmdrb2sgSUVURiBpcyBn ZXR0aW5nIGNsb3NlLCB3aWxsIHlvdSBiZSBhYmxlIHRvIHVwZGF0ZSB0aGUgY2hhcnRlcg0KICAg ICAgICA+Pj4+PiBmb3IgdGhlIGF0dGVzdGF0aW9uIEJvRiB0byBwcm9wZXJseSBpbmNsdWRlIEVB VD8gIEkgc2VudCB5b3Ugc29tZSB0ZXh0DQogICAgICAgID4+Pj4+IHRoYXQganVzdCBuZWVkcyB0 byBiZSBwYXN0ZWQgYWxvbmcgd2l0aCBzb21lIGNvbW1lbnRzLiBJdCBkb2VzbuKAmXQgbG9vaw0K ICAgICAgICA+Pj4+PiBsaWtlIHRoZXJl4oCZcyBiZWVuIGFueSB1cGRhdGVzLg0KICAgICAgICA+ Pj4+Pg0KICAgICAgICA+Pj4+PiBMTA0KICAgICAgICA+Pj4+Pg0KICAgICAgICA+Pj4+IF9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgICAgID4+Pj4g UkFUUyBtYWlsaW5nIGxpc3QNCiAgICAgICAgPj4+PiBSQVRTQGlldGYub3JnDQogICAgICAgID4+ Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzDQogICAgICAgID4+ PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgICAg ICA+Pj4gRUFUIG1haWxpbmcgbGlzdA0KICAgICAgICA+Pj4gRUFUQGlldGYub3JnDQogICAgICAg ID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KICAgICAgICA+ Pg0KICAgICAgICA+Pg0KICAgICAgICA+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KICAgICAgICA+PiBFQVQgbWFpbGluZyBsaXN0DQogICAgICAgID4+ IEVBVEBpZXRmLm9yZyA8bWFpbHRvOkVBVEBpZXRmLm9yZz4NCiAgICAgICAgPj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCiAgICAgICAgPg0KICAgICAgICA+DQog ICAgICAgID4NCiAgICAgICAgPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXw0KICAgICAgICA+IEVBVCBtYWlsaW5nIGxpc3QNCiAgICAgICAgPiBFQVRAaWV0 Zi5vcmcNCiAgICAgICAgPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Vh dA0KICAgICAgICA+DQogICAgDQogICAgICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQogICAgICAgIEVBVCBtYWlsaW5nIGxpc3QNCiAgICAgICAgRUFU QGlldGYub3JnDQogICAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v ZWF0DQogICAgDQogICAgDQogICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCiAgICBFQVQgbWFpbGluZyBsaXN0DQogICAgRUFUQGlldGYub3JnDQogICAg aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCiAgICBJTVBPUlRBTlQg Tk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFy ZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90 IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlh dGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29u LCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlv biBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQogICAgDQoNCg== From nobody Tue Oct 16 07:13:28 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA285130DE9 for ; Tue, 16 Oct 2018 07:13:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lT8NeMZZ_Oqf for ; Tue, 16 Oct 2018 07:13:22 -0700 (PDT) Received: from p3plsmtpa07-05.prod.phx3.secureserver.net (p3plsmtpa07-05.prod.phx3.secureserver.net [173.201.192.234]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3436F130DC9 for ; Tue, 16 Oct 2018 07:13:22 -0700 (PDT) Received: from [172.17.68.162] ([1.22.180.94]) by :SMTPAUTH: with ESMTPSA id CQ5xgqhw2qN9uCQ5zggBZG; Tue, 16 Oct 2018 07:13:21 -0700 From: Laurence Lundblade Message-Id: <31FD0EA7-8F89-4BF9-81BB-1E6C5CE69DD0@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_E71BBBF8-9693-446C-B398-D700C159EE43" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Tue, 16 Oct 2018 19:43:12 +0530 In-Reply-To: <9c1cd678-de0f-8a72-5917-3aa23b8a01c4@sit.fraunhofer.de> Cc: Denis , Hannes Tschofenig , "Smith, Ned" , "rats@ietf.org" , Jeremy O'Donoghue , "eat@ietf.org" To: Henk Birkholz References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <9c1cd678-de0f-8a72-5917-3aa23b8a01c4@sit.fraunhofer.de> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfOSaUTZUPTmgZ2+qGB7e7gyHP2XNc6IQQxtvPM4blkqEkFKg9BdTrsR0TJGBYEJwKxvQCjTh+6TIZBZMb3+6PrW8PYiGVJ9yFfxz6sfGogfJjjIsmf6D Iad9ORbtbReCvWzAuz9nasa7yW1fuJZ5GvpzSO6ejDPljjdvIAYOrC6+D+qFSM4T9chgdnQgIgxyy9D2HNwYimexx43fPCPNoVIAksc1nMoK6xNXgvuoX04+ +jMiCr+fNMXOpRazLHH+kWpagt6FtXPER/lDla3S8UTQAB0vfJH1/rhTC+6Pp635BtVrxac6HHNeOt5zBulqGu2ntm5soYHQQybIXE+aeePUJGtaB/b+DjqV VgtRDSwm+g6Z0Pc111qK3nAMIuljHw== Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Oct 2018 14:13:26 -0000 --Apple-Mail=_E71BBBF8-9693-446C-B398-D700C159EE43 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Henk, Appreciate the work you are putting into this. It is getting closer. EAT and CWT refer to things like a GPS location, SW version or device = debug-enable state as =E2=80=9Cclaims=E2=80=9D. I=E2=80=99m not sure = what the equivalent in the current charter is. Grabbing every possible = string it could be I came up with this list: Introduction "trusted claim sets=E2=80=9D "Attestation Evidence=E2=80=9D "information=E2=80=9D "additional device characteristics=E2=80=9D Problem Statement "some data=E2=80=9D "the evidence=E2=80=9D =E2=80=9CSome data=E2=80=9D Goals "inter-operable, cross-platform Assertions=E2=80=9D =E2=80=9CAssertion" Deliverables "Information elements for use in evidence-based attestation=E2=80=9D "CWT claim definitions" Per previous charter: Attestation Evidence: Proof for one or more Attestation Claims = (characteristics, attributes, ...) that affect device trustworthiness, = such as its hardware identity, firmware, software, configuration or = composition, compliance status and runtime state. Attestation Evidence = may be consolidated through the use of cryptographic hash and key = generation algorithms. Attestation Evidence veracity may be augmented by = Claimant signatures over portions of the Attestation Evidence. Note that = Claims are non-proven assertions as opposed to Attestation Evidence. So what is the equivalent of a =E2=80=9Cclaim=E2=80=9D in this charter? LL > On Oct 16, 2018, at 6:41 PM, Henk Birkholz = wrote: >=20 > Hi Denis, >=20 > I just pulled in your first proposal as an example in paragraph five. >=20 > I am a bit concerned to drop the intent of establishing a believable = context about attestation provenance. As you referred, for example, to = FIDO - I think that is the intent there, is it not? Laurence proposed = the terms "provenance and characteristics" as high level terms and all = proponents agreed to use these. If this is a relevant disabler for a = specific usage scenario, we might have to reconsider that. >=20 > We cut out differentiating simple cases and more complex cases to = reduce the complexity of the charter text for now. If that is = counterproductive, we would like to get more input on that, please. >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > On 10/15/2018 09:30 PM, Denis wrote: >>> Here are my 5 cents on the term 'identity'. >>>=20 >>> I have been working on identity management for many years (partially = because of my OAuth co-chair role) and I have noticed that the use of = the term "identity" tends to confuse more than it helps (even more so = when the term is applied to devices and software rather than humans). >>>=20 >>> I believe we could get away with describing what we want without = ever using the term. >>>=20 >>> In this context I would argue that we are about identifying = different components, such as hardware and software. >>>=20 >>> Ciao >>> Hannes >> +1 >> The single sentence where currently the word "identity" is being used = is: >> As a result, in 2018, a Relying Party would be unable to tell if a >> device is trying to mimic the identity of another device or some = of >> its characteristics. >> This could be rephrased as: >> As a result, in 2018, there is no common way allowing Relying >> Parties to tell if some data originates from a trustworthy device >> designed to support a specific set of operations/functionalities = or >> not . >> The text currently states: >> 2) In 2018, there are no common, standard ways for Relying Parties >> to know the provenance and characteristics of a device >> (e.g., an end-user device, platform or endpoint, servers, IoT >> devices, device subsystems and sub-modules) that may be requesting >> services. >> As already said on this list, knowing the provenance of a device is = not always necessary (but may be useful in some cases). >> The key point is to know the characteristics of the device. >> This could be rephrased as: >> 2) In 2018, there are no common, standard ways for Relying Parties >> to know the characteristics of a device (e.g., an end-user device, >> platform or endpoint, >> servers, IoT devices, device subsystems and sub-modules) that may = be >> requesting services. >> Probably a typo in the following sentence: >> (1) A standardized way to establish a sufficient level of = confidence >> that some data originates from a trustworthy device (e.g., >> platforms, servers, >> user endpoints, IoT devices, device subsystems or subcomponents) >> designed to support a specific set of operations/functionalities = /a >> communication partner is a trustworthy endpoint./ >> The end of the sentence (i.e. "a communication partner is a = trustworthy endpoint.") looks odd and should probably be deleted. >> The goals are currently limited to the definition of the content of = the Assertions. A key point is the way to verify/validate an = Attestation. >> The more complex is the content of an Attestation, the more complex = it will be to validate it by a RP. >> A framework for validating the Attestations should also be part of = the charter. >> Denis >> Note:At this stage, I still see no text to address both simple cases = (e.g. FIDO attestations) and more complex cases. >>> -----Original Message----- >>> From: EAT On Behalf Of Smith, Ned >>> Sent: Monday, October 15, 2018 9:00 AM >>> To: Henk Birkholz;rats@ietf.org; = Jeremy O'Donoghue; Denis >>> Cc:eat@ietf.org >>> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter = updates? >>>=20 >>> I agree with Henk's observation that there is opportunity to find = common ground on identity as identity can be a collection of attributes, = that if signed, becomes a set of verifiable claims (about identity = attributes). Attestation has a similar structure in that it consists of = a set of attributes, that if signed becomes a set of verifiable claims. = The main difference between identity and attestation attributes is = whether the attribute semantically relate to trust (vs. identity). For = example, claims of security certification compliance resonates as = attestation. >>>=20 >>> It may be possible to combine a set of attestation attributes in = such a way that the combination uniquely identifies an entity. But that = doesn't make it an identity system per se and shouldn't cause a conflict = in charter goals with respect to other identity focused efforts in IETF. >>>=20 >>> Also, inclusion of attributes that don't have semantics that = reasonably relate to trust should not be of interest to a working group = focused on attestation. >>>=20 >>> -Ned >>>=20 >>> =EF=BB=BFOn 10/15/18, 3:53 PM, "EAT on behalf of Henk = Birkholz" wrote: >>>=20 >>> Hi Jeremy & Denis, >>>=20 >>> all these points of view have merit, I think. >>>=20 >>> Please have a look at these quotes: >>>=20 >>> > knowing the provenance of the device >>>=20 >>> > having the entity creator/manufacturer provide a set of claims = which can be verified >>>=20 >>> > to know the characteristics of a device by issuing to the = device a public key certificate which will only be issued to the device = if it fulfills an expected set of functionalities. >>>=20 >>> To me, these descriptions seem to have different intents, scope = or >>> audience and require most certainly different work-flows, but >>> semantically and in consequence representation-wise they also = seem quite >>> related. >>>=20 >>> If you think of an identity document as a set of claims = (potentially >>> including a public key), that is signed and that can match one = or more >>> things, maybe all three types highlighted above are actually = covered by >>> the same identity document concept? >>>=20 >>> With respect to identity documents, I think it is safe so say = that we >>> can find common ground here rather easily. That said, the way = how these >>> identity documents come into existence, when and how they are = deployed >>> on the thing or associated with multiple things is another = question. We >>> most certainly do not want to end up with a "signing fool" that = does not >>> add value to the level of confidence (I am quoting Ned Smith = here). >>>=20 >>> This has to be fleshed out explicitly for each scenario and the = parts >>> that are reused in every scenario should get special attention = in the >>> upcoming RATS architecture draft. >>>=20 >>> Identifying claims aggregated in an identity document most = certainly can >>> include device characteristics, public key(s), or claims about = the >>> intended functions and capabilities of the thing. Claims can = even >>> originate from Claimants that are not the thing itself, but = external >>> entities providing an assertion (e.g. these things are = CC-certified). >>>=20 >>> All different composites of identifying claims have a specific = shared >>> intend in this context though, I think: expressing Attestation >>> Provenance (again - one for one or more things of the same = kind). And >>> all of them originate from Claimants and therefore use a root of = trust >>> of measurement, I think. >>>=20 >>> That said, establishing trustworthy knowledge about attestation >>> provenance is only the first step and provides the foundation = for more >>> complex attestation procedures. In any case, this seem to be = required by >>> every scenario that was highlighted so far and therefore will = most >>> certainly be covered in a deliverable. >>>=20 >>> IHTH, >>>=20 >>> Henk >>>=20 >>>=20 >>> On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: >>> > On 12 Oct 2018, at 14:33, Denis = > wrote: >>> >> The "Problem Statement" continues as follows: >>> >> >>> >> (2) Today, there is no common, standard way for Relying = Parties to >>> >> know the provenance and characteristics of a device (e.g., an = end-user >>> >> device, >>> >> platform or endpoint, servers, IoT devices, device subsystems = and >>> >> sub-modules) that may be requesting services. >>> >> >>> >> Knowing the provenance of the device is not always necessary. = What is >>> >> important is to know that a specific set of functions is = (securely) >>> >> supported by the device. >>> >> There already exists a common way to know the characteristics = of a >>> >> device by issuing to the device a public key certificate = which will >>> >> only be issued to the device >>> >> if it fulfills an expected set of functionalities. In such a = case a >>> >> syntax for a trusted claim sets**is not needed. >>> >> >>> > This is indeed a possible way to address the problem, but = suffers from >>> > challenges which come down to: >>> > >>> > - Who issues such certificates. An option is that there is = some form of >>> > security certification behind this issuance otherwise it is of = very >>> > limited value. >>> > - In order to capture the wide variety of different devices (I = prefer >>> > "entity" here as it is more general than "device"), many = different forms >>> > of such certificates would be required. This ends up being = much the same >>> > thing as a set of claims. >>> > >>> > Given the multiplicity of entities for which attestation might = be >>> > useful, it seems to me that having the entity = creator/manufacturer >>> > provide a set of claims which can be verified is more flexible = than >>> > requiring a certificate. It seems likely to me that where a = formal >>> > security certification is needed there will be a certificate = issued by >>> > the Certifying Body as one of the claims about an entity, but = I can >>> > think of many cases (supply chain management, to take just one = example) >>> > where provenance is by far the most useful information. >>> > >>> > I'm not in favour of changes to the charter in this direction. >>> >> >>> >> The simplest cases should also be part of the framework. >>> >> >>> >> Note: I personally appreciate that privacy is an aspect that >>> >> will/should be taken into consideration. >>> >> >>> >> Denis >>> >> >>> >>> As with the earlier draft, there are many references to = verify and >>> >>> verifier in the lead up to the deliverable but no = deliverables describing >>> >>> verification rules. I'd like to see rules in one of these = documents and >>> >>> think it worth citing in the deliverables. Are bindings to = certificate >>> >>> management protocols out of scope? >>> >>> >>> >>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" >>> >>> wrote: >>> >>> >>> >>>> Hi all, >>> >>>> >>> >>>> sorry for the delay. Please find an updated charter = proposal here: >>> >>>> >>> = >>>>>https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter.md >>> >>>> The BoF proponents tried to merge all comments and = proposals on >>> >>>> keystores, existing solutions, provenance & device = characteristics, etc >>> >>>> that were raised on the list - and align them in = homogeneous fashion. >>> >>>> >>> >>>> This draft is intended to focus the discussion and improve = the wording. >>> >>>> >>> >>>> Viele Gr=C3=BC=C3=9Fe, >>> >>>> >>> >>>> Henk >>> >>>> >>> >>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >>> >>>>> Hi Henk, >>> >>>>> >>> >>>>> Bangkok IETF is getting close, will you be able to update = the charter >>> >>>>> for the attestation BoF to properly include EAT? I sent = you some text >>> >>>>> that just needs to be pasted along with some comments. It = doesn=E2=80=99t look >>> >>>>> like there=E2=80=99s been any updates. >>> >>>>> >>> >>>>> LL >>> >>>>> >>> >>>> _______________________________________________ >>> >>>> RATS mailing list >>> >>>>RATS@ietf.org >>> >>>>https://www.ietf.org/mailman/listinfo/rats >>> >>> _______________________________________________ >>> >>> EAT mailing list >>> >>>EAT@ietf.org >>> >>>https://www.ietf.org/mailman/listinfo/eat >>> >> >>> >> >>> >> _______________________________________________ >>> >> EAT mailing list >>> >>EAT@ietf.org >>> >>https://www.ietf.org/mailman/listinfo/eat >>> > >>> > >>> > >>> > _______________________________________________ >>> > EAT mailing list >>> >EAT@ietf.org >>> >https://www.ietf.org/mailman/listinfo/eat >>> > >>>=20 >>> _______________________________________________ >>> EAT mailing list >>> EAT@ietf.org >>> https://www.ietf.org/mailman/listinfo/eat >>>=20 >>>=20 >>> _______________________________________________ >>> EAT mailing list >>> EAT@ietf.org >>> https://www.ietf.org/mailman/listinfo/eat >>> IMPORTANT NOTICE: The contents of this email and any attachments are = confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. >=20 > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat --Apple-Mail=_E71BBBF8-9693-446C-B398-D700C159EE43 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Hi Henk,

Appreciate the work you are putting into this.  It is = getting closer.

EAT and CWT refer to things like a GPS location, SW version = or device debug-enable state as =E2=80=9Cclaims=E2=80=9D.  I=E2=80=99= m not sure what the equivalent in the current charter is. Grabbing every = possible string it could be I came up with this list:

Introduction
"trusted claim = sets=E2=80=9D
"Attestation Evidence=E2=80=9D
"information=E2=80=9D
"additional = device characteristics=E2=80=9D
Problem= Statement
"some data=E2=80=9D
"the evidence=E2=80=9D
=E2=80=9CSome = data=E2=80=9D
Goals
"inter-operable, cross-platform Assertions=E2=80=9D
=E2=80=9CAssertion"
Deliverables
"Information elements = for use in evidence-based attestation=E2=80=9D
"CWT = claim definitions"


Per = previous charter:

Attestation Evidence: Proof for =
one or more Attestation Claims (characteristics, attributes, ...) that =
affect device trustworthiness, such as its hardware identity, firmware, =
software, configuration or composition, compliance status and runtime =
state. Attestation Evidence may be consolidated through the use of =
cryptographic hash and key generation algorithms. Attestation Evidence =
veracity may be augmented by Claimant signatures over portions of the =
Attestation Evidence. Note that Claims are non-proven assertions as =
opposed to Attestation Evidence.

So = what is the equivalent of a =E2=80=9Cclaim=E2=80=9D in this = charter?

LL






On Oct = 16, 2018, at 6:41 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hi = Denis,

I just pulled in your first proposal = as an example in paragraph five.

I am a bit = concerned to drop the intent of establishing a believable context about = attestation provenance. As you referred, for example, to FIDO - I think = that is the intent there, is it not? Laurence proposed the terms = "provenance and characteristics" as high level terms and all proponents = agreed to use these. If this is a relevant disabler for a specific usage = scenario, we might have to reconsider that.

We cut out differentiating simple cases and more complex = cases to reduce the complexity of the charter text for now. If that is = counterproductive, we would like to get more input on that, please.

Viele Gr=C3=BC=C3=9Fe,

Henk

On 10/15/2018 09:30 PM, = Denis wrote:
Here are my 5 cents on = the term 'identity'.

I have been working on = identity management for many years (partially because of my OAuth = co-chair role) and I have noticed that the use of the term "identity" = tends to confuse more than it helps (even more so when the term is = applied to devices and software rather than humans).

I believe we could get away with describing what we want = without ever using the term.

In this = context I would argue that we are about identifying different = components, such as hardware and software.

Ciao
Hannes
+1
The single sentence where currently the word "identity" is = being used is:
   As a result, in 2018, a = Relying Party would be unable to tell if a
=    device is trying to mimic the identity of another = device or some of
   its = characteristics.
This could be rephrased as:
=    As a result, in 2018, there is no common way allowing = Relying
   Parties to tell if some data = originates from a trustworthy device
=    designed to support a specific set of = operations/functionalities or
   not .
The text currently states:
=    2) In 2018, there are no common, standard ways for = Relying Parties
   to know the provenance = and characteristics of a device
   (e.g., = an end-user device, platform or endpoint, servers, IoT
=    devices, device subsystems and sub-modules) that may = be requesting
   services.
As = already said on this list, knowing the provenance of a device is not = always necessary (but may be useful in some cases).
The = key point is to know the characteristics of the device.
This= could be rephrased as:
   2) In 2018, = there are no common, standard ways for Relying Parties
=    to know the characteristics of a device (e.g., an = end-user device,
   platform or = endpoint,
   servers, IoT devices, device = subsystems and sub-modules) that may be
=    requesting services.
Probably a typo in = the following sentence:
   (1) A = standardized way to establish a sufficient level of confidence
   that some data originates from a = trustworthy device (e.g.,
   platforms, = servers,
   user endpoints, IoT devices, = device subsystems or subcomponents)
=    designed to support a specific set of = operations/functionalities /a
=    communication partner is a trustworthy endpoint./
The end of the sentence (i.e. "a communication partner is a = trustworthy endpoint.") looks odd and should probably be deleted.
The goals are currently limited to the definition of the = content of the Assertions. A key point is the way to verify/validate an = Attestation.
The more complex is the content of an = Attestation, the more complex it will be to validate it by a RP.
A framework for validating the Attestations should also be = part of the charter.
Denis
Note:At this = stage, I still see no text to address both simple cases (e.g. FIDO = attestations) and more complex cases.
-----Original Message-----
From: = EAT<eat-bounces@ietf.org>  On Behalf Of Smith, Ned
Sent: Monday, October 15, 2018 9:00 AM
To: Henk = Birkholz<henk.birkholz@sit.fraunhofer.de>;rats@ietf.org; Jeremy = O'Donoghue<jodonogh@qti.qualcomm.com>; Denis<denis.ietf@free.fr>
Cc:eat@ietf.org
Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF = charter updates?

I agree with Henk's = observation that there is opportunity to find common ground on identity = as identity can be a collection of attributes, that if signed, becomes a = set of verifiable claims (about identity attributes). Attestation has a = similar structure in that it consists of a set of attributes, that if = signed becomes a set of verifiable claims. The main difference between = identity and attestation attributes is whether the attribute = semantically relate to trust (vs. identity). For example, claims of = security certification compliance resonates as attestation.

It may be possible to combine a set of = attestation attributes in such a way that the combination uniquely = identifies an entity. But that doesn't make it an identity system per se = and shouldn't cause a conflict in charter goals with respect to other = identity focused efforts in IETF.

Also, = inclusion of attributes that don't have semantics that reasonably relate = to trust should not be of interest to a working group focused on = attestation.

-Ned

=EF=BB=BFOn 10/15/18, 3:53 PM, "EAT on behalf of Henk = Birkholz"<eat-bounces@ietf.org on behalf of henk.birkholz@sit.fraunhofer.de>  wrote:

    Hi Jeremy & = Denis,

    all these = points of view have merit, I think.

=     Please have a look at these quotes:

    > knowing the = provenance of the device

=     > having the entity creator/manufacturer = provide a set of claims which can be verified

    > to know the characteristics of = a device by issuing to the device a public key certificate which will = only be issued to the device if it fulfills an expected set of = functionalities.

=     To me, these descriptions seem to have different = intents, scope or
    audience and = require most certainly different work-flows, but
=     semantically and in consequence = representation-wise they also seem quite
=     related.

=     If you think of an identity document as a set of = claims (potentially
    including a = public key), that is signed and that can match one or more
=     things, maybe all three types highlighted above = are actually covered by
    the same = identity document concept?

=     With respect to identity documents, I think it = is safe so say that we
    can find = common ground here rather easily. That said, the way how these
    identity documents come into = existence, when and how they are deployed
=     on the thing or associated with multiple things = is another question. We
    most = certainly do not want to end up with a "signing fool" that does not
    add value to the level of confidence = (I am quoting Ned Smith here).

=     This has to be fleshed out explicitly for each = scenario and the parts
    that are = reused in every scenario should get special attention in the
    upcoming RATS architecture draft.

    Identifying claims = aggregated in an identity document most certainly can
=     include device characteristics, public key(s), = or claims about the
    intended = functions and capabilities of the thing. Claims can even
=     originate from Claimants that are not the thing = itself, but external
    entities = providing an assertion (e.g. these things are CC-certified).

    All different = composites of identifying claims have a specific shared
=     intend in this context though, I think: = expressing Attestation
    Provenance = (again - one for one or more things of the same kind). And
=     all of them originate from Claimants and = therefore use a root of trust
    of = measurement, I think.

=     That said, establishing trustworthy knowledge = about attestation
    provenance is = only the first step and provides the foundation for more
=     complex attestation procedures. In any case, = this seem to be required by
    every = scenario that was highlighted so far and therefore will most
    certainly be covered in a = deliverable.

=     IHTH,

=     Henk


=     On 10/15/2018 12:22 PM, Jeremy O'Donoghue = wrote:
    > On 12 Oct 2018, at = 14:33, Denis<denis.ietf@free.fr >  <mailto:denis.ietf@free.fr>> wrote:
=     >> The "Problem Statement" continues as = follows:
    >>
=     >> (2) Today, there is no common, standard = way for Relying Parties to
=     >> know the provenance and characteristics = of a device (e.g., an end-user
=     >> device,
=     >> platform or endpoint, servers, IoT = devices, device subsystems and
=     >> sub-modules) that may be requesting = services.
    >>
=     >> Knowing the provenance of the device is = not always necessary. What is
=     >> important is to know that a specific = set of functions is (securely)
=     >> supported by the device.
=     >> There already exists a common way to = know the characteristics of a
=     >> device by issuing to the device a = public key certificate which will
=     >> only be issued to the device
    >> if it fulfills an expected = set of functionalities. In such a case a
=     >> syntax for a trusted claim sets**is not = needed.
    >>
=     > This is indeed a possible way to address = the problem, but suffers from
=     > challenges which come down to:
=     >
=     > - Who issues such certificates. An option = is that there is some form of
=     > security certification behind this issuance = otherwise it is of very
    > = limited value.
    > - In order to = capture the wide variety of different devices (I prefer
=     > "entity" here as it is more general than = "device"), many different forms
=     > of such certificates would be required. = This ends up being much the same
=     > thing as a set of claims.
=     >
    > = Given the multiplicity of entities for which attestation might be
    > useful, it seems to me that = having the entity creator/manufacturer
=     > provide a set of claims which can be = verified is more flexible than
=     > requiring a certificate. It seems likely to = me that where a formal
    > = security certification is needed there will be a certificate issued = by
    > the Certifying Body as = one of the claims about an entity, but I can
=     > think of many cases (supply chain = management, to take just one example)
=     > where provenance is by far the most useful = information.
    >
=     > I'm not in favour of changes to the charter = in this direction.
    >>
    >> The simplest cases should = also be part of the framework.
=     >>
=     >> Note: I personally appreciate that = privacy is an aspect that
=     >> will/should be taken into = consideration.
    >>
    >> Denis
=     >>
=     >>> As with the earlier draft, there = are many references to verify and
=     >>> verifier in the lead up to the = deliverable but no deliverables describing
=     >>> verification rules. I'd like to see = rules in one of these documents and
=     >>> think it worth citing in the = deliverables. Are bindings to certificate
=     >>> management protocols out of = scope?
    >>>
=     >>> On 10/11/18, 9:49 AM, "RATS on = behalf of Henk Birkholz"
=     >>><rats-bounces@ietf.org= on behalf of henk.birkholz@sit.fraunhofer.de>   wrote:
    >>>
=     >>>> Hi all,
=     >>>>
=     >>>> sorry for the delay. Please = find an updated charter proposal here:
=     >>>>
=     >>>>>https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter= .md
    >>>> The BoF = proponents tried to merge all comments and proposals on
=     >>>> keystores, existing solutions, = provenance & device characteristics, etc
=     >>>> that were raised on the list - = and align them in homogeneous fashion.
=     >>>>
=     >>>> This draft is intended to focus = the discussion and improve the wording.
=     >>>>
=     >>>> Viele Gr=C3=BC=C3=9Fe,
    >>>>
=     >>>> Henk
=     >>>>
=     >>>> On 10/06/2018 08:23 AM, = Laurence Lundblade wrote:
=     >>>>> Hi Henk,
=     >>>>>
=     >>>>> Bangkok IETF is getting = close, will you be able to update the charter
=     >>>>> for the attestation BoF to = properly include EAT?  I sent you some text
=     >>>>> that just needs to be = pasted along with some comments. It doesn=E2=80=99t look
=     >>>>> like there=E2=80=99s been = any updates.
=     >>>>>
=     >>>>> LL
=     >>>>>
=     >>>> = _______________________________________________
=     >>>> RATS mailing list
=     >>>>RATS@ietf.org
=     >>>>https://www.ietf.org/mailman/listinfo/rats
=     >>> = _______________________________________________
=     >>> EAT mailing list
=     >>>EAT@ietf.org
=     >>>https://www.ietf.org/mailman/listinfo/eat
=     >>
=     >>
=     >> = _______________________________________________
=     >> EAT mailing list
=     >>EAT@ietf.org  <mailto:EAT@ietf.org>
=     >>https://www.ietf.org/mailman/listinfo/eat
=     >
=     >
=     >
    > = _______________________________________________
=     > EAT mailing list
=     >EAT@ietf.org
=     >https://www.ietf.org/mailman/listinfo/eat
=     >

=     _______________________________________________     EAT mailing list
=     EAT@ietf.org
    https://www.ietf.org/mailman/listinfo/eat

_______________________________________________
EAT mailing list
EAT@ietf.org
https://www.ietf.org/mailman/listinfo/eat
IMPORTANT NOTICE: The contents of this email and any = attachments are confidential and may also be privileged. If you are not = the intended recipient, please notify the sender immediately and do not = disclose the contents to any other person, use it for any purpose, or = store or copy the information in any medium. Thank you.

_______________________________________________
EAT mailing list
EAT@ietf.org
https://www.ietf.org/mailman/listinfo/eat

= --Apple-Mail=_E71BBBF8-9693-446C-B398-D700C159EE43-- From nobody Tue Oct 16 07:54:55 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1431130DEB; Tue, 16 Oct 2018 07:54:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yfFKwHzsTJRC; Tue, 16 Oct 2018 07:54:49 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E9F8130DE9; Tue, 16 Oct 2018 07:54:46 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9GEsdd9007652 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Tue, 16 Oct 2018 16:54:40 +0200 Received: from [172.20.8.9] (88.157.232.34) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Tue, 16 Oct 2018 16:54:33 +0200 To: "Smith, Ned" , Hannes Tschofenig , "rats@ietf.org" , "Jeremy O'Donoghue" , Denis CC: "eat@ietf.org" References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> From: Henk Birkholz Message-ID: <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> Date: Tue, 16 Oct 2018 16:54:32 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: base64 X-Originating-IP: [88.157.232.34] Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Oct 2018 14:54:53 -0000 VG8gcXVvdGUgQ2Fyc3RlbiwgdGhlcmUgaXMgInRoZSB1c3VhbCB0ZXJtaW5vbG9neSBwcm9i bGVtIGFib3V0IGlkZW50aXR5Ii4NCg0KSWRlbnRpZnlpbmcgdnMuIElkZW50aXR5IGJyaW5n cyBiYWNrIG1lbW9yaWVzIGFib3V0IGFuIGV4dGVuc2l2ZSANCmRpc2N1c3Npb24gaW4gU0FD TSB0aGF0IGluIHRoZSBlbmQgcmVzdWx0ZWQgaW4gdXNpbmcgUHJvZmlsZXMuLi4NCg0KUHJv ZmlsZXMgYXJlIHRoZSAidGhpbmdzIiB0aGF0IHlvdSBjYW4gYWdncmVnYXRlIGlkZW50aXR5 IGNsYWltcyBpbiAoaW4gDQpTQUNNIHRoZXNlIGNsYWltcyBhcmUgIlRhcmdldCBFbmRwb2lu dCBDaGFyYWN0ZXJpc3RpY3MiLCB3aGljaCBhcmUgDQpwcmV0dHkgbXVjaCB0aGUgc2FtZSB0 aGluZyBhcyBEZXZpY2UgQ2hhcmFjdGVyaXN0aWNzKSAtIGFuZCB5b3UgdXNlIHRoZSANClBy b2ZpbGVzIHRvIChyZS0paWRlbnRpZnkgdGFyZ2V0IGVuZHBvaW50cy4NCg0KSW4gdGhlIHNj b3BlIG9mIHJlbW90ZSBhdHRlc3RhdGlvbiBwcm9jZWR1cmVzLCBJIHRoaW5rIHRoYXQgImp1 c3Qgbm90IA0KY2FsbGluZyIgY2xhaW0gc2V0cyB0aGF0IGFyZSBjb21wb3NlZCAoYW1vbmdz dCBvdGhlcnMpIG9mIGlkZW50aWZ5aW5nIA0KY2xhaW1zICJpZGVudGl0eSBkb2N1bWVudHMi IG1pZ2h0IGp1c3QgZW5kIHVwIGluIG1ha2luZyB1cCBhbm90aGVyIG5hbWUgDQpmb3Igc29t ZXRoaW5nIHRoYXQgaXMgZWZmZWN0aXZlbHkgY29tcG9zaW5nIGlkZW50aXR5IGRvY3VtZW50 cyBhbnl3YXlzLiANCklmIGNhbGxpbmcgdGhlIHNhbWUgdGhpbmcgc29tZXRoaW5nIGVsc2Ug aGVscHMgaW4gc29tZSB3YXksIEkgYW0gYWxsIGZvciANCml0LiBCdXQgSSBhbSByZWFsbHkg bm90IHN1cmUuDQoNClRoYXQgc2FpZCwgTmVkJ3MgZWxhYm9yYXRpb24gb24gdGhlIHJlbGF0 aW9uc2hpcCBvZiBpZGVudGl0eSBhbmQgDQphdHRlc3RhdGlvbiBjbGFpbXMgYW5kIGNvcnJl c3BvbmRpbmcgY2xhaW0gc2VtYW50aWNzIC8gdHJ1c3Qgc2VtYW50aWNzIA0KaXMgc3BvdCBv biwgSSB0aGluay4NCg0KVmllbGUgR3LDvMOfZSwNCg0KSGVuaw0KDQpPbiAxMC8xNi8yMDE4 IDAzOjUxIFBNLCBTbWl0aCwgTmVkIHdyb3RlOg0KPiBBZ3JlZSB3aXRoIEhhbm5lcyB0aGF0 IGlkZW50aXR5IGRpc2N1c3Npb24gY2FuIGxlYWQgdG8gY29uZnVzaW9uIGFzIGlkZW50aXR5 IGlzIG9mdGVuIGhpZ2hseSBkZXBlbmRlbnQgb24gc29tZSBzb3J0IG9mIGNvbnRleHQgKGRv bWFpbiBvZiBpbnRlcnByZXRhdGlvbikuDQo+IA0KPiBJbiBvcmRlciB0byBoYXZlIHByb2R1 Y3RpdmUgY29udmVyc2F0aW9uIGFib3V0IGF0dGVzdGF0aW9uIGFuZCBpZGVudGl0eSwgaXQg bWF5IGJlIGltcG9ydGFudCB0byB1bmRlcnN0YW5kIHRoYXQgYXR0ZXN0YXRpb24gc2VtYW50 aWNzIHNldHMgdGhlIGNvbnRleHQgZm9yIGlkZW50aXR5Lg0KPiANCj4gKiBBdHRlc3RhdGlv biBhdHRyaWJ1dGVzIGhhdmUgdHJ1c3Qgc2VtYW50aWNzIChhbmQgdHJ1c3Qgc2VtYW50aWNz IGFyZSBpbnRlcnByZXRlZCB0aHJvdWdoIHRoZSBleWVzIG9mIHRoZSB2ZXJpZmllcikuIElk ZW50aXR5IGF0dHJpYnV0ZXMgbWF5IGFsc28gaGF2ZSB0cnVzdCBzZW1hbnRpY3MgKGluIGFk ZGl0aW9uIHRvIGlkZW50aXR5IHNlbWFudGljcykgaGVuY2UgY2FuIGJlIHJlZ2FyZGVkIGFz IHBsYXlpbmcgYSByb2xlIGluIGJvdGggaWRlbnRpdHkgYW5kIGF0dGVzdGF0aW9uLiBTaW5j ZSBSQVRTIHNob3VsZCBiZSBpbnRlcmVzdGVkIHByaW1hcmlseSBpbiB0cnVzdCBzZW1hbnRp Y3MsIGl0IG1ha2VzIHNlbnNlIHRvIHVuZGVyc3RhbmQsIGRpc2N1c3MgYW5kIGNvbnNpZGVy IGlkZW50aXR5IGluIHRlcm1zIG9mIGl0cyB0cnVzdCBzZW1hbnRpY3MuIEhlbmNlIGlkZW50 aXR5IGF0dHJpYnV0ZXMgYXJlIG9ubHkgaW50ZXJlc3RpbmcgdG8gUkFUUyBpZiB0aGV5IGFy ZSB1c2VmdWwgZm9yIGV2YWx1YXRpbmcgdHJ1c3Qgc2VtYW50aWNzLg0KPiANCj4gKiBJbiBh IGNsb3NlZCBlY29zeXN0ZW0sIHRoZSB0cnVzdCBjaGFyYWN0ZXJpc3RpY3MgYW5kIHByb3Bl cnRpZXMgbWF5IGJlIGltcGxpZWQgYmVjYXVzZSB0aGVyZSBvZnRlbiBleGlzdHMgb3V0LW9m LWJhbmQgcHJvY2Vzc2VzIHRoYXQgZW5zdXJlIHRoZSBjaGFyYWN0ZXJpc3RpY3MgYXJlIGFw cGxpZWQgKGZvciBleGFtcGxlLCBpZiBhbiBJVCBvcmdhbml6YXRpb24gc2V0cyBhIHBvbGlj eSB0aGF0IGFsbCBhc3ltbWV0cmljIGtleXMgYXJlIHRvIGJlIGhhcmRlbmVkIHVzaW5nIGEg c21hcnRjYXJkLCB0aGV5IGNhbiBhcHBseSBhIGRlcGxveW1lbnQgcHJvY2VzcyB3aGVyZSB0 aGUgSVQgcHJvZmVzc2lvbmFsIHZlcmlmaWVzIHRoZSBzbWFydGNhcmQgaXMgdXNlZCBkdXJp bmcgZW5yb2xsbWVudC4pIEJ1dCBpbiBhIG5vbi1jbG9zZWQgZWNvc3lzdGVtLCB0aGVyZSBp c24ndCBhbiBhc3N1bXB0aW9uIHRoYXQgb3V0LW9mLWJhbmQgcHJvY2Vzc2VzIGV4aXN0LiBB dHRlc3RhdGlvbiBhdHRlbXB0cyB0byBtYWtlIGV4cGxpY2l0IHdoYXQgb3RoZXJ3aXNlIGlz IGltcGxpY2l0IGFuZCB0aGVyZWZvcmUgc3ViamVjdCB0byBtaXNpbnRlcnByZXRhdGlvbiBp ZiB0aGUgdmVyaWZpZXIsIHJlbHlpbmcgcGFydHkgYW5kIGF0dGVzdGVyIGFyZSBub3QgcGFy dCBvZiB0aGUgc2FtZSBjbG9zZWQgZWNvc3lzdGVtLiBJbXBsaWNpdCBhdHRlc3RhdGlvbiB0 aGVyZWZvcmUgY2FuIGxlYWQgdG8gc2VtYW50aWMgY29uZnVzaW9uIGlmIHdlJ3JlIG5vdCBj YXJlZnVsLiBUaGVyZWZvcmUsIHRoZSByaWdvciBvZiB0cmVhdGluZyBpbXBsaWNpdCBhdHRl c3RhdGlvbiBjbGFpbXMgKGFzc2VydGlvbnMgYXNzdW1lZCB0byBleGlzdCBidXQgbm90IGV4 cGxpY2l0bHkgbmFtZWQpIHNob3VsZCBuZXZlcnRoZWxlc3MgYmUgZGVmaW5lZCBleHBsaWNp dGx5LiBUaGVuLCBpZiB0aGVyZSBpcyBhIG5lZWQgZm9yIGltcGxpY2l0IGF0dGVzdGF0aW9u LCB0aGUgc3BlY2lmaWNhdGlvbnMgdGhhdCBkZXNjcmliZSB0aGVtIGNhbiBkZXNjcmliZSB0 aGVtIGluIHRlcm1zIG9mIGFuIGV4cGxpY2l0IGRlZmluaXRpb24uDQo+IA0KPiAqIEluIHRo ZSBjb250ZXh0IG9mIGFzc2VydGluZyB0cnVzdCBjaGFyYWN0ZXJpc3RpY3MsIHRoZSB2ZXJp ZmllciBuZWVkcyB0byBrbm93IHRoYXQgYSBzZXQgb2YgY2hhcmFjdGVyaXN0aWNzIGFwcGxp ZXMgdG8gdGhlIGluc3RhbmNlIG9mIHRoZSBlbmRwb2ludCBiZWluZyBldmFsdWF0ZWQgKGFr YSB0aGUgYXR0ZXN0ZXIpLiAoT3RoZXJ3aXNlIGEgTUlUTSBjb3VsZCBzdXBwbHkgY2hhcmFj dGVyaXN0aWNzIHRoYXQgbWF5IGJlIHZhbGlkLCBidXQgZG9u4oCZdCBhcHBseSB0byB0aGUg c3BlY2lmaWMgaW5zdGFuY2UpLiBDb25zZXF1ZW50bHksIGl0IG1ha2VzIHNlbnNlIHRvIGNv bnNpZGVyIHRoYXQgKmF0dGVzdGF0aW9uKiBrZXlzIGFyZSBuZWVkZWQgdG8gYXV0aGVudGlj YXRlIHRoZSBlbmRwb2ludCBiZWluZyBldmFsdWF0ZWQuIFRoaXMgZG9lc24ndCBpbXBseSBh biBpZGVudGl0eSBrZXkgY291bGRuJ3QgZG91YmxlIGFzIGFuIGF0dGVzdGF0aW9uIGtleS4g QnV0IGlmIGl0IGRvZXMsIHdlIGNhcmUgYWJvdXQgaXRzIHJlbGV2YW5jZSB0byB0aGUgYXR0 ZXN0ZXIgZW5kcG9pbnQuDQo+IA0KPiAtTmVkDQo+IA0KPiDvu79PbiAxMC8xNS8xOCwgNjo0 OSBQTSwgIkhhbm5lcyBUc2Nob2ZlbmlnIiA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4g d3JvdGU6DQo+IA0KPiAgICAgIEhlcmUgYXJlIG15IDUgY2VudHMgb24gdGhlIHRlcm0gJ2lk ZW50aXR5Jy4NCj4gICAgICANCj4gICAgICBJIGhhdmUgYmVlbiB3b3JraW5nIG9uIGlkZW50 aXR5IG1hbmFnZW1lbnQgZm9yIG1hbnkgeWVhcnMgKHBhcnRpYWxseSBiZWNhdXNlIG9mIG15 IE9BdXRoIGNvLWNoYWlyIHJvbGUpIGFuZCBJIGhhdmUgbm90aWNlZCB0aGF0IHRoZSB1c2Ug b2YgdGhlIHRlcm0gImlkZW50aXR5IiB0ZW5kcyB0byBjb25mdXNlIG1vcmUgdGhhbiBpdCBo ZWxwcyAoZXZlbiBtb3JlIHNvIHdoZW4gdGhlIHRlcm0gaXMgYXBwbGllZCB0byBkZXZpY2Vz IGFuZCBzb2Z0d2FyZSByYXRoZXIgdGhhbiBodW1hbnMpLg0KPiAgICAgIA0KPiAgICAgIEkg YmVsaWV2ZSB3ZSBjb3VsZCBnZXQgYXdheSB3aXRoIGRlc2NyaWJpbmcgd2hhdCB3ZSB3YW50 IHdpdGhvdXQgZXZlciB1c2luZyB0aGUgdGVybS4NCj4gICAgICANCj4gICAgICBJbiB0aGlz IGNvbnRleHQgSSB3b3VsZCBhcmd1ZSB0aGF0IHdlIGFyZSBhYm91dCBpZGVudGlmeWluZyBk aWZmZXJlbnQgY29tcG9uZW50cywgc3VjaCBhcyBoYXJkd2FyZSBhbmQgc29mdHdhcmUuDQo+ ICAgICAgDQo+ICAgICAgQ2lhbw0KPiAgICAgIEhhbm5lcw0KPiAgICAgIA0KPiAgICAgIC0t LS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ICAgICAgRnJvbTogRUFUIDxlYXQtYm91bmNl c0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIFNtaXRoLCBOZWQNCj4gICAgICBTZW50OiBNb25k YXksIE9jdG9iZXIgMTUsIDIwMTggOTowMCBBTQ0KPiAgICAgIFRvOiBIZW5rIEJpcmtob2x6 IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPjsgcmF0c0BpZXRmLm9yZzsgSmVy ZW15IE8nRG9ub2dodWUgPGpvZG9ub2doQHF0aS5xdWFsY29tbS5jb20+OyBEZW5pcyA8ZGVu aXMuaWV0ZkBmcmVlLmZyPg0KPiAgICAgIENjOiBlYXRAaWV0Zi5vcmcNCj4gICAgICBTdWJq ZWN0OiBSZTogW0VBVF0gW0VYVEVSTkFMXSBSZTogW1JhdHNdIEF0dGVzdGF0aW9uIEJvRiBj aGFydGVyIHVwZGF0ZXM/DQo+ICAgICAgDQo+ICAgICAgSSBhZ3JlZSB3aXRoIEhlbmsncyBv YnNlcnZhdGlvbiB0aGF0IHRoZXJlIGlzIG9wcG9ydHVuaXR5IHRvIGZpbmQgY29tbW9uIGdy b3VuZCBvbiBpZGVudGl0eSBhcyBpZGVudGl0eSBjYW4gYmUgYSBjb2xsZWN0aW9uIG9mIGF0 dHJpYnV0ZXMsIHRoYXQgaWYgc2lnbmVkLCBiZWNvbWVzIGEgc2V0IG9mIHZlcmlmaWFibGUg Y2xhaW1zIChhYm91dCBpZGVudGl0eSBhdHRyaWJ1dGVzKS4gQXR0ZXN0YXRpb24gaGFzIGEg c2ltaWxhciBzdHJ1Y3R1cmUgaW4gdGhhdCBpdCBjb25zaXN0cyBvZiBhIHNldCBvZiBhdHRy aWJ1dGVzLCB0aGF0IGlmIHNpZ25lZCBiZWNvbWVzIGEgc2V0IG9mIHZlcmlmaWFibGUgY2xh aW1zLiBUaGUgbWFpbiBkaWZmZXJlbmNlIGJldHdlZW4gaWRlbnRpdHkgYW5kIGF0dGVzdGF0 aW9uIGF0dHJpYnV0ZXMgaXMgd2hldGhlciB0aGUgYXR0cmlidXRlIHNlbWFudGljYWxseSBy ZWxhdGUgdG8gdHJ1c3QgKHZzLiBpZGVudGl0eSkuIEZvciBleGFtcGxlLCBjbGFpbXMgb2Yg c2VjdXJpdHkgY2VydGlmaWNhdGlvbiBjb21wbGlhbmNlIHJlc29uYXRlcyBhcyBhdHRlc3Rh dGlvbi4NCj4gICAgICANCj4gICAgICBJdCBtYXkgYmUgcG9zc2libGUgdG8gY29tYmluZSBh IHNldCBvZiBhdHRlc3RhdGlvbiBhdHRyaWJ1dGVzIGluIHN1Y2ggYSB3YXkgdGhhdCB0aGUg Y29tYmluYXRpb24gdW5pcXVlbHkgaWRlbnRpZmllcyBhbiBlbnRpdHkuIEJ1dCB0aGF0IGRv ZXNuJ3QgbWFrZSBpdCBhbiBpZGVudGl0eSBzeXN0ZW0gcGVyIHNlIGFuZCBzaG91bGRuJ3Qg Y2F1c2UgYSBjb25mbGljdCBpbiBjaGFydGVyIGdvYWxzIHdpdGggcmVzcGVjdCB0byBvdGhl ciBpZGVudGl0eSBmb2N1c2VkIGVmZm9ydHMgaW4gSUVURi4NCj4gICAgICANCj4gICAgICBB bHNvLCBpbmNsdXNpb24gb2YgYXR0cmlidXRlcyB0aGF0IGRvbid0IGhhdmUgc2VtYW50aWNz IHRoYXQgcmVhc29uYWJseSByZWxhdGUgdG8gdHJ1c3Qgc2hvdWxkIG5vdCBiZSBvZiBpbnRl cmVzdCB0byBhIHdvcmtpbmcgZ3JvdXAgZm9jdXNlZCBvbiBhdHRlc3RhdGlvbi4NCj4gICAg ICANCj4gICAgICAtTmVkDQo+ICAgICAgDQo+ICAgICAgT24gMTAvMTUvMTgsIDM6NTMgUE0s ICJFQVQgb24gYmVoYWxmIG9mIEhlbmsgQmlya2hvbHoiIDxlYXQtYm91bmNlc0BpZXRmLm9y ZyBvbiBiZWhhbGYgb2YgaGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4gd3JvdGU6 DQo+ICAgICAgDQo+ICAgICAgICAgIEhpIEplcmVteSAmIERlbmlzLA0KPiAgICAgIA0KPiAg ICAgICAgICBhbGwgdGhlc2UgcG9pbnRzIG9mIHZpZXcgaGF2ZSBtZXJpdCwgSSB0aGluay4N Cj4gICAgICANCj4gICAgICAgICAgUGxlYXNlIGhhdmUgYSBsb29rIGF0IHRoZXNlIHF1b3Rl czoNCj4gICAgICANCj4gICAgICAgICAgPiBrbm93aW5nIHRoZSBwcm92ZW5hbmNlIG9mIHRo ZSBkZXZpY2UNCj4gICAgICANCj4gICAgICAgICAgPiBoYXZpbmcgdGhlIGVudGl0eSBjcmVh dG9yL21hbnVmYWN0dXJlciBwcm92aWRlIGEgc2V0IG9mIGNsYWltcyB3aGljaCBjYW4gYmUg dmVyaWZpZWQNCj4gICAgICANCj4gICAgICAgICAgPiB0byBrbm93IHRoZSBjaGFyYWN0ZXJp c3RpY3Mgb2YgYSBkZXZpY2UgYnkgaXNzdWluZyB0byB0aGUgZGV2aWNlIGEgcHVibGljIGtl eSBjZXJ0aWZpY2F0ZSB3aGljaCB3aWxsIG9ubHkgYmUgaXNzdWVkIHRvIHRoZSBkZXZpY2Ug aWYgaXQgZnVsZmlsbHMgYW4gZXhwZWN0ZWQgc2V0IG9mIGZ1bmN0aW9uYWxpdGllcy4NCj4g ICAgICANCj4gICAgICAgICAgVG8gbWUsIHRoZXNlIGRlc2NyaXB0aW9ucyBzZWVtIHRvIGhh dmUgZGlmZmVyZW50IGludGVudHMsIHNjb3BlIG9yDQo+ICAgICAgICAgIGF1ZGllbmNlIGFu ZCByZXF1aXJlIG1vc3QgY2VydGFpbmx5IGRpZmZlcmVudCB3b3JrLWZsb3dzLCBidXQNCj4g ICAgICAgICAgc2VtYW50aWNhbGx5IGFuZCBpbiBjb25zZXF1ZW5jZSByZXByZXNlbnRhdGlv bi13aXNlIHRoZXkgYWxzbyBzZWVtIHF1aXRlDQo+ICAgICAgICAgIHJlbGF0ZWQuDQo+ICAg ICAgDQo+ICAgICAgICAgIElmIHlvdSB0aGluayBvZiBhbiBpZGVudGl0eSBkb2N1bWVudCBh cyBhIHNldCBvZiBjbGFpbXMgKHBvdGVudGlhbGx5DQo+ICAgICAgICAgIGluY2x1ZGluZyBh IHB1YmxpYyBrZXkpLCB0aGF0IGlzIHNpZ25lZCBhbmQgdGhhdCBjYW4gbWF0Y2ggb25lIG9y IG1vcmUNCj4gICAgICAgICAgdGhpbmdzLCBtYXliZSBhbGwgdGhyZWUgdHlwZXMgaGlnaGxp Z2h0ZWQgYWJvdmUgYXJlIGFjdHVhbGx5IGNvdmVyZWQgYnkNCj4gICAgICAgICAgdGhlIHNh bWUgaWRlbnRpdHkgZG9jdW1lbnQgY29uY2VwdD8NCj4gICAgICANCj4gICAgICAgICAgV2l0 aCByZXNwZWN0IHRvIGlkZW50aXR5IGRvY3VtZW50cywgSSB0aGluayBpdCBpcyBzYWZlIHNv IHNheSB0aGF0IHdlDQo+ICAgICAgICAgIGNhbiBmaW5kIGNvbW1vbiBncm91bmQgaGVyZSBy YXRoZXIgZWFzaWx5LiBUaGF0IHNhaWQsIHRoZSB3YXkgaG93IHRoZXNlDQo+ICAgICAgICAg IGlkZW50aXR5IGRvY3VtZW50cyBjb21lIGludG8gZXhpc3RlbmNlLCB3aGVuIGFuZCBob3cg dGhleSBhcmUgZGVwbG95ZWQNCj4gICAgICAgICAgb24gdGhlIHRoaW5nIG9yIGFzc29jaWF0 ZWQgd2l0aCBtdWx0aXBsZSB0aGluZ3MgaXMgYW5vdGhlciBxdWVzdGlvbi4gV2UNCj4gICAg ICAgICAgbW9zdCBjZXJ0YWlubHkgZG8gbm90IHdhbnQgdG8gZW5kIHVwIHdpdGggYSAic2ln bmluZyBmb29sIiB0aGF0IGRvZXMgbm90DQo+ICAgICAgICAgIGFkZCB2YWx1ZSB0byB0aGUg bGV2ZWwgb2YgY29uZmlkZW5jZSAoSSBhbSBxdW90aW5nIE5lZCBTbWl0aCBoZXJlKS4NCj4g ICAgICANCj4gICAgICAgICAgVGhpcyBoYXMgdG8gYmUgZmxlc2hlZCBvdXQgZXhwbGljaXRs eSBmb3IgZWFjaCBzY2VuYXJpbyBhbmQgdGhlIHBhcnRzDQo+ICAgICAgICAgIHRoYXQgYXJl IHJldXNlZCBpbiBldmVyeSBzY2VuYXJpbyBzaG91bGQgZ2V0IHNwZWNpYWwgYXR0ZW50aW9u IGluIHRoZQ0KPiAgICAgICAgICB1cGNvbWluZyBSQVRTIGFyY2hpdGVjdHVyZSBkcmFmdC4N Cj4gICAgICANCj4gICAgICAgICAgSWRlbnRpZnlpbmcgY2xhaW1zIGFnZ3JlZ2F0ZWQgaW4g YW4gaWRlbnRpdHkgZG9jdW1lbnQgbW9zdCBjZXJ0YWlubHkgY2FuDQo+ICAgICAgICAgIGlu Y2x1ZGUgZGV2aWNlIGNoYXJhY3RlcmlzdGljcywgcHVibGljIGtleShzKSwgb3IgY2xhaW1z IGFib3V0IHRoZQ0KPiAgICAgICAgICBpbnRlbmRlZCBmdW5jdGlvbnMgYW5kIGNhcGFiaWxp dGllcyBvZiB0aGUgdGhpbmcuIENsYWltcyBjYW4gZXZlbg0KPiAgICAgICAgICBvcmlnaW5h dGUgZnJvbSBDbGFpbWFudHMgdGhhdCBhcmUgbm90IHRoZSB0aGluZyBpdHNlbGYsIGJ1dCBl eHRlcm5hbA0KPiAgICAgICAgICBlbnRpdGllcyBwcm92aWRpbmcgYW4gYXNzZXJ0aW9uIChl LmcuIHRoZXNlIHRoaW5ncyBhcmUgQ0MtY2VydGlmaWVkKS4NCj4gICAgICANCj4gICAgICAg ICAgQWxsIGRpZmZlcmVudCBjb21wb3NpdGVzIG9mIGlkZW50aWZ5aW5nIGNsYWltcyBoYXZl IGEgc3BlY2lmaWMgc2hhcmVkDQo+ICAgICAgICAgIGludGVuZCBpbiB0aGlzIGNvbnRleHQg dGhvdWdoLCBJIHRoaW5rOiBleHByZXNzaW5nIEF0dGVzdGF0aW9uDQo+ICAgICAgICAgIFBy b3ZlbmFuY2UgKGFnYWluIC0gb25lIGZvciBvbmUgb3IgbW9yZSB0aGluZ3Mgb2YgdGhlIHNh bWUga2luZCkuIEFuZA0KPiAgICAgICAgICBhbGwgb2YgdGhlbSBvcmlnaW5hdGUgZnJvbSBD bGFpbWFudHMgYW5kIHRoZXJlZm9yZSB1c2UgYSByb290IG9mIHRydXN0DQo+ICAgICAgICAg IG9mIG1lYXN1cmVtZW50LCBJIHRoaW5rLg0KPiAgICAgIA0KPiAgICAgICAgICBUaGF0IHNh aWQsIGVzdGFibGlzaGluZyB0cnVzdHdvcnRoeSBrbm93bGVkZ2UgYWJvdXQgYXR0ZXN0YXRp b24NCj4gICAgICAgICAgcHJvdmVuYW5jZSBpcyBvbmx5IHRoZSBmaXJzdCBzdGVwIGFuZCBw cm92aWRlcyB0aGUgZm91bmRhdGlvbiBmb3IgbW9yZQ0KPiAgICAgICAgICBjb21wbGV4IGF0 dGVzdGF0aW9uIHByb2NlZHVyZXMuIEluIGFueSBjYXNlLCB0aGlzIHNlZW0gdG8gYmUgcmVx dWlyZWQgYnkNCj4gICAgICAgICAgZXZlcnkgc2NlbmFyaW8gdGhhdCB3YXMgaGlnaGxpZ2h0 ZWQgc28gZmFyIGFuZCB0aGVyZWZvcmUgd2lsbCBtb3N0DQo+ICAgICAgICAgIGNlcnRhaW5s eSBiZSBjb3ZlcmVkIGluIGEgZGVsaXZlcmFibGUuDQo+ICAgICAgDQo+ICAgICAgICAgIElI VEgsDQo+ICAgICAgDQo+ICAgICAgICAgIEhlbmsNCj4gICAgICANCj4gICAgICANCj4gICAg ICAgICAgT24gMTAvMTUvMjAxOCAxMjoyMiBQTSwgSmVyZW15IE8nRG9ub2dodWUgd3JvdGU6 DQo+ICAgICAgICAgID4gT24gMTIgT2N0IDIwMTgsIGF0IDE0OjMzLCBEZW5pcyA8ZGVuaXMu aWV0ZkBmcmVlLmZyDQo+ICAgICAgICAgID4gPG1haWx0bzpkZW5pcy5pZXRmQGZyZWUuZnI+ PiB3cm90ZToNCj4gICAgICAgICAgPj4gVGhlICJQcm9ibGVtIFN0YXRlbWVudCIgY29udGlu dWVzIGFzIGZvbGxvd3M6DQo+ICAgICAgICAgID4+DQo+ICAgICAgICAgID4+ICgyKSBUb2Rh eSwgdGhlcmUgaXMgbm8gY29tbW9uLCBzdGFuZGFyZCB3YXkgZm9yIFJlbHlpbmcgUGFydGll cyB0bw0KPiAgICAgICAgICA+PiBrbm93IHRoZSBwcm92ZW5hbmNlIGFuZCBjaGFyYWN0ZXJp c3RpY3Mgb2YgYSBkZXZpY2UgKGUuZy4sIGFuIGVuZC11c2VyDQo+ICAgICAgICAgID4+IGRl dmljZSwNCj4gICAgICAgICAgPj4gcGxhdGZvcm0gb3IgZW5kcG9pbnQsIHNlcnZlcnMsIElv VCBkZXZpY2VzLCBkZXZpY2Ugc3Vic3lzdGVtcyBhbmQNCj4gICAgICAgICAgPj4gc3ViLW1v ZHVsZXMpIHRoYXQgbWF5IGJlIHJlcXVlc3Rpbmcgc2VydmljZXMuDQo+ICAgICAgICAgID4+ DQo+ICAgICAgICAgID4+IEtub3dpbmcgdGhlIHByb3ZlbmFuY2Ugb2YgdGhlIGRldmljZSBp cyBub3QgYWx3YXlzIG5lY2Vzc2FyeS4gV2hhdCBpcw0KPiAgICAgICAgICA+PiBpbXBvcnRh bnQgaXMgdG8ga25vdyB0aGF0IGEgc3BlY2lmaWMgc2V0IG9mIGZ1bmN0aW9ucyBpcyAoc2Vj dXJlbHkpDQo+ICAgICAgICAgID4+IHN1cHBvcnRlZCBieSB0aGUgZGV2aWNlLg0KPiAgICAg ICAgICA+PiBUaGVyZSBhbHJlYWR5IGV4aXN0cyBhIGNvbW1vbiB3YXkgdG8ga25vdyB0aGUg Y2hhcmFjdGVyaXN0aWNzIG9mIGENCj4gICAgICAgICAgPj4gZGV2aWNlIGJ5IGlzc3Vpbmcg dG8gdGhlIGRldmljZSBhIHB1YmxpYyBrZXkgY2VydGlmaWNhdGUgd2hpY2ggd2lsbA0KPiAg ICAgICAgICA+PiBvbmx5IGJlIGlzc3VlZCB0byB0aGUgZGV2aWNlDQo+ICAgICAgICAgID4+ IGlmIGl0IGZ1bGZpbGxzIGFuIGV4cGVjdGVkIHNldCBvZiBmdW5jdGlvbmFsaXRpZXMuIElu IHN1Y2ggYSBjYXNlIGENCj4gICAgICAgICAgPj4gc3ludGF4IGZvciBhIHRydXN0ZWQgY2xh aW0gc2V0cyoqaXMgbm90IG5lZWRlZC4NCj4gICAgICAgICAgPj4NCj4gICAgICAgICAgPiBU aGlzIGlzIGluZGVlZCBhIHBvc3NpYmxlIHdheSB0byBhZGRyZXNzIHRoZSBwcm9ibGVtLCBi dXQgc3VmZmVycyBmcm9tDQo+ICAgICAgICAgID4gY2hhbGxlbmdlcyB3aGljaCBjb21lIGRv d24gdG86DQo+ICAgICAgICAgID4NCj4gICAgICAgICAgPiAtIFdobyBpc3N1ZXMgc3VjaCBj ZXJ0aWZpY2F0ZXMuIEFuIG9wdGlvbiBpcyB0aGF0IHRoZXJlIGlzIHNvbWUgZm9ybSBvZg0K PiAgICAgICAgICA+IHNlY3VyaXR5IGNlcnRpZmljYXRpb24gYmVoaW5kIHRoaXMgaXNzdWFu Y2Ugb3RoZXJ3aXNlIGl0IGlzIG9mIHZlcnkNCj4gICAgICAgICAgPiBsaW1pdGVkIHZhbHVl Lg0KPiAgICAgICAgICA+IC0gSW4gb3JkZXIgdG8gY2FwdHVyZSB0aGUgd2lkZSB2YXJpZXR5 IG9mIGRpZmZlcmVudCBkZXZpY2VzIChJIHByZWZlcg0KPiAgICAgICAgICA+ICJlbnRpdHki IGhlcmUgYXMgaXQgaXMgbW9yZSBnZW5lcmFsIHRoYW4gImRldmljZSIpLCBtYW55IGRpZmZl cmVudCBmb3Jtcw0KPiAgICAgICAgICA+IG9mIHN1Y2ggY2VydGlmaWNhdGVzIHdvdWxkIGJl IHJlcXVpcmVkLiBUaGlzIGVuZHMgdXAgYmVpbmcgbXVjaCB0aGUgc2FtZQ0KPiAgICAgICAg ICA+IHRoaW5nIGFzIGEgc2V0IG9mIGNsYWltcy4NCj4gICAgICAgICAgPg0KPiAgICAgICAg ICA+IEdpdmVuIHRoZSBtdWx0aXBsaWNpdHkgb2YgZW50aXRpZXMgZm9yIHdoaWNoIGF0dGVz dGF0aW9uIG1pZ2h0IGJlDQo+ICAgICAgICAgID4gdXNlZnVsLCBpdCBzZWVtcyB0byBtZSB0 aGF0IGhhdmluZyB0aGUgZW50aXR5IGNyZWF0b3IvbWFudWZhY3R1cmVyDQo+ICAgICAgICAg ID4gcHJvdmlkZSBhIHNldCBvZiBjbGFpbXMgd2hpY2ggY2FuIGJlIHZlcmlmaWVkIGlzIG1v cmUgZmxleGlibGUgdGhhbg0KPiAgICAgICAgICA+IHJlcXVpcmluZyBhIGNlcnRpZmljYXRl LiBJdCBzZWVtcyBsaWtlbHkgdG8gbWUgdGhhdCB3aGVyZSBhIGZvcm1hbA0KPiAgICAgICAg ICA+IHNlY3VyaXR5IGNlcnRpZmljYXRpb24gaXMgbmVlZGVkIHRoZXJlIHdpbGwgYmUgYSBj ZXJ0aWZpY2F0ZSBpc3N1ZWQgYnkNCj4gICAgICAgICAgPiB0aGUgQ2VydGlmeWluZyBCb2R5 IGFzIG9uZSBvZiB0aGUgY2xhaW1zIGFib3V0IGFuIGVudGl0eSwgYnV0IEkgY2FuDQo+ICAg ICAgICAgID4gdGhpbmsgb2YgbWFueSBjYXNlcyAoc3VwcGx5IGNoYWluIG1hbmFnZW1lbnQs IHRvIHRha2UganVzdCBvbmUgZXhhbXBsZSkNCj4gICAgICAgICAgPiB3aGVyZSBwcm92ZW5h bmNlIGlzIGJ5IGZhciB0aGUgbW9zdCB1c2VmdWwgaW5mb3JtYXRpb24uDQo+ICAgICAgICAg ID4NCj4gICAgICAgICAgPiBJJ20gbm90IGluIGZhdm91ciBvZiBjaGFuZ2VzIHRvIHRoZSBj aGFydGVyIGluIHRoaXMgZGlyZWN0aW9uLg0KPiAgICAgICAgICA+Pg0KPiAgICAgICAgICA+ PiBUaGUgc2ltcGxlc3QgY2FzZXMgc2hvdWxkIGFsc28gYmUgcGFydCBvZiB0aGUgZnJhbWV3 b3JrLg0KPiAgICAgICAgICA+Pg0KPiAgICAgICAgICA+PiBOb3RlOiBJIHBlcnNvbmFsbHkg YXBwcmVjaWF0ZSB0aGF0IHByaXZhY3kgaXMgYW4gYXNwZWN0IHRoYXQNCj4gICAgICAgICAg Pj4gd2lsbC9zaG91bGQgYmUgdGFrZW4gaW50byBjb25zaWRlcmF0aW9uLg0KPiAgICAgICAg ICA+Pg0KPiAgICAgICAgICA+PiBEZW5pcw0KPiAgICAgICAgICA+Pg0KPiAgICAgICAgICA+ Pj4gQXMgd2l0aCB0aGUgZWFybGllciBkcmFmdCwgdGhlcmUgYXJlIG1hbnkgcmVmZXJlbmNl cyB0byB2ZXJpZnkgYW5kDQo+ICAgICAgICAgID4+PiB2ZXJpZmllciBpbiB0aGUgbGVhZCB1 cCB0byB0aGUgZGVsaXZlcmFibGUgYnV0IG5vIGRlbGl2ZXJhYmxlcyBkZXNjcmliaW5nDQo+ ICAgICAgICAgID4+PiB2ZXJpZmljYXRpb24gcnVsZXMuIEknZCBsaWtlIHRvIHNlZSBydWxl cyBpbiBvbmUgb2YgdGhlc2UgZG9jdW1lbnRzIGFuZA0KPiAgICAgICAgICA+Pj4gdGhpbmsg aXQgd29ydGggY2l0aW5nIGluIHRoZSBkZWxpdmVyYWJsZXMuIEFyZSBiaW5kaW5ncyB0byBj ZXJ0aWZpY2F0ZQ0KPiAgICAgICAgICA+Pj4gbWFuYWdlbWVudCBwcm90b2NvbHMgb3V0IG9m IHNjb3BlPw0KPiAgICAgICAgICA+Pj4NCj4gICAgICAgICAgPj4+IE9uIDEwLzExLzE4LCA5 OjQ5IEFNLCAiUkFUUyBvbiBiZWhhbGYgb2YgSGVuayBCaXJraG9seiINCj4gICAgICAgICAg Pj4+IDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGhlbmsuYmlya2hvbHpA c2l0LmZyYXVuaG9mZXIuZGU+ICB3cm90ZToNCj4gICAgICAgICAgPj4+DQo+ICAgICAgICAg ID4+Pj4gSGkgYWxsLA0KPiAgICAgICAgICA+Pj4+DQo+ICAgICAgICAgID4+Pj4gc29ycnkg Zm9yIHRoZSBkZWxheS4gUGxlYXNlIGZpbmQgYW4gdXBkYXRlZCBjaGFydGVyIHByb3Bvc2Fs IGhlcmU6DQo+ICAgICAgICAgID4+Pj4NCj4gICAgICAgICAgPj4+Pj4gaHR0cHM6Ly9naXRo dWIuY29tL2lldGYtcmF0cy9jaGFydGVyL2Jsb2IvUkMyL2lldGYtcmF0cy1jaGFydGVyLm1k DQo+ICAgICAgICAgID4+Pj4gVGhlIEJvRiBwcm9wb25lbnRzIHRyaWVkIHRvIG1lcmdlIGFs bCBjb21tZW50cyBhbmQgcHJvcG9zYWxzIG9uDQo+ICAgICAgICAgID4+Pj4ga2V5c3RvcmVz LCBleGlzdGluZyBzb2x1dGlvbnMsIHByb3ZlbmFuY2UgJiBkZXZpY2UgY2hhcmFjdGVyaXN0 aWNzLCBldGMNCj4gICAgICAgICAgPj4+PiB0aGF0IHdlcmUgcmFpc2VkIG9uIHRoZSBsaXN0 IC0gYW5kIGFsaWduIHRoZW0gaW4gaG9tb2dlbmVvdXMgZmFzaGlvbi4NCj4gICAgICAgICAg Pj4+Pg0KPiAgICAgICAgICA+Pj4+IFRoaXMgZHJhZnQgaXMgaW50ZW5kZWQgdG8gZm9jdXMg dGhlIGRpc2N1c3Npb24gYW5kIGltcHJvdmUgdGhlIHdvcmRpbmcuDQo+ICAgICAgICAgID4+ Pj4NCj4gICAgICAgICAgPj4+PiBWaWVsZSBHcsO8w59lLA0KPiAgICAgICAgICA+Pj4+DQo+ ICAgICAgICAgID4+Pj4gSGVuaw0KPiAgICAgICAgICA+Pj4+DQo+ICAgICAgICAgID4+Pj4g T24gMTAvMDYvMjAxOCAwODoyMyBBTSwgTGF1cmVuY2UgTHVuZGJsYWRlIHdyb3RlOg0KPiAg ICAgICAgICA+Pj4+PiBIaSBIZW5rLA0KPiAgICAgICAgICA+Pj4+Pg0KPiAgICAgICAgICA+ Pj4+PiBCYW5na29rIElFVEYgaXMgZ2V0dGluZyBjbG9zZSwgd2lsbCB5b3UgYmUgYWJsZSB0 byB1cGRhdGUgdGhlIGNoYXJ0ZXINCj4gICAgICAgICAgPj4+Pj4gZm9yIHRoZSBhdHRlc3Rh dGlvbiBCb0YgdG8gcHJvcGVybHkgaW5jbHVkZSBFQVQ/ICBJIHNlbnQgeW91IHNvbWUgdGV4 dA0KPiAgICAgICAgICA+Pj4+PiB0aGF0IGp1c3QgbmVlZHMgdG8gYmUgcGFzdGVkIGFsb25n IHdpdGggc29tZSBjb21tZW50cy4gSXQgZG9lc27igJl0IGxvb2sNCj4gICAgICAgICAgPj4+ Pj4gbGlrZSB0aGVyZeKAmXMgYmVlbiBhbnkgdXBkYXRlcy4NCj4gICAgICAgICAgPj4+Pj4N Cj4gICAgICAgICAgPj4+Pj4gTEwNCj4gICAgICAgICAgPj4+Pj4NCj4gICAgICAgICAgPj4+ PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiAg ICAgICAgICA+Pj4+IFJBVFMgbWFpbGluZyBsaXN0DQo+ICAgICAgICAgID4+Pj4gUkFUU0Bp ZXRmLm9yZw0KPiAgICAgICAgICA+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vcmF0cw0KPiAgICAgICAgICA+Pj4gX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCj4gICAgICAgICAgPj4+IEVBVCBtYWlsaW5nIGxp c3QNCj4gICAgICAgICAgPj4+IEVBVEBpZXRmLm9yZw0KPiAgICAgICAgICA+Pj4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCj4gICAgICAgICAgPj4NCj4g ICAgICAgICAgPj4NCj4gICAgICAgICAgPj4gX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCj4gICAgICAgICAgPj4gRUFUIG1haWxpbmcgbGlzdA0K PiAgICAgICAgICA+PiBFQVRAaWV0Zi5vcmcgPG1haWx0bzpFQVRAaWV0Zi5vcmc+DQo+ICAg ICAgICAgID4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0DQo+ ICAgICAgICAgID4NCj4gICAgICAgICAgPg0KPiAgICAgICAgICA+DQo+ICAgICAgICAgID4g X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gICAg ICAgICAgPiBFQVQgbWFpbGluZyBsaXN0DQo+ICAgICAgICAgID4gRUFUQGlldGYub3JnDQo+ ICAgICAgICAgID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQN Cj4gICAgICAgICAgPg0KPiAgICAgIA0KPiAgICAgICAgICBfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiAgICAgICAgICBFQVQgbWFpbGluZyBs aXN0DQo+ICAgICAgICAgIEVBVEBpZXRmLm9yZw0KPiAgICAgICAgICBodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KPiAgICAgIA0KPiAgICAgIA0KPiAgICAg IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ICAg ICAgRUFUIG1haWxpbmcgbGlzdA0KPiAgICAgIEVBVEBpZXRmLm9yZw0KPiAgICAgIGh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0DQo+ICAgICAgSU1QT1JUQU5U IE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2htZW50 cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3Ug YXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5k ZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55 IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29w eSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPiAgICAgIA0K PiANCg== From nobody Tue Oct 16 09:11:56 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 756EE130DEF; Tue, 16 Oct 2018 09:11:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.301 X-Spam-Level: X-Spam-Status: No, score=-4.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oG0bMtrCDzSs; Tue, 16 Oct 2018 09:11:51 -0700 (PDT) Received: from alexa-out-sd-01.qualcomm.com (alexa-out-sd-01.qualcomm.com [199.106.114.38]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 55A71130DEE; Tue, 16 Oct 2018 09:11:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1539706311; x=1571242311; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=yRn/u6xbU/f9MuFbJh2Jd0o0n3eS4IJ1BYAxUdD7y8A=; b=LT+GZMZcJ3t2xkKkfEf0D4aIqNR5G+pm8x97zGeciduVUZ+ONYVXfd1T WfFwrWSA5UZiXaP4R6ndt8bmM3r3gktiOAPzjuSaOm4wUmGjQTw+NiE0f Z+SprJJRpBAa2cyzisJwtmhh9y0/lshSKYoOn6mGNXs9DbMQBk8gclltc I=; X-IronPort-AV: E=Sophos;i="5.54,389,1534834800"; d="scan'208";a="11152557" Received: from unknown (HELO ironmsg02-sd.qualcomm.com) ([10.53.140.142]) by alexa-out-sd-01.qualcomm.com with ESMTP; 16 Oct 2018 09:11:50 -0700 Received: from nasanexm01g.na.qualcomm.com ([10.85.0.33]) by ironmsg02-sd.qualcomm.com with ESMTP/TLS/AES256-SHA; 16 Oct 2018 09:11:50 -0700 Received: from NASANEXM01C.na.qualcomm.com (10.85.0.83) by NASANEXM01G.na.qualcomm.com (10.85.0.33) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Tue, 16 Oct 2018 09:11:49 -0700 Received: from NASANEXM01C.na.qualcomm.com ([10.85.0.83]) by NASANEXM01C.na.qualcomm.com ([10.85.0.83]) with mapi id 15.00.1365.000; Tue, 16 Oct 2018 09:11:49 -0700 From: Giridhar Mandyam To: "rats@ietf.org" CC: "eat@ietf.org" Thread-Topic: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? Thread-Index: AQHUZUtHtQOj2fDprkm7d1bHLCIs4aUiCkvg Date: Tue, 16 Oct 2018 16:11:49 +0000 Message-ID: <7f7a4f37cb0c4a6b8f3dab25b76acba6@NASANEXM01C.na.qualcomm.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.80.80.8] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Oct 2018 16:11:54 -0000 SGkgSGVuaywNClRoZSBSQzIgdmVyc2lvbiBpcyBjZXJ0YWlubHkgbW9yZSBicm9hZGx5IGFwcGxp Y2FibGUgdGhhbiB0aGUgTWFzdGVyIGJyYW5jaC4gIEkgaGF2ZSBjcmVhdGVkIGFub3RoZXIgUFIu ICBOb3RlIHRoZSBmb2xsb3dpbmc6DQoNCmEpIEkgZG9uJ3QgdW5kZXJzdGFuZCB3aHkgd2Ugd291 bGQgc2F5IHRoYXQgInNlY3VyZSBib290IiBpcyBkZXByZWNhdGVkLiAgSSB3b3VsZCBwcmVmZXIg dG8gYXZvaWQgYW55IG1lbnRpb24gb2YgdGhpcyBpbiB0aGUgY2hhcnRlci4NCg0KYikgSSBkb24n dCBrbm93IHdoeSB3ZSBleHBsaWNpdGx5IGNhbGwgb3V0IEdEUFIgY29tcGxpYW5jZS4gIFRoZXJl IGFyZSBtYW55IHByaXZhY3kgcmVndWxhdGlvbnMgYmV5b25kIHRoZSBFVS4gIEkgYWxzbyB3b25k ZXIgd2hldGhlciB3ZSBzaG91bGQgZXZlbiB0cnkgdG8gYWRkcmVzcyBhbGwgcmVndWxhdG9yeSBw cml2YWN5IHJlZ2ltZXMgLSBpdCBjb3VsZCBlYXNpbHkgYm9nIGRvd24gdGhlIHdvcmsgb2YgdGhl IGdyb3VwLg0KDQotR2lyaQ0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogSGVu ayBCaXJraG9seiA8aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4gDQpTZW50OiBUdWVz ZGF5LCBPY3RvYmVyIDE2LCAyMDE4IDU6MjUgQU0NClRvOiBHaXJpZGhhciBNYW5keWFtIDxtYW5k eWFtQHF0aS5xdWFsY29tbS5jb20+OyByYXRzQGlldGYub3JnDQpDYzogZWF0QGlldGYub3JnDQpT dWJqZWN0OiBSZTogW1JhdHNdIFtFQVRdIFtFWFRFUk5BTF0gUmU6IEF0dGVzdGF0aW9uIEJvRiBj aGFydGVyIHVwZGF0ZXM/DQoNCkhlbGxvIEdpcmlkaGFyLA0KDQpJIHRvdGFsbHkgYWdyZWUgdGhh dCBhdHRlc3RhdGlvbiBwcm9jZWR1cmVzIGRvIG5vdCBhbHdheXMgdXNlIG5ldHdvcmsgcHJvdG9j b2xzIGFzIGNvbnZleWFuY2UgbWV0aG9kcy4gSW4gYSBjb21wb3NpdGUgZGV2aWNlLCBlLmcuIGEg bmV0d29yayBlcXVpcG1lbnQgY2hhc3NpcywgdGhlcmUgY2FuIGJlIGEgY29tcG9uZW50IGhpZXJh cmNoeSBpbiB3aGljaCBlYWNoIGNvbXBvbmVudCBjYW4gYmUgYXNzb2NpYXRlZCB3aXRoIGFuIGF0 dGVzdGVyIHJvbGUgYW5kL29yIHZlcmlmaWVyIHJvbGU7IGVuYWJsaW5nIChtdXR1YWwpIGF0dGVz dGF0aW9uIGJldHdlZW4gZWFjaCBjb21wb25lbnQvc3ViLWNvbXBvbmVudCByZWxhdGlvbnNoaXAg dXNpbmcgdmFyaW91cyBraW5kcyBvZiBpbnRlcmNvbm5lY3RzIChhbmQgbm9uZSBvZiB0aGVtIGhh dmUgdG8gYmUgSVApLiBLZWVwaW5nIHRoYXQgaW4gbWluZCB3aGVuIGRlc2lnbmluZyBkYXRhIG1v ZGVscyBhbmQgY29ycmVzcG9uZGluZyBzZXJpYWxpemF0aW9ucyBpcyBpbXBvcnRhbnQuIEZvciBy ZW1vdGUgYXR0ZXN0YXRpb24gdmlhIG5ldHdvcmsgcHJvdG9jb2xzIGl0IG1pZ2h0IG5vdCBiZSB0 aGUgbW9zdCBpbXBvcnRhbnQgdGhpbmcsIHRob3VnaC4NCg0KVGhlcmUgYXJlIG1vc3QgY2VydGFp bmx5ICJvbiBiZWhhbGYiIHJvbGVzLCBwcm92aWRlZCB0aGF0IHRoZXJlIGlzIGEgInRydXN0ZWQg cGF0aCIgcmVsYXRpb25zaGlwIChxdW90aW5nIG9yYW5nZSBib29rIGhlcmUpIHZpYSB3aGljaCB0 aGUgYXR0ZXN0YXRpb24gcHJvY2VkdXJlIGNvdWxkIGJlIGJlaGF2ZSBsaWtlIGEgbG9jYWwgb25l Lg0KSSBhbSBub3Qgc3VyZSwgaWYgSSBzZWUgYSAidmVyaWZpZXJzIG9uIGJlaGFsZiBvZiBhIHJl bW90ZSByZWx5aW5nIHBhcnR5IiBzY2VuYXJpbywgYnV0IGluIGdlbmVyYWwsIEknZCBhZ3JlZSB3 aXRoIHRoZSBjb25jZXB0Lg0KDQpJbiBzdW1tYXJ5LCBpZiB0aGUgYXR0ZXN0ZXIgYW5kIHRoZSB2 ZXJpZmllciBhcmUgY29ubmVjdGVkIHZpYSBhICJ0cnVzdGVkIHBhdGgiIHRoZW4gaXQgaXMgZXNz ZW50aWFsbHkgbG9jYWwgYXR0ZXN0YXRpb24uDQoNClVuZm9ydHVuYXRlbHksIHlvdSBpc3N1ZWQg dGhlIHB1bGwgcmVxdWVzdCBvbiBtYXN0ZXIsIHRoZSBjdXJyZW50IHZlcnNpb24gaXMgaW4gdGhl IFJDMiBicmFuY2g6DQoNCj4gaHR0cHM6Ly9naXRodWIuY29tL2lldGYtcmF0cy9jaGFydGVyL2Js b2IvUkMyL2lldGYtcmF0cy1jaGFydGVyLm1kDQoNCldlIGFyZSBjdXJyZW50bHkgdHJpbW1pbmcg dGhlIHRleHQsIHJlZmFjdG9yaW5nIHRoZSBjb250ZW50IGJ5IHVzaW5nIG1vcmUgZ2VuZXJpYyB0 ZXJtaW5vbG9neSwgYW5kIGN1dCBvdXQgYWJvdXQgaGFsZiBvZiB0aGUgY29udGVudCAod3J0IHRv IHRoZSBtYXN0ZXIgYnJhbmNoKSBpbiBvcmRlciB0byBzZWdyZWdhdGUgcHJvYmxlbSBzdGF0ZW1l bnRzIGFuZCBnb2FscyBpbnRvIHBoYXNlcy4gVGhlIGN1cnJlbnQgdmVyc2lvbiByZWZlcmVuY2Vk IGFib3ZlIGlzIGludGVuZGVkIHRvIGJlIGJlY29tZSBwaGFzZSBvbmUuDQoNClZpZWxlIEdyw7zD n2UsDQoNCkhlbmsNCg0KT24gMTAvMTUvMjAxOCAwOTozMyBQTSwgR2lyaWRoYXIgTWFuZHlhbSB3 cm90ZToNCj4gU29ycnkgdG8gc3dpdGNoIHRvcGljcy4NCj4gDQo+IEp1c3QgcG9zdGVkIG15IHJl cXVlc3RlZCBjaGFuZ2VzIGF0IGh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMvY2hhcnRlci9w dWxsLzEuDQo+IA0KPiAyIGFyZWFzIHRvIGNvbnNpZGVyOg0KPiANCj4gYSkgTWFueSByZXNvdXJj ZS1jb25zdHJhaW5lZCBkZXZpY2VzIHdpbGwgbm90IHN1cHBvcnQgSW50ZXJuZXQgQ29ubmVjdGl2 aXR5LiAgVGhpcyBkb2VzIG5vdCBtZWFuIHRoYXQgcmVtb3RlIGF0dGVzdGF0aW9uIGlzIG5vdCBw b3NzaWJsZS4gIEl0IGp1c3QgbWVhbnMgdGhhdCB0aGlzIGVmZm9ydCB3aWxsIGJlIG1vcmUgYnJv YWRseSBhcHBsaWNhYmxlIGlmIGFuIGludGVyb3BlcmFibGUgZm9ybWF0IGZvciAnQXR0ZXN0YXRp b24gRXZpZGVuY2UnIHJlc3VsdHMgdGhhdCBjYW4gYmUgY29udmV5ZWQgb3ZlciBtdWx0aXBsZSBw cm90b2NvbHMsIG5vdCBqdXN0IHRoZSBpbnRlcm5ldC4gIEVBVCB3YXMgZGVzaWduZWQgd2l0aCB0 aGlzIGdvYWwgaW4gbWluZC4NCj4gDQo+IGIpIExvY2FsIGF0dGVzdGF0aW9uIGlzIG1vcmUgdGhh biBqdXN0IG9uLWRldmljZS4gIFdlIGhhdmUgc2VlbiBnYXRld2F5cyBpbiB0aGUgbWFya2V0IHRo YXQgYWxsb3cgZm9yIHJlbW90ZSBhZG1pbmlzdHJhdGlvbiBvZiBkZXZpY2VzIGluIGEgbG9jYWwg bmV0d29yayB0aGF0IG1heSBvbmx5IGNvbW11bmljYXRlIHZpYSBzaG9ydC1yYW5nZSBwcm90b2Nv bHMgc3VjaCBhcyBCbHVldG9vdGggb3IgWmlnYmVlLiAgU3VjaCBnYXRld2F5cyBtYXkgdmVyeSB3 ZWxsIGFsc28gc2VydmUgYXMgdmVyaWZpZXJzIG9uIGJlaGFsZiBvZiBhIHJlbW90ZSByZWx5aW5n IHBhcnR5Lg0KPiANCj4gLUdpcmkgTWFuZHlhbQ0KPiANCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdl LS0tLS0NCj4gRnJvbTogRUFUIDxlYXQtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIEhh bm5lcyBUc2Nob2ZlbmlnDQo+IFNlbnQ6IE1vbmRheSwgT2N0b2JlciAxNSwgMjAxOCAxMDo1MCBB TQ0KPiBUbzogU21pdGgsIE5lZCA8bmVkLnNtaXRoQGludGVsLmNvbT47IEhlbmsgQmlya2hvbHog DQo+IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPjsgcmF0c0BpZXRmLm9yZzsgSmVy ZW15IE8nRG9ub2dodWUgDQo+IDxqb2Rvbm9naEBxdGkucXVhbGNvbW0uY29tPjsgRGVuaXMgPGRl bmlzLmlldGZAZnJlZS5mcj4NCj4gQ2M6IGVhdEBpZXRmLm9yZw0KPiBTdWJqZWN0OiBSZTogW0VB VF0gW0VYVEVSTkFMXSBSZTogW1JhdHNdIEF0dGVzdGF0aW9uIEJvRiBjaGFydGVyIHVwZGF0ZXM/ DQo+IA0KPiBIZXJlIGFyZSBteSA1IGNlbnRzIG9uIHRoZSB0ZXJtICdpZGVudGl0eScuDQo+IA0K PiBJIGhhdmUgYmVlbiB3b3JraW5nIG9uIGlkZW50aXR5IG1hbmFnZW1lbnQgZm9yIG1hbnkgeWVh cnMgKHBhcnRpYWxseSBiZWNhdXNlIG9mIG15IE9BdXRoIGNvLWNoYWlyIHJvbGUpIGFuZCBJIGhh dmUgbm90aWNlZCB0aGF0IHRoZSB1c2Ugb2YgdGhlIHRlcm0gImlkZW50aXR5IiB0ZW5kcyB0byBj b25mdXNlIG1vcmUgdGhhbiBpdCBoZWxwcyAoZXZlbiBtb3JlIHNvIHdoZW4gdGhlIHRlcm0gaXMg YXBwbGllZCB0byBkZXZpY2VzIGFuZCBzb2Z0d2FyZSByYXRoZXIgdGhhbiBodW1hbnMpLg0KPiAN Cj4gSSBiZWxpZXZlIHdlIGNvdWxkIGdldCBhd2F5IHdpdGggZGVzY3JpYmluZyB3aGF0IHdlIHdh bnQgd2l0aG91dCBldmVyIHVzaW5nIHRoZSB0ZXJtLg0KPiANCj4gSW4gdGhpcyBjb250ZXh0IEkg d291bGQgYXJndWUgdGhhdCB3ZSBhcmUgYWJvdXQgaWRlbnRpZnlpbmcgZGlmZmVyZW50IGNvbXBv bmVudHMsIHN1Y2ggYXMgaGFyZHdhcmUgYW5kIHNvZnR3YXJlLg0KPiANCj4gQ2lhbw0KPiBIYW5u ZXMNCj4gDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IEVBVCA8ZWF0LWJv dW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBTbWl0aCwgTmVkDQo+IFNlbnQ6IE1vbmRheSwg T2N0b2JlciAxNSwgMjAxOCA5OjAwIEFNDQo+IFRvOiBIZW5rIEJpcmtob2x6IDxoZW5rLmJpcmto b2x6QHNpdC5mcmF1bmhvZmVyLmRlPjsgcmF0c0BpZXRmLm9yZzsgDQo+IEplcmVteSBPJ0Rvbm9n aHVlIDxqb2Rvbm9naEBxdGkucXVhbGNvbW0uY29tPjsgRGVuaXMgDQo+IDxkZW5pcy5pZXRmQGZy ZWUuZnI+DQo+IENjOiBlYXRAaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtFQVRdIFtFWFRFUk5B TF0gUmU6IFtSYXRzXSBBdHRlc3RhdGlvbiBCb0YgY2hhcnRlciB1cGRhdGVzPw0KPiANCj4gSSBh Z3JlZSB3aXRoIEhlbmsncyBvYnNlcnZhdGlvbiB0aGF0IHRoZXJlIGlzIG9wcG9ydHVuaXR5IHRv IGZpbmQgY29tbW9uIGdyb3VuZCBvbiBpZGVudGl0eSBhcyBpZGVudGl0eSBjYW4gYmUgYSBjb2xs ZWN0aW9uIG9mIGF0dHJpYnV0ZXMsIHRoYXQgaWYgc2lnbmVkLCBiZWNvbWVzIGEgc2V0IG9mIHZl cmlmaWFibGUgY2xhaW1zIChhYm91dCBpZGVudGl0eSBhdHRyaWJ1dGVzKS4gQXR0ZXN0YXRpb24g aGFzIGEgc2ltaWxhciBzdHJ1Y3R1cmUgaW4gdGhhdCBpdCBjb25zaXN0cyBvZiBhIHNldCBvZiBh dHRyaWJ1dGVzLCB0aGF0IGlmIHNpZ25lZCBiZWNvbWVzIGEgc2V0IG9mIHZlcmlmaWFibGUgY2xh aW1zLiBUaGUgbWFpbiBkaWZmZXJlbmNlIGJldHdlZW4gaWRlbnRpdHkgYW5kIGF0dGVzdGF0aW9u IGF0dHJpYnV0ZXMgaXMgd2hldGhlciB0aGUgYXR0cmlidXRlIHNlbWFudGljYWxseSByZWxhdGUg dG8gdHJ1c3QgKHZzLiBpZGVudGl0eSkuIEZvciBleGFtcGxlLCBjbGFpbXMgb2Ygc2VjdXJpdHkg Y2VydGlmaWNhdGlvbiBjb21wbGlhbmNlIHJlc29uYXRlcyBhcyBhdHRlc3RhdGlvbi4NCj4gDQo+ IEl0IG1heSBiZSBwb3NzaWJsZSB0byBjb21iaW5lIGEgc2V0IG9mIGF0dGVzdGF0aW9uIGF0dHJp YnV0ZXMgaW4gc3VjaCBhIHdheSB0aGF0IHRoZSBjb21iaW5hdGlvbiB1bmlxdWVseSBpZGVudGlm aWVzIGFuIGVudGl0eS4gQnV0IHRoYXQgZG9lc24ndCBtYWtlIGl0IGFuIGlkZW50aXR5IHN5c3Rl bSBwZXIgc2UgYW5kIHNob3VsZG4ndCBjYXVzZSBhIGNvbmZsaWN0IGluIGNoYXJ0ZXIgZ29hbHMg d2l0aCByZXNwZWN0IHRvIG90aGVyIGlkZW50aXR5IGZvY3VzZWQgZWZmb3J0cyBpbiBJRVRGLg0K PiANCj4gQWxzbywgaW5jbHVzaW9uIG9mIGF0dHJpYnV0ZXMgdGhhdCBkb24ndCBoYXZlIHNlbWFu dGljcyB0aGF0IHJlYXNvbmFibHkgcmVsYXRlIHRvIHRydXN0IHNob3VsZCBub3QgYmUgb2YgaW50 ZXJlc3QgdG8gYSB3b3JraW5nIGdyb3VwIGZvY3VzZWQgb24gYXR0ZXN0YXRpb24uDQo+IA0KPiAt TmVkDQo+IA0KPiDvu79PbiAxMC8xNS8xOCwgMzo1MyBQTSwgIkVBVCBvbiBiZWhhbGYgb2YgSGVu ayBCaXJraG9seiIgPGVhdC1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBoZW5rLmJpcmto b2x6QHNpdC5mcmF1bmhvZmVyLmRlPiB3cm90ZToNCj4gDQo+ICAgICAgSGkgSmVyZW15ICYgRGVu aXMsDQo+IA0KPiAgICAgIGFsbCB0aGVzZSBwb2ludHMgb2YgdmlldyBoYXZlIG1lcml0LCBJIHRo aW5rLg0KPiANCj4gICAgICBQbGVhc2UgaGF2ZSBhIGxvb2sgYXQgdGhlc2UgcXVvdGVzOg0KPiAN Cj4gICAgICA+IGtub3dpbmcgdGhlIHByb3ZlbmFuY2Ugb2YgdGhlIGRldmljZQ0KPiANCj4gICAg ICA+IGhhdmluZyB0aGUgZW50aXR5IGNyZWF0b3IvbWFudWZhY3R1cmVyIHByb3ZpZGUgYSBzZXQg b2YgY2xhaW1zIA0KPiB3aGljaCBjYW4gYmUgdmVyaWZpZWQNCj4gDQo+ICAgICAgPiB0byBrbm93 IHRoZSBjaGFyYWN0ZXJpc3RpY3Mgb2YgYSBkZXZpY2UgYnkgaXNzdWluZyB0byB0aGUgZGV2aWNl IGEgcHVibGljIGtleSBjZXJ0aWZpY2F0ZSB3aGljaCB3aWxsIG9ubHkgYmUgaXNzdWVkIHRvIHRo ZSBkZXZpY2UgaWYgaXQgZnVsZmlsbHMgYW4gZXhwZWN0ZWQgc2V0IG9mIGZ1bmN0aW9uYWxpdGll cy4NCj4gDQo+ICAgICAgVG8gbWUsIHRoZXNlIGRlc2NyaXB0aW9ucyBzZWVtIHRvIGhhdmUgZGlm ZmVyZW50IGludGVudHMsIHNjb3BlIG9yDQo+ICAgICAgYXVkaWVuY2UgYW5kIHJlcXVpcmUgbW9z dCBjZXJ0YWlubHkgZGlmZmVyZW50IHdvcmstZmxvd3MsIGJ1dA0KPiAgICAgIHNlbWFudGljYWxs eSBhbmQgaW4gY29uc2VxdWVuY2UgcmVwcmVzZW50YXRpb24td2lzZSB0aGV5IGFsc28gc2VlbSBx dWl0ZQ0KPiAgICAgIHJlbGF0ZWQuDQo+IA0KPiAgICAgIElmIHlvdSB0aGluayBvZiBhbiBpZGVu dGl0eSBkb2N1bWVudCBhcyBhIHNldCBvZiBjbGFpbXMgKHBvdGVudGlhbGx5DQo+ICAgICAgaW5j bHVkaW5nIGEgcHVibGljIGtleSksIHRoYXQgaXMgc2lnbmVkIGFuZCB0aGF0IGNhbiBtYXRjaCBv bmUgb3IgbW9yZQ0KPiAgICAgIHRoaW5ncywgbWF5YmUgYWxsIHRocmVlIHR5cGVzIGhpZ2hsaWdo dGVkIGFib3ZlIGFyZSBhY3R1YWxseSBjb3ZlcmVkIGJ5DQo+ICAgICAgdGhlIHNhbWUgaWRlbnRp dHkgZG9jdW1lbnQgY29uY2VwdD8NCj4gDQo+ICAgICAgV2l0aCByZXNwZWN0IHRvIGlkZW50aXR5 IGRvY3VtZW50cywgSSB0aGluayBpdCBpcyBzYWZlIHNvIHNheSB0aGF0IHdlDQo+ICAgICAgY2Fu IGZpbmQgY29tbW9uIGdyb3VuZCBoZXJlIHJhdGhlciBlYXNpbHkuIFRoYXQgc2FpZCwgdGhlIHdh eSBob3cgdGhlc2UNCj4gICAgICBpZGVudGl0eSBkb2N1bWVudHMgY29tZSBpbnRvIGV4aXN0ZW5j ZSwgd2hlbiBhbmQgaG93IHRoZXkgYXJlIGRlcGxveWVkDQo+ICAgICAgb24gdGhlIHRoaW5nIG9y IGFzc29jaWF0ZWQgd2l0aCBtdWx0aXBsZSB0aGluZ3MgaXMgYW5vdGhlciBxdWVzdGlvbi4gV2UN Cj4gICAgICBtb3N0IGNlcnRhaW5seSBkbyBub3Qgd2FudCB0byBlbmQgdXAgd2l0aCBhICJzaWdu aW5nIGZvb2wiIHRoYXQgZG9lcyBub3QNCj4gICAgICBhZGQgdmFsdWUgdG8gdGhlIGxldmVsIG9m IGNvbmZpZGVuY2UgKEkgYW0gcXVvdGluZyBOZWQgU21pdGggaGVyZSkuDQo+IA0KPiAgICAgIFRo aXMgaGFzIHRvIGJlIGZsZXNoZWQgb3V0IGV4cGxpY2l0bHkgZm9yIGVhY2ggc2NlbmFyaW8gYW5k IHRoZSBwYXJ0cw0KPiAgICAgIHRoYXQgYXJlIHJldXNlZCBpbiBldmVyeSBzY2VuYXJpbyBzaG91 bGQgZ2V0IHNwZWNpYWwgYXR0ZW50aW9uIGluIHRoZQ0KPiAgICAgIHVwY29taW5nIFJBVFMgYXJj aGl0ZWN0dXJlIGRyYWZ0Lg0KPiANCj4gICAgICBJZGVudGlmeWluZyBjbGFpbXMgYWdncmVnYXRl ZCBpbiBhbiBpZGVudGl0eSBkb2N1bWVudCBtb3N0IGNlcnRhaW5seSBjYW4NCj4gICAgICBpbmNs dWRlIGRldmljZSBjaGFyYWN0ZXJpc3RpY3MsIHB1YmxpYyBrZXkocyksIG9yIGNsYWltcyBhYm91 dCB0aGUNCj4gICAgICBpbnRlbmRlZCBmdW5jdGlvbnMgYW5kIGNhcGFiaWxpdGllcyBvZiB0aGUg dGhpbmcuIENsYWltcyBjYW4gZXZlbg0KPiAgICAgIG9yaWdpbmF0ZSBmcm9tIENsYWltYW50cyB0 aGF0IGFyZSBub3QgdGhlIHRoaW5nIGl0c2VsZiwgYnV0IGV4dGVybmFsDQo+ICAgICAgZW50aXRp ZXMgcHJvdmlkaW5nIGFuIGFzc2VydGlvbiAoZS5nLiB0aGVzZSB0aGluZ3MgYXJlIENDLWNlcnRp ZmllZCkuDQo+IA0KPiAgICAgIEFsbCBkaWZmZXJlbnQgY29tcG9zaXRlcyBvZiBpZGVudGlmeWlu ZyBjbGFpbXMgaGF2ZSBhIHNwZWNpZmljIHNoYXJlZA0KPiAgICAgIGludGVuZCBpbiB0aGlzIGNv bnRleHQgdGhvdWdoLCBJIHRoaW5rOiBleHByZXNzaW5nIEF0dGVzdGF0aW9uDQo+ICAgICAgUHJv dmVuYW5jZSAoYWdhaW4gLSBvbmUgZm9yIG9uZSBvciBtb3JlIHRoaW5ncyBvZiB0aGUgc2FtZSBr aW5kKS4gQW5kDQo+ICAgICAgYWxsIG9mIHRoZW0gb3JpZ2luYXRlIGZyb20gQ2xhaW1hbnRzIGFu ZCB0aGVyZWZvcmUgdXNlIGEgcm9vdCBvZiB0cnVzdA0KPiAgICAgIG9mIG1lYXN1cmVtZW50LCBJ IHRoaW5rLg0KPiANCj4gICAgICBUaGF0IHNhaWQsIGVzdGFibGlzaGluZyB0cnVzdHdvcnRoeSBr bm93bGVkZ2UgYWJvdXQgYXR0ZXN0YXRpb24NCj4gICAgICBwcm92ZW5hbmNlIGlzIG9ubHkgdGhl IGZpcnN0IHN0ZXAgYW5kIHByb3ZpZGVzIHRoZSBmb3VuZGF0aW9uIGZvciBtb3JlDQo+ICAgICAg Y29tcGxleCBhdHRlc3RhdGlvbiBwcm9jZWR1cmVzLiBJbiBhbnkgY2FzZSwgdGhpcyBzZWVtIHRv IGJlIHJlcXVpcmVkIGJ5DQo+ICAgICAgZXZlcnkgc2NlbmFyaW8gdGhhdCB3YXMgaGlnaGxpZ2h0 ZWQgc28gZmFyIGFuZCB0aGVyZWZvcmUgd2lsbCBtb3N0DQo+ICAgICAgY2VydGFpbmx5IGJlIGNv dmVyZWQgaW4gYSBkZWxpdmVyYWJsZS4NCj4gDQo+ICAgICAgSUhUSCwNCj4gDQo+ICAgICAgSGVu aw0KPiANCj4gDQo+ICAgICAgT24gMTAvMTUvMjAxOCAxMjoyMiBQTSwgSmVyZW15IE8nRG9ub2do dWUgd3JvdGU6DQo+ICAgICAgPiBPbiAxMiBPY3QgMjAxOCwgYXQgMTQ6MzMsIERlbmlzIDxkZW5p cy5pZXRmQGZyZWUuZnINCj4gICAgICA+IDxtYWlsdG86ZGVuaXMuaWV0ZkBmcmVlLmZyPj4gd3Jv dGU6DQo+ICAgICAgPj4gVGhlICJQcm9ibGVtIFN0YXRlbWVudCIgY29udGludWVzIGFzIGZvbGxv d3M6DQo+ICAgICAgPj4NCj4gICAgICA+PiAoMikgVG9kYXksIHRoZXJlIGlzIG5vIGNvbW1vbiwg c3RhbmRhcmQgd2F5IGZvciBSZWx5aW5nIFBhcnRpZXMgdG8NCj4gICAgICA+PiBrbm93IHRoZSBw cm92ZW5hbmNlIGFuZCBjaGFyYWN0ZXJpc3RpY3Mgb2YgYSBkZXZpY2UgKGUuZy4sIGFuIGVuZC11 c2VyDQo+ICAgICAgPj4gZGV2aWNlLA0KPiAgICAgID4+IHBsYXRmb3JtIG9yIGVuZHBvaW50LCBz ZXJ2ZXJzLCBJb1QgZGV2aWNlcywgZGV2aWNlIHN1YnN5c3RlbXMgYW5kDQo+ICAgICAgPj4gc3Vi LW1vZHVsZXMpIHRoYXQgbWF5IGJlIHJlcXVlc3Rpbmcgc2VydmljZXMuDQo+ICAgICAgPj4NCj4g ICAgICA+PiBLbm93aW5nIHRoZSBwcm92ZW5hbmNlIG9mIHRoZSBkZXZpY2UgaXMgbm90IGFsd2F5 cyBuZWNlc3NhcnkuIFdoYXQgaXMNCj4gICAgICA+PiBpbXBvcnRhbnQgaXMgdG8ga25vdyB0aGF0 IGEgc3BlY2lmaWMgc2V0IG9mIGZ1bmN0aW9ucyBpcyAoc2VjdXJlbHkpDQo+ICAgICAgPj4gc3Vw cG9ydGVkIGJ5IHRoZSBkZXZpY2UuDQo+ICAgICAgPj4gVGhlcmUgYWxyZWFkeSBleGlzdHMgYSBj b21tb24gd2F5IHRvIGtub3cgdGhlIGNoYXJhY3RlcmlzdGljcyBvZiBhDQo+ICAgICAgPj4gZGV2 aWNlIGJ5IGlzc3VpbmcgdG8gdGhlIGRldmljZSBhIHB1YmxpYyBrZXkgY2VydGlmaWNhdGUgd2hp Y2ggd2lsbA0KPiAgICAgID4+IG9ubHkgYmUgaXNzdWVkIHRvIHRoZSBkZXZpY2UNCj4gICAgICA+ PiBpZiBpdCBmdWxmaWxscyBhbiBleHBlY3RlZCBzZXQgb2YgZnVuY3Rpb25hbGl0aWVzLiBJbiBz dWNoIGEgY2FzZSBhDQo+ICAgICAgPj4gc3ludGF4IGZvciBhIHRydXN0ZWQgY2xhaW0gc2V0cyoq aXMgbm90IG5lZWRlZC4NCj4gICAgICA+Pg0KPiAgICAgID4gVGhpcyBpcyBpbmRlZWQgYSBwb3Nz aWJsZSB3YXkgdG8gYWRkcmVzcyB0aGUgcHJvYmxlbSwgYnV0IHN1ZmZlcnMgZnJvbQ0KPiAgICAg ID4gY2hhbGxlbmdlcyB3aGljaCBjb21lIGRvd24gdG86DQo+ICAgICAgPg0KPiAgICAgID4gLSBX aG8gaXNzdWVzIHN1Y2ggY2VydGlmaWNhdGVzLiBBbiBvcHRpb24gaXMgdGhhdCB0aGVyZSBpcyBz b21lIGZvcm0gb2YNCj4gICAgICA+IHNlY3VyaXR5IGNlcnRpZmljYXRpb24gYmVoaW5kIHRoaXMg aXNzdWFuY2Ugb3RoZXJ3aXNlIGl0IGlzIG9mIHZlcnkNCj4gICAgICA+IGxpbWl0ZWQgdmFsdWUu DQo+ICAgICAgPiAtIEluIG9yZGVyIHRvIGNhcHR1cmUgdGhlIHdpZGUgdmFyaWV0eSBvZiBkaWZm ZXJlbnQgZGV2aWNlcyAoSSBwcmVmZXINCj4gICAgICA+ICJlbnRpdHkiIGhlcmUgYXMgaXQgaXMg bW9yZSBnZW5lcmFsIHRoYW4gImRldmljZSIpLCBtYW55IGRpZmZlcmVudCBmb3Jtcw0KPiAgICAg ID4gb2Ygc3VjaCBjZXJ0aWZpY2F0ZXMgd291bGQgYmUgcmVxdWlyZWQuIFRoaXMgZW5kcyB1cCBi ZWluZyBtdWNoIHRoZSBzYW1lDQo+ICAgICAgPiB0aGluZyBhcyBhIHNldCBvZiBjbGFpbXMuDQo+ ICAgICAgPg0KPiAgICAgID4gR2l2ZW4gdGhlIG11bHRpcGxpY2l0eSBvZiBlbnRpdGllcyBmb3Ig d2hpY2ggYXR0ZXN0YXRpb24gbWlnaHQgYmUNCj4gICAgICA+IHVzZWZ1bCwgaXQgc2VlbXMgdG8g bWUgdGhhdCBoYXZpbmcgdGhlIGVudGl0eSBjcmVhdG9yL21hbnVmYWN0dXJlcg0KPiAgICAgID4g cHJvdmlkZSBhIHNldCBvZiBjbGFpbXMgd2hpY2ggY2FuIGJlIHZlcmlmaWVkIGlzIG1vcmUgZmxl eGlibGUgdGhhbg0KPiAgICAgID4gcmVxdWlyaW5nIGEgY2VydGlmaWNhdGUuIEl0IHNlZW1zIGxp a2VseSB0byBtZSB0aGF0IHdoZXJlIGEgZm9ybWFsDQo+ICAgICAgPiBzZWN1cml0eSBjZXJ0aWZp Y2F0aW9uIGlzIG5lZWRlZCB0aGVyZSB3aWxsIGJlIGEgY2VydGlmaWNhdGUgaXNzdWVkIGJ5DQo+ ICAgICAgPiB0aGUgQ2VydGlmeWluZyBCb2R5IGFzIG9uZSBvZiB0aGUgY2xhaW1zIGFib3V0IGFu IGVudGl0eSwgYnV0IEkgY2FuDQo+ICAgICAgPiB0aGluayBvZiBtYW55IGNhc2VzIChzdXBwbHkg Y2hhaW4gbWFuYWdlbWVudCwgdG8gdGFrZSBqdXN0IG9uZSBleGFtcGxlKQ0KPiAgICAgID4gd2hl cmUgcHJvdmVuYW5jZSBpcyBieSBmYXIgdGhlIG1vc3QgdXNlZnVsIGluZm9ybWF0aW9uLg0KPiAg ICAgID4NCj4gICAgICA+IEknbSBub3QgaW4gZmF2b3VyIG9mIGNoYW5nZXMgdG8gdGhlIGNoYXJ0 ZXIgaW4gdGhpcyBkaXJlY3Rpb24uDQo+ICAgICAgPj4NCj4gICAgICA+PiBUaGUgc2ltcGxlc3Qg Y2FzZXMgc2hvdWxkIGFsc28gYmUgcGFydCBvZiB0aGUgZnJhbWV3b3JrLg0KPiAgICAgID4+DQo+ ICAgICAgPj4gTm90ZTogSSBwZXJzb25hbGx5IGFwcHJlY2lhdGUgdGhhdCBwcml2YWN5IGlzIGFu IGFzcGVjdCB0aGF0DQo+ICAgICAgPj4gd2lsbC9zaG91bGQgYmUgdGFrZW4gaW50byBjb25zaWRl cmF0aW9uLg0KPiAgICAgID4+DQo+ICAgICAgPj4gRGVuaXMNCj4gICAgICA+Pg0KPiAgICAgID4+ PiBBcyB3aXRoIHRoZSBlYXJsaWVyIGRyYWZ0LCB0aGVyZSBhcmUgbWFueSByZWZlcmVuY2VzIHRv IHZlcmlmeSBhbmQNCj4gICAgICA+Pj4gdmVyaWZpZXIgaW4gdGhlIGxlYWQgdXAgdG8gdGhlIGRl bGl2ZXJhYmxlIGJ1dCBubyBkZWxpdmVyYWJsZXMgZGVzY3JpYmluZw0KPiAgICAgID4+PiB2ZXJp ZmljYXRpb24gcnVsZXMuIEknZCBsaWtlIHRvIHNlZSBydWxlcyBpbiBvbmUgb2YgdGhlc2UgZG9j dW1lbnRzIGFuZA0KPiAgICAgID4+PiB0aGluayBpdCB3b3J0aCBjaXRpbmcgaW4gdGhlIGRlbGl2 ZXJhYmxlcy4gQXJlIGJpbmRpbmdzIHRvIGNlcnRpZmljYXRlDQo+ICAgICAgPj4+IG1hbmFnZW1l bnQgcHJvdG9jb2xzIG91dCBvZiBzY29wZT8NCj4gICAgICA+Pj4NCj4gICAgICA+Pj4gT24gMTAv MTEvMTgsIDk6NDkgQU0sICJSQVRTIG9uIGJlaGFsZiBvZiBIZW5rIEJpcmtob2x6Ig0KPiAgICAg ID4+PiA8cmF0cy1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBoZW5rLmJpcmtob2x6QHNp dC5mcmF1bmhvZmVyLmRlPiAgd3JvdGU6DQo+ICAgICAgPj4+DQo+ICAgICAgPj4+PiBIaSBhbGws DQo+ICAgICAgPj4+Pg0KPiAgICAgID4+Pj4gc29ycnkgZm9yIHRoZSBkZWxheS4gUGxlYXNlIGZp bmQgYW4gdXBkYXRlZCBjaGFydGVyIHByb3Bvc2FsIGhlcmU6DQo+ICAgICAgPj4+Pg0KPiAgICAg ID4+Pj4+IGh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMvY2hhcnRlci9ibG9iL1JDMi9pZXRm LXJhdHMtY2hhcnRlci5tZA0KPiAgICAgID4+Pj4gVGhlIEJvRiBwcm9wb25lbnRzIHRyaWVkIHRv IG1lcmdlIGFsbCBjb21tZW50cyBhbmQgcHJvcG9zYWxzIG9uDQo+ICAgICAgPj4+PiBrZXlzdG9y ZXMsIGV4aXN0aW5nIHNvbHV0aW9ucywgcHJvdmVuYW5jZSAmIGRldmljZSBjaGFyYWN0ZXJpc3Rp Y3MsIGV0Yw0KPiAgICAgID4+Pj4gdGhhdCB3ZXJlIHJhaXNlZCBvbiB0aGUgbGlzdCAtIGFuZCBh bGlnbiB0aGVtIGluIGhvbW9nZW5lb3VzIGZhc2hpb24uDQo+ICAgICAgPj4+Pg0KPiAgICAgID4+ Pj4gVGhpcyBkcmFmdCBpcyBpbnRlbmRlZCB0byBmb2N1cyB0aGUgZGlzY3Vzc2lvbiBhbmQgaW1w cm92ZSB0aGUgd29yZGluZy4NCj4gICAgICA+Pj4+DQo+ICAgICAgPj4+PiBWaWVsZSBHcsO8w59l LA0KPiAgICAgID4+Pj4NCj4gICAgICA+Pj4+IEhlbmsNCj4gICAgICA+Pj4+DQo+ICAgICAgPj4+ PiBPbiAxMC8wNi8yMDE4IDA4OjIzIEFNLCBMYXVyZW5jZSBMdW5kYmxhZGUgd3JvdGU6DQo+ICAg ICAgPj4+Pj4gSGkgSGVuaywNCj4gICAgICA+Pj4+Pg0KPiAgICAgID4+Pj4+IEJhbmdrb2sgSUVU RiBpcyBnZXR0aW5nIGNsb3NlLCB3aWxsIHlvdSBiZSBhYmxlIHRvIHVwZGF0ZSB0aGUgY2hhcnRl cg0KPiAgICAgID4+Pj4+IGZvciB0aGUgYXR0ZXN0YXRpb24gQm9GIHRvIHByb3Blcmx5IGluY2x1 ZGUgRUFUPyAgSSBzZW50IHlvdSBzb21lIHRleHQNCj4gICAgICA+Pj4+PiB0aGF0IGp1c3QgbmVl ZHMgdG8gYmUgcGFzdGVkIGFsb25nIHdpdGggc29tZSBjb21tZW50cy4gSXQgZG9lc27igJl0IGxv b2sNCj4gICAgICA+Pj4+PiBsaWtlIHRoZXJl4oCZcyBiZWVuIGFueSB1cGRhdGVzLg0KPiAgICAg ID4+Pj4+DQo+ICAgICAgPj4+Pj4gTEwNCj4gICAgICA+Pj4+Pg0KPiAgICAgID4+Pj4gX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gICAgICA+Pj4+IFJB VFMgbWFpbGluZyBsaXN0DQo+ICAgICAgPj4+PiBSQVRTQGlldGYub3JnDQo+ICAgICAgPj4+PiBo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMNCj4gICAgICA+Pj4gX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gICAgICA+Pj4g RUFUIG1haWxpbmcgbGlzdA0KPiAgICAgID4+PiBFQVRAaWV0Zi5vcmcNCj4gICAgICA+Pj4gaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCj4gICAgICA+Pg0KPiAgICAg ID4+DQo+ICAgICAgPj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18NCj4gICAgICA+PiBFQVQgbWFpbGluZyBsaXN0DQo+ICAgICAgPj4gRUFUQGlldGYub3Jn IDxtYWlsdG86RUFUQGlldGYub3JnPg0KPiAgICAgID4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vZWF0DQo+ICAgICAgPg0KPiAgICAgID4NCj4gICAgICA+DQo+ICAgICAg PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiAgICAg ID4gRUFUIG1haWxpbmcgbGlzdA0KPiAgICAgID4gRUFUQGlldGYub3JnDQo+ICAgICAgPiBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KPiAgICAgID4NCj4gDQo+ICAg ICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gICAg ICBFQVQgbWFpbGluZyBsaXN0DQo+ICAgICAgRUFUQGlldGYub3JnDQo+ICAgICAgaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCj4gDQo+IA0KPiBfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBFQVQgbWFpbGluZyBsaXN0DQo+ IEVBVEBpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Vh dA0KPiBJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55 IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQu IElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhl IHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBh bnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5 IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo+IF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IEVBVCBtYWlsaW5nIGxpc3QN Cj4gRUFUQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v ZWF0DQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ IFJBVFMgbWFpbGluZyBsaXN0DQo+IFJBVFNAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9yYXRzDQo+IA0K From nobody Tue Oct 16 21:31:40 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CB57130EA6 for ; Tue, 16 Oct 2018 21:31:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 41nYmg75yRcx for ; Tue, 16 Oct 2018 21:31:24 -0700 (PDT) Received: from p3plsmtpa11-06.prod.phx3.secureserver.net (p3plsmtpa11-06.prod.phx3.secureserver.net [68.178.252.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 82481130E9A for ; Tue, 16 Oct 2018 21:31:23 -0700 (PDT) Received: from [172.17.68.162] ([1.22.180.94]) by :SMTPAUTH: with ESMTPSA id CdUKgR6GRpPxpCdUMgWuqQ; Tue, 16 Oct 2018 21:31:22 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Laurence Lundblade In-Reply-To: <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> Date: Wed, 17 Oct 2018 10:01:15 +0530 Cc: "Smith, Ned" , Hannes Tschofenig , "rats@ietf.org" , Jeremy O'Donoghue , Denis , "eat@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> To: Henk Birkholz X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfAmJdTdtGCCA4A94DQAJPbuJpyxrtIP+8qFjMiuaGetJJfSjsyPu1yc9ZuAm0755o8MO5ynSsgG/mpuiTx88GBiUvwIDCMv4+Yn3YqiwbRYBzVjqAb4c 7DatXqj/nO2ysa+iqJfbPcGF/fnUaoLZlGalRaEagIv/UYgGNRR4Hw6ouTrd3HjpugZrRN+tioPtcax8pPO5pYLTQasxPaeYAqZWshEKh5iWR+Jpqdnej3tS NgR9Sy7aR8kGRxGdHGbQmXn/NRtXSlgcBkEEI0EJuteMNInqgH7LvyQsaB+OAV3EKrre9puUCRClKpT9kl9ZKk+KFbi06QY+THvKJWZzI8LQzPIv0Nj+xc2+ XuWHd7TsZjgEVvrJlPVg8bHU/MNrPg== Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Oct 2018 04:31:38 -0000 I think the TCG has a certain developed notion of identity that is = different from others. A way to get sharper about what a particular = identity means is to describe the space and how the identifier selects = in the space. Here=E2=80=99s a few examples: - The space is physical human beings with fingers. A fingerprint scanner = select one of these humans. This is typical biometric auth. - The space is humans that know a password. A password authenticator = selects the humans that know the password. Typical authentication. - The space is humans as legal entities / citizens with criminal = records, passports and such. A national ID selects.=20 - The space is physical manufactured devices from one maker. A serial = number narrows it down to one physical device. - The space is physical devices from one maker. A model number or = version, narrows down to a subset of these devices. My understanding of the TCG world is that identities goes beyond any of = the above because they include things like the version of the SW and = configuration of the device. The identity is largely a hash of an = identifier of the physical device, various SW components and various = configuration states. The point being that a change in any of these is = a change in the security characteristics of the device and if it was = trusted with a particular key or particular data in the past, that trust = should be revoked until re established. - The space is physical devices from any maker + Measurement of the SW (the SW versions) + Measurements of some configuration Changing any of these change the identity of the device.=20 I know I hardly need to ask, but TCG folks, did I describe this = correctly? So that said, many, perhaps most, use cases for EAT do not want this = kind of device identity. It is not a prerequisite for trusting claims = coming from the device. In some cases this level of identity seems = extremely disruptive as small SW upgrades could result in re enrollment = of biometrics. We already are annoyed when we have to answer security = questions when start using a service from a new device.=20 I think this WG needs to address both this very tight TCG-style device = identity and the more heuristic EAT-style claims-for-risk-engines. I = could see multi-decade evolution where risk engine use cases want more = and more of the tight TCG-style device identity as criminals become more = adept at forging EAT-style claims. (Today risk engines work off of = unsecured browser parameters).=20 The Introduction in the charter seems entirely focused on the TCG-based = identity use case. I think text should be added for EAT-style = attestation. I will write some after some comments on this message. LL=20 > On Oct 16, 2018, at 8:24 PM, Henk Birkholz = wrote: >=20 > To quote Carsten, there is "the usual terminology problem about = identity". >=20 > Identifying vs. Identity brings back memories about an extensive = discussion in SACM that in the end resulted in using Profiles... >=20 > Profiles are the "things" that you can aggregate identity claims in = (in SACM these claims are "Target Endpoint Characteristics", which are = pretty much the same thing as Device Characteristics) - and you use the = Profiles to (re-)identify target endpoints. >=20 > In the scope of remote attestation procedures, I think that "just not = calling" claim sets that are composed (amongst others) of identifying = claims "identity documents" might just end up in making up another name = for something that is effectively composing identity documents anyways. = If calling the same thing something else helps in some way, I am all for = it. But I am really not sure. >=20 > That said, Ned's elaboration on the relationship of identity and = attestation claims and corresponding claim semantics / trust semantics = is spot on, I think. >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > On 10/16/2018 03:51 PM, Smith, Ned wrote: >> Agree with Hannes that identity discussion can lead to confusion as = identity is often highly dependent on some sort of context (domain of = interpretation). >> In order to have productive conversation about attestation and = identity, it may be important to understand that attestation semantics = sets the context for identity. >> * Attestation attributes have trust semantics (and trust semantics = are interpreted through the eyes of the verifier). Identity attributes = may also have trust semantics (in addition to identity semantics) hence = can be regarded as playing a role in both identity and attestation. = Since RATS should be interested primarily in trust semantics, it makes = sense to understand, discuss and consider identity in terms of its trust = semantics. Hence identity attributes are only interesting to RATS if = they are useful for evaluating trust semantics. >> * In a closed ecosystem, the trust characteristics and properties may = be implied because there often exists out-of-band processes that ensure = the characteristics are applied (for example, if an IT organization sets = a policy that all asymmetric keys are to be hardened using a smartcard, = they can apply a deployment process where the IT professional verifies = the smartcard is used during enrollment.) But in a non-closed ecosystem, = there isn't an assumption that out-of-band processes exist. Attestation = attempts to make explicit what otherwise is implicit and therefore = subject to misinterpretation if the verifier, relying party and attester = are not part of the same closed ecosystem. Implicit attestation = therefore can lead to semantic confusion if we're not careful. = Therefore, the rigor of treating implicit attestation claims (assertions = assumed to exist but not explicitly named) should nevertheless be = defined explicitly. Then, if there is a need for implicit attestation, = the specifications that describe them can describe them in terms of an = explicit definition. >> * In the context of asserting trust characteristics, the verifier = needs to know that a set of characteristics applies to the instance of = the endpoint being evaluated (aka the attester). (Otherwise a MITM could = supply characteristics that may be valid, but don=E2=80=99t apply to the = specific instance). Consequently, it makes sense to consider that = *attestation* keys are needed to authenticate the endpoint being = evaluated. This doesn't imply an identity key couldn't double as an = attestation key. But if it does, we care about its relevance to the = attester endpoint. >> -Ned >> =EF=BB=BFOn 10/15/18, 6:49 PM, "Hannes Tschofenig" = wrote: >> Here are my 5 cents on the term 'identity'. >> I have been working on identity management for many years = (partially because of my OAuth co-chair role) and I have noticed that = the use of the term "identity" tends to confuse more than it helps (even = more so when the term is applied to devices and software rather than = humans). >> I believe we could get away with describing what we want = without ever using the term. >> In this context I would argue that we are about identifying = different components, such as hardware and software. >> Ciao >> Hannes >> -----Original Message----- >> From: EAT On Behalf Of Smith, Ned >> Sent: Monday, October 15, 2018 9:00 AM >> To: Henk Birkholz ; = rats@ietf.org; Jeremy O'Donoghue ; Denis = >> Cc: eat@ietf.org >> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter = updates? >> I agree with Henk's observation that there is opportunity to = find common ground on identity as identity can be a collection of = attributes, that if signed, becomes a set of verifiable claims (about = identity attributes). Attestation has a similar structure in that it = consists of a set of attributes, that if signed becomes a set of = verifiable claims. The main difference between identity and attestation = attributes is whether the attribute semantically relate to trust (vs. = identity). For example, claims of security certification compliance = resonates as attestation. >> It may be possible to combine a set of attestation = attributes in such a way that the combination uniquely identifies an = entity. But that doesn't make it an identity system per se and shouldn't = cause a conflict in charter goals with respect to other identity focused = efforts in IETF. >> Also, inclusion of attributes that don't have semantics that = reasonably relate to trust should not be of interest to a working group = focused on attestation. >> -Ned >> On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" = = wrote: >> Hi Jeremy & Denis, >> all these points of view have merit, I think. >> Please have a look at these quotes: >> > knowing the provenance of the device >> > having the entity creator/manufacturer provide a set = of claims which can be verified >> > to know the characteristics of a device by issuing to = the device a public key certificate which will only be issued to the = device if it fulfills an expected set of functionalities. >> To me, these descriptions seem to have different = intents, scope or >> audience and require most certainly different work-flows, but >> semantically and in consequence representation-wise they also = seem quite >> related. >> If you think of an identity document as a set of claims = (potentially >> including a public key), that is signed and that can match = one or more >> things, maybe all three types highlighted above are actually = covered by >> the same identity document concept? >> With respect to identity documents, I think it is safe = so say that we >> can find common ground here rather easily. That said, the way = how these >> identity documents come into existence, when and how they are = deployed >> on the thing or associated with multiple things is another = question. We >> most certainly do not want to end up with a "signing fool" = that does not >> add value to the level of confidence (I am quoting Ned Smith = here). >> This has to be fleshed out explicitly for each scenario = and the parts >> that are reused in every scenario should get special = attention in the >> upcoming RATS architecture draft. >> Identifying claims aggregated in an identity document = most certainly can >> include device characteristics, public key(s), or claims = about the >> intended functions and capabilities of the thing. Claims can = even >> originate from Claimants that are not the thing itself, but = external >> entities providing an assertion (e.g. these things are = CC-certified). >> All different composites of identifying claims have a = specific shared >> intend in this context though, I think: expressing = Attestation >> Provenance (again - one for one or more things of the same = kind). And >> all of them originate from Claimants and therefore use a root = of trust >> of measurement, I think. >> That said, establishing trustworthy knowledge about = attestation >> provenance is only the first step and provides the foundation = for more >> complex attestation procedures. In any case, this seem to be = required by >> every scenario that was highlighted so far and therefore will = most >> certainly be covered in a deliverable. >> IHTH, >> Henk >> On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: >> > On 12 Oct 2018, at 14:33, Denis > > > wrote: >> >> The "Problem Statement" continues as follows: >> >> >> >> (2) Today, there is no common, standard way for Relying = Parties to >> >> know the provenance and characteristics of a device (e.g., = an end-user >> >> device, >> >> platform or endpoint, servers, IoT devices, device = subsystems and >> >> sub-modules) that may be requesting services. >> >> >> >> Knowing the provenance of the device is not always = necessary. What is >> >> important is to know that a specific set of functions is = (securely) >> >> supported by the device. >> >> There already exists a common way to know the = characteristics of a >> >> device by issuing to the device a public key certificate = which will >> >> only be issued to the device >> >> if it fulfills an expected set of functionalities. In such = a case a >> >> syntax for a trusted claim sets**is not needed. >> >> >> > This is indeed a possible way to address the problem, but = suffers from >> > challenges which come down to: >> > >> > - Who issues such certificates. An option is that there is = some form of >> > security certification behind this issuance otherwise it is = of very >> > limited value. >> > - In order to capture the wide variety of different devices = (I prefer >> > "entity" here as it is more general than "device"), many = different forms >> > of such certificates would be required. This ends up being = much the same >> > thing as a set of claims. >> > >> > Given the multiplicity of entities for which attestation = might be >> > useful, it seems to me that having the entity = creator/manufacturer >> > provide a set of claims which can be verified is more = flexible than >> > requiring a certificate. It seems likely to me that where a = formal >> > security certification is needed there will be a = certificate issued by >> > the Certifying Body as one of the claims about an entity, = but I can >> > think of many cases (supply chain management, to take just = one example) >> > where provenance is by far the most useful information. >> > >> > I'm not in favour of changes to the charter in this = direction. >> >> >> >> The simplest cases should also be part of the framework. >> >> >> >> Note: I personally appreciate that privacy is an aspect = that >> >> will/should be taken into consideration. >> >> >> >> Denis >> >> >> >>> As with the earlier draft, there are many references to = verify and >> >>> verifier in the lead up to the deliverable but no = deliverables describing >> >>> verification rules. I'd like to see rules in one of these = documents and >> >>> think it worth citing in the deliverables. Are bindings = to certificate >> >>> management protocols out of scope? >> >>> >> >>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" >> >>> wrote: >> >>> >> >>>> Hi all, >> >>>> >> >>>> sorry for the delay. Please find an updated charter = proposal here: >> >>>> >> >>>>> = https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter.md >> >>>> The BoF proponents tried to merge all comments and = proposals on >> >>>> keystores, existing solutions, provenance & device = characteristics, etc >> >>>> that were raised on the list - and align them in = homogeneous fashion. >> >>>> >> >>>> This draft is intended to focus the discussion and = improve the wording. >> >>>> >> >>>> Viele Gr=C3=BC=C3=9Fe, >> >>>> >> >>>> Henk >> >>>> >> >>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >> >>>>> Hi Henk, >> >>>>> >> >>>>> Bangkok IETF is getting close, will you be able to = update the charter >> >>>>> for the attestation BoF to properly include EAT? I = sent you some text >> >>>>> that just needs to be pasted along with some comments. = It doesn=E2=80=99t look >> >>>>> like there=E2=80=99s been any updates. >> >>>>> >> >>>>> LL >> >>>>> >> >>>> _______________________________________________ >> >>>> RATS mailing list >> >>>> RATS@ietf.org >> >>>> https://www.ietf.org/mailman/listinfo/rats >> >>> _______________________________________________ >> >>> EAT mailing list >> >>> EAT@ietf.org >> >>> https://www.ietf.org/mailman/listinfo/eat >> >> >> >> >> >> _______________________________________________ >> >> EAT mailing list >> >> EAT@ietf.org >> >> https://www.ietf.org/mailman/listinfo/eat >> > >> > >> > >> > _______________________________________________ >> > EAT mailing list >> > EAT@ietf.org >> > https://www.ietf.org/mailman/listinfo/eat >> > >> _______________________________________________ >> EAT mailing list >> EAT@ietf.org >> https://www.ietf.org/mailman/listinfo/eat >> _______________________________________________ >> EAT mailing list >> EAT@ietf.org >> https://www.ietf.org/mailman/listinfo/eat >> IMPORTANT NOTICE: The contents of this email and any attachments = are confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. >> =20 > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat From nobody Wed Oct 17 03:18:32 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2473B12DD85; Wed, 17 Oct 2018 03:18:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.064 X-Spam-Level: X-Spam-Status: No, score=-2.064 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.064, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=telefonica.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kI8GptsNKYFx; Wed, 17 Oct 2018 03:18:25 -0700 (PDT) Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on0099.outbound.protection.outlook.com [104.47.0.99]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CCBC512D7F8; Wed, 17 Oct 2018 03:18:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=telefonica.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=YxfKlswRh57v7RERTS0oKwQSHjRGZhQPRp14DwQk2DM=; b=Odmbgtq0nCBTd/Qfgny4HVtCVuacQNtwOg0sue+O6vA8Y0E2nFE5KGMThPrbCdlpEa2p4GFw8archFNpXqZMds2Jggg2fe71QIBCbnJNeuk+7NUmQSrajtYRb7nfv1j7Nm/wlloZ2KaLGtD9LYVqlmrrTIUWqxFvfh3nU1dOJUM= Received: from DB3PR0602MB3788.eurprd06.prod.outlook.com (52.134.70.148) by DB3PR0602MB3724.eurprd06.prod.outlook.com (52.134.68.152) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1228.32; Wed, 17 Oct 2018 10:18:20 +0000 Received: from DB3PR0602MB3788.eurprd06.prod.outlook.com ([fe80::1df0:efe8:3e5:7acb]) by DB3PR0602MB3788.eurprd06.prod.outlook.com ([fe80::1df0:efe8:3e5:7acb%5]) with mapi id 15.20.1228.027; Wed, 17 Oct 2018 10:18:20 +0000 From: "Diego R. Lopez" To: Laurence Lundblade , Henk Birkholz CC: Hannes Tschofenig , "Smith, Ned" , Jeremy O'Donoghue , "eat@ietf.org" , "rats@ietf.org" , Denis Thread-Topic: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates? Thread-Index: AQHUZJbpNOn21x1eTk2jvp6xCIn9NKUgdvSAgAAevICAAU/wgIAAEX0AgADkMICAAIJ9gA== Date: Wed, 17 Oct 2018 10:18:20 +0000 Message-ID: <21BE7882-2000-4AF9-B5F8-65AB93602A9E@telefonica.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.2.180910 authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-originating-ip: [88.6.225.123] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DB3PR0602MB3724; 6:c+WXZkBsRbLTOlIa0WVZ42VQiCQS71j+2IWxVdUM3vHn4o5i5UUvnI46NHyg3Z5ot/xDzIUFdg0CFUU16ssF/yncyUozI4hRTh/52LDtD8kC3pA8QrJnsBPqwKdKjpKvrydXZHYNB8fVYP+l6h8HqerfO9C6cNtJkVbZKa1h4wLS4RkXId/+RanuqogNXnZn3afeVdpajLAERQr+Ek06VCn5nef90vYde1m06LElDCHC9xROfaQXymz8HZCHp1kfDqdXVA2zyBsSfWbbV2mD5SKdKVTlqk1mKlfbkW/C3pxX+MwbrxNR/QTqYylm0dwWVHB6aq1nldIctoDxDWbYxGpzJ501zUTlsV66+8WVc3ifKvaktFG03GTIh2r4TuPtIbZ90QqLM+7v0aM4ggILR4Atw0/p9K9B/w7xVWqsEhgBgQiri+eZ4z1oRCYhHUBsFvH8qo7R/K7t/dYChiukRA==; 5:yF4ESJv2xRIoqmJZSqDTdBfHNUsfvv6eKfncsBp5psB+R5IY2l9a0a8fvq/CbG2oDUEuGUTgi1CAZCNIpozOA5u8Y+N5E9RVjJ5ywVyzqRMrHFDeX6NNnDuRBoXy7A+w0hzI/W8ms7rJNey8on9s2bucXcv/2nRSzpTsn4vpWBI=; 7:VCwRIaKsLRSD0JRFqpA65jPDwsUJOECT7RiPGTm3PPDt4j68wRSmK5R8XTnjsAyMDz1R7ThELFadenbWieysb8CDtGe7tsVlrJUbk34wm8jIxGLh/iGYVwohE9m3oT2tTv+Hgy6AOy3DK8JmRQ4lySmyCKTyPJ1B5y/5rNBNrkGWv/f5th3aUtJBtqO8RxBSMjKcgXgb5o9FH6W+nrwtuk+c3KtU+Al85NWCsNlA26T5A4ctsnabh7b2kROcVH3J x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: b814d556-738c-43da-d438-08d63419dd0b x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:DB3PR0602MB3724; x-ms-traffictypediagnostic: DB3PR0602MB3724: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(128460861657000)(81160342030619)(40392960112811)(192374486261705)(166708455590820)(163750095850)(180628864354917)(191636701735510); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3231355)(944501410)(52105095)(3002001)(10201501046)(93006095)(93001095)(6055026)(149066)(150057)(6041310)(20161123560045)(201703131423095)(201702281529075)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123564045)(20161123562045)(201708071742011)(7699051)(76991095); SRVR:DB3PR0602MB3724; BCL:0; PCL:0; RULEID:; SRVR:DB3PR0602MB3724; x-forefront-prvs: 08286A0BE2 x-forefront-antispam-report: =?utf-8?B?U0ZWOk5TUE07U0ZTOigxMDAxOTAyMCkoMzk2MDAzKSgxMzYwMDMpKDM2NjAw?= =?utf-8?B?NCkoMzQ2MDAyKSgzNzYwMDIpKDM5ODYwNDAwMDAyKSg0MDQzNDAwNCkoMjUy?= =?utf-8?B?NTE0MDEwKSgxMzQ2NDAwMykoMTk5MDA0KSg0MDEzNDAwNCkoMTg5MDAzKSg1?= =?utf-8?B?MTQ0NDAwMykoNTM3NTQwMDYpKDQwMjI0MDAzKSgyNTcyNDAwMikoMTQ0NDQw?= =?utf-8?B?MDUpKDUwMjQwMDQpKDU0OTA2MDAzKSgxODA3NDAwNCkoNTgxMjYwMDgpKDEx?= =?utf-8?B?MDEzNjAwNSkoNzg2MDAzKSgzMTYwMDIpKDkzODg2MDA1KSgxNDQ1NDAwNCko?= =?utf-8?B?NjUwNjAwNykoMTAyODM2MDA0KSg4Mjc0NjAwMikoNTUxNTQ0MDAyKSgxNTY1?= =?utf-8?B?MDUwMDAwMSkoNzYxNzYwMTEpKDg2NzYwMDIpKDk2NjAwNSkoNDg2MDA2KSg0?= =?utf-8?B?NDYwMDMpKDM4NDYwMDIpKDI1NjAwNCkoNTYxOTQ0MDAzKSg4MzcxNjAwNCko?= =?utf-8?B?NDc4NjAwMDAxKSg2ODczNjAwNykoMTEzNDYwMDIpKDcxMjAwNDAwMDAxKSg3?= =?utf-8?B?MTE5MDQwMDAwMSkoNjExNjAwMikoMjYxNjAwNSkoNDc2MDAzKSgzNjc1NjAw?= =?utf-8?B?MykoMzA1OTQ1MDA1KSg3NzM2MDAyKSg5OTI4NjAwNCkoOTc3MzYwMDQpKDg2?= =?utf-8?B?MzYyMDAxKSg1Mzk0NjAwMykoNTM5MzYwMDIpKDI5MDAxMDAwMDEpKDU2NjAz?= =?utf-8?B?MDAwMDEpKDY2MDY2MDAxKSg4MTE2NjAwNikoMzM2NTYwMDIpKDI2MDA1KSg4?= =?utf-8?B?MTE1NjAxNCkoNTI1MDEwMDAwMikoNDc0NDAwNCkoNjY1NzQwMDkpKDY0MzYw?= =?utf-8?B?MDIpKDQ1MDgwNDAwMDAyKSgyNTc4NjAwOSkoNjUxMjAwNykoNTM1NDYwMTEp?= =?utf-8?B?KDEwNTU4NjAwMikoNjQ4NjAwMikoNDMyNjAwOCkoMTg2MDAzKSg2MzA2MDAy?= =?utf-8?B?KSg4OTM2MDAyKSgyOTA2MDAyKSgxMDYzNTYwMDEpKDYyNDYwMDMpKDIyOTg1?= =?utf-8?B?MzAwMikoMTU4NjY4MjUwMDYpKDU3OTAwNCk7RElSOk9VVDtTRlA6MTEwMjtT?= =?utf-8?B?Q0w6MTtTUlZSOkRCM1BSMDYwMk1CMzcyNDtIOkRCM1BSMDYwMk1CMzc4OC5l?= =?utf-8?B?dXJwcmQwNi5wcm9kLm91dGxvb2suY29tO0ZQUjo7U1BGOk5vbmU7TEFORzpl?= =?utf-8?Q?n;PTR:InfoNoRecords;A:1;MX:1;?= received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: Y4tZYWGOh0qVjVavtIlGRQ8AubcqI2d6UU2sQS8wd/Bnpcf0BJNurBLi4T1hhM9Cz7sQ3zKK1b3iQZsvS7WXZQCLOrOeCd1C7lIiZh5ITpgiYhvH8wFuSUbuFV4Qg38V+g5tgpJ91aT9wD4VUMMWg1wEQ80Bk9soMryHJ5W5IlpFuvRM3SfFWg66ROVn/YZebYi53CtUmlZz3bZgwrxqVJwB820oqcqjAG7GFskahMXxvYH8S+oBTbJGC2ZjwBY5sd1lD63H+pTJlDAVP3MXOjM4B7MkniIy7HzwM/OdG9eJPM/D8OChD12Rg+lzaW23Ss81sxlx5/j7Yc7lNdGsFVNpslaN3J4jgUQWeOIYPPQ= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <3C0C7A0D6FA5C64F9B2FE2CDB38A618B@eurprd06.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: telefonica.com X-MS-Exchange-CrossTenant-Network-Message-Id: b814d556-738c-43da-d438-08d63419dd0b X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Oct 2018 10:18:20.5279 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB3PR0602MB3724 Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Oct 2018 10:18:30 -0000 SGksDQoNCk1heSBiZSB0aGlzIGlzIGEgZmFpcmx5IG5hw692ZSBwcm9wb3NhbCwgYnV0IGlmIHdl IHVzZSAiaWRlbnRpZmljYXRpb24iIHJhdGhlciB0aGFuICJpZGVudGl0eSIgYW5kIHRoZXJlZm9y ZSBhdm9pZCB0aGUgb250b2xvZ2ljYWwgaW1wbGljYXRpb25zIG9mIHRoZSBsYXR0ZXIsIGVzcGVj aWFsbHkgd2hlbiBpdCBjb21lcyB0byB0aGUgcG9pbnRzIGl0IHRvdWNoZXMgaHVtYW4tdnMtbWFj aGluZSBpc3N1ZXM/DQoNCkJlIGdvb2RlLA0KDQotLQ0KIkVzdGEgdmV6IG5vIGZhbGxhcmVtb3Ms IERvY3RvciBJbmZpZXJubyINCg0KRHIgRGllZ28gUi4gTG9wZXoNClRlbGVmb25pY2EgSStEDQpo dHRwczovL3d3dy5saW5rZWRpbi5jb20vaW4vZHIybG9wZXovDQoNCmUtbWFpbDogZGllZ28uci5s b3BlekB0ZWxlZm9uaWNhLmNvbQ0KVGVsOiAgICAgICAgICszNCA5MTMgMTI5IDA0MQ0KTW9iaWxl OiAgKzM0IDY4MiAwNTEgMDkxDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoN Cu+7v09uIDE3LzEwLzIwMTgsIDA2OjMxLCAiRUFUIG9uIGJlaGFsZiBvZiBMYXVyZW5jZSBMdW5k YmxhZGUiIDxlYXQtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgbGdsQGlzbGFuZC1yZXNv cnQuY29tPiB3cm90ZToNCg0KICAgIEkgdGhpbmsgdGhlIFRDRyBoYXMgYSBjZXJ0YWluIGRldmVs b3BlZCBub3Rpb24gb2YgaWRlbnRpdHkgdGhhdCBpcyBkaWZmZXJlbnQgZnJvbSBvdGhlcnMuICBB IHdheSB0byBnZXQgc2hhcnBlciBhYm91dCB3aGF0IGEgcGFydGljdWxhciBpZGVudGl0eSBtZWFu cyBpcyB0byBkZXNjcmliZSB0aGUgc3BhY2UgYW5kIGhvdyB0aGUgaWRlbnRpZmllciBzZWxlY3Rz IGluIHRoZSBzcGFjZS4gIEhlcmXigJlzIGEgZmV3IGV4YW1wbGVzOg0KDQogICAgLSBUaGUgc3Bh Y2UgaXMgcGh5c2ljYWwgaHVtYW4gYmVpbmdzIHdpdGggZmluZ2Vycy4gQSBmaW5nZXJwcmludCBz Y2FubmVyIHNlbGVjdCBvbmUgb2YgdGhlc2UgaHVtYW5zLiBUaGlzIGlzIHR5cGljYWwgYmlvbWV0 cmljIGF1dGguDQogICAgLSBUaGUgc3BhY2UgaXMgaHVtYW5zIHRoYXQga25vdyBhIHBhc3N3b3Jk LiBBIHBhc3N3b3JkIGF1dGhlbnRpY2F0b3Igc2VsZWN0cyB0aGUgaHVtYW5zIHRoYXQga25vdyB0 aGUgcGFzc3dvcmQuIFR5cGljYWwgYXV0aGVudGljYXRpb24uDQogICAgLSBUaGUgc3BhY2UgaXMg aHVtYW5zIGFzIGxlZ2FsIGVudGl0aWVzIC8gY2l0aXplbnMgd2l0aCBjcmltaW5hbCByZWNvcmRz LCBwYXNzcG9ydHMgYW5kIHN1Y2guIEEgbmF0aW9uYWwgSUQgc2VsZWN0cy4NCiAgICAtIFRoZSBz cGFjZSBpcyBwaHlzaWNhbCBtYW51ZmFjdHVyZWQgZGV2aWNlcyBmcm9tIG9uZSBtYWtlci4gIEEg c2VyaWFsIG51bWJlciBuYXJyb3dzIGl0IGRvd24gdG8gb25lIHBoeXNpY2FsIGRldmljZS4NCiAg ICAtIFRoZSBzcGFjZSBpcyBwaHlzaWNhbCBkZXZpY2VzIGZyb20gb25lIG1ha2VyLiBBIG1vZGVs IG51bWJlciBvciB2ZXJzaW9uLCBuYXJyb3dzIGRvd24gdG8gYSBzdWJzZXQgb2YgdGhlc2UgZGV2 aWNlcy4NCg0KICAgIE15IHVuZGVyc3RhbmRpbmcgb2YgdGhlIFRDRyB3b3JsZCBpcyB0aGF0IGlk ZW50aXRpZXMgZ29lcyBiZXlvbmQgYW55IG9mIHRoZSBhYm92ZSBiZWNhdXNlIHRoZXkgaW5jbHVk ZSB0aGluZ3MgbGlrZSB0aGUgdmVyc2lvbiBvZiB0aGUgU1cgYW5kIGNvbmZpZ3VyYXRpb24gb2Yg dGhlIGRldmljZS4gVGhlIGlkZW50aXR5IGlzIGxhcmdlbHkgYSBoYXNoIG9mIGFuIGlkZW50aWZp ZXIgb2YgdGhlIHBoeXNpY2FsIGRldmljZSwgdmFyaW91cyBTVyBjb21wb25lbnRzIGFuZCB2YXJp b3VzIGNvbmZpZ3VyYXRpb24gc3RhdGVzLiAgVGhlIHBvaW50IGJlaW5nIHRoYXQgYSBjaGFuZ2Ug aW4gYW55IG9mIHRoZXNlIGlzIGEgY2hhbmdlIGluIHRoZSBzZWN1cml0eSBjaGFyYWN0ZXJpc3Rp Y3Mgb2YgdGhlIGRldmljZSBhbmQgaWYgaXQgd2FzIHRydXN0ZWQgd2l0aCBhIHBhcnRpY3VsYXIg a2V5IG9yIHBhcnRpY3VsYXIgZGF0YSBpbiB0aGUgcGFzdCwgdGhhdCB0cnVzdCBzaG91bGQgYmUg cmV2b2tlZCB1bnRpbCByZSBlc3RhYmxpc2hlZC4NCg0KICAgIC0gVGhlIHNwYWNlIGlzIHBoeXNp Y2FsIGRldmljZXMgZnJvbSBhbnkgbWFrZXINCiAgICAgICsgTWVhc3VyZW1lbnQgb2YgdGhlIFNX ICh0aGUgU1cgdmVyc2lvbnMpDQogICAgICAgICArIE1lYXN1cmVtZW50cyBvZiBzb21lIGNvbmZp Z3VyYXRpb24NCg0KICAgIENoYW5naW5nIGFueSBvZiB0aGVzZSBjaGFuZ2UgdGhlIGlkZW50aXR5 IG9mIHRoZSBkZXZpY2UuDQoNCiAgICBJIGtub3cgSSBoYXJkbHkgbmVlZCB0byBhc2ssIGJ1dCBU Q0cgZm9sa3MsIGRpZCBJIGRlc2NyaWJlIHRoaXMgY29ycmVjdGx5Pw0KDQoNCiAgICBTbyB0aGF0 IHNhaWQsIG1hbnksIHBlcmhhcHMgbW9zdCwgdXNlIGNhc2VzIGZvciBFQVQgZG8gbm90IHdhbnQg dGhpcyBraW5kIG9mIGRldmljZSBpZGVudGl0eS4gSXQgaXMgbm90IGEgcHJlcmVxdWlzaXRlIGZv ciB0cnVzdGluZyAgY2xhaW1zIGNvbWluZyBmcm9tIHRoZSBkZXZpY2UuIEluIHNvbWUgY2FzZXMg dGhpcyBsZXZlbCBvZiBpZGVudGl0eSBzZWVtcyBleHRyZW1lbHkgZGlzcnVwdGl2ZSBhcyBzbWFs bCBTVyB1cGdyYWRlcyBjb3VsZCByZXN1bHQgaW4gcmUgZW5yb2xsbWVudCBvZiBiaW9tZXRyaWNz LiBXZSBhbHJlYWR5IGFyZSBhbm5veWVkIHdoZW4gd2UgaGF2ZSB0byBhbnN3ZXIgc2VjdXJpdHkg cXVlc3Rpb25zIHdoZW4gc3RhcnQgdXNpbmcgYSBzZXJ2aWNlIGZyb20gYSBuZXcgZGV2aWNlLg0K DQogICAgSSB0aGluayB0aGlzIFdHIG5lZWRzIHRvIGFkZHJlc3MgYm90aCB0aGlzIHZlcnkgdGln aHQgVENHLXN0eWxlIGRldmljZSBpZGVudGl0eSBhbmQgdGhlIG1vcmUgaGV1cmlzdGljIEVBVC1z dHlsZSBjbGFpbXMtZm9yLXJpc2stZW5naW5lcy4gSSBjb3VsZCBzZWUgbXVsdGktZGVjYWRlIGV2 b2x1dGlvbiB3aGVyZSByaXNrIGVuZ2luZSB1c2UgY2FzZXMgd2FudCBtb3JlIGFuZCBtb3JlIG9m IHRoZSB0aWdodCBUQ0ctc3R5bGUgZGV2aWNlIGlkZW50aXR5IGFzIGNyaW1pbmFscyBiZWNvbWUg bW9yZSBhZGVwdCBhdCBmb3JnaW5nIEVBVC1zdHlsZSBjbGFpbXMuIChUb2RheSByaXNrIGVuZ2lu ZXMgd29yayBvZmYgb2YgdW5zZWN1cmVkIGJyb3dzZXIgcGFyYW1ldGVycykuDQoNCiAgICBUaGUg SW50cm9kdWN0aW9uIGluIHRoZSBjaGFydGVyIHNlZW1zIGVudGlyZWx5IGZvY3VzZWQgb24gdGhl IFRDRy1iYXNlZCBpZGVudGl0eSB1c2UgY2FzZS4gSSB0aGluayB0ZXh0IHNob3VsZCBiZSBhZGRl ZCBmb3IgRUFULXN0eWxlIGF0dGVzdGF0aW9uLiBJIHdpbGwgd3JpdGUgc29tZSBhZnRlciBzb21l IGNvbW1lbnRzIG9uIHRoaXMgbWVzc2FnZS4NCg0KICAgIExMDQoNCg0KDQoNCg0KICAgID4gT24g T2N0IDE2LCAyMDE4LCBhdCA4OjI0IFBNLCBIZW5rIEJpcmtob2x6IDxoZW5rLmJpcmtob2x6QHNp dC5mcmF1bmhvZmVyLmRlPiB3cm90ZToNCiAgICA+DQogICAgPiBUbyBxdW90ZSBDYXJzdGVuLCB0 aGVyZSBpcyAidGhlIHVzdWFsIHRlcm1pbm9sb2d5IHByb2JsZW0gYWJvdXQgaWRlbnRpdHkiLg0K ICAgID4NCiAgICA+IElkZW50aWZ5aW5nIHZzLiBJZGVudGl0eSBicmluZ3MgYmFjayBtZW1vcmll cyBhYm91dCBhbiBleHRlbnNpdmUgZGlzY3Vzc2lvbiBpbiBTQUNNIHRoYXQgaW4gdGhlIGVuZCBy ZXN1bHRlZCBpbiB1c2luZyBQcm9maWxlcy4uLg0KICAgID4NCiAgICA+IFByb2ZpbGVzIGFyZSB0 aGUgInRoaW5ncyIgdGhhdCB5b3UgY2FuIGFnZ3JlZ2F0ZSBpZGVudGl0eSBjbGFpbXMgaW4gKGlu IFNBQ00gdGhlc2UgY2xhaW1zIGFyZSAiVGFyZ2V0IEVuZHBvaW50IENoYXJhY3RlcmlzdGljcyIs IHdoaWNoIGFyZSBwcmV0dHkgbXVjaCB0aGUgc2FtZSB0aGluZyBhcyBEZXZpY2UgQ2hhcmFjdGVy aXN0aWNzKSAtIGFuZCB5b3UgdXNlIHRoZSBQcm9maWxlcyB0byAocmUtKWlkZW50aWZ5IHRhcmdl dCBlbmRwb2ludHMuDQogICAgPg0KICAgID4gSW4gdGhlIHNjb3BlIG9mIHJlbW90ZSBhdHRlc3Rh dGlvbiBwcm9jZWR1cmVzLCBJIHRoaW5rIHRoYXQgImp1c3Qgbm90IGNhbGxpbmciIGNsYWltIHNl dHMgdGhhdCBhcmUgY29tcG9zZWQgKGFtb25nc3Qgb3RoZXJzKSBvZiBpZGVudGlmeWluZyBjbGFp bXMgImlkZW50aXR5IGRvY3VtZW50cyIgbWlnaHQganVzdCBlbmQgdXAgaW4gbWFraW5nIHVwIGFu b3RoZXIgbmFtZSBmb3Igc29tZXRoaW5nIHRoYXQgaXMgZWZmZWN0aXZlbHkgY29tcG9zaW5nIGlk ZW50aXR5IGRvY3VtZW50cyBhbnl3YXlzLiBJZiBjYWxsaW5nIHRoZSBzYW1lIHRoaW5nIHNvbWV0 aGluZyBlbHNlIGhlbHBzIGluIHNvbWUgd2F5LCBJIGFtIGFsbCBmb3IgaXQuIEJ1dCBJIGFtIHJl YWxseSBub3Qgc3VyZS4NCiAgICA+DQogICAgPiBUaGF0IHNhaWQsIE5lZCdzIGVsYWJvcmF0aW9u IG9uIHRoZSByZWxhdGlvbnNoaXAgb2YgaWRlbnRpdHkgYW5kIGF0dGVzdGF0aW9uIGNsYWltcyBh bmQgY29ycmVzcG9uZGluZyBjbGFpbSBzZW1hbnRpY3MgLyB0cnVzdCBzZW1hbnRpY3MgaXMgc3Bv dCBvbiwgSSB0aGluay4NCiAgICA+DQogICAgPiBWaWVsZSBHcsO8w59lLA0KICAgID4NCiAgICA+ IEhlbmsNCiAgICA+DQogICAgPiBPbiAxMC8xNi8yMDE4IDAzOjUxIFBNLCBTbWl0aCwgTmVkIHdy b3RlOg0KICAgID4+IEFncmVlIHdpdGggSGFubmVzIHRoYXQgaWRlbnRpdHkgZGlzY3Vzc2lvbiBj YW4gbGVhZCB0byBjb25mdXNpb24gYXMgaWRlbnRpdHkgaXMgb2Z0ZW4gaGlnaGx5IGRlcGVuZGVu dCBvbiBzb21lIHNvcnQgb2YgY29udGV4dCAoZG9tYWluIG9mIGludGVycHJldGF0aW9uKS4NCiAg ICA+PiBJbiBvcmRlciB0byBoYXZlIHByb2R1Y3RpdmUgY29udmVyc2F0aW9uIGFib3V0IGF0dGVz dGF0aW9uIGFuZCBpZGVudGl0eSwgaXQgbWF5IGJlIGltcG9ydGFudCB0byB1bmRlcnN0YW5kIHRo YXQgYXR0ZXN0YXRpb24gc2VtYW50aWNzIHNldHMgdGhlIGNvbnRleHQgZm9yIGlkZW50aXR5Lg0K ICAgID4+ICogQXR0ZXN0YXRpb24gYXR0cmlidXRlcyBoYXZlIHRydXN0IHNlbWFudGljcyAoYW5k IHRydXN0IHNlbWFudGljcyBhcmUgaW50ZXJwcmV0ZWQgdGhyb3VnaCB0aGUgZXllcyBvZiB0aGUg dmVyaWZpZXIpLiBJZGVudGl0eSBhdHRyaWJ1dGVzIG1heSBhbHNvIGhhdmUgdHJ1c3Qgc2VtYW50 aWNzIChpbiBhZGRpdGlvbiB0byBpZGVudGl0eSBzZW1hbnRpY3MpIGhlbmNlIGNhbiBiZSByZWdh cmRlZCBhcyBwbGF5aW5nIGEgcm9sZSBpbiBib3RoIGlkZW50aXR5IGFuZCBhdHRlc3RhdGlvbi4g U2luY2UgUkFUUyBzaG91bGQgYmUgaW50ZXJlc3RlZCBwcmltYXJpbHkgaW4gdHJ1c3Qgc2VtYW50 aWNzLCBpdCBtYWtlcyBzZW5zZSB0byB1bmRlcnN0YW5kLCBkaXNjdXNzIGFuZCBjb25zaWRlciBp ZGVudGl0eSBpbiB0ZXJtcyBvZiBpdHMgdHJ1c3Qgc2VtYW50aWNzLiBIZW5jZSBpZGVudGl0eSBh dHRyaWJ1dGVzIGFyZSBvbmx5IGludGVyZXN0aW5nIHRvIFJBVFMgaWYgdGhleSBhcmUgdXNlZnVs IGZvciBldmFsdWF0aW5nIHRydXN0IHNlbWFudGljcy4NCiAgICA+PiAqIEluIGEgY2xvc2VkIGVj b3N5c3RlbSwgdGhlIHRydXN0IGNoYXJhY3RlcmlzdGljcyBhbmQgcHJvcGVydGllcyBtYXkgYmUg aW1wbGllZCBiZWNhdXNlIHRoZXJlIG9mdGVuIGV4aXN0cyBvdXQtb2YtYmFuZCBwcm9jZXNzZXMg dGhhdCBlbnN1cmUgdGhlIGNoYXJhY3RlcmlzdGljcyBhcmUgYXBwbGllZCAoZm9yIGV4YW1wbGUs IGlmIGFuIElUIG9yZ2FuaXphdGlvbiBzZXRzIGEgcG9saWN5IHRoYXQgYWxsIGFzeW1tZXRyaWMg a2V5cyBhcmUgdG8gYmUgaGFyZGVuZWQgdXNpbmcgYSBzbWFydGNhcmQsIHRoZXkgY2FuIGFwcGx5 IGEgZGVwbG95bWVudCBwcm9jZXNzIHdoZXJlIHRoZSBJVCBwcm9mZXNzaW9uYWwgdmVyaWZpZXMg dGhlIHNtYXJ0Y2FyZCBpcyB1c2VkIGR1cmluZyBlbnJvbGxtZW50LikgQnV0IGluIGEgbm9uLWNs b3NlZCBlY29zeXN0ZW0sIHRoZXJlIGlzbid0IGFuIGFzc3VtcHRpb24gdGhhdCBvdXQtb2YtYmFu ZCBwcm9jZXNzZXMgZXhpc3QuIEF0dGVzdGF0aW9uIGF0dGVtcHRzIHRvIG1ha2UgZXhwbGljaXQg d2hhdCBvdGhlcndpc2UgaXMgaW1wbGljaXQgYW5kIHRoZXJlZm9yZSBzdWJqZWN0IHRvIG1pc2lu dGVycHJldGF0aW9uIGlmIHRoZSB2ZXJpZmllciwgcmVseWluZyBwYXJ0eSBhbmQgYXR0ZXN0ZXIg YXJlIG5vdCBwYXJ0IG9mIHRoZSBzYW1lIGNsb3NlZCBlY29zeXN0ZW0uIEltcGxpY2l0IGF0dGVz dGF0aW9uIHRoZXJlZm9yZSBjYW4gbGVhZCB0byBzZW1hbnRpYyBjb25mdXNpb24gaWYgd2UncmUg bm90IGNhcmVmdWwuIFRoZXJlZm9yZSwgdGhlIHJpZ29yIG9mIHRyZWF0aW5nIGltcGxpY2l0IGF0 dGVzdGF0aW9uIGNsYWltcyAoYXNzZXJ0aW9ucyBhc3N1bWVkIHRvIGV4aXN0IGJ1dCBub3QgZXhw bGljaXRseSBuYW1lZCkgc2hvdWxkIG5ldmVydGhlbGVzcyBiZSBkZWZpbmVkIGV4cGxpY2l0bHku IFRoZW4sIGlmIHRoZXJlIGlzIGEgbmVlZCBmb3IgaW1wbGljaXQgYXR0ZXN0YXRpb24sIHRoZSBz cGVjaWZpY2F0aW9ucyB0aGF0IGRlc2NyaWJlIHRoZW0gY2FuIGRlc2NyaWJlIHRoZW0gaW4gdGVy bXMgb2YgYW4gZXhwbGljaXQgZGVmaW5pdGlvbi4NCiAgICA+PiAqIEluIHRoZSBjb250ZXh0IG9m IGFzc2VydGluZyB0cnVzdCBjaGFyYWN0ZXJpc3RpY3MsIHRoZSB2ZXJpZmllciBuZWVkcyB0byBr bm93IHRoYXQgYSBzZXQgb2YgY2hhcmFjdGVyaXN0aWNzIGFwcGxpZXMgdG8gdGhlIGluc3RhbmNl IG9mIHRoZSBlbmRwb2ludCBiZWluZyBldmFsdWF0ZWQgKGFrYSB0aGUgYXR0ZXN0ZXIpLiAoT3Ro ZXJ3aXNlIGEgTUlUTSBjb3VsZCBzdXBwbHkgY2hhcmFjdGVyaXN0aWNzIHRoYXQgbWF5IGJlIHZh bGlkLCBidXQgZG9u4oCZdCBhcHBseSB0byB0aGUgc3BlY2lmaWMgaW5zdGFuY2UpLiBDb25zZXF1 ZW50bHksIGl0IG1ha2VzIHNlbnNlIHRvIGNvbnNpZGVyIHRoYXQgKmF0dGVzdGF0aW9uKiBrZXlz IGFyZSBuZWVkZWQgdG8gYXV0aGVudGljYXRlIHRoZSBlbmRwb2ludCBiZWluZyBldmFsdWF0ZWQu IFRoaXMgZG9lc24ndCBpbXBseSBhbiBpZGVudGl0eSBrZXkgY291bGRuJ3QgZG91YmxlIGFzIGFu IGF0dGVzdGF0aW9uIGtleS4gQnV0IGlmIGl0IGRvZXMsIHdlIGNhcmUgYWJvdXQgaXRzIHJlbGV2 YW5jZSB0byB0aGUgYXR0ZXN0ZXIgZW5kcG9pbnQuDQogICAgPj4gLU5lZA0KICAgID4+IE9uIDEw LzE1LzE4LCA2OjQ5IFBNLCAiSGFubmVzIFRzY2hvZmVuaWciIDxIYW5uZXMuVHNjaG9mZW5pZ0Bh cm0uY29tPiB3cm90ZToNCiAgICA+PiAgICAgSGVyZSBhcmUgbXkgNSBjZW50cyBvbiB0aGUgdGVy bSAnaWRlbnRpdHknLg0KICAgID4+ICAgICAgICAgIEkgaGF2ZSBiZWVuIHdvcmtpbmcgb24gaWRl bnRpdHkgbWFuYWdlbWVudCBmb3IgbWFueSB5ZWFycyAocGFydGlhbGx5IGJlY2F1c2Ugb2YgbXkg T0F1dGggY28tY2hhaXIgcm9sZSkgYW5kIEkgaGF2ZSBub3RpY2VkIHRoYXQgdGhlIHVzZSBvZiB0 aGUgdGVybSAiaWRlbnRpdHkiIHRlbmRzIHRvIGNvbmZ1c2UgbW9yZSB0aGFuIGl0IGhlbHBzIChl dmVuIG1vcmUgc28gd2hlbiB0aGUgdGVybSBpcyBhcHBsaWVkIHRvIGRldmljZXMgYW5kIHNvZnR3 YXJlIHJhdGhlciB0aGFuIGh1bWFucykuDQogICAgPj4gICAgICAgICAgSSBiZWxpZXZlIHdlIGNv dWxkIGdldCBhd2F5IHdpdGggZGVzY3JpYmluZyB3aGF0IHdlIHdhbnQgd2l0aG91dCBldmVyIHVz aW5nIHRoZSB0ZXJtLg0KICAgID4+ICAgICAgICAgIEluIHRoaXMgY29udGV4dCBJIHdvdWxkIGFy Z3VlIHRoYXQgd2UgYXJlIGFib3V0IGlkZW50aWZ5aW5nIGRpZmZlcmVudCBjb21wb25lbnRzLCBz dWNoIGFzIGhhcmR3YXJlIGFuZCBzb2Z0d2FyZS4NCiAgICA+PiAgICAgICAgICBDaWFvDQogICAg Pj4gICAgIEhhbm5lcw0KICAgID4+ICAgICAgICAgIC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0t DQogICAgPj4gICAgIEZyb206IEVBVCA8ZWF0LWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBP ZiBTbWl0aCwgTmVkDQogICAgPj4gICAgIFNlbnQ6IE1vbmRheSwgT2N0b2JlciAxNSwgMjAxOCA5 OjAwIEFNDQogICAgPj4gICAgIFRvOiBIZW5rIEJpcmtob2x6IDxoZW5rLmJpcmtob2x6QHNpdC5m cmF1bmhvZmVyLmRlPjsgcmF0c0BpZXRmLm9yZzsgSmVyZW15IE8nRG9ub2dodWUgPGpvZG9ub2do QHF0aS5xdWFsY29tbS5jb20+OyBEZW5pcyA8ZGVuaXMuaWV0ZkBmcmVlLmZyPg0KICAgID4+ICAg ICBDYzogZWF0QGlldGYub3JnDQogICAgPj4gICAgIFN1YmplY3Q6IFJlOiBbRUFUXSBbRVhURVJO QUxdIFJlOiBbUmF0c10gQXR0ZXN0YXRpb24gQm9GIGNoYXJ0ZXIgdXBkYXRlcz8NCiAgICA+PiAg ICAgICAgICBJIGFncmVlIHdpdGggSGVuaydzIG9ic2VydmF0aW9uIHRoYXQgdGhlcmUgaXMgb3Bw b3J0dW5pdHkgdG8gZmluZCBjb21tb24gZ3JvdW5kIG9uIGlkZW50aXR5IGFzIGlkZW50aXR5IGNh biBiZSBhIGNvbGxlY3Rpb24gb2YgYXR0cmlidXRlcywgdGhhdCBpZiBzaWduZWQsIGJlY29tZXMg YSBzZXQgb2YgdmVyaWZpYWJsZSBjbGFpbXMgKGFib3V0IGlkZW50aXR5IGF0dHJpYnV0ZXMpLiBB dHRlc3RhdGlvbiBoYXMgYSBzaW1pbGFyIHN0cnVjdHVyZSBpbiB0aGF0IGl0IGNvbnNpc3RzIG9m IGEgc2V0IG9mIGF0dHJpYnV0ZXMsIHRoYXQgaWYgc2lnbmVkIGJlY29tZXMgYSBzZXQgb2YgdmVy aWZpYWJsZSBjbGFpbXMuIFRoZSBtYWluIGRpZmZlcmVuY2UgYmV0d2VlbiBpZGVudGl0eSBhbmQg YXR0ZXN0YXRpb24gYXR0cmlidXRlcyBpcyB3aGV0aGVyIHRoZSBhdHRyaWJ1dGUgc2VtYW50aWNh bGx5IHJlbGF0ZSB0byB0cnVzdCAodnMuIGlkZW50aXR5KS4gRm9yIGV4YW1wbGUsIGNsYWltcyBv ZiBzZWN1cml0eSBjZXJ0aWZpY2F0aW9uIGNvbXBsaWFuY2UgcmVzb25hdGVzIGFzIGF0dGVzdGF0 aW9uLg0KICAgID4+ICAgICAgICAgIEl0IG1heSBiZSBwb3NzaWJsZSB0byBjb21iaW5lIGEgc2V0 IG9mIGF0dGVzdGF0aW9uIGF0dHJpYnV0ZXMgaW4gc3VjaCBhIHdheSB0aGF0IHRoZSBjb21iaW5h dGlvbiB1bmlxdWVseSBpZGVudGlmaWVzIGFuIGVudGl0eS4gQnV0IHRoYXQgZG9lc24ndCBtYWtl IGl0IGFuIGlkZW50aXR5IHN5c3RlbSBwZXIgc2UgYW5kIHNob3VsZG4ndCBjYXVzZSBhIGNvbmZs aWN0IGluIGNoYXJ0ZXIgZ29hbHMgd2l0aCByZXNwZWN0IHRvIG90aGVyIGlkZW50aXR5IGZvY3Vz ZWQgZWZmb3J0cyBpbiBJRVRGLg0KICAgID4+ICAgICAgICAgIEFsc28sIGluY2x1c2lvbiBvZiBh dHRyaWJ1dGVzIHRoYXQgZG9uJ3QgaGF2ZSBzZW1hbnRpY3MgdGhhdCByZWFzb25hYmx5IHJlbGF0 ZSB0byB0cnVzdCBzaG91bGQgbm90IGJlIG9mIGludGVyZXN0IHRvIGEgd29ya2luZyBncm91cCBm b2N1c2VkIG9uIGF0dGVzdGF0aW9uLg0KICAgID4+ICAgICAgICAgIC1OZWQNCiAgICA+PiAgICAg ICAgICBPbiAxMC8xNS8xOCwgMzo1MyBQTSwgIkVBVCBvbiBiZWhhbGYgb2YgSGVuayBCaXJraG9s eiIgPGVhdC1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBoZW5rLmJpcmtob2x6QHNpdC5m cmF1bmhvZmVyLmRlPiB3cm90ZToNCiAgICA+PiAgICAgICAgICAgICAgSGkgSmVyZW15ICYgRGVu aXMsDQogICAgPj4gICAgICAgICAgICAgIGFsbCB0aGVzZSBwb2ludHMgb2YgdmlldyBoYXZlIG1l cml0LCBJIHRoaW5rLg0KICAgID4+ICAgICAgICAgICAgICBQbGVhc2UgaGF2ZSBhIGxvb2sgYXQg dGhlc2UgcXVvdGVzOg0KICAgID4+ICAgICAgICAgICAgICA+IGtub3dpbmcgdGhlIHByb3ZlbmFu Y2Ugb2YgdGhlIGRldmljZQ0KICAgID4+ICAgICAgICAgICAgICA+IGhhdmluZyB0aGUgZW50aXR5 IGNyZWF0b3IvbWFudWZhY3R1cmVyIHByb3ZpZGUgYSBzZXQgb2YgY2xhaW1zIHdoaWNoIGNhbiBi ZSB2ZXJpZmllZA0KICAgID4+ICAgICAgICAgICAgICA+IHRvIGtub3cgdGhlIGNoYXJhY3Rlcmlz dGljcyBvZiBhIGRldmljZSBieSBpc3N1aW5nIHRvIHRoZSBkZXZpY2UgYSBwdWJsaWMga2V5IGNl cnRpZmljYXRlIHdoaWNoIHdpbGwgb25seSBiZSBpc3N1ZWQgdG8gdGhlIGRldmljZSBpZiBpdCBm dWxmaWxscyBhbiBleHBlY3RlZCBzZXQgb2YgZnVuY3Rpb25hbGl0aWVzLg0KICAgID4+ICAgICAg ICAgICAgICBUbyBtZSwgdGhlc2UgZGVzY3JpcHRpb25zIHNlZW0gdG8gaGF2ZSBkaWZmZXJlbnQg aW50ZW50cywgc2NvcGUgb3INCiAgICA+PiAgICAgICAgIGF1ZGllbmNlIGFuZCByZXF1aXJlIG1v c3QgY2VydGFpbmx5IGRpZmZlcmVudCB3b3JrLWZsb3dzLCBidXQNCiAgICA+PiAgICAgICAgIHNl bWFudGljYWxseSBhbmQgaW4gY29uc2VxdWVuY2UgcmVwcmVzZW50YXRpb24td2lzZSB0aGV5IGFs c28gc2VlbSBxdWl0ZQ0KICAgID4+ICAgICAgICAgcmVsYXRlZC4NCiAgICA+PiAgICAgICAgICAg ICAgSWYgeW91IHRoaW5rIG9mIGFuIGlkZW50aXR5IGRvY3VtZW50IGFzIGEgc2V0IG9mIGNsYWlt cyAocG90ZW50aWFsbHkNCiAgICA+PiAgICAgICAgIGluY2x1ZGluZyBhIHB1YmxpYyBrZXkpLCB0 aGF0IGlzIHNpZ25lZCBhbmQgdGhhdCBjYW4gbWF0Y2ggb25lIG9yIG1vcmUNCiAgICA+PiAgICAg ICAgIHRoaW5ncywgbWF5YmUgYWxsIHRocmVlIHR5cGVzIGhpZ2hsaWdodGVkIGFib3ZlIGFyZSBh Y3R1YWxseSBjb3ZlcmVkIGJ5DQogICAgPj4gICAgICAgICB0aGUgc2FtZSBpZGVudGl0eSBkb2N1 bWVudCBjb25jZXB0Pw0KICAgID4+ICAgICAgICAgICAgICBXaXRoIHJlc3BlY3QgdG8gaWRlbnRp dHkgZG9jdW1lbnRzLCBJIHRoaW5rIGl0IGlzIHNhZmUgc28gc2F5IHRoYXQgd2UNCiAgICA+PiAg ICAgICAgIGNhbiBmaW5kIGNvbW1vbiBncm91bmQgaGVyZSByYXRoZXIgZWFzaWx5LiBUaGF0IHNh aWQsIHRoZSB3YXkgaG93IHRoZXNlDQogICAgPj4gICAgICAgICBpZGVudGl0eSBkb2N1bWVudHMg Y29tZSBpbnRvIGV4aXN0ZW5jZSwgd2hlbiBhbmQgaG93IHRoZXkgYXJlIGRlcGxveWVkDQogICAg Pj4gICAgICAgICBvbiB0aGUgdGhpbmcgb3IgYXNzb2NpYXRlZCB3aXRoIG11bHRpcGxlIHRoaW5n cyBpcyBhbm90aGVyIHF1ZXN0aW9uLiBXZQ0KICAgID4+ICAgICAgICAgbW9zdCBjZXJ0YWlubHkg ZG8gbm90IHdhbnQgdG8gZW5kIHVwIHdpdGggYSAic2lnbmluZyBmb29sIiB0aGF0IGRvZXMgbm90 DQogICAgPj4gICAgICAgICBhZGQgdmFsdWUgdG8gdGhlIGxldmVsIG9mIGNvbmZpZGVuY2UgKEkg YW0gcXVvdGluZyBOZWQgU21pdGggaGVyZSkuDQogICAgPj4gICAgICAgICAgICAgIFRoaXMgaGFz IHRvIGJlIGZsZXNoZWQgb3V0IGV4cGxpY2l0bHkgZm9yIGVhY2ggc2NlbmFyaW8gYW5kIHRoZSBw YXJ0cw0KICAgID4+ICAgICAgICAgdGhhdCBhcmUgcmV1c2VkIGluIGV2ZXJ5IHNjZW5hcmlvIHNo b3VsZCBnZXQgc3BlY2lhbCBhdHRlbnRpb24gaW4gdGhlDQogICAgPj4gICAgICAgICB1cGNvbWlu ZyBSQVRTIGFyY2hpdGVjdHVyZSBkcmFmdC4NCiAgICA+PiAgICAgICAgICAgICAgSWRlbnRpZnlp bmcgY2xhaW1zIGFnZ3JlZ2F0ZWQgaW4gYW4gaWRlbnRpdHkgZG9jdW1lbnQgbW9zdCBjZXJ0YWlu bHkgY2FuDQogICAgPj4gICAgICAgICBpbmNsdWRlIGRldmljZSBjaGFyYWN0ZXJpc3RpY3MsIHB1 YmxpYyBrZXkocyksIG9yIGNsYWltcyBhYm91dCB0aGUNCiAgICA+PiAgICAgICAgIGludGVuZGVk IGZ1bmN0aW9ucyBhbmQgY2FwYWJpbGl0aWVzIG9mIHRoZSB0aGluZy4gQ2xhaW1zIGNhbiBldmVu DQogICAgPj4gICAgICAgICBvcmlnaW5hdGUgZnJvbSBDbGFpbWFudHMgdGhhdCBhcmUgbm90IHRo ZSB0aGluZyBpdHNlbGYsIGJ1dCBleHRlcm5hbA0KICAgID4+ICAgICAgICAgZW50aXRpZXMgcHJv dmlkaW5nIGFuIGFzc2VydGlvbiAoZS5nLiB0aGVzZSB0aGluZ3MgYXJlIENDLWNlcnRpZmllZCku DQogICAgPj4gICAgICAgICAgICAgIEFsbCBkaWZmZXJlbnQgY29tcG9zaXRlcyBvZiBpZGVudGlm eWluZyBjbGFpbXMgaGF2ZSBhIHNwZWNpZmljIHNoYXJlZA0KICAgID4+ICAgICAgICAgaW50ZW5k IGluIHRoaXMgY29udGV4dCB0aG91Z2gsIEkgdGhpbms6IGV4cHJlc3NpbmcgQXR0ZXN0YXRpb24N CiAgICA+PiAgICAgICAgIFByb3ZlbmFuY2UgKGFnYWluIC0gb25lIGZvciBvbmUgb3IgbW9yZSB0 aGluZ3Mgb2YgdGhlIHNhbWUga2luZCkuIEFuZA0KICAgID4+ICAgICAgICAgYWxsIG9mIHRoZW0g b3JpZ2luYXRlIGZyb20gQ2xhaW1hbnRzIGFuZCB0aGVyZWZvcmUgdXNlIGEgcm9vdCBvZiB0cnVz dA0KICAgID4+ICAgICAgICAgb2YgbWVhc3VyZW1lbnQsIEkgdGhpbmsuDQogICAgPj4gICAgICAg ICAgICAgIFRoYXQgc2FpZCwgZXN0YWJsaXNoaW5nIHRydXN0d29ydGh5IGtub3dsZWRnZSBhYm91 dCBhdHRlc3RhdGlvbg0KICAgID4+ICAgICAgICAgcHJvdmVuYW5jZSBpcyBvbmx5IHRoZSBmaXJz dCBzdGVwIGFuZCBwcm92aWRlcyB0aGUgZm91bmRhdGlvbiBmb3IgbW9yZQ0KICAgID4+ICAgICAg ICAgY29tcGxleCBhdHRlc3RhdGlvbiBwcm9jZWR1cmVzLiBJbiBhbnkgY2FzZSwgdGhpcyBzZWVt IHRvIGJlIHJlcXVpcmVkIGJ5DQogICAgPj4gICAgICAgICBldmVyeSBzY2VuYXJpbyB0aGF0IHdh cyBoaWdobGlnaHRlZCBzbyBmYXIgYW5kIHRoZXJlZm9yZSB3aWxsIG1vc3QNCiAgICA+PiAgICAg ICAgIGNlcnRhaW5seSBiZSBjb3ZlcmVkIGluIGEgZGVsaXZlcmFibGUuDQogICAgPj4gICAgICAg ICAgICAgIElIVEgsDQogICAgPj4gICAgICAgICAgICAgIEhlbmsNCiAgICA+PiAgICAgICAgICAg ICAgICAgICBPbiAxMC8xNS8yMDE4IDEyOjIyIFBNLCBKZXJlbXkgTydEb25vZ2h1ZSB3cm90ZToN CiAgICA+PiAgICAgICAgID4gT24gMTIgT2N0IDIwMTgsIGF0IDE0OjMzLCBEZW5pcyA8ZGVuaXMu aWV0ZkBmcmVlLmZyDQogICAgPj4gICAgICAgICA+IDxtYWlsdG86ZGVuaXMuaWV0ZkBmcmVlLmZy Pj4gd3JvdGU6DQogICAgPj4gICAgICAgICA+PiBUaGUgIlByb2JsZW0gU3RhdGVtZW50IiBjb250 aW51ZXMgYXMgZm9sbG93czoNCiAgICA+PiAgICAgICAgID4+DQogICAgPj4gICAgICAgICA+PiAo MikgVG9kYXksIHRoZXJlIGlzIG5vIGNvbW1vbiwgc3RhbmRhcmQgd2F5IGZvciBSZWx5aW5nIFBh cnRpZXMgdG8NCiAgICA+PiAgICAgICAgID4+IGtub3cgdGhlIHByb3ZlbmFuY2UgYW5kIGNoYXJh Y3RlcmlzdGljcyBvZiBhIGRldmljZSAoZS5nLiwgYW4gZW5kLXVzZXINCiAgICA+PiAgICAgICAg ID4+IGRldmljZSwNCiAgICA+PiAgICAgICAgID4+IHBsYXRmb3JtIG9yIGVuZHBvaW50LCBzZXJ2 ZXJzLCBJb1QgZGV2aWNlcywgZGV2aWNlIHN1YnN5c3RlbXMgYW5kDQogICAgPj4gICAgICAgICA+ PiBzdWItbW9kdWxlcykgdGhhdCBtYXkgYmUgcmVxdWVzdGluZyBzZXJ2aWNlcy4NCiAgICA+PiAg ICAgICAgID4+DQogICAgPj4gICAgICAgICA+PiBLbm93aW5nIHRoZSBwcm92ZW5hbmNlIG9mIHRo ZSBkZXZpY2UgaXMgbm90IGFsd2F5cyBuZWNlc3NhcnkuIFdoYXQgaXMNCiAgICA+PiAgICAgICAg ID4+IGltcG9ydGFudCBpcyB0byBrbm93IHRoYXQgYSBzcGVjaWZpYyBzZXQgb2YgZnVuY3Rpb25z IGlzIChzZWN1cmVseSkNCiAgICA+PiAgICAgICAgID4+IHN1cHBvcnRlZCBieSB0aGUgZGV2aWNl Lg0KICAgID4+ICAgICAgICAgPj4gVGhlcmUgYWxyZWFkeSBleGlzdHMgYSBjb21tb24gd2F5IHRv IGtub3cgdGhlIGNoYXJhY3RlcmlzdGljcyBvZiBhDQogICAgPj4gICAgICAgICA+PiBkZXZpY2Ug YnkgaXNzdWluZyB0byB0aGUgZGV2aWNlIGEgcHVibGljIGtleSBjZXJ0aWZpY2F0ZSB3aGljaCB3 aWxsDQogICAgPj4gICAgICAgICA+PiBvbmx5IGJlIGlzc3VlZCB0byB0aGUgZGV2aWNlDQogICAg Pj4gICAgICAgICA+PiBpZiBpdCBmdWxmaWxscyBhbiBleHBlY3RlZCBzZXQgb2YgZnVuY3Rpb25h bGl0aWVzLiBJbiBzdWNoIGEgY2FzZSBhDQogICAgPj4gICAgICAgICA+PiBzeW50YXggZm9yIGEg dHJ1c3RlZCBjbGFpbSBzZXRzKippcyBub3QgbmVlZGVkLg0KICAgID4+ICAgICAgICAgPj4NCiAg ICA+PiAgICAgICAgID4gVGhpcyBpcyBpbmRlZWQgYSBwb3NzaWJsZSB3YXkgdG8gYWRkcmVzcyB0 aGUgcHJvYmxlbSwgYnV0IHN1ZmZlcnMgZnJvbQ0KICAgID4+ICAgICAgICAgPiBjaGFsbGVuZ2Vz IHdoaWNoIGNvbWUgZG93biB0bzoNCiAgICA+PiAgICAgICAgID4NCiAgICA+PiAgICAgICAgID4g LSBXaG8gaXNzdWVzIHN1Y2ggY2VydGlmaWNhdGVzLiBBbiBvcHRpb24gaXMgdGhhdCB0aGVyZSBp cyBzb21lIGZvcm0gb2YNCiAgICA+PiAgICAgICAgID4gc2VjdXJpdHkgY2VydGlmaWNhdGlvbiBi ZWhpbmQgdGhpcyBpc3N1YW5jZSBvdGhlcndpc2UgaXQgaXMgb2YgdmVyeQ0KICAgID4+ICAgICAg ICAgPiBsaW1pdGVkIHZhbHVlLg0KICAgID4+ICAgICAgICAgPiAtIEluIG9yZGVyIHRvIGNhcHR1 cmUgdGhlIHdpZGUgdmFyaWV0eSBvZiBkaWZmZXJlbnQgZGV2aWNlcyAoSSBwcmVmZXINCiAgICA+ PiAgICAgICAgID4gImVudGl0eSIgaGVyZSBhcyBpdCBpcyBtb3JlIGdlbmVyYWwgdGhhbiAiZGV2 aWNlIiksIG1hbnkgZGlmZmVyZW50IGZvcm1zDQogICAgPj4gICAgICAgICA+IG9mIHN1Y2ggY2Vy dGlmaWNhdGVzIHdvdWxkIGJlIHJlcXVpcmVkLiBUaGlzIGVuZHMgdXAgYmVpbmcgbXVjaCB0aGUg c2FtZQ0KICAgID4+ICAgICAgICAgPiB0aGluZyBhcyBhIHNldCBvZiBjbGFpbXMuDQogICAgPj4g ICAgICAgICA+DQogICAgPj4gICAgICAgICA+IEdpdmVuIHRoZSBtdWx0aXBsaWNpdHkgb2YgZW50 aXRpZXMgZm9yIHdoaWNoIGF0dGVzdGF0aW9uIG1pZ2h0IGJlDQogICAgPj4gICAgICAgICA+IHVz ZWZ1bCwgaXQgc2VlbXMgdG8gbWUgdGhhdCBoYXZpbmcgdGhlIGVudGl0eSBjcmVhdG9yL21hbnVm YWN0dXJlcg0KICAgID4+ICAgICAgICAgPiBwcm92aWRlIGEgc2V0IG9mIGNsYWltcyB3aGljaCBj YW4gYmUgdmVyaWZpZWQgaXMgbW9yZSBmbGV4aWJsZSB0aGFuDQogICAgPj4gICAgICAgICA+IHJl cXVpcmluZyBhIGNlcnRpZmljYXRlLiBJdCBzZWVtcyBsaWtlbHkgdG8gbWUgdGhhdCB3aGVyZSBh IGZvcm1hbA0KICAgID4+ICAgICAgICAgPiBzZWN1cml0eSBjZXJ0aWZpY2F0aW9uIGlzIG5lZWRl ZCB0aGVyZSB3aWxsIGJlIGEgY2VydGlmaWNhdGUgaXNzdWVkIGJ5DQogICAgPj4gICAgICAgICA+ IHRoZSBDZXJ0aWZ5aW5nIEJvZHkgYXMgb25lIG9mIHRoZSBjbGFpbXMgYWJvdXQgYW4gZW50aXR5 LCBidXQgSSBjYW4NCiAgICA+PiAgICAgICAgID4gdGhpbmsgb2YgbWFueSBjYXNlcyAoc3VwcGx5 IGNoYWluIG1hbmFnZW1lbnQsIHRvIHRha2UganVzdCBvbmUgZXhhbXBsZSkNCiAgICA+PiAgICAg ICAgID4gd2hlcmUgcHJvdmVuYW5jZSBpcyBieSBmYXIgdGhlIG1vc3QgdXNlZnVsIGluZm9ybWF0 aW9uLg0KICAgID4+ICAgICAgICAgPg0KICAgID4+ICAgICAgICAgPiBJJ20gbm90IGluIGZhdm91 ciBvZiBjaGFuZ2VzIHRvIHRoZSBjaGFydGVyIGluIHRoaXMgZGlyZWN0aW9uLg0KICAgID4+ICAg ICAgICAgPj4NCiAgICA+PiAgICAgICAgID4+IFRoZSBzaW1wbGVzdCBjYXNlcyBzaG91bGQgYWxz byBiZSBwYXJ0IG9mIHRoZSBmcmFtZXdvcmsuDQogICAgPj4gICAgICAgICA+Pg0KICAgID4+ICAg ICAgICAgPj4gTm90ZTogSSBwZXJzb25hbGx5IGFwcHJlY2lhdGUgdGhhdCBwcml2YWN5IGlzIGFu IGFzcGVjdCB0aGF0DQogICAgPj4gICAgICAgICA+PiB3aWxsL3Nob3VsZCBiZSB0YWtlbiBpbnRv IGNvbnNpZGVyYXRpb24uDQogICAgPj4gICAgICAgICA+Pg0KICAgID4+ICAgICAgICAgPj4gRGVu aXMNCiAgICA+PiAgICAgICAgID4+DQogICAgPj4gICAgICAgICA+Pj4gQXMgd2l0aCB0aGUgZWFy bGllciBkcmFmdCwgdGhlcmUgYXJlIG1hbnkgcmVmZXJlbmNlcyB0byB2ZXJpZnkgYW5kDQogICAg Pj4gICAgICAgICA+Pj4gdmVyaWZpZXIgaW4gdGhlIGxlYWQgdXAgdG8gdGhlIGRlbGl2ZXJhYmxl IGJ1dCBubyBkZWxpdmVyYWJsZXMgZGVzY3JpYmluZw0KICAgID4+ICAgICAgICAgPj4+IHZlcmlm aWNhdGlvbiBydWxlcy4gSSdkIGxpa2UgdG8gc2VlIHJ1bGVzIGluIG9uZSBvZiB0aGVzZSBkb2N1 bWVudHMgYW5kDQogICAgPj4gICAgICAgICA+Pj4gdGhpbmsgaXQgd29ydGggY2l0aW5nIGluIHRo ZSBkZWxpdmVyYWJsZXMuIEFyZSBiaW5kaW5ncyB0byBjZXJ0aWZpY2F0ZQ0KICAgID4+ICAgICAg ICAgPj4+IG1hbmFnZW1lbnQgcHJvdG9jb2xzIG91dCBvZiBzY29wZT8NCiAgICA+PiAgICAgICAg ID4+Pg0KICAgID4+ICAgICAgICAgPj4+IE9uIDEwLzExLzE4LCA5OjQ5IEFNLCAiUkFUUyBvbiBi ZWhhbGYgb2YgSGVuayBCaXJraG9seiINCiAgICA+PiAgICAgICAgID4+PiA8cmF0cy1ib3VuY2Vz QGlldGYub3JnIG9uIGJlaGFsZiBvZiBoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPiAg d3JvdGU6DQogICAgPj4gICAgICAgICA+Pj4NCiAgICA+PiAgICAgICAgID4+Pj4gSGkgYWxsLA0K ICAgID4+ICAgICAgICAgPj4+Pg0KICAgID4+ICAgICAgICAgPj4+PiBzb3JyeSBmb3IgdGhlIGRl bGF5LiBQbGVhc2UgZmluZCBhbiB1cGRhdGVkIGNoYXJ0ZXIgcHJvcG9zYWwgaGVyZToNCiAgICA+ PiAgICAgICAgID4+Pj4NCiAgICA+PiAgICAgICAgID4+Pj4+IGh0dHBzOi8vZ2l0aHViLmNvbS9p ZXRmLXJhdHMvY2hhcnRlci9ibG9iL1JDMi9pZXRmLXJhdHMtY2hhcnRlci5tZA0KICAgID4+ICAg ICAgICAgPj4+PiBUaGUgQm9GIHByb3BvbmVudHMgdHJpZWQgdG8gbWVyZ2UgYWxsIGNvbW1lbnRz IGFuZCBwcm9wb3NhbHMgb24NCiAgICA+PiAgICAgICAgID4+Pj4ga2V5c3RvcmVzLCBleGlzdGlu ZyBzb2x1dGlvbnMsIHByb3ZlbmFuY2UgJiBkZXZpY2UgY2hhcmFjdGVyaXN0aWNzLCBldGMNCiAg ICA+PiAgICAgICAgID4+Pj4gdGhhdCB3ZXJlIHJhaXNlZCBvbiB0aGUgbGlzdCAtIGFuZCBhbGln biB0aGVtIGluIGhvbW9nZW5lb3VzIGZhc2hpb24uDQogICAgPj4gICAgICAgICA+Pj4+DQogICAg Pj4gICAgICAgICA+Pj4+IFRoaXMgZHJhZnQgaXMgaW50ZW5kZWQgdG8gZm9jdXMgdGhlIGRpc2N1 c3Npb24gYW5kIGltcHJvdmUgdGhlIHdvcmRpbmcuDQogICAgPj4gICAgICAgICA+Pj4+DQogICAg Pj4gICAgICAgICA+Pj4+IFZpZWxlIEdyw7zDn2UsDQogICAgPj4gICAgICAgICA+Pj4+DQogICAg Pj4gICAgICAgICA+Pj4+IEhlbmsNCiAgICA+PiAgICAgICAgID4+Pj4NCiAgICA+PiAgICAgICAg ID4+Pj4gT24gMTAvMDYvMjAxOCAwODoyMyBBTSwgTGF1cmVuY2UgTHVuZGJsYWRlIHdyb3RlOg0K ICAgID4+ICAgICAgICAgPj4+Pj4gSGkgSGVuaywNCiAgICA+PiAgICAgICAgID4+Pj4+DQogICAg Pj4gICAgICAgICA+Pj4+PiBCYW5na29rIElFVEYgaXMgZ2V0dGluZyBjbG9zZSwgd2lsbCB5b3Ug YmUgYWJsZSB0byB1cGRhdGUgdGhlIGNoYXJ0ZXINCiAgICA+PiAgICAgICAgID4+Pj4+IGZvciB0 aGUgYXR0ZXN0YXRpb24gQm9GIHRvIHByb3Blcmx5IGluY2x1ZGUgRUFUPyAgSSBzZW50IHlvdSBz b21lIHRleHQNCiAgICA+PiAgICAgICAgID4+Pj4+IHRoYXQganVzdCBuZWVkcyB0byBiZSBwYXN0 ZWQgYWxvbmcgd2l0aCBzb21lIGNvbW1lbnRzLiBJdCBkb2VzbuKAmXQgbG9vaw0KICAgID4+ICAg ICAgICAgPj4+Pj4gbGlrZSB0aGVyZeKAmXMgYmVlbiBhbnkgdXBkYXRlcy4NCiAgICA+PiAgICAg ICAgID4+Pj4+DQogICAgPj4gICAgICAgICA+Pj4+PiBMTA0KICAgID4+ICAgICAgICAgPj4+Pj4N CiAgICA+PiAgICAgICAgID4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCiAgICA+PiAgICAgICAgID4+Pj4gUkFUUyBtYWlsaW5nIGxpc3QNCiAgICA+ PiAgICAgICAgID4+Pj4gUkFUU0BpZXRmLm9yZw0KICAgID4+ICAgICAgICAgPj4+PiBodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMNCiAgICA+PiAgICAgICAgID4+PiBf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgID4+ICAg ICAgICAgPj4+IEVBVCBtYWlsaW5nIGxpc3QNCiAgICA+PiAgICAgICAgID4+PiBFQVRAaWV0Zi5v cmcNCiAgICA+PiAgICAgICAgID4+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL2VhdA0KICAgID4+ICAgICAgICAgPj4NCiAgICA+PiAgICAgICAgID4+DQogICAgPj4gICAg ICAgICA+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K ICAgID4+ICAgICAgICAgPj4gRUFUIG1haWxpbmcgbGlzdA0KICAgID4+ICAgICAgICAgPj4gRUFU QGlldGYub3JnIDxtYWlsdG86RUFUQGlldGYub3JnPg0KICAgID4+ICAgICAgICAgPj4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCiAgICA+PiAgICAgICAgID4NCiAg ICA+PiAgICAgICAgID4NCiAgICA+PiAgICAgICAgID4NCiAgICA+PiAgICAgICAgID4gX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICA+PiAgICAgICAg ID4gRUFUIG1haWxpbmcgbGlzdA0KICAgID4+ICAgICAgICAgPiBFQVRAaWV0Zi5vcmcNCiAgICA+ PiAgICAgICAgID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCiAg ICA+PiAgICAgICAgID4NCiAgICA+PiAgICAgICAgICAgICAgX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICA+PiAgICAgICAgIEVBVCBtYWlsaW5nIGxp c3QNCiAgICA+PiAgICAgICAgIEVBVEBpZXRmLm9yZw0KICAgID4+ICAgICAgICAgaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCiAgICA+PiAgICAgICAgICAgICAgIF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgPj4gICAg IEVBVCBtYWlsaW5nIGxpc3QNCiAgICA+PiAgICAgRUFUQGlldGYub3JnDQogICAgPj4gICAgIGh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0DQogICAgPj4gICAgIElNUE9S VEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVu dHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFy ZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGlt bWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBw ZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9y bWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCiAgICA+Pg0KICAgID4gX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICA+IEVBVCBtYWlsaW5n IGxpc3QNCiAgICA+IEVBVEBpZXRmLm9yZw0KICAgID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9lYXQNCg0KICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQogICAgRUFUIG1haWxpbmcgbGlzdA0KICAgIEVBVEBpZXRmLm9yZw0K ICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0DQoNCg0KDQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KDQpFc3RlIG1lbnNhamUgeSBzdXMgYWRqdW50 b3Mgc2UgZGlyaWdlbiBleGNsdXNpdmFtZW50ZSBhIHN1IGRlc3RpbmF0YXJpbywgcHVlZGUgY29u dGVuZXIgaW5mb3JtYWNpw7NuIHByaXZpbGVnaWFkYSBvIGNvbmZpZGVuY2lhbCB5IGVzIHBhcmEg dXNvIGV4Y2x1c2l2byBkZSBsYSBwZXJzb25hIG8gZW50aWRhZCBkZSBkZXN0aW5vLiBTaSBubyBl cyB1c3RlZC4gZWwgZGVzdGluYXRhcmlvIGluZGljYWRvLCBxdWVkYSBub3RpZmljYWRvIGRlIHF1 ZSBsYSBsZWN0dXJhLCB1dGlsaXphY2nDs24sIGRpdnVsZ2FjacOzbiB5L28gY29waWEgc2luIGF1 dG9yaXphY2nDs24gcHVlZGUgZXN0YXIgcHJvaGliaWRhIGVuIHZpcnR1ZCBkZSBsYSBsZWdpc2xh Y2nDs24gdmlnZW50ZS4gU2kgaGEgcmVjaWJpZG8gZXN0ZSBtZW5zYWplIHBvciBlcnJvciwgbGUg cm9nYW1vcyBxdWUgbm9zIGxvIGNvbXVuaXF1ZSBpbm1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtaXNt YSB2w61hIHkgcHJvY2VkYSBhIHN1IGRlc3RydWNjacOzbi4NCg0KVGhlIGluZm9ybWF0aW9uIGNv bnRhaW5lZCBpbiB0aGlzIHRyYW5zbWlzc2lvbiBpcyBwcml2aWxlZ2VkIGFuZCBjb25maWRlbnRp YWwgaW5mb3JtYXRpb24gaW50ZW5kZWQgb25seSBmb3IgdGhlIHVzZSBvZiB0aGUgaW5kaXZpZHVh bCBvciBlbnRpdHkgbmFtZWQgYWJvdmUuIElmIHRoZSByZWFkZXIgb2YgdGhpcyBtZXNzYWdlIGlz IG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0 IGFueSBkaXNzZW1pbmF0aW9uLCBkaXN0cmlidXRpb24gb3IgY29weWluZyBvZiB0aGlzIGNvbW11 bmljYXRpb24gaXMgc3RyaWN0bHkgcHJvaGliaXRlZC4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhp cyB0cmFuc21pc3Npb24gaW4gZXJyb3IsIGRvIG5vdCByZWFkIGl0LiBQbGVhc2UgaW1tZWRpYXRl bHkgcmVwbHkgdG8gdGhlIHNlbmRlciB0aGF0IHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgY29tbXVu aWNhdGlvbiBpbiBlcnJvciBhbmQgdGhlbiBkZWxldGUgaXQuDQoNCkVzdGEgbWVuc2FnZW0gZSBz ZXVzIGFuZXhvcyBzZSBkaXJpZ2VtIGV4Y2x1c2l2YW1lbnRlIGFvIHNldSBkZXN0aW5hdMOhcmlv LCBwb2RlIGNvbnRlciBpbmZvcm1hw6fDo28gcHJpdmlsZWdpYWRhIG91IGNvbmZpZGVuY2lhbCBl IMOpIHBhcmEgdXNvIGV4Y2x1c2l2byBkYSBwZXNzb2Egb3UgZW50aWRhZGUgZGUgZGVzdGluby4g U2UgbsOjbyDDqSB2b3NzYSBzZW5ob3JpYSBvIGRlc3RpbmF0w6FyaW8gaW5kaWNhZG8sIGZpY2Eg bm90aWZpY2FkbyBkZSBxdWUgYSBsZWl0dXJhLCB1dGlsaXphw6fDo28sIGRpdnVsZ2HDp8OjbyBl L291IGPDs3BpYSBzZW0gYXV0b3JpemHDp8OjbyBwb2RlIGVzdGFyIHByb2liaWRhIGVtIHZpcnR1 ZGUgZGEgbGVnaXNsYcOnw6NvIHZpZ2VudGUuIFNlIHJlY2ViZXUgZXN0YSBtZW5zYWdlbSBwb3Ig ZXJybywgcm9nYW1vcy1saGUgcXVlIG5vcyBvIGNvbXVuaXF1ZSBpbWVkaWF0YW1lbnRlIHBvciBl c3RhIG1lc21hIHZpYSBlIHByb2NlZGEgYSBzdWEgZGVzdHJ1acOnw6NvDQo= From nobody Wed Oct 17 03:56:25 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F0A312F1A2; Wed, 17 Oct 2018 03:56:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.765 X-Spam-Level: X-Spam-Status: No, score=-0.765 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.064, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, KHOP_DYNAMIC=1.999, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=juniper.net Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2Kyn_cAdoy9U; Wed, 17 Oct 2018 03:56:15 -0700 (PDT) Received: from mx0b-00273201.pphosted.com (mx0b-00273201.pphosted.com [67.231.152.164]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04F1A128B14; Wed, 17 Oct 2018 03:56:14 -0700 (PDT) Received: from pps.filterd (m0108161.ppops.net [127.0.0.1]) by mx0b-00273201.pphosted.com (8.16.0.22/8.16.0.22) with SMTP id w9HArfZA022433; Wed, 17 Oct 2018 03:56:09 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=juniper.net; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=PPS1017; bh=cPHSARf+p07MXmXvXgMLlBfMPme6WVsBajTnIAOaxtE=; b=suBBCN9jyCVYaGCd/PrIDgdVVrbzIkkzF6vGGdChEIsEWvXdglmPASWZdDdrRuv2IU1Y HY+RuXvKPJiA8Gd1Ugonys8bEurZf7/9Iw5mg9IzmQ+JqbkzVKmQM20faTyUZ0Dk1zVL f/SlIedJ69NpcwNXD9iiUQWUPJyYfrfb2gY1cX65WRZPT8UJzbOUQGgCKI/08emo/cWJ FR9kbNZXPgmPmIVVUS5JIXrrpyK8CWWkcnSFXhVL29aGQk6UdkRrVbFgSCwawlv1FzHY qK3YhBl4szgN1BhIQak3Pl0fftW9af+vlpreHxIlSEHtJdRQl9cvQ9i0zRxkZ6zLZTfv ZQ== Received: from nam05-dm3-obe.outbound.protection.outlook.com (mail-dm3nam05lp0119.outbound.protection.outlook.com [216.32.181.119]) by mx0b-00273201.pphosted.com with ESMTP id 2n60egg9tr-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Wed, 17 Oct 2018 03:56:09 -0700 Received: from BN7PR05MB4097.namprd05.prod.outlook.com (52.132.219.147) by BN7PR05MB3922.namprd05.prod.outlook.com (52.132.7.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1250.14; Wed, 17 Oct 2018 10:56:06 +0000 Received: from BN7PR05MB4097.namprd05.prod.outlook.com ([fe80::910e:a3a3:ba79:8727]) by BN7PR05MB4097.namprd05.prod.outlook.com ([fe80::910e:a3a3:ba79:8727%5]) with mapi id 15.20.1250.020; Wed, 17 Oct 2018 10:56:06 +0000 From: Guy Fedorkow To: Laurence Lundblade , Henk Birkholz CC: "Smith, Ned" , Hannes Tschofenig , "rats@ietf.org" , Jeremy O'Donoghue , Denis , "eat@ietf.org" Thread-Topic: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates? Thread-Index: AQHUZfsEblAnDRTuI0+wdPhYTDxZJKUjO9nQ Date: Wed, 17 Oct 2018 10:56:05 +0000 Message-ID: References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-version: 11.0.400.15 dlp-reaction: no-action x-originating-ip: [193.110.55.14] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BN7PR05MB3922; 6:IHVNjHwPJpfbgqjq7jHLkPgTRYHRiTNBZbcVMuS9fQeP33WgZ28R9YPVX0J3ME6diTa3Lj2RFTMRAN4Nn8CJH+FOxt7yzewv2fkk+0RoY8lGkSXWSfjtrS2T2ukEgPU/lugzckXhIGcoNRzN0Gs+klFHtEDyKea4EKolL6mMnPLGBkrv5R5XrOIgkd/PI7exIx+jE79umvfJRXnwT6ydHRAlZWZoGFgdinID7RTsuSEWZ3ZEQNcTnt6zJowi85Dcu6mn5MkHsKy+IntwcbnS3cbhNc4uF8qpYIxxsKouj2jSoTEgT68Ys6IST5i2j1wcZcY1w/bt9vXYPxYqG2HF1LF8og7Hreqw4ZNfB7Axo8pcN8/7W/jj3cEQT2VZO/zswH4ggWGmaT6Ib4B5195p3jTRckhFZ4Ln8iNLOEO8uX8GZUssqrHOAaTjWmyUnVjGZCYgF8I8TMBV8FcqvKPKWw==; 5:izllWAc74ctpYn2DRIqp5j+60cbw8glswyEBjSFH88sGPBGaDDZtS00rTkdx8MjIr/ePwq1Nq8tubej+5SfHyUC3TcBdaepcd+xkNvkX0tNttOU4rVI+3Y8136HBHKiY94dAPegw8smx+DLVFwkG5eU9kEUWTE6/SXK/r8yrC/I=; 7:gavlNa+qT/3fQlOGufZrfFKWBUH9TeWs4QIwKnxUsIv05yGFvaY7vxMO8yMu+G8Y2AmrXGMqyt1ewDEJENNz3VfwKuwwfTYcpcBgLrEsJoYDj+hu6ORPRigW8J80t7p24z7fmQckUPDcE8imoz1cuVA4mtAThg11vXu1sSAXrAdJWUKnOaqFvJYL/sYugJcJ5BNsgFdmdgH5L+Ml7Bcy68kdHYhh7lyAqbtnG1dxxXJSlubR6ynao/APqkxcuViT x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 35fe7742-4658-40cc-40db-08d6341f2357 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:BN7PR05MB3922; x-ms-traffictypediagnostic: BN7PR05MB3922: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705)(10436049006162)(228905959029699)(180628864354917)(191636701735510); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3231355)(944501410)(52105095)(3002001)(6055026)(149066)(150057)(6041310)(20161123560045)(20161123564045)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991095); SRVR:BN7PR05MB3922; BCL:0; PCL:0; RULEID:; SRVR:BN7PR05MB3922; x-forefront-prvs: 08286A0BE2 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(39860400002)(136003)(346002)(376002)(366004)(396003)(40434004)(199004)(189003)(40224003)(13464003)(51444003)(53754006)(53546011)(966005)(99286004)(8936002)(6506007)(561944003)(5250100002)(76176011)(7696005)(5660300001)(33656002)(305945005)(54906003)(6246003)(7736002)(229853002)(66066001)(71190400001)(71200400001)(105586002)(106356001)(4744004)(575784001)(110136005)(66574009)(86362001)(55016002)(5024004)(3846002)(74316002)(14444005)(53946003)(316002)(476003)(186003)(53936002)(446003)(9686003)(11346002)(256004)(26005)(68736007)(486006)(6116002)(4326008)(97736004)(14454004)(6306002)(15650500001)(551544002)(81156014)(2900100001)(81166006)(8676002)(478600001)(6436002)(102836004)(93886005)(2906002)(25786009)(15866825006)(579004); DIR:OUT; SFP:1102; SCL:1; SRVR:BN7PR05MB3922; H:BN7PR05MB4097.namprd05.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: juniper.net does not designate permitted sender hosts) x-microsoft-antispam-message-info: SnNuonf3Z4P3NJsqpqGyJxuLvyHeBq9K/Dp6ejEPpK73StPBJCLZIUF1AJurAQmXP6qV65OT8feUKaMYT+Ar8LHag67NGyggGVldLknlN6xsvwKAPkRD6x6zG661jl243M7age5oEP/SO4neTNY94aBmrnuk+Gs+6DT7JNlSDGqcjIRAdA7fBJZJxULMQGjxSiheMGHHcQxhYwXqbu2/znJekXWd5k4S6MqLg9haG6TwSVvckHOIRWe025Mri9UDlfcS79qyIiAwIaTMvE4jtliSCJ+WQvdGdnEEgpcyKT9D/SX5nBqDyZr95szqSFmiN2EcFT6yyHvfO8NlzTZrwya70JkbPKvbet7TH46q/FA= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-Network-Message-Id: 35fe7742-4658-40cc-40db-08d6341f2357 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Oct 2018 10:56:05.6471 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN7PR05MB3922 X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:, , definitions=2018-10-16_14:, , signatures=0 X-Proofpoint-Spam-Details: rule=outbound_spam_notspam policy=outbound_spam score=0 priorityscore=1501 malwarescore=0 suspectscore=0 phishscore=0 bulkscore=0 spamscore=0 clxscore=1011 lowpriorityscore=0 mlxscore=0 impostorscore=0 mlxlogscore=999 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1807170000 definitions=main-1810170098 Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Oct 2018 10:56:18 -0000 SGkgTGF1cmVuY2UsDQogIEkgZG9uJ3QgdGhpbmsgdGhlcmUncyBhbWJpZ3VpdHkgaW4gdGhlIFRD RyBjYXNlLi4uICBjdXJyZW50IHdvcmsgaW4gYXR0ZXN0YXRpb24gZm9jdXNlcyBvbiB1c2luZyB0 aGUgODAyLjFBUiBEZXZJRCBzcGVjLCB3aGljaCBjb3JyZXNwb25kcyBleGFjdGx5IHRvIG9uZSBv ZiB5b3VyIGNhc2VzIGJlbG93IC0tIGl0J3MgYSB2ZW5kb3IsIG1vZGVsIGFuZCBzZXJpYWwgbnVt YmVyLg0KICBJdCdzIHRydWUgdGhhdCBUQ0cgdGVjaG5vbG9neSBjYW4gYmUgdXNlZCB0byB2YWxp ZGF0ZSBzb2Z0d2FyZSBpbnRlZ3JpdHksIGJ1dCB0aGF0J3MgaGFyZGx5IHRoZSBzYW1lIGFzIGlk ZW50aXR5Lg0KICBDb25zaWRlcmF0aW9ucyBvZiB1c2VyIHByaXZhY3kgY29tbW9ubHkgYWNjZXB0 ZWQgaW4gVENHIHdvdWxkIHByZWNsdWRlIHRoZSBpbmNsdXNpb24gb2Ygc29mdHdhcmUgc3RhdGUg YXMgcGFydCBvZiBpZGVudGl0eSwgcHJhY3RpY2FsaXRpZXMgYXNpZGUuICBJbiBnZW5lcmFsLCBw cml2YWN5IGNvbnNpZGVyYXRpb25zIGxlYWQgVENHIHRvIGNhcmVmdWxseSBhdm9pZCB1bmF1dGhv cml6ZWQgZGlzY2xvc3VyZSBvZiBlaXRoZXIgc29mdHdhcmUgb3IgaGFyZHdhcmUgYmFzZWQgYXNz ZXJ0aW9ucy4NCiAgTGV0IG1lIGtub3cgaWYgSSdtIG1pc3NpbmcgdGhlIHBvaW50Li4uDQpUaGFu a3MNCi9ndXkgZmVkb3Jrb3csIGp1bmlwZXIgbmV0d29ya3MNCg0KLS0tLS1PcmlnaW5hbCBNZXNz YWdlLS0tLS0NCkZyb206IExhdXJlbmNlIEx1bmRibGFkZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29t PiANClNlbnQ6IFdlZG5lc2RheSwgT2N0b2JlciAxNywgMjAxOCAxMjozMSBBTQ0KVG86IEhlbmsg Qmlya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+DQpDYzogU21pdGgsIE5l ZCA8bmVkLnNtaXRoQGludGVsLmNvbT47IEhhbm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNjaG9m ZW5pZ0Bhcm0uY29tPjsgcmF0c0BpZXRmLm9yZzsgSmVyZW15IE8nRG9ub2dodWUgPGpvZG9ub2do QHF0aS5xdWFsY29tbS5jb20+OyBEZW5pcyA8ZGVuaXMuaWV0ZkBmcmVlLmZyPjsgZWF0QGlldGYu b3JnDQpTdWJqZWN0OiBSZTogW0VBVF0gW0VYVEVSTkFMXSBSZTogW1JhdHNdIEF0dGVzdGF0aW9u IEJvRiBjaGFydGVyIHVwZGF0ZXM/DQoNCkkgdGhpbmsgdGhlIFRDRyBoYXMgYSBjZXJ0YWluIGRl dmVsb3BlZCBub3Rpb24gb2YgaWRlbnRpdHkgdGhhdCBpcyBkaWZmZXJlbnQgZnJvbSBvdGhlcnMu ICBBIHdheSB0byBnZXQgc2hhcnBlciBhYm91dCB3aGF0IGEgcGFydGljdWxhciBpZGVudGl0eSBt ZWFucyBpcyB0byBkZXNjcmliZSB0aGUgc3BhY2UgYW5kIGhvdyB0aGUgaWRlbnRpZmllciBzZWxl Y3RzIGluIHRoZSBzcGFjZS4gIEhlcmXigJlzIGEgZmV3IGV4YW1wbGVzOg0KDQotIFRoZSBzcGFj ZSBpcyBwaHlzaWNhbCBodW1hbiBiZWluZ3Mgd2l0aCBmaW5nZXJzLiBBIGZpbmdlcnByaW50IHNj YW5uZXIgc2VsZWN0IG9uZSBvZiB0aGVzZSBodW1hbnMuIFRoaXMgaXMgdHlwaWNhbCBiaW9tZXRy aWMgYXV0aC4NCi0gVGhlIHNwYWNlIGlzIGh1bWFucyB0aGF0IGtub3cgYSBwYXNzd29yZC4gQSBw YXNzd29yZCBhdXRoZW50aWNhdG9yIHNlbGVjdHMgdGhlIGh1bWFucyB0aGF0IGtub3cgdGhlIHBh c3N3b3JkLiBUeXBpY2FsIGF1dGhlbnRpY2F0aW9uLg0KLSBUaGUgc3BhY2UgaXMgaHVtYW5zIGFz IGxlZ2FsIGVudGl0aWVzIC8gY2l0aXplbnMgd2l0aCBjcmltaW5hbCByZWNvcmRzLCBwYXNzcG9y dHMgYW5kIHN1Y2guIEEgbmF0aW9uYWwgSUQgc2VsZWN0cy4gDQotIFRoZSBzcGFjZSBpcyBwaHlz aWNhbCBtYW51ZmFjdHVyZWQgZGV2aWNlcyBmcm9tIG9uZSBtYWtlci4gIEEgc2VyaWFsIG51bWJl ciBuYXJyb3dzIGl0IGRvd24gdG8gb25lIHBoeXNpY2FsIGRldmljZS4NCi0gVGhlIHNwYWNlIGlz IHBoeXNpY2FsIGRldmljZXMgZnJvbSBvbmUgbWFrZXIuIEEgbW9kZWwgbnVtYmVyIG9yIHZlcnNp b24sIG5hcnJvd3MgZG93biB0byBhIHN1YnNldCBvZiB0aGVzZSBkZXZpY2VzLg0KDQpNeSB1bmRl cnN0YW5kaW5nIG9mIHRoZSBUQ0cgd29ybGQgaXMgdGhhdCBpZGVudGl0aWVzIGdvZXMgYmV5b25k IGFueSBvZiB0aGUgYWJvdmUgYmVjYXVzZSB0aGV5IGluY2x1ZGUgdGhpbmdzIGxpa2UgdGhlIHZl cnNpb24gb2YgdGhlIFNXIGFuZCBjb25maWd1cmF0aW9uIG9mIHRoZSBkZXZpY2UuIFRoZSBpZGVu dGl0eSBpcyBsYXJnZWx5IGEgaGFzaCBvZiBhbiBpZGVudGlmaWVyIG9mIHRoZSBwaHlzaWNhbCBk ZXZpY2UsIHZhcmlvdXMgU1cgY29tcG9uZW50cyBhbmQgdmFyaW91cyBjb25maWd1cmF0aW9uIHN0 YXRlcy4gIFRoZSBwb2ludCBiZWluZyB0aGF0IGEgY2hhbmdlIGluIGFueSBvZiB0aGVzZSBpcyBh IGNoYW5nZSBpbiB0aGUgc2VjdXJpdHkgY2hhcmFjdGVyaXN0aWNzIG9mIHRoZSBkZXZpY2UgYW5k IGlmIGl0IHdhcyB0cnVzdGVkIHdpdGggYSBwYXJ0aWN1bGFyIGtleSBvciBwYXJ0aWN1bGFyIGRh dGEgaW4gdGhlIHBhc3QsIHRoYXQgdHJ1c3Qgc2hvdWxkIGJlIHJldm9rZWQgdW50aWwgcmUgZXN0 YWJsaXNoZWQuDQoNCi0gVGhlIHNwYWNlIGlzIHBoeXNpY2FsIGRldmljZXMgZnJvbSBhbnkgbWFr ZXINCiAgKyBNZWFzdXJlbWVudCBvZiB0aGUgU1cgKHRoZSBTVyB2ZXJzaW9ucykNCiAgICAgKyBN ZWFzdXJlbWVudHMgb2Ygc29tZSBjb25maWd1cmF0aW9uDQoNCkNoYW5naW5nIGFueSBvZiB0aGVz ZSBjaGFuZ2UgdGhlIGlkZW50aXR5IG9mIHRoZSBkZXZpY2UuIA0KDQpJIGtub3cgSSBoYXJkbHkg bmVlZCB0byBhc2ssIGJ1dCBUQ0cgZm9sa3MsIGRpZCBJIGRlc2NyaWJlIHRoaXMgY29ycmVjdGx5 Pw0KDQoNClNvIHRoYXQgc2FpZCwgbWFueSwgcGVyaGFwcyBtb3N0LCB1c2UgY2FzZXMgZm9yIEVB VCBkbyBub3Qgd2FudCB0aGlzIGtpbmQgb2YgZGV2aWNlIGlkZW50aXR5LiBJdCBpcyBub3QgYSBw cmVyZXF1aXNpdGUgZm9yIHRydXN0aW5nICBjbGFpbXMgY29taW5nIGZyb20gdGhlIGRldmljZS4g SW4gc29tZSBjYXNlcyB0aGlzIGxldmVsIG9mIGlkZW50aXR5IHNlZW1zIGV4dHJlbWVseSBkaXNy dXB0aXZlIGFzIHNtYWxsIFNXIHVwZ3JhZGVzIGNvdWxkIHJlc3VsdCBpbiByZSBlbnJvbGxtZW50 IG9mIGJpb21ldHJpY3MuIFdlIGFscmVhZHkgYXJlIGFubm95ZWQgd2hlbiB3ZSBoYXZlIHRvIGFu c3dlciBzZWN1cml0eSBxdWVzdGlvbnMgd2hlbiBzdGFydCB1c2luZyBhIHNlcnZpY2UgZnJvbSBh IG5ldyBkZXZpY2UuIA0KDQpJIHRoaW5rIHRoaXMgV0cgbmVlZHMgdG8gYWRkcmVzcyBib3RoIHRo aXMgdmVyeSB0aWdodCBUQ0ctc3R5bGUgZGV2aWNlIGlkZW50aXR5IGFuZCB0aGUgbW9yZSBoZXVy aXN0aWMgRUFULXN0eWxlIGNsYWltcy1mb3Itcmlzay1lbmdpbmVzLiBJIGNvdWxkIHNlZSBtdWx0 aS1kZWNhZGUgZXZvbHV0aW9uIHdoZXJlIHJpc2sgZW5naW5lIHVzZSBjYXNlcyB3YW50IG1vcmUg YW5kIG1vcmUgb2YgdGhlIHRpZ2h0IFRDRy1zdHlsZSBkZXZpY2UgaWRlbnRpdHkgYXMgY3JpbWlu YWxzIGJlY29tZSBtb3JlIGFkZXB0IGF0IGZvcmdpbmcgRUFULXN0eWxlIGNsYWltcy4gKFRvZGF5 IHJpc2sgZW5naW5lcyB3b3JrIG9mZiBvZiB1bnNlY3VyZWQgYnJvd3NlciBwYXJhbWV0ZXJzKS4g DQoNClRoZSBJbnRyb2R1Y3Rpb24gaW4gdGhlIGNoYXJ0ZXIgc2VlbXMgZW50aXJlbHkgZm9jdXNl ZCBvbiB0aGUgVENHLWJhc2VkIGlkZW50aXR5IHVzZSBjYXNlLiBJIHRoaW5rIHRleHQgc2hvdWxk IGJlIGFkZGVkIGZvciBFQVQtc3R5bGUgYXR0ZXN0YXRpb24uIEkgd2lsbCB3cml0ZSBzb21lIGFm dGVyIHNvbWUgY29tbWVudHMgb24gdGhpcyBtZXNzYWdlLg0KDQpMTCANCg0KDQoNCg0KDQo+IE9u IE9jdCAxNiwgMjAxOCwgYXQgODoyNCBQTSwgSGVuayBCaXJraG9seiA8aGVuay5iaXJraG9sekBz aXQuZnJhdW5ob2Zlci5kZT4gd3JvdGU6DQo+IA0KPiBUbyBxdW90ZSBDYXJzdGVuLCB0aGVyZSBp cyAidGhlIHVzdWFsIHRlcm1pbm9sb2d5IHByb2JsZW0gYWJvdXQgaWRlbnRpdHkiLg0KPiANCj4g SWRlbnRpZnlpbmcgdnMuIElkZW50aXR5IGJyaW5ncyBiYWNrIG1lbW9yaWVzIGFib3V0IGFuIGV4 dGVuc2l2ZSBkaXNjdXNzaW9uIGluIFNBQ00gdGhhdCBpbiB0aGUgZW5kIHJlc3VsdGVkIGluIHVz aW5nIFByb2ZpbGVzLi4uDQo+IA0KPiBQcm9maWxlcyBhcmUgdGhlICJ0aGluZ3MiIHRoYXQgeW91 IGNhbiBhZ2dyZWdhdGUgaWRlbnRpdHkgY2xhaW1zIGluIChpbiBTQUNNIHRoZXNlIGNsYWltcyBh cmUgIlRhcmdldCBFbmRwb2ludCBDaGFyYWN0ZXJpc3RpY3MiLCB3aGljaCBhcmUgcHJldHR5IG11 Y2ggdGhlIHNhbWUgdGhpbmcgYXMgRGV2aWNlIENoYXJhY3RlcmlzdGljcykgLSBhbmQgeW91IHVz ZSB0aGUgUHJvZmlsZXMgdG8gKHJlLSlpZGVudGlmeSB0YXJnZXQgZW5kcG9pbnRzLg0KPiANCj4g SW4gdGhlIHNjb3BlIG9mIHJlbW90ZSBhdHRlc3RhdGlvbiBwcm9jZWR1cmVzLCBJIHRoaW5rIHRo YXQgImp1c3Qgbm90IGNhbGxpbmciIGNsYWltIHNldHMgdGhhdCBhcmUgY29tcG9zZWQgKGFtb25n c3Qgb3RoZXJzKSBvZiBpZGVudGlmeWluZyBjbGFpbXMgImlkZW50aXR5IGRvY3VtZW50cyIgbWln aHQganVzdCBlbmQgdXAgaW4gbWFraW5nIHVwIGFub3RoZXIgbmFtZSBmb3Igc29tZXRoaW5nIHRo YXQgaXMgZWZmZWN0aXZlbHkgY29tcG9zaW5nIGlkZW50aXR5IGRvY3VtZW50cyBhbnl3YXlzLiBJ ZiBjYWxsaW5nIHRoZSBzYW1lIHRoaW5nIHNvbWV0aGluZyBlbHNlIGhlbHBzIGluIHNvbWUgd2F5 LCBJIGFtIGFsbCBmb3IgaXQuIEJ1dCBJIGFtIHJlYWxseSBub3Qgc3VyZS4NCj4gDQo+IFRoYXQg c2FpZCwgTmVkJ3MgZWxhYm9yYXRpb24gb24gdGhlIHJlbGF0aW9uc2hpcCBvZiBpZGVudGl0eSBh bmQgYXR0ZXN0YXRpb24gY2xhaW1zIGFuZCBjb3JyZXNwb25kaW5nIGNsYWltIHNlbWFudGljcyAv IHRydXN0IHNlbWFudGljcyBpcyBzcG90IG9uLCBJIHRoaW5rLg0KPiANCj4gVmllbGUgR3LDvMOf ZSwNCj4gDQo+IEhlbmsNCj4gDQo+IE9uIDEwLzE2LzIwMTggMDM6NTEgUE0sIFNtaXRoLCBOZWQg d3JvdGU6DQo+PiBBZ3JlZSB3aXRoIEhhbm5lcyB0aGF0IGlkZW50aXR5IGRpc2N1c3Npb24gY2Fu IGxlYWQgdG8gY29uZnVzaW9uIGFzIGlkZW50aXR5IGlzIG9mdGVuIGhpZ2hseSBkZXBlbmRlbnQg b24gc29tZSBzb3J0IG9mIGNvbnRleHQgKGRvbWFpbiBvZiBpbnRlcnByZXRhdGlvbikuDQo+PiBJ biBvcmRlciB0byBoYXZlIHByb2R1Y3RpdmUgY29udmVyc2F0aW9uIGFib3V0IGF0dGVzdGF0aW9u IGFuZCBpZGVudGl0eSwgaXQgbWF5IGJlIGltcG9ydGFudCB0byB1bmRlcnN0YW5kIHRoYXQgYXR0 ZXN0YXRpb24gc2VtYW50aWNzIHNldHMgdGhlIGNvbnRleHQgZm9yIGlkZW50aXR5Lg0KPj4gKiBB dHRlc3RhdGlvbiBhdHRyaWJ1dGVzIGhhdmUgdHJ1c3Qgc2VtYW50aWNzIChhbmQgdHJ1c3Qgc2Vt YW50aWNzIGFyZSBpbnRlcnByZXRlZCB0aHJvdWdoIHRoZSBleWVzIG9mIHRoZSB2ZXJpZmllciku IElkZW50aXR5IGF0dHJpYnV0ZXMgbWF5IGFsc28gaGF2ZSB0cnVzdCBzZW1hbnRpY3MgKGluIGFk ZGl0aW9uIHRvIGlkZW50aXR5IHNlbWFudGljcykgaGVuY2UgY2FuIGJlIHJlZ2FyZGVkIGFzIHBs YXlpbmcgYSByb2xlIGluIGJvdGggaWRlbnRpdHkgYW5kIGF0dGVzdGF0aW9uLiBTaW5jZSBSQVRT IHNob3VsZCBiZSBpbnRlcmVzdGVkIHByaW1hcmlseSBpbiB0cnVzdCBzZW1hbnRpY3MsIGl0IG1h a2VzIHNlbnNlIHRvIHVuZGVyc3RhbmQsIGRpc2N1c3MgYW5kIGNvbnNpZGVyIGlkZW50aXR5IGlu IHRlcm1zIG9mIGl0cyB0cnVzdCBzZW1hbnRpY3MuIEhlbmNlIGlkZW50aXR5IGF0dHJpYnV0ZXMg YXJlIG9ubHkgaW50ZXJlc3RpbmcgdG8gUkFUUyBpZiB0aGV5IGFyZSB1c2VmdWwgZm9yIGV2YWx1 YXRpbmcgdHJ1c3Qgc2VtYW50aWNzLg0KPj4gKiBJbiBhIGNsb3NlZCBlY29zeXN0ZW0sIHRoZSB0 cnVzdCBjaGFyYWN0ZXJpc3RpY3MgYW5kIHByb3BlcnRpZXMgbWF5IGJlIGltcGxpZWQgYmVjYXVz ZSB0aGVyZSBvZnRlbiBleGlzdHMgb3V0LW9mLWJhbmQgcHJvY2Vzc2VzIHRoYXQgZW5zdXJlIHRo ZSBjaGFyYWN0ZXJpc3RpY3MgYXJlIGFwcGxpZWQgKGZvciBleGFtcGxlLCBpZiBhbiBJVCBvcmdh bml6YXRpb24gc2V0cyBhIHBvbGljeSB0aGF0IGFsbCBhc3ltbWV0cmljIGtleXMgYXJlIHRvIGJl IGhhcmRlbmVkIHVzaW5nIGEgc21hcnRjYXJkLCB0aGV5IGNhbiBhcHBseSBhIGRlcGxveW1lbnQg cHJvY2VzcyB3aGVyZSB0aGUgSVQgcHJvZmVzc2lvbmFsIHZlcmlmaWVzIHRoZSBzbWFydGNhcmQg aXMgdXNlZCBkdXJpbmcgZW5yb2xsbWVudC4pIEJ1dCBpbiBhIG5vbi1jbG9zZWQgZWNvc3lzdGVt LCB0aGVyZSBpc24ndCBhbiBhc3N1bXB0aW9uIHRoYXQgb3V0LW9mLWJhbmQgcHJvY2Vzc2VzIGV4 aXN0LiBBdHRlc3RhdGlvbiBhdHRlbXB0cyB0byBtYWtlIGV4cGxpY2l0IHdoYXQgb3RoZXJ3aXNl IGlzIGltcGxpY2l0IGFuZCB0aGVyZWZvcmUgc3ViamVjdCB0byBtaXNpbnRlcnByZXRhdGlvbiBp ZiB0aGUgdmVyaWZpZXIsIHJlbHlpbmcgcGFydHkgYW5kIGF0dGVzdGVyIGFyZSBub3QgcGFydCBv ZiB0aGUgc2FtZSBjbG9zZWQgZWNvc3lzdGVtLiBJbXBsaWNpdCBhdHRlc3RhdGlvbiB0aGVyZWZv cmUgY2FuIGxlYWQgdG8gc2VtYW50aWMgY29uZnVzaW9uIGlmIHdlJ3JlIG5vdCBjYXJlZnVsLiBU aGVyZWZvcmUsIHRoZSByaWdvciBvZiB0cmVhdGluZyBpbXBsaWNpdCBhdHRlc3RhdGlvbiBjbGFp bXMgKGFzc2VydGlvbnMgYXNzdW1lZCB0byBleGlzdCBidXQgbm90IGV4cGxpY2l0bHkgbmFtZWQp IHNob3VsZCBuZXZlcnRoZWxlc3MgYmUgZGVmaW5lZCBleHBsaWNpdGx5LiBUaGVuLCBpZiB0aGVy ZSBpcyBhIG5lZWQgZm9yIGltcGxpY2l0IGF0dGVzdGF0aW9uLCB0aGUgc3BlY2lmaWNhdGlvbnMg dGhhdCBkZXNjcmliZSB0aGVtIGNhbiBkZXNjcmliZSB0aGVtIGluIHRlcm1zIG9mIGFuIGV4cGxp Y2l0IGRlZmluaXRpb24uDQo+PiAqIEluIHRoZSBjb250ZXh0IG9mIGFzc2VydGluZyB0cnVzdCBj aGFyYWN0ZXJpc3RpY3MsIHRoZSB2ZXJpZmllciBuZWVkcyB0byBrbm93IHRoYXQgYSBzZXQgb2Yg Y2hhcmFjdGVyaXN0aWNzIGFwcGxpZXMgdG8gdGhlIGluc3RhbmNlIG9mIHRoZSBlbmRwb2ludCBi ZWluZyBldmFsdWF0ZWQgKGFrYSB0aGUgYXR0ZXN0ZXIpLiAoT3RoZXJ3aXNlIGEgTUlUTSBjb3Vs ZCBzdXBwbHkgY2hhcmFjdGVyaXN0aWNzIHRoYXQgbWF5IGJlIHZhbGlkLCBidXQgZG9u4oCZdCBh cHBseSB0byB0aGUgc3BlY2lmaWMgaW5zdGFuY2UpLiBDb25zZXF1ZW50bHksIGl0IG1ha2VzIHNl bnNlIHRvIGNvbnNpZGVyIHRoYXQgKmF0dGVzdGF0aW9uKiBrZXlzIGFyZSBuZWVkZWQgdG8gYXV0 aGVudGljYXRlIHRoZSBlbmRwb2ludCBiZWluZyBldmFsdWF0ZWQuIFRoaXMgZG9lc24ndCBpbXBs eSBhbiBpZGVudGl0eSBrZXkgY291bGRuJ3QgZG91YmxlIGFzIGFuIGF0dGVzdGF0aW9uIGtleS4g QnV0IGlmIGl0IGRvZXMsIHdlIGNhcmUgYWJvdXQgaXRzIHJlbGV2YW5jZSB0byB0aGUgYXR0ZXN0 ZXIgZW5kcG9pbnQuDQo+PiAtTmVkDQo+PiDvu79PbiAxMC8xNS8xOCwgNjo0OSBQTSwgIkhhbm5l cyBUc2Nob2ZlbmlnIiA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4gd3JvdGU6DQo+PiAgICAg SGVyZSBhcmUgbXkgNSBjZW50cyBvbiB0aGUgdGVybSAnaWRlbnRpdHknLg0KPj4gICAgICAgICAg SSBoYXZlIGJlZW4gd29ya2luZyBvbiBpZGVudGl0eSBtYW5hZ2VtZW50IGZvciBtYW55IHllYXJz IChwYXJ0aWFsbHkgYmVjYXVzZSBvZiBteSBPQXV0aCBjby1jaGFpciByb2xlKSBhbmQgSSBoYXZl IG5vdGljZWQgdGhhdCB0aGUgdXNlIG9mIHRoZSB0ZXJtICJpZGVudGl0eSIgdGVuZHMgdG8gY29u ZnVzZSBtb3JlIHRoYW4gaXQgaGVscHMgKGV2ZW4gbW9yZSBzbyB3aGVuIHRoZSB0ZXJtIGlzIGFw cGxpZWQgdG8gZGV2aWNlcyBhbmQgc29mdHdhcmUgcmF0aGVyIHRoYW4gaHVtYW5zKS4NCj4+ICAg ICAgICAgIEkgYmVsaWV2ZSB3ZSBjb3VsZCBnZXQgYXdheSB3aXRoIGRlc2NyaWJpbmcgd2hhdCB3 ZSB3YW50IHdpdGhvdXQgZXZlciB1c2luZyB0aGUgdGVybS4NCj4+ICAgICAgICAgIEluIHRoaXMg Y29udGV4dCBJIHdvdWxkIGFyZ3VlIHRoYXQgd2UgYXJlIGFib3V0IGlkZW50aWZ5aW5nIGRpZmZl cmVudCBjb21wb25lbnRzLCBzdWNoIGFzIGhhcmR3YXJlIGFuZCBzb2Z0d2FyZS4NCj4+ICAgICAg ICAgIENpYW8NCj4+ICAgICBIYW5uZXMNCj4+ICAgICAgICAgIC0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQo+PiAgICAgRnJvbTogRUFUIDxlYXQtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxm IE9mIFNtaXRoLCBOZWQNCj4+ICAgICBTZW50OiBNb25kYXksIE9jdG9iZXIgMTUsIDIwMTggOTow MCBBTQ0KPj4gICAgIFRvOiBIZW5rIEJpcmtob2x6IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhv ZmVyLmRlPjsgcmF0c0BpZXRmLm9yZzsgSmVyZW15IE8nRG9ub2dodWUgPGpvZG9ub2doQHF0aS5x dWFsY29tbS5jb20+OyBEZW5pcyA8ZGVuaXMuaWV0ZkBmcmVlLmZyPg0KPj4gICAgIENjOiBlYXRA aWV0Zi5vcmcNCj4+ICAgICBTdWJqZWN0OiBSZTogW0VBVF0gW0VYVEVSTkFMXSBSZTogW1JhdHNd IEF0dGVzdGF0aW9uIEJvRiBjaGFydGVyIHVwZGF0ZXM/DQo+PiAgICAgICAgICBJIGFncmVlIHdp dGggSGVuaydzIG9ic2VydmF0aW9uIHRoYXQgdGhlcmUgaXMgb3Bwb3J0dW5pdHkgdG8gZmluZCBj b21tb24gZ3JvdW5kIG9uIGlkZW50aXR5IGFzIGlkZW50aXR5IGNhbiBiZSBhIGNvbGxlY3Rpb24g b2YgYXR0cmlidXRlcywgdGhhdCBpZiBzaWduZWQsIGJlY29tZXMgYSBzZXQgb2YgdmVyaWZpYWJs ZSBjbGFpbXMgKGFib3V0IGlkZW50aXR5IGF0dHJpYnV0ZXMpLiBBdHRlc3RhdGlvbiBoYXMgYSBz aW1pbGFyIHN0cnVjdHVyZSBpbiB0aGF0IGl0IGNvbnNpc3RzIG9mIGEgc2V0IG9mIGF0dHJpYnV0 ZXMsIHRoYXQgaWYgc2lnbmVkIGJlY29tZXMgYSBzZXQgb2YgdmVyaWZpYWJsZSBjbGFpbXMuIFRo ZSBtYWluIGRpZmZlcmVuY2UgYmV0d2VlbiBpZGVudGl0eSBhbmQgYXR0ZXN0YXRpb24gYXR0cmli dXRlcyBpcyB3aGV0aGVyIHRoZSBhdHRyaWJ1dGUgc2VtYW50aWNhbGx5IHJlbGF0ZSB0byB0cnVz dCAodnMuIGlkZW50aXR5KS4gRm9yIGV4YW1wbGUsIGNsYWltcyBvZiBzZWN1cml0eSBjZXJ0aWZp Y2F0aW9uIGNvbXBsaWFuY2UgcmVzb25hdGVzIGFzIGF0dGVzdGF0aW9uLg0KPj4gICAgICAgICAg SXQgbWF5IGJlIHBvc3NpYmxlIHRvIGNvbWJpbmUgYSBzZXQgb2YgYXR0ZXN0YXRpb24gYXR0cmli dXRlcyBpbiBzdWNoIGEgd2F5IHRoYXQgdGhlIGNvbWJpbmF0aW9uIHVuaXF1ZWx5IGlkZW50aWZp ZXMgYW4gZW50aXR5LiBCdXQgdGhhdCBkb2Vzbid0IG1ha2UgaXQgYW4gaWRlbnRpdHkgc3lzdGVt IHBlciBzZSBhbmQgc2hvdWxkbid0IGNhdXNlIGEgY29uZmxpY3QgaW4gY2hhcnRlciBnb2FscyB3 aXRoIHJlc3BlY3QgdG8gb3RoZXIgaWRlbnRpdHkgZm9jdXNlZCBlZmZvcnRzIGluIElFVEYuDQo+ PiAgICAgICAgICBBbHNvLCBpbmNsdXNpb24gb2YgYXR0cmlidXRlcyB0aGF0IGRvbid0IGhhdmUg c2VtYW50aWNzIHRoYXQgcmVhc29uYWJseSByZWxhdGUgdG8gdHJ1c3Qgc2hvdWxkIG5vdCBiZSBv ZiBpbnRlcmVzdCB0byBhIHdvcmtpbmcgZ3JvdXAgZm9jdXNlZCBvbiBhdHRlc3RhdGlvbi4NCj4+ ICAgICAgICAgIC1OZWQNCj4+ICAgICAgICAgIE9uIDEwLzE1LzE4LCAzOjUzIFBNLCAiRUFUIG9u IGJlaGFsZiBvZiBIZW5rIEJpcmtob2x6IiA8ZWF0LWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxm IG9mIGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+IHdyb3RlOg0KPj4gICAgICAgICAg ICAgIEhpIEplcmVteSAmIERlbmlzLA0KPj4gICAgICAgICAgICAgIGFsbCB0aGVzZSBwb2ludHMg b2YgdmlldyBoYXZlIG1lcml0LCBJIHRoaW5rLg0KPj4gICAgICAgICAgICAgIFBsZWFzZSBoYXZl IGEgbG9vayBhdCB0aGVzZSBxdW90ZXM6DQo+PiAgICAgICAgICAgICAgPiBrbm93aW5nIHRoZSBw cm92ZW5hbmNlIG9mIHRoZSBkZXZpY2UNCj4+ICAgICAgICAgICAgICA+IGhhdmluZyB0aGUgZW50 aXR5IGNyZWF0b3IvbWFudWZhY3R1cmVyIHByb3ZpZGUgYSBzZXQgb2YgY2xhaW1zIHdoaWNoIGNh biBiZSB2ZXJpZmllZA0KPj4gICAgICAgICAgICAgID4gdG8ga25vdyB0aGUgY2hhcmFjdGVyaXN0 aWNzIG9mIGEgZGV2aWNlIGJ5IGlzc3VpbmcgdG8gdGhlIGRldmljZSBhIHB1YmxpYyBrZXkgY2Vy dGlmaWNhdGUgd2hpY2ggd2lsbCBvbmx5IGJlIGlzc3VlZCB0byB0aGUgZGV2aWNlIGlmIGl0IGZ1 bGZpbGxzIGFuIGV4cGVjdGVkIHNldCBvZiBmdW5jdGlvbmFsaXRpZXMuDQo+PiAgICAgICAgICAg ICAgVG8gbWUsIHRoZXNlIGRlc2NyaXB0aW9ucyBzZWVtIHRvIGhhdmUgZGlmZmVyZW50IGludGVu dHMsIHNjb3BlIG9yDQo+PiAgICAgICAgIGF1ZGllbmNlIGFuZCByZXF1aXJlIG1vc3QgY2VydGFp bmx5IGRpZmZlcmVudCB3b3JrLWZsb3dzLCBidXQNCj4+ICAgICAgICAgc2VtYW50aWNhbGx5IGFu ZCBpbiBjb25zZXF1ZW5jZSByZXByZXNlbnRhdGlvbi13aXNlIHRoZXkgYWxzbyBzZWVtIHF1aXRl DQo+PiAgICAgICAgIHJlbGF0ZWQuDQo+PiAgICAgICAgICAgICAgSWYgeW91IHRoaW5rIG9mIGFu IGlkZW50aXR5IGRvY3VtZW50IGFzIGEgc2V0IG9mIGNsYWltcyAocG90ZW50aWFsbHkNCj4+ICAg ICAgICAgaW5jbHVkaW5nIGEgcHVibGljIGtleSksIHRoYXQgaXMgc2lnbmVkIGFuZCB0aGF0IGNh biBtYXRjaCBvbmUgb3IgbW9yZQ0KPj4gICAgICAgICB0aGluZ3MsIG1heWJlIGFsbCB0aHJlZSB0 eXBlcyBoaWdobGlnaHRlZCBhYm92ZSBhcmUgYWN0dWFsbHkgY292ZXJlZCBieQ0KPj4gICAgICAg ICB0aGUgc2FtZSBpZGVudGl0eSBkb2N1bWVudCBjb25jZXB0Pw0KPj4gICAgICAgICAgICAgIFdp dGggcmVzcGVjdCB0byBpZGVudGl0eSBkb2N1bWVudHMsIEkgdGhpbmsgaXQgaXMgc2FmZSBzbyBz YXkgdGhhdCB3ZQ0KPj4gICAgICAgICBjYW4gZmluZCBjb21tb24gZ3JvdW5kIGhlcmUgcmF0aGVy IGVhc2lseS4gVGhhdCBzYWlkLCB0aGUgd2F5IGhvdyB0aGVzZQ0KPj4gICAgICAgICBpZGVudGl0 eSBkb2N1bWVudHMgY29tZSBpbnRvIGV4aXN0ZW5jZSwgd2hlbiBhbmQgaG93IHRoZXkgYXJlIGRl cGxveWVkDQo+PiAgICAgICAgIG9uIHRoZSB0aGluZyBvciBhc3NvY2lhdGVkIHdpdGggbXVsdGlw bGUgdGhpbmdzIGlzIGFub3RoZXIgcXVlc3Rpb24uIFdlDQo+PiAgICAgICAgIG1vc3QgY2VydGFp bmx5IGRvIG5vdCB3YW50IHRvIGVuZCB1cCB3aXRoIGEgInNpZ25pbmcgZm9vbCIgdGhhdCBkb2Vz IG5vdA0KPj4gICAgICAgICBhZGQgdmFsdWUgdG8gdGhlIGxldmVsIG9mIGNvbmZpZGVuY2UgKEkg YW0gcXVvdGluZyBOZWQgU21pdGggaGVyZSkuDQo+PiAgICAgICAgICAgICAgVGhpcyBoYXMgdG8g YmUgZmxlc2hlZCBvdXQgZXhwbGljaXRseSBmb3IgZWFjaCBzY2VuYXJpbyBhbmQgdGhlIHBhcnRz DQo+PiAgICAgICAgIHRoYXQgYXJlIHJldXNlZCBpbiBldmVyeSBzY2VuYXJpbyBzaG91bGQgZ2V0 IHNwZWNpYWwgYXR0ZW50aW9uIGluIHRoZQ0KPj4gICAgICAgICB1cGNvbWluZyBSQVRTIGFyY2hp dGVjdHVyZSBkcmFmdC4NCj4+ICAgICAgICAgICAgICBJZGVudGlmeWluZyBjbGFpbXMgYWdncmVn YXRlZCBpbiBhbiBpZGVudGl0eSBkb2N1bWVudCBtb3N0IGNlcnRhaW5seSBjYW4NCj4+ICAgICAg ICAgaW5jbHVkZSBkZXZpY2UgY2hhcmFjdGVyaXN0aWNzLCBwdWJsaWMga2V5KHMpLCBvciBjbGFp bXMgYWJvdXQgdGhlDQo+PiAgICAgICAgIGludGVuZGVkIGZ1bmN0aW9ucyBhbmQgY2FwYWJpbGl0 aWVzIG9mIHRoZSB0aGluZy4gQ2xhaW1zIGNhbiBldmVuDQo+PiAgICAgICAgIG9yaWdpbmF0ZSBm cm9tIENsYWltYW50cyB0aGF0IGFyZSBub3QgdGhlIHRoaW5nIGl0c2VsZiwgYnV0IGV4dGVybmFs DQo+PiAgICAgICAgIGVudGl0aWVzIHByb3ZpZGluZyBhbiBhc3NlcnRpb24gKGUuZy4gdGhlc2Ug dGhpbmdzIGFyZSBDQy1jZXJ0aWZpZWQpLg0KPj4gICAgICAgICAgICAgIEFsbCBkaWZmZXJlbnQg Y29tcG9zaXRlcyBvZiBpZGVudGlmeWluZyBjbGFpbXMgaGF2ZSBhIHNwZWNpZmljIHNoYXJlZA0K Pj4gICAgICAgICBpbnRlbmQgaW4gdGhpcyBjb250ZXh0IHRob3VnaCwgSSB0aGluazogZXhwcmVz c2luZyBBdHRlc3RhdGlvbg0KPj4gICAgICAgICBQcm92ZW5hbmNlIChhZ2FpbiAtIG9uZSBmb3Ig b25lIG9yIG1vcmUgdGhpbmdzIG9mIHRoZSBzYW1lIGtpbmQpLiBBbmQNCj4+ICAgICAgICAgYWxs IG9mIHRoZW0gb3JpZ2luYXRlIGZyb20gQ2xhaW1hbnRzIGFuZCB0aGVyZWZvcmUgdXNlIGEgcm9v dCBvZiB0cnVzdA0KPj4gICAgICAgICBvZiBtZWFzdXJlbWVudCwgSSB0aGluay4NCj4+ICAgICAg ICAgICAgICBUaGF0IHNhaWQsIGVzdGFibGlzaGluZyB0cnVzdHdvcnRoeSBrbm93bGVkZ2UgYWJv dXQgYXR0ZXN0YXRpb24NCj4+ICAgICAgICAgcHJvdmVuYW5jZSBpcyBvbmx5IHRoZSBmaXJzdCBz dGVwIGFuZCBwcm92aWRlcyB0aGUgZm91bmRhdGlvbiBmb3IgbW9yZQ0KPj4gICAgICAgICBjb21w bGV4IGF0dGVzdGF0aW9uIHByb2NlZHVyZXMuIEluIGFueSBjYXNlLCB0aGlzIHNlZW0gdG8gYmUg cmVxdWlyZWQgYnkNCj4+ICAgICAgICAgZXZlcnkgc2NlbmFyaW8gdGhhdCB3YXMgaGlnaGxpZ2h0 ZWQgc28gZmFyIGFuZCB0aGVyZWZvcmUgd2lsbCBtb3N0DQo+PiAgICAgICAgIGNlcnRhaW5seSBi ZSBjb3ZlcmVkIGluIGEgZGVsaXZlcmFibGUuDQo+PiAgICAgICAgICAgICAgSUhUSCwNCj4+ICAg ICAgICAgICAgICBIZW5rDQo+PiAgICAgICAgICAgICAgICAgICBPbiAxMC8xNS8yMDE4IDEyOjIy IFBNLCBKZXJlbXkgTydEb25vZ2h1ZSB3cm90ZToNCj4+ICAgICAgICAgPiBPbiAxMiBPY3QgMjAx OCwgYXQgMTQ6MzMsIERlbmlzIDxkZW5pcy5pZXRmQGZyZWUuZnINCj4+ICAgICAgICAgPiA8bWFp bHRvOmRlbmlzLmlldGZAZnJlZS5mcj4+IHdyb3RlOg0KPj4gICAgICAgICA+PiBUaGUgIlByb2Js ZW0gU3RhdGVtZW50IiBjb250aW51ZXMgYXMgZm9sbG93czoNCj4+ICAgICAgICAgPj4NCj4+ICAg ICAgICAgPj4gKDIpIFRvZGF5LCB0aGVyZSBpcyBubyBjb21tb24sIHN0YW5kYXJkIHdheSBmb3Ig UmVseWluZyBQYXJ0aWVzIHRvDQo+PiAgICAgICAgID4+IGtub3cgdGhlIHByb3ZlbmFuY2UgYW5k IGNoYXJhY3RlcmlzdGljcyBvZiBhIGRldmljZSAoZS5nLiwgYW4gZW5kLXVzZXINCj4+ICAgICAg ICAgPj4gZGV2aWNlLA0KPj4gICAgICAgICA+PiBwbGF0Zm9ybSBvciBlbmRwb2ludCwgc2VydmVy cywgSW9UIGRldmljZXMsIGRldmljZSBzdWJzeXN0ZW1zIGFuZA0KPj4gICAgICAgICA+PiBzdWIt bW9kdWxlcykgdGhhdCBtYXkgYmUgcmVxdWVzdGluZyBzZXJ2aWNlcy4NCj4+ICAgICAgICAgPj4N Cj4+ICAgICAgICAgPj4gS25vd2luZyB0aGUgcHJvdmVuYW5jZSBvZiB0aGUgZGV2aWNlIGlzIG5v dCBhbHdheXMgbmVjZXNzYXJ5LiBXaGF0IGlzDQo+PiAgICAgICAgID4+IGltcG9ydGFudCBpcyB0 byBrbm93IHRoYXQgYSBzcGVjaWZpYyBzZXQgb2YgZnVuY3Rpb25zIGlzIChzZWN1cmVseSkNCj4+ ICAgICAgICAgPj4gc3VwcG9ydGVkIGJ5IHRoZSBkZXZpY2UuDQo+PiAgICAgICAgID4+IFRoZXJl IGFscmVhZHkgZXhpc3RzIGEgY29tbW9uIHdheSB0byBrbm93IHRoZSBjaGFyYWN0ZXJpc3RpY3Mg b2YgYQ0KPj4gICAgICAgICA+PiBkZXZpY2UgYnkgaXNzdWluZyB0byB0aGUgZGV2aWNlIGEgcHVi bGljIGtleSBjZXJ0aWZpY2F0ZSB3aGljaCB3aWxsDQo+PiAgICAgICAgID4+IG9ubHkgYmUgaXNz dWVkIHRvIHRoZSBkZXZpY2UNCj4+ICAgICAgICAgPj4gaWYgaXQgZnVsZmlsbHMgYW4gZXhwZWN0 ZWQgc2V0IG9mIGZ1bmN0aW9uYWxpdGllcy4gSW4gc3VjaCBhIGNhc2UgYQ0KPj4gICAgICAgICA+ PiBzeW50YXggZm9yIGEgdHJ1c3RlZCBjbGFpbSBzZXRzKippcyBub3QgbmVlZGVkLg0KPj4gICAg ICAgICA+Pg0KPj4gICAgICAgICA+IFRoaXMgaXMgaW5kZWVkIGEgcG9zc2libGUgd2F5IHRvIGFk ZHJlc3MgdGhlIHByb2JsZW0sIGJ1dCBzdWZmZXJzIGZyb20NCj4+ICAgICAgICAgPiBjaGFsbGVu Z2VzIHdoaWNoIGNvbWUgZG93biB0bzoNCj4+ICAgICAgICAgPg0KPj4gICAgICAgICA+IC0gV2hv IGlzc3VlcyBzdWNoIGNlcnRpZmljYXRlcy4gQW4gb3B0aW9uIGlzIHRoYXQgdGhlcmUgaXMgc29t ZSBmb3JtIG9mDQo+PiAgICAgICAgID4gc2VjdXJpdHkgY2VydGlmaWNhdGlvbiBiZWhpbmQgdGhp cyBpc3N1YW5jZSBvdGhlcndpc2UgaXQgaXMgb2YgdmVyeQ0KPj4gICAgICAgICA+IGxpbWl0ZWQg dmFsdWUuDQo+PiAgICAgICAgID4gLSBJbiBvcmRlciB0byBjYXB0dXJlIHRoZSB3aWRlIHZhcmll dHkgb2YgZGlmZmVyZW50IGRldmljZXMgKEkgcHJlZmVyDQo+PiAgICAgICAgID4gImVudGl0eSIg aGVyZSBhcyBpdCBpcyBtb3JlIGdlbmVyYWwgdGhhbiAiZGV2aWNlIiksIG1hbnkgZGlmZmVyZW50 IGZvcm1zDQo+PiAgICAgICAgID4gb2Ygc3VjaCBjZXJ0aWZpY2F0ZXMgd291bGQgYmUgcmVxdWly ZWQuIFRoaXMgZW5kcyB1cCBiZWluZyBtdWNoIHRoZSBzYW1lDQo+PiAgICAgICAgID4gdGhpbmcg YXMgYSBzZXQgb2YgY2xhaW1zLg0KPj4gICAgICAgICA+DQo+PiAgICAgICAgID4gR2l2ZW4gdGhl IG11bHRpcGxpY2l0eSBvZiBlbnRpdGllcyBmb3Igd2hpY2ggYXR0ZXN0YXRpb24gbWlnaHQgYmUN Cj4+ICAgICAgICAgPiB1c2VmdWwsIGl0IHNlZW1zIHRvIG1lIHRoYXQgaGF2aW5nIHRoZSBlbnRp dHkgY3JlYXRvci9tYW51ZmFjdHVyZXINCj4+ICAgICAgICAgPiBwcm92aWRlIGEgc2V0IG9mIGNs YWltcyB3aGljaCBjYW4gYmUgdmVyaWZpZWQgaXMgbW9yZSBmbGV4aWJsZSB0aGFuDQo+PiAgICAg ICAgID4gcmVxdWlyaW5nIGEgY2VydGlmaWNhdGUuIEl0IHNlZW1zIGxpa2VseSB0byBtZSB0aGF0 IHdoZXJlIGEgZm9ybWFsDQo+PiAgICAgICAgID4gc2VjdXJpdHkgY2VydGlmaWNhdGlvbiBpcyBu ZWVkZWQgdGhlcmUgd2lsbCBiZSBhIGNlcnRpZmljYXRlIGlzc3VlZCBieQ0KPj4gICAgICAgICA+ IHRoZSBDZXJ0aWZ5aW5nIEJvZHkgYXMgb25lIG9mIHRoZSBjbGFpbXMgYWJvdXQgYW4gZW50aXR5 LCBidXQgSSBjYW4NCj4+ICAgICAgICAgPiB0aGluayBvZiBtYW55IGNhc2VzIChzdXBwbHkgY2hh aW4gbWFuYWdlbWVudCwgdG8gdGFrZSBqdXN0IG9uZSBleGFtcGxlKQ0KPj4gICAgICAgICA+IHdo ZXJlIHByb3ZlbmFuY2UgaXMgYnkgZmFyIHRoZSBtb3N0IHVzZWZ1bCBpbmZvcm1hdGlvbi4NCj4+ ICAgICAgICAgPg0KPj4gICAgICAgICA+IEknbSBub3QgaW4gZmF2b3VyIG9mIGNoYW5nZXMgdG8g dGhlIGNoYXJ0ZXIgaW4gdGhpcyBkaXJlY3Rpb24uDQo+PiAgICAgICAgID4+DQo+PiAgICAgICAg ID4+IFRoZSBzaW1wbGVzdCBjYXNlcyBzaG91bGQgYWxzbyBiZSBwYXJ0IG9mIHRoZSBmcmFtZXdv cmsuDQo+PiAgICAgICAgID4+DQo+PiAgICAgICAgID4+IE5vdGU6IEkgcGVyc29uYWxseSBhcHBy ZWNpYXRlIHRoYXQgcHJpdmFjeSBpcyBhbiBhc3BlY3QgdGhhdA0KPj4gICAgICAgICA+PiB3aWxs L3Nob3VsZCBiZSB0YWtlbiBpbnRvIGNvbnNpZGVyYXRpb24uDQo+PiAgICAgICAgID4+DQo+PiAg ICAgICAgID4+IERlbmlzDQo+PiAgICAgICAgID4+DQo+PiAgICAgICAgID4+PiBBcyB3aXRoIHRo ZSBlYXJsaWVyIGRyYWZ0LCB0aGVyZSBhcmUgbWFueSByZWZlcmVuY2VzIHRvIHZlcmlmeSBhbmQN Cj4+ICAgICAgICAgPj4+IHZlcmlmaWVyIGluIHRoZSBsZWFkIHVwIHRvIHRoZSBkZWxpdmVyYWJs ZSBidXQgbm8gZGVsaXZlcmFibGVzIGRlc2NyaWJpbmcNCj4+ICAgICAgICAgPj4+IHZlcmlmaWNh dGlvbiBydWxlcy4gSSdkIGxpa2UgdG8gc2VlIHJ1bGVzIGluIG9uZSBvZiB0aGVzZSBkb2N1bWVu dHMgYW5kDQo+PiAgICAgICAgID4+PiB0aGluayBpdCB3b3J0aCBjaXRpbmcgaW4gdGhlIGRlbGl2 ZXJhYmxlcy4gQXJlIGJpbmRpbmdzIHRvIGNlcnRpZmljYXRlDQo+PiAgICAgICAgID4+PiBtYW5h Z2VtZW50IHByb3RvY29scyBvdXQgb2Ygc2NvcGU/DQo+PiAgICAgICAgID4+Pg0KPj4gICAgICAg ICA+Pj4gT24gMTAvMTEvMTgsIDk6NDkgQU0sICJSQVRTIG9uIGJlaGFsZiBvZiBIZW5rIEJpcmto b2x6Ig0KPj4gICAgICAgICA+Pj4gPHJhdHMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2Yg aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zlci5kZT4gIHdyb3RlOg0KPj4gICAgICAgICA+Pj4N Cj4+ICAgICAgICAgPj4+PiBIaSBhbGwsDQo+PiAgICAgICAgID4+Pj4NCj4+ICAgICAgICAgPj4+ PiBzb3JyeSBmb3IgdGhlIGRlbGF5LiBQbGVhc2UgZmluZCBhbiB1cGRhdGVkIGNoYXJ0ZXIgcHJv cG9zYWwgaGVyZToNCj4+ICAgICAgICAgPj4+Pg0KPj4gICAgICAgICA+Pj4+PiBodHRwczovL3Vy bGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX2dpdGh1Yi5jb21faWV0 Zi0yRHJhdHNfY2hhcnRlcl9ibG9iX1JDMl9pZXRmLTJEcmF0cy0yRGNoYXJ0ZXIubWQmZD1Ed0lG YVEmYz1IQWtZdWg2M3JzdWhyNlNjYmZoMFVqQlhlTUstbmRiM3ZvRFRYY1d6b0NJJnI9c2ViVXlY Q2lkcl9DRXVaT2JtT3ViOU5YMGNFXzVjUmllR0xfN1ZYaG1mayZtPXA1ZU8xaU1UWE00WmZlWHZG QlU1Ny14Q0lMbkpoLUVPYXhsNUFVd3lXR00mcz1yUHptd2hjd3k4ZW9iNGVNaXdXekRnNURZLW1j QzVIWWdRcWhVR0NaMlJJJmU9DQo+PiAgICAgICAgID4+Pj4gVGhlIEJvRiBwcm9wb25lbnRzIHRy aWVkIHRvIG1lcmdlIGFsbCBjb21tZW50cyBhbmQgcHJvcG9zYWxzIG9uDQo+PiAgICAgICAgID4+ Pj4ga2V5c3RvcmVzLCBleGlzdGluZyBzb2x1dGlvbnMsIHByb3ZlbmFuY2UgJiBkZXZpY2UgY2hh cmFjdGVyaXN0aWNzLCBldGMNCj4+ICAgICAgICAgPj4+PiB0aGF0IHdlcmUgcmFpc2VkIG9uIHRo ZSBsaXN0IC0gYW5kIGFsaWduIHRoZW0gaW4gaG9tb2dlbmVvdXMgZmFzaGlvbi4NCj4+ICAgICAg ICAgPj4+Pg0KPj4gICAgICAgICA+Pj4+IFRoaXMgZHJhZnQgaXMgaW50ZW5kZWQgdG8gZm9jdXMg dGhlIGRpc2N1c3Npb24gYW5kIGltcHJvdmUgdGhlIHdvcmRpbmcuDQo+PiAgICAgICAgID4+Pj4N Cj4+ICAgICAgICAgPj4+PiBWaWVsZSBHcsO8w59lLA0KPj4gICAgICAgICA+Pj4+DQo+PiAgICAg ICAgID4+Pj4gSGVuaw0KPj4gICAgICAgICA+Pj4+DQo+PiAgICAgICAgID4+Pj4gT24gMTAvMDYv MjAxOCAwODoyMyBBTSwgTGF1cmVuY2UgTHVuZGJsYWRlIHdyb3RlOg0KPj4gICAgICAgICA+Pj4+ PiBIaSBIZW5rLA0KPj4gICAgICAgICA+Pj4+Pg0KPj4gICAgICAgICA+Pj4+PiBCYW5na29rIElF VEYgaXMgZ2V0dGluZyBjbG9zZSwgd2lsbCB5b3UgYmUgYWJsZSB0byB1cGRhdGUgdGhlIGNoYXJ0 ZXINCj4+ICAgICAgICAgPj4+Pj4gZm9yIHRoZSBhdHRlc3RhdGlvbiBCb0YgdG8gcHJvcGVybHkg aW5jbHVkZSBFQVQ/ICBJIHNlbnQgeW91IHNvbWUgdGV4dA0KPj4gICAgICAgICA+Pj4+PiB0aGF0 IGp1c3QgbmVlZHMgdG8gYmUgcGFzdGVkIGFsb25nIHdpdGggc29tZSBjb21tZW50cy4gSXQgZG9l c27igJl0IGxvb2sNCj4+ICAgICAgICAgPj4+Pj4gbGlrZSB0aGVyZeKAmXMgYmVlbiBhbnkgdXBk YXRlcy4NCj4+ICAgICAgICAgPj4+Pj4NCj4+ICAgICAgICAgPj4+Pj4gTEwNCj4+ICAgICAgICAg Pj4+Pj4NCj4+ICAgICAgICAgPj4+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KPj4gICAgICAgICA+Pj4+IFJBVFMgbWFpbGluZyBsaXN0DQo+PiAgICAg ICAgID4+Pj4gUkFUU0BpZXRmLm9yZw0KPj4gICAgICAgICA+Pj4+IGh0dHBzOi8vdXJsZGVmZW5z ZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRwcy0zQV9fd3d3LmlldGYub3JnX21haWxtYW5f bGlzdGluZm9fcmF0cyZkPUR3SUZhUSZjPUhBa1l1aDYzcnN1aHI2U2NiZmgwVWpCWGVNSy1uZGIz dm9EVFhjV3pvQ0kmcj1zZWJVeVhDaWRyX0NFdVpPYm1PdWI5TlgwY0VfNWNSaWVHTF83VlhobWZr Jm09cDVlTzFpTVRYTTRaZmVYdkZCVTU3LXhDSUxuSmgtRU9heGw1QVV3eVdHTSZzPXhUaHNRVFhn YWRsdFZrSFRZcE9Xa25hZGk3cHV4WnQ4TzZYT0lVbV9iem8mZT0NCj4+ICAgICAgICAgPj4+IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+PiAgICAgICAg ID4+PiBFQVQgbWFpbGluZyBsaXN0DQo+PiAgICAgICAgID4+PiBFQVRAaWV0Zi5vcmcNCj4+ICAg ICAgICAgPj4+IGh0dHBzOi8vdXJsZGVmZW5zZS5wcm9vZnBvaW50LmNvbS92Mi91cmw/dT1odHRw cy0zQV9fd3d3LmlldGYub3JnX21haWxtYW5fbGlzdGluZm9fZWF0JmQ9RHdJRmFRJmM9SEFrWXVo NjNyc3VocjZTY2JmaDBVakJYZU1LLW5kYjN2b0RUWGNXem9DSSZyPXNlYlV5WENpZHJfQ0V1Wk9i bU91YjlOWDBjRV81Y1JpZUdMXzdWWGhtZmsmbT1wNWVPMWlNVFhNNFpmZVh2RkJVNTcteENJTG5K aC1FT2F4bDVBVXd5V0dNJnM9TjdrS2tEZEN2bF9NTm1CM0d1eWc5SEMta1FuTXJYMWNQNXc0NFNi RHNBdyZlPQ0KPj4gICAgICAgICA+Pg0KPj4gICAgICAgICA+Pg0KPj4gICAgICAgICA+PiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4gICAgICAgICA+ PiBFQVQgbWFpbGluZyBsaXN0DQo+PiAgICAgICAgID4+IEVBVEBpZXRmLm9yZyA8bWFpbHRvOkVB VEBpZXRmLm9yZz4NCj4+ICAgICAgICAgPj4gaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQu Y29tL3YyL3VybD91PWh0dHBzLTNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19lYXQm ZD1Ed0lGYVEmYz1IQWtZdWg2M3JzdWhyNlNjYmZoMFVqQlhlTUstbmRiM3ZvRFRYY1d6b0NJJnI9 c2ViVXlYQ2lkcl9DRXVaT2JtT3ViOU5YMGNFXzVjUmllR0xfN1ZYaG1mayZtPXA1ZU8xaU1UWE00 WmZlWHZGQlU1Ny14Q0lMbkpoLUVPYXhsNUFVd3lXR00mcz1ON2tLa0RkQ3ZsX01ObUIzR3V5ZzlI Qy1rUW5NclgxY1A1dzQ0U2JEc0F3JmU9DQo+PiAgICAgICAgID4NCj4+ICAgICAgICAgPg0KPj4g ICAgICAgICA+DQo+PiAgICAgICAgID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCj4+ICAgICAgICAgPiBFQVQgbWFpbGluZyBsaXN0DQo+PiAgICAgICAg ID4gRUFUQGlldGYub3JnDQo+PiAgICAgICAgID4gaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9p bnQuY29tL3YyL3VybD91PWh0dHBzLTNBX193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19l YXQmZD1Ed0lGYVEmYz1IQWtZdWg2M3JzdWhyNlNjYmZoMFVqQlhlTUstbmRiM3ZvRFRYY1d6b0NJ JnI9c2ViVXlYQ2lkcl9DRXVaT2JtT3ViOU5YMGNFXzVjUmllR0xfN1ZYaG1mayZtPXA1ZU8xaU1U WE00WmZlWHZGQlU1Ny14Q0lMbkpoLUVPYXhsNUFVd3lXR00mcz1ON2tLa0RkQ3ZsX01ObUIzR3V5 ZzlIQy1rUW5NclgxY1A1dzQ0U2JEc0F3JmU9DQo+PiAgICAgICAgID4NCj4+ICAgICAgICAgICAg ICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4gICAg ICAgICBFQVQgbWFpbGluZyBsaXN0DQo+PiAgICAgICAgIEVBVEBpZXRmLm9yZw0KPj4gICAgICAg ICBodHRwczovL3VybGRlZmVuc2UucHJvb2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3 dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3RpbmZvX2VhdCZkPUR3SUZhUSZjPUhBa1l1aDYzcnN1aHI2 U2NiZmgwVWpCWGVNSy1uZGIzdm9EVFhjV3pvQ0kmcj1zZWJVeVhDaWRyX0NFdVpPYm1PdWI5Tlgw Y0VfNWNSaWVHTF83VlhobWZrJm09cDVlTzFpTVRYTTRaZmVYdkZCVTU3LXhDSUxuSmgtRU9heGw1 QVV3eVdHTSZzPU43a0trRGRDdmxfTU5tQjNHdXlnOUhDLWtRbk1yWDFjUDV3NDRTYkRzQXcmZT0N Cj4+ICAgICAgICAgICAgICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NCj4+ICAgICBFQVQgbWFpbGluZyBsaXN0DQo+PiAgICAgRUFUQGlldGYub3JnDQo+ PiAgICAgaHR0cHM6Ly91cmxkZWZlbnNlLnByb29mcG9pbnQuY29tL3YyL3VybD91PWh0dHBzLTNB X193d3cuaWV0Zi5vcmdfbWFpbG1hbl9saXN0aW5mb19lYXQmZD1Ed0lGYVEmYz1IQWtZdWg2M3Jz dWhyNlNjYmZoMFVqQlhlTUstbmRiM3ZvRFRYY1d6b0NJJnI9c2ViVXlYQ2lkcl9DRXVaT2JtT3Vi OU5YMGNFXzVjUmllR0xfN1ZYaG1mayZtPXA1ZU8xaU1UWE00WmZlWHZGQlU1Ny14Q0lMbkpoLUVP YXhsNUFVd3lXR00mcz1ON2tLa0RkQ3ZsX01ObUIzR3V5ZzlIQy1rUW5NclgxY1A1dzQ0U2JEc0F3 JmU9DQo+PiAgICAgSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwg YW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2 aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90 aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVu dHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUg b3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPj4gICAg IA0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBF QVQgbWFpbGluZyBsaXN0DQo+IEVBVEBpZXRmLm9yZw0KPiBodHRwczovL3VybGRlZmVuc2UucHJv b2Zwb2ludC5jb20vdjIvdXJsP3U9aHR0cHMtM0FfX3d3dy5pZXRmLm9yZ19tYWlsbWFuX2xpc3Rp bmZvX2VhdCZkPUR3SUZhUSZjPUhBa1l1aDYzcnN1aHI2U2NiZmgwVWpCWGVNSy1uZGIzdm9EVFhj V3pvQ0kmcj1zZWJVeVhDaWRyX0NFdVpPYm1PdWI5TlgwY0VfNWNSaWVHTF83VlhobWZrJm09cDVl TzFpTVRYTTRaZmVYdkZCVTU3LXhDSUxuSmgtRU9heGw1QVV3eVdHTSZzPU43a0trRGRDdmxfTU5t QjNHdXlnOUhDLWtRbk1yWDFjUDV3NDRTYkRzQXcmZT0NCg0K From nobody Wed Oct 17 04:19:59 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F08B6130DC0 for ; Wed, 17 Oct 2018 04:19:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LOQX5UL5dm0b for ; Wed, 17 Oct 2018 04:19:52 -0700 (PDT) Received: from p3plsmtpa08-07.prod.phx3.secureserver.net (p3plsmtpa08-07.prod.phx3.secureserver.net [173.201.193.108]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5443112F1AC for ; Wed, 17 Oct 2018 04:19:52 -0700 (PDT) Received: from [172.17.68.162] ([1.22.180.94]) by :SMTPAUTH: with ESMTPSA id CjrbgKnYnHjVaCjrdgbVqS; Wed, 17 Oct 2018 04:19:51 -0700 From: Laurence Lundblade Message-Id: <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_1929F32F-C0E5-453E-900C-76116FFAE57D" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Wed, 17 Oct 2018 16:49:42 +0530 In-Reply-To: Cc: Henk Birkholz , Hannes Tschofenig , "Smith, Ned" , Jeremy O'Donoghue , "eat@ietf.org" , "rats@ietf.org" , Denis To: Guy Fedorkow References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfFZhwHzcyL54W21cAmP65+RfU1K1f5k+HkzccpWZEYmPPc7utt1E4hV0V7EhKrf9vee9IBoaNY0WqStSpFlw7wMjPgods5E9Hks7HbXfWxHDQ2MCFHv9 0qNUek7YE6YUq5zVbpoLY2LKnwvH1cD7yNSPV8rKN3kxUAip5gw1Fr7uatv3UX82SQE3lxZWGXyLIrzAMiAwrUfOHqhFEBIpMKI8RHLR6fZNF+d9FEmIEf2z wMiuyPlTNOBFgXfGZ1Jb6NBcoaJ7zESK1/tLM6/a1or++K7/Jqs10MU2LBpen7ACFkUyJJcnYRG7lWo5U3vbXhJ2QxcRH2Hr1cRMs14TlCe+gxFFY5Ot+rR/ ODzwTGs60oOcUom7cvThKOAWiHYfRBdsluQFxG8e6qWZ7Vg3LCo= Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Oct 2018 11:19:57 -0000 --Apple-Mail=_1929F32F-C0E5-453E-900C-76116FFAE57D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Wasn=E2=80=99t saying there was ambiguity in the TCG case. Not being a = TCGer, was just was trying to understand what the TCG definition is.=20 Your mentioning 802.1AR DevID helps a lot as I have some knowledge of = it. I see now that my speculation about SW / config version was wrong. = That=E2=80=99s fine. I only wrote it to try to get to clarity. Thanks for help clarifying. In EAT, we defined a UEID for what TCGer=E2=80=99s mean by =E2=80=9Cidenti= ty": UEID's identify individual manufactured entities / devices such as a mobile phone, a water meter, a Bluetooth speaker or a networked security camera. It may identify the entire device or a submodule or subsystem. It does not identify types, models or classes of devices. It is akin to a serial number, though it does not have to be sequential. =20 See here = for more on UEID. In EAT there is a strong desire to separate the signing key material = from UEID to have flexibility in the signing scheme. For example FIDO = and Android both have privacy-preserving schemes were a signing key is = shared by 100,000 devices. (Some use cases need privacy, some don=E2=80=99= t, perhaps because of legal agreements with customers, and correlation = between use cases and privacy schemes can=E2=80=99t be counted on for = high-volume devices like mobile phones). I don=E2=80=99t know what the right answer(s) is(are) in the design = yet... LL > On Oct 17, 2018, at 4:26 PM, Guy Fedorkow = wrote: >=20 > Hi Laurence, > I don't think there's ambiguity in the TCG case... current work in = attestation focuses on using the 802.1AR DevID spec, which corresponds = exactly to one of your cases below -- it's a vendor, model and serial = number. > It's true that TCG technology can be used to validate software = integrity, but that's hardly the same as identity. > Considerations of user privacy commonly accepted in TCG would = preclude the inclusion of software state as part of identity, = practicalities aside. In general, privacy considerations lead TCG to = carefully avoid unauthorized disclosure of either software or hardware = based assertions. > Let me know if I'm missing the point... > Thanks > /guy fedorkow, juniper networks >=20 > -----Original Message----- > From: Laurence Lundblade =20 > Sent: Wednesday, October 17, 2018 12:31 AM > To: Henk Birkholz > Cc: Smith, Ned ; Hannes Tschofenig = ; rats@ietf.org; Jeremy O'Donoghue = ; Denis ; eat@ietf.org > Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter = updates? >=20 > I think the TCG has a certain developed notion of identity that is = different from others. A way to get sharper about what a particular = identity means is to describe the space and how the identifier selects = in the space. Here=E2=80=99s a few examples: >=20 > - The space is physical human beings with fingers. A fingerprint = scanner select one of these humans. This is typical biometric auth. > - The space is humans that know a password. A password authenticator = selects the humans that know the password. Typical authentication. > - The space is humans as legal entities / citizens with criminal = records, passports and such. A national ID selects.=20 > - The space is physical manufactured devices from one maker. A serial = number narrows it down to one physical device. > - The space is physical devices from one maker. A model number or = version, narrows down to a subset of these devices. >=20 > My understanding of the TCG world is that identities goes beyond any = of the above because they include things like the version of the SW and = configuration of the device. The identity is largely a hash of an = identifier of the physical device, various SW components and various = configuration states. The point being that a change in any of these is = a change in the security characteristics of the device and if it was = trusted with a particular key or particular data in the past, that trust = should be revoked until re established. >=20 > - The space is physical devices from any maker > + Measurement of the SW (the SW versions) > + Measurements of some configuration >=20 > Changing any of these change the identity of the device.=20 >=20 > I know I hardly need to ask, but TCG folks, did I describe this = correctly? >=20 >=20 > So that said, many, perhaps most, use cases for EAT do not want this = kind of device identity. It is not a prerequisite for trusting claims = coming from the device. In some cases this level of identity seems = extremely disruptive as small SW upgrades could result in re enrollment = of biometrics. We already are annoyed when we have to answer security = questions when start using a service from a new device.=20 >=20 > I think this WG needs to address both this very tight TCG-style device = identity and the more heuristic EAT-style claims-for-risk-engines. I = could see multi-decade evolution where risk engine use cases want more = and more of the tight TCG-style device identity as criminals become more = adept at forging EAT-style claims. (Today risk engines work off of = unsecured browser parameters).=20 >=20 > The Introduction in the charter seems entirely focused on the = TCG-based identity use case. I think text should be added for EAT-style = attestation. I will write some after some comments on this message. >=20 > LL=20 >=20 >=20 >=20 >=20 >=20 >> On Oct 16, 2018, at 8:24 PM, Henk Birkholz = wrote: >>=20 >> To quote Carsten, there is "the usual terminology problem about = identity". >>=20 >> Identifying vs. Identity brings back memories about an extensive = discussion in SACM that in the end resulted in using Profiles... >>=20 >> Profiles are the "things" that you can aggregate identity claims in = (in SACM these claims are "Target Endpoint Characteristics", which are = pretty much the same thing as Device Characteristics) - and you use the = Profiles to (re-)identify target endpoints. >>=20 >> In the scope of remote attestation procedures, I think that "just not = calling" claim sets that are composed (amongst others) of identifying = claims "identity documents" might just end up in making up another name = for something that is effectively composing identity documents anyways. = If calling the same thing something else helps in some way, I am all for = it. But I am really not sure. >>=20 >> That said, Ned's elaboration on the relationship of identity and = attestation claims and corresponding claim semantics / trust semantics = is spot on, I think. >>=20 >> Viele Gr=C3=BC=C3=9Fe, >>=20 >> Henk >>=20 >> On 10/16/2018 03:51 PM, Smith, Ned wrote: >>> Agree with Hannes that identity discussion can lead to confusion as = identity is often highly dependent on some sort of context (domain of = interpretation). >>> In order to have productive conversation about attestation and = identity, it may be important to understand that attestation semantics = sets the context for identity. >>> * Attestation attributes have trust semantics (and trust semantics = are interpreted through the eyes of the verifier). Identity attributes = may also have trust semantics (in addition to identity semantics) hence = can be regarded as playing a role in both identity and attestation. = Since RATS should be interested primarily in trust semantics, it makes = sense to understand, discuss and consider identity in terms of its trust = semantics. Hence identity attributes are only interesting to RATS if = they are useful for evaluating trust semantics. >>> * In a closed ecosystem, the trust characteristics and properties = may be implied because there often exists out-of-band processes that = ensure the characteristics are applied (for example, if an IT = organization sets a policy that all asymmetric keys are to be hardened = using a smartcard, they can apply a deployment process where the IT = professional verifies the smartcard is used during enrollment.) But in a = non-closed ecosystem, there isn't an assumption that out-of-band = processes exist. Attestation attempts to make explicit what otherwise is = implicit and therefore subject to misinterpretation if the verifier, = relying party and attester are not part of the same closed ecosystem. = Implicit attestation therefore can lead to semantic confusion if we're = not careful. Therefore, the rigor of treating implicit attestation = claims (assertions assumed to exist but not explicitly named) should = nevertheless be defined explicitly. Then, if there is a need for = implicit attestation, the specifications that describe them can describe = them in terms of an explicit definition. >>> * In the context of asserting trust characteristics, the verifier = needs to know that a set of characteristics applies to the instance of = the endpoint being evaluated (aka the attester). (Otherwise a MITM could = supply characteristics that may be valid, but don=E2=80=99t apply to the = specific instance). Consequently, it makes sense to consider that = *attestation* keys are needed to authenticate the endpoint being = evaluated. This doesn't imply an identity key couldn't double as an = attestation key. But if it does, we care about its relevance to the = attester endpoint. >>> -Ned >>> =EF=BB=BFOn 10/15/18, 6:49 PM, "Hannes Tschofenig" = wrote: >>> Here are my 5 cents on the term 'identity'. >>> I have been working on identity management for many years = (partially because of my OAuth co-chair role) and I have noticed that = the use of the term "identity" tends to confuse more than it helps (even = more so when the term is applied to devices and software rather than = humans). >>> I believe we could get away with describing what we want = without ever using the term. >>> In this context I would argue that we are about identifying = different components, such as hardware and software. >>> Ciao >>> Hannes >>> -----Original Message----- >>> From: EAT On Behalf Of Smith, Ned >>> Sent: Monday, October 15, 2018 9:00 AM >>> To: Henk Birkholz ; = rats@ietf.org; Jeremy O'Donoghue ; Denis = >>> Cc: eat@ietf.org >>> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter = updates? >>> I agree with Henk's observation that there is opportunity to = find common ground on identity as identity can be a collection of = attributes, that if signed, becomes a set of verifiable claims (about = identity attributes). Attestation has a similar structure in that it = consists of a set of attributes, that if signed becomes a set of = verifiable claims. The main difference between identity and attestation = attributes is whether the attribute semantically relate to trust (vs. = identity). For example, claims of security certification compliance = resonates as attestation. >>> It may be possible to combine a set of attestation = attributes in such a way that the combination uniquely identifies an = entity. But that doesn't make it an identity system per se and shouldn't = cause a conflict in charter goals with respect to other identity focused = efforts in IETF. >>> Also, inclusion of attributes that don't have semantics that = reasonably relate to trust should not be of interest to a working group = focused on attestation. >>> -Ned >>> On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" = = wrote: >>> Hi Jeremy & Denis, >>> all these points of view have merit, I think. >>> Please have a look at these quotes: >>>> knowing the provenance of the device >>>> having the entity creator/manufacturer provide a set of claims = which can be verified >>>> to know the characteristics of a device by issuing to the device a = public key certificate which will only be issued to the device if it = fulfills an expected set of functionalities. >>> To me, these descriptions seem to have different = intents, scope or >>> audience and require most certainly different work-flows, but >>> semantically and in consequence representation-wise they also = seem quite >>> related. >>> If you think of an identity document as a set of claims = (potentially >>> including a public key), that is signed and that can match = one or more >>> things, maybe all three types highlighted above are actually = covered by >>> the same identity document concept? >>> With respect to identity documents, I think it is safe = so say that we >>> can find common ground here rather easily. That said, the way = how these >>> identity documents come into existence, when and how they are = deployed >>> on the thing or associated with multiple things is another = question. We >>> most certainly do not want to end up with a "signing fool" = that does not >>> add value to the level of confidence (I am quoting Ned Smith = here). >>> This has to be fleshed out explicitly for each scenario = and the parts >>> that are reused in every scenario should get special = attention in the >>> upcoming RATS architecture draft. >>> Identifying claims aggregated in an identity document = most certainly can >>> include device characteristics, public key(s), or claims = about the >>> intended functions and capabilities of the thing. Claims can = even >>> originate from Claimants that are not the thing itself, but = external >>> entities providing an assertion (e.g. these things are = CC-certified). >>> All different composites of identifying claims have a = specific shared >>> intend in this context though, I think: expressing = Attestation >>> Provenance (again - one for one or more things of the same = kind). And >>> all of them originate from Claimants and therefore use a root = of trust >>> of measurement, I think. >>> That said, establishing trustworthy knowledge about = attestation >>> provenance is only the first step and provides the foundation = for more >>> complex attestation procedures. In any case, this seem to be = required by >>> every scenario that was highlighted so far and therefore will = most >>> certainly be covered in a deliverable. >>> IHTH, >>> Henk >>> On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: >>>> On 12 Oct 2018, at 14:33, Denis >>> > wrote: >>>>> The "Problem Statement" continues as follows: >>>>>=20 >>>>> (2) Today, there is no common, standard way for Relying Parties to >>>>> know the provenance and characteristics of a device (e.g., an = end-user >>>>> device, >>>>> platform or endpoint, servers, IoT devices, device subsystems and >>>>> sub-modules) that may be requesting services. >>>>>=20 >>>>> Knowing the provenance of the device is not always necessary. What = is >>>>> important is to know that a specific set of functions is = (securely) >>>>> supported by the device. >>>>> There already exists a common way to know the characteristics of a >>>>> device by issuing to the device a public key certificate which = will >>>>> only be issued to the device >>>>> if it fulfills an expected set of functionalities. In such a case = a >>>>> syntax for a trusted claim sets**is not needed. >>>>>=20 >>>> This is indeed a possible way to address the problem, but suffers = from >>>> challenges which come down to: >>>>=20 >>>> - Who issues such certificates. An option is that there is some = form of >>>> security certification behind this issuance otherwise it is of very >>>> limited value. >>>> - In order to capture the wide variety of different devices (I = prefer >>>> "entity" here as it is more general than "device"), many different = forms >>>> of such certificates would be required. This ends up being much the = same >>>> thing as a set of claims. >>>>=20 >>>> Given the multiplicity of entities for which attestation might be >>>> useful, it seems to me that having the entity creator/manufacturer >>>> provide a set of claims which can be verified is more flexible than >>>> requiring a certificate. It seems likely to me that where a formal >>>> security certification is needed there will be a certificate issued = by >>>> the Certifying Body as one of the claims about an entity, but I can >>>> think of many cases (supply chain management, to take just one = example) >>>> where provenance is by far the most useful information. >>>>=20 >>>> I'm not in favour of changes to the charter in this direction. >>>>>=20 >>>>> The simplest cases should also be part of the framework. >>>>>=20 >>>>> Note: I personally appreciate that privacy is an aspect that >>>>> will/should be taken into consideration. >>>>>=20 >>>>> Denis >>>>>=20 >>>>>> As with the earlier draft, there are many references to verify = and >>>>>> verifier in the lead up to the deliverable but no deliverables = describing >>>>>> verification rules. I'd like to see rules in one of these = documents and >>>>>> think it worth citing in the deliverables. Are bindings to = certificate >>>>>> management protocols out of scope? >>>>>>=20 >>>>>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" >>>>>> wrote: >>>>>>=20 >>>>>>> Hi all, >>>>>>>=20 >>>>>>> sorry for the delay. Please find an updated charter proposal = here: >>>>>>>=20 >>>>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__github.com_ietf-2Dr= ats_charter_blob_RC2_ietf-2Drats-2Dcharter.md&d=3DDwIFaQ&c=3DHAkYuh63rsuhr= 6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VX= hmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DrPzmwhcwy8eob4eMi= wWzDg5DY-mcC5HYgQqhUGCZ2RI&e=3D >>>>>>> The BoF proponents tried to merge all comments and proposals on >>>>>>> keystores, existing solutions, provenance & device = characteristics, etc >>>>>>> that were raised on the list - and align them in homogeneous = fashion. >>>>>>>=20 >>>>>>> This draft is intended to focus the discussion and improve the = wording. >>>>>>>=20 >>>>>>> Viele Gr=C3=BC=C3=9Fe, >>>>>>>=20 >>>>>>> Henk >>>>>>>=20 >>>>>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >>>>>>>> Hi Henk, >>>>>>>>=20 >>>>>>>> Bangkok IETF is getting close, will you be able to update the = charter >>>>>>>> for the attestation BoF to properly include EAT? I sent you = some text >>>>>>>> that just needs to be pasted along with some comments. It = doesn=E2=80=99t look >>>>>>>> like there=E2=80=99s been any updates. >>>>>>>>=20 >>>>>>>> LL >>>>>>>>=20 >>>>>>> _______________________________________________ >>>>>>> RATS mailing list >>>>>>> RATS@ietf.org >>>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_rats&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI= &r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57= -xCILnJh-EOaxl5AUwyWGM&s=3DxThsQTXgadltVkHTYpOWknadi7puxZt8O6XOIUm_bzo&e=3D= >>>>>> _______________________________________________ >>>>>> EAT mailing list >>>>>> EAT@ietf.org >>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>>=20 >>>>>=20 >>>>> _______________________________________________ >>>>> EAT mailing list >>>>> EAT@ietf.org >>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>=20 >>>>=20 >>>>=20 >>>> _______________________________________________ >>>> EAT mailing list >>>> EAT@ietf.org >>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>=20 >>> _______________________________________________ >>> EAT mailing list >>> EAT@ietf.org >>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>> _______________________________________________ >>> EAT mailing list >>> EAT@ietf.org >>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>> IMPORTANT NOTICE: The contents of this email and any attachments = are confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. >>>=20 >> _______________________________________________ >> EAT mailing list >> EAT@ietf.org >> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >=20 > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat --Apple-Mail=_1929F32F-C0E5-453E-900C-76116FFAE57D Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Wasn=E2=80=99t saying there was ambiguity in the TCG case. = Not being a TCGer, was just was trying to understand what the TCG = definition is. 

Your mentioning 802.1AR DevID helps a lot as I have some = knowledge of it.

I see now that my speculation about SW / config version was = wrong. That=E2=80=99s fine. I only wrote it to try to get to = clarity.

Thanks = for help clarifying.

In EAT, we defined a UEID for what TCGer=E2=80=99s mean by = =E2=80=9Cidentity":
   UEID's identify individual =
manufactured entities / devices such as a
   mobile phone, a water meter, a Bluetooth speaker or a networked
   security camera.  It may identify the entire device or a submodule or
   subsystem.  It does not identify types, models or classes of devices.
   It is akin to a serial number, though it does not have to be
   sequential.  

See here for more on UEID.

In EAT there is =
a strong desire to separate the signing key material from UEID to have =
flexibility in the signing scheme. For example FIDO and Android both =
have privacy-preserving schemes were a signing key is shared by 100,000 =
devices. (Some use cases need privacy, some don=E2=80=99t, perhaps =
because of legal agreements with customers, and correlation between use =
cases and privacy schemes can=E2=80=99t be counted on for high-volume =
devices like mobile phones).

I don=E2=80=99t =
know what the right answer(s) is(are) in the design =
yet...

LL



On Oct 17, 2018, at 4:26 PM, = Guy Fedorkow <gfedorkow@juniper.net> wrote:

Hi = Laurence,
 I don't think there's ambiguity in the = TCG case...  current work in attestation focuses on using the = 802.1AR DevID spec, which corresponds exactly to one of your cases below = -- it's a vendor, model and serial number.
 It's = true that TCG technology can be used to validate software integrity, but = that's hardly the same as identity.
 Considerations = of user privacy commonly accepted in TCG would preclude the inclusion of = software state as part of identity, practicalities aside.  In = general, privacy considerations lead TCG to carefully avoid unauthorized = disclosure of either software or hardware based assertions.
=  Let me know if I'm missing the point...
Thanks
/guy fedorkow, juniper networks

-----Original Message-----
From: Laurence = Lundblade <lgl@island-resort.com>
Sent: Wednesday, = October 17, 2018 12:31 AM
To: Henk Birkholz <henk.birkholz@sit.fraunhofer.de>
Cc: = Smith, Ned <ned.smith@intel.com>; Hannes Tschofenig <Hannes.Tschofenig@arm.com>; rats@ietf.org; Jeremy = O'Donoghue <jodonogh@qti.qualcomm.com>; Denis <denis.ietf@free.fr>; = eat@ietf.org
Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF = charter updates?

I think the TCG has a = certain developed notion of identity that is different from others. =  A way to get sharper about what a particular identity means is to = describe the space and how the identifier selects in the space. =  Here=E2=80=99s a few examples:

- The = space is physical human beings with fingers. A fingerprint scanner = select one of these humans. This is typical biometric auth.
- The space is humans that know a password. A password = authenticator selects the humans that know the password. Typical = authentication.
- The space is humans as legal entities / = citizens with criminal records, passports and such. A national ID = selects.
- The space is physical manufactured devices = from one maker.  A serial number narrows it down to one physical = device.
- The space is physical devices from one maker. A = model number or version, narrows down to a subset of these devices.

My understanding of the TCG world is that = identities goes beyond any of the above because they include things like = the version of the SW and configuration of the device. The identity is = largely a hash of an identifier of the physical device, various SW = components and various configuration states.  The point being that = a change in any of these is a change in the security characteristics of = the device and if it was trusted with a particular key or particular = data in the past, that trust should be revoked until re established.

- The space is physical devices from any = maker
 + Measurement of the SW (the SW versions)
    + Measurements of some = configuration

Changing any of these change = the identity of the device.

I know I = hardly need to ask, but TCG folks, did I describe this correctly?


So that said, many, perhaps = most, use cases for EAT do not want this kind of device identity. It is = not a prerequisite for trusting  claims coming from the device. In = some cases this level of identity seems extremely disruptive as small SW = upgrades could result in re enrollment of biometrics. We already are = annoyed when we have to answer security questions when start using a = service from a new device.

I think this WG = needs to address both this very tight TCG-style device identity and the = more heuristic EAT-style claims-for-risk-engines. I could see = multi-decade evolution where risk engine use cases want more and more of = the tight TCG-style device identity as criminals become more adept at = forging EAT-style claims. (Today risk engines work off of unsecured = browser parameters).

The Introduction in = the charter seems entirely focused on the TCG-based identity use case. I = think text should be added for EAT-style attestation. I will write some = after some comments on this message.

LL




On Oct 16, 2018, at = 8:24 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

To quote Carsten, there is "the usual = terminology problem about identity".

Identifying vs. Identity brings back memories about an = extensive discussion in SACM that in the end resulted in using = Profiles...

Profiles are the "things" that = you can aggregate identity claims in (in SACM these claims are "Target = Endpoint Characteristics", which are pretty much the same thing as = Device Characteristics) - and you use the Profiles to (re-)identify = target endpoints.

In the scope of remote = attestation procedures, I think that "just not calling" claim sets that = are composed (amongst others) of identifying claims "identity documents" = might just end up in making up another name for something that is = effectively composing identity documents anyways. If calling the same = thing something else helps in some way, I am all for it. But I am really = not sure.

That said, Ned's elaboration on = the relationship of identity and attestation claims and corresponding = claim semantics / trust semantics is spot on, I think.

Viele Gr=C3=BC=C3=9Fe,

Henk

On 10/16/2018 03:51 PM, Smith, Ned wrote:
Agree with Hannes that = identity discussion can lead to confusion as identity is often highly = dependent on some sort of context (domain of interpretation).
In order to have productive conversation about attestation = and identity, it may be important to understand that attestation = semantics sets the context for identity.
* Attestation = attributes have trust semantics (and trust semantics are interpreted = through the eyes of the verifier). Identity attributes may also have = trust semantics (in addition to identity semantics) hence can be = regarded as playing a role in both identity and attestation. Since RATS = should be interested primarily in trust semantics, it makes sense to = understand, discuss and consider identity in terms of its trust = semantics. Hence identity attributes are only interesting to RATS if = they are useful for evaluating trust semantics.
* In a = closed ecosystem, the trust characteristics and properties may be = implied because there often exists out-of-band processes that ensure the = characteristics are applied (for example, if an IT organization sets a = policy that all asymmetric keys are to be hardened using a smartcard, = they can apply a deployment process where the IT professional verifies = the smartcard is used during enrollment.) But in a non-closed ecosystem, = there isn't an assumption that out-of-band processes exist. Attestation = attempts to make explicit what otherwise is implicit and therefore = subject to misinterpretation if the verifier, relying party and attester = are not part of the same closed ecosystem. Implicit attestation = therefore can lead to semantic confusion if we're not careful. = Therefore, the rigor of treating implicit attestation claims (assertions = assumed to exist but not explicitly named) should nevertheless be = defined explicitly. Then, if there is a need for implicit attestation, = the specifications that describe them can describe them in terms of an = explicit definition.
* In the context of asserting trust = characteristics, the verifier needs to know that a set of = characteristics applies to the instance of the endpoint being evaluated = (aka the attester). (Otherwise a MITM could supply characteristics that = may be valid, but don=E2=80=99t apply to the specific instance). = Consequently, it makes sense to consider that *attestation* keys are = needed to authenticate the endpoint being evaluated. This doesn't imply = an identity key couldn't double as an attestation key. But if it does, = we care about its relevance to the attester endpoint.
-Ned
=EF=BB=BFOn 10/15/18, 6:49 PM, "Hannes = Tschofenig" <Hannes.Tschofenig@arm.com> wrote:
=    Here are my 5 cents on the term 'identity'.
        I have been = working on identity management for many years (partially because of my = OAuth co-chair role) and I have noticed that the use of the term = "identity" tends to confuse more than it helps (even more so when the = term is applied to devices and software rather than humans).
        I believe we = could get away with describing what we want without ever using the = term.
        In = this context I would argue that we are about identifying different = components, such as hardware and software.
=         Ciao
=    Hannes
=         -----Original = Message-----
   From: EAT <eat-bounces@ietf.org> On Behalf Of Smith, Ned
   Sent: Monday, October 15, 2018 9:00 AM
   To: Henk Birkholz <henk.birkholz@sit.fraunhofer.de>; rats@ietf.org; Jeremy = O'Donoghue <jodonogh@qti.qualcomm.com>; Denis <denis.ietf@free.fr>
=    Cc: eat@ietf.org
   Subject: = Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates?
        I agree with = Henk's observation that there is opportunity to find common ground on = identity as identity can be a collection of attributes, that if signed, = becomes a set of verifiable claims (about identity attributes). = Attestation has a similar structure in that it consists of a set of = attributes, that if signed becomes a set of verifiable claims. The main = difference between identity and attestation attributes is whether the = attribute semantically relate to trust (vs. identity). For example, = claims of security certification compliance resonates as attestation.
        It may be = possible to combine a set of attestation attributes in such a way that = the combination uniquely identifies an entity. But that doesn't make it = an identity system per se and shouldn't cause a conflict in charter = goals with respect to other identity focused efforts in IETF.
        Also, = inclusion of attributes that don't have semantics that reasonably relate = to trust should not be of interest to a working group focused on = attestation.
=         -Ned
=         On 10/15/18, 3:53 PM, = "EAT on behalf of Henk Birkholz" <eat-bounces@ietf.org = on behalf of henk.birkholz@sit.fraunhofer.de> wrote:
=             Hi= Jeremy & Denis,
=             al= l these points of view have merit, I think.
=             Pl= ease have a look at these quotes:
knowing the provenance of the device
having the = entity creator/manufacturer provide a set of claims which can be = verified
to know the characteristics of a device by = issuing to the device a public key certificate which will only be issued = to the device if it fulfills an expected set of functionalities.
=             To= me, these descriptions seem to have different intents, scope or
       audience and = require most certainly different work-flows, but
=        semantically and in = consequence representation-wise they also seem quite
=        related.
=             If= you think of an identity document as a set of claims (potentially
       including a public = key), that is signed and that can match one or more
=        things, maybe all three types = highlighted above are actually covered by
=        the same identity document = concept?
=             Wi= th respect to identity documents, I think it is safe so say that we
       can find common = ground here rather easily. That said, the way how these
=        identity documents come into = existence, when and how they are deployed
=        on the thing or associated = with multiple things is another question. We
=        most certainly do not want to = end up with a "signing fool" that does not
=        add value to the level of = confidence (I am quoting Ned Smith here).
=             Th= is has to be fleshed out explicitly for each scenario and the parts
       that are reused in = every scenario should get special attention in the
=        upcoming RATS architecture = draft.
=             Id= entifying claims aggregated in an identity document most certainly = can
       include = device characteristics, public key(s), or claims about the
=        intended functions and = capabilities of the thing. Claims can even
=        originate from Claimants that = are not the thing itself, but external
=        entities providing an = assertion (e.g. these things are CC-certified).
=             Al= l different composites of identifying claims have a specific shared
       intend in this = context though, I think: expressing Attestation
=        Provenance (again - one for = one or more things of the same kind). And
=        all of them originate from = Claimants and therefore use a root of trust
=        of measurement, I think.
=             Th= at said, establishing trustworthy knowledge about attestation
       provenance is only = the first step and provides the foundation for more
=        complex attestation = procedures. In any case, this seem to be required by
=        every scenario that was = highlighted so far and therefore will most
=        certainly be covered in a = deliverable.
=             IH= TH,
=             He= nk
=             &n= bsp;    On 10/15/2018 12:22 PM, Jeremy O'Donoghue = wrote:
On 12 Oct = 2018, at 14:33, Denis <denis.ietf@free.fr
<mailto:denis.ietf@free.fr>> wrote:
The "Problem Statement" = continues as follows:

(2) Today, there is = no common, standard way for Relying Parties to
know the = provenance and characteristics of a device (e.g., an end-user
device,
platform or endpoint, servers, IoT = devices, device subsystems and
sub-modules) that may be = requesting services.

Knowing the provenance = of the device is not always necessary. What is
important = is to know that a specific set of functions is (securely)
supported by the device.
There already exists a = common way to know the characteristics of a
device by = issuing to the device a public key certificate which will
only be issued to the device
if it fulfills an = expected set of functionalities. In such a case a
syntax = for a trusted claim sets**is not needed.

This is indeed a possible way to address the = problem, but suffers from
challenges which come down = to:

- Who issues such certificates. An = option is that there is some form of
security = certification behind this issuance otherwise it is of very
limited value.
- In order to capture the wide = variety of different devices (I prefer
"entity" here as it = is more general than "device"), many different forms
of = such certificates would be required. This ends up being much the same
thing as a set of claims.

Given = the multiplicity of entities for which attestation might be
useful, it seems to me that having the entity = creator/manufacturer
provide a set of claims which can be = verified is more flexible than
requiring a certificate. It = seems likely to me that where a formal
security = certification is needed there will be a certificate issued by
the Certifying Body as one of the claims about an entity, but = I can
think of many cases (supply chain management, to = take just one example)
where provenance is by far the most = useful information.

I'm not in favour of = changes to the charter in this direction.

The simplest cases should also = be part of the framework.

Note: I = personally appreciate that privacy is an aspect that
will/should be taken into consideration.

Denis

As with the earlier draft, there are many references to = verify and
verifier in the lead up to the deliverable but = no deliverables describing
verification rules. I'd like to = see rules in one of these documents and
think it worth = citing in the deliverables. Are bindings to certificate
management protocols out of scope?

On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz"
<rats-bounces@ietf.org on behalf of henk.birkholz@sit.fraunhofer.de>  wrote:

Hi = all,

sorry for the delay. Please find an = updated charter proposal here:

https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__github.c= om_ietf-2Drats_charter_blob_RC2_ietf-2Drats-2Dcharter.md&d=3DDwIFaQ&am= p;c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZO= bmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AU= wyWGM&s=3DrPzmwhcwy8eob4eMiwWzDg5DY-mcC5HYgQqhUGCZ2RI&e=3D
The BoF proponents tried to merge all comments = and proposals on
keystores, existing solutions, provenance = & device characteristics, etc
that were raised on the = list - and align them in homogeneous fashion.

This draft is intended to focus the discussion and improve = the wording.

Viele Gr=C3=BC=C3=9Fe,

Henk

On = 10/06/2018 08:23 AM, Laurence Lundblade wrote:
Hi Henk,

Bangkok = IETF is getting close, will you be able to update the charter
for the attestation BoF to properly include EAT?  I sent = you some text
that just needs to be pasted along with some = comments. It doesn=E2=80=99t look
like there=E2=80=99s = been any updates.

LL

_______________________________________________RATS mailing list
RATS@ietf.org
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_rats&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBX= eMK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&am= p;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DxThsQTXgadltVkHT= YpOWknadi7puxZt8O6XOIUm_bzo&e=3D
_______________________________________________EAT mailing list
EAT@ietf.org
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D


_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D



_______________________________________________
EAT mailing list
EAT@ietf.org
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D

=             __= _____________________________________________
=        EAT mailing list
=        EAT@ietf.org
=        https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D
=             &n= bsp;_______________________________________________
=    EAT mailing list
   EAT@ietf.org
=    https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D
=    IMPORTANT NOTICE: The contents of this email and any = attachments are confidential and may also be privileged. If you are not = the intended recipient, please notify the sender immediately and do not = disclose the contents to any other person, use it for any purpose, or = store or copy the information in any medium. Thank you.

_______________________________________________EAT mailing list
EAT@ietf.org
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D

_______________________________________________
EAT mailing list
EAT@ietf.org
https://www.ietf.org/mailman/listinfo/eat

= --Apple-Mail=_1929F32F-C0E5-453E-900C-76116FFAE57D-- From nobody Wed Oct 17 04:21:56 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFA0812F1AC for ; Wed, 17 Oct 2018 04:21:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4FpFLnf8Wdnf for ; Wed, 17 Oct 2018 04:21:50 -0700 (PDT) Received: from p3plsmtpa06-08.prod.phx3.secureserver.net (p3plsmtpa06-08.prod.phx3.secureserver.net [173.201.192.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CEFE312D4F2 for ; Wed, 17 Oct 2018 04:21:50 -0700 (PDT) Received: from [172.17.68.162] ([1.22.180.94]) by :SMTPAUTH: with ESMTPSA id Cjt3gd3aY6asFCjtEgdUlG; Wed, 17 Oct 2018 04:21:50 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Laurence Lundblade In-Reply-To: <21BE7882-2000-4AF9-B5F8-65AB93602A9E@telefonica.com> Date: Wed, 17 Oct 2018 16:51:12 +0530 Cc: Henk Birkholz , Hannes Tschofenig , "Smith, Ned" , Jeremy O'Donoghue , "eat@ietf.org" , "rats@ietf.org" , Denis Content-Transfer-Encoding: quoted-printable Message-Id: References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <21BE7882-2000-4AF9-B5F8-65AB93602A9E@telefonica.com> To: "Diego R. Lopez" X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfMbEr4lX41r/3k09GunZxFPFdpihSoWSEf6Vb6g36MSQ5jhSizb4zOeWocirXtSWd2V8rn+Xl2cWCBLwHj7ta9Tob6+Z7t5SEMf3biHQwF3Ha3+3ctwZ xFWlz6QtbtZ/1IHSi+/AIf2kiVvao+COMjn28xJ2ZYfUSJqt7ejNKLHmMzv7ANAIyLAUZJMnz/Uw2TFmgGs5irVPMiaHokdnH/Lf+fsvyIpCCp4lXbPJEJXA ttLdY9FPeEXI4Qj+QkV+5BSOtzmSUeIzrOQQ6Q0HdTAp4a5OgEobacknJmhAC0jK1kEEnuwGfzNPIZwZoWU44sLASQT658G5slqBhJfH2wBdxZ/xgvzZR9fR ZKd6MaJGTp5P6kYCpddKK+W5aEvVRiKt3kMNM/d3izjSr85YwPEwByGGfO/ZembsGWDPR2H3 Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Oct 2018 11:21:54 -0000 I hope we don=E2=80=99t do any work related to identifying humans or = accounts here. I only mentioned them for context in trying to figure out = what people meant by identity.=20 LL > On Oct 17, 2018, at 3:48 PM, Diego R. Lopez = wrote: >=20 > Hi, >=20 > May be this is a fairly na=C3=AFve proposal, but if we use = "identification" rather than "identity" and therefore avoid the = ontological implications of the latter, especially when it comes to the = points it touches human-vs-machine issues? >=20 > Be goode, >=20 > -- > "Esta vez no fallaremos, Doctor Infierno" >=20 > Dr Diego R. Lopez > Telefonica I+D > https://www.linkedin.com/in/dr2lopez/ >=20 > e-mail: diego.r.lopez@telefonica.com > Tel: +34 913 129 041 > Mobile: +34 682 051 091 > ---------------------------------- >=20 > =EF=BB=BFOn 17/10/2018, 06:31, "EAT on behalf of Laurence Lundblade" = wrote: >=20 > I think the TCG has a certain developed notion of identity that is = different from others. A way to get sharper about what a particular = identity means is to describe the space and how the identifier selects = in the space. Here=E2=80=99s a few examples: >=20 > - The space is physical human beings with fingers. A fingerprint = scanner select one of these humans. This is typical biometric auth. > - The space is humans that know a password. A password = authenticator selects the humans that know the password. Typical = authentication. > - The space is humans as legal entities / citizens with criminal = records, passports and such. A national ID selects. > - The space is physical manufactured devices from one maker. A = serial number narrows it down to one physical device. > - The space is physical devices from one maker. A model number or = version, narrows down to a subset of these devices. >=20 > My understanding of the TCG world is that identities goes beyond = any of the above because they include things like the version of the SW = and configuration of the device. The identity is largely a hash of an = identifier of the physical device, various SW components and various = configuration states. The point being that a change in any of these is = a change in the security characteristics of the device and if it was = trusted with a particular key or particular data in the past, that trust = should be revoked until re established. >=20 > - The space is physical devices from any maker > + Measurement of the SW (the SW versions) > + Measurements of some configuration >=20 > Changing any of these change the identity of the device. >=20 > I know I hardly need to ask, but TCG folks, did I describe this = correctly? >=20 >=20 > So that said, many, perhaps most, use cases for EAT do not want = this kind of device identity. It is not a prerequisite for trusting = claims coming from the device. In some cases this level of identity = seems extremely disruptive as small SW upgrades could result in re = enrollment of biometrics. We already are annoyed when we have to answer = security questions when start using a service from a new device. >=20 > I think this WG needs to address both this very tight TCG-style = device identity and the more heuristic EAT-style = claims-for-risk-engines. I could see multi-decade evolution where risk = engine use cases want more and more of the tight TCG-style device = identity as criminals become more adept at forging EAT-style claims. = (Today risk engines work off of unsecured browser parameters). >=20 > The Introduction in the charter seems entirely focused on the = TCG-based identity use case. I think text should be added for EAT-style = attestation. I will write some after some comments on this message. >=20 > LL >=20 >=20 >=20 >=20 >=20 >> On Oct 16, 2018, at 8:24 PM, Henk Birkholz = wrote: >>=20 >> To quote Carsten, there is "the usual terminology problem about = identity". >>=20 >> Identifying vs. Identity brings back memories about an extensive = discussion in SACM that in the end resulted in using Profiles... >>=20 >> Profiles are the "things" that you can aggregate identity claims in = (in SACM these claims are "Target Endpoint Characteristics", which are = pretty much the same thing as Device Characteristics) - and you use the = Profiles to (re-)identify target endpoints. >>=20 >> In the scope of remote attestation procedures, I think that "just not = calling" claim sets that are composed (amongst others) of identifying = claims "identity documents" might just end up in making up another name = for something that is effectively composing identity documents anyways. = If calling the same thing something else helps in some way, I am all for = it. But I am really not sure. >>=20 >> That said, Ned's elaboration on the relationship of identity and = attestation claims and corresponding claim semantics / trust semantics = is spot on, I think. >>=20 >> Viele Gr=C3=BC=C3=9Fe, >>=20 >> Henk >>=20 >> On 10/16/2018 03:51 PM, Smith, Ned wrote: >>> Agree with Hannes that identity discussion can lead to confusion as = identity is often highly dependent on some sort of context (domain of = interpretation). >>> In order to have productive conversation about attestation and = identity, it may be important to understand that attestation semantics = sets the context for identity. >>> * Attestation attributes have trust semantics (and trust semantics = are interpreted through the eyes of the verifier). Identity attributes = may also have trust semantics (in addition to identity semantics) hence = can be regarded as playing a role in both identity and attestation. = Since RATS should be interested primarily in trust semantics, it makes = sense to understand, discuss and consider identity in terms of its trust = semantics. Hence identity attributes are only interesting to RATS if = they are useful for evaluating trust semantics. >>> * In a closed ecosystem, the trust characteristics and properties = may be implied because there often exists out-of-band processes that = ensure the characteristics are applied (for example, if an IT = organization sets a policy that all asymmetric keys are to be hardened = using a smartcard, they can apply a deployment process where the IT = professional verifies the smartcard is used during enrollment.) But in a = non-closed ecosystem, there isn't an assumption that out-of-band = processes exist. Attestation attempts to make explicit what otherwise is = implicit and therefore subject to misinterpretation if the verifier, = relying party and attester are not part of the same closed ecosystem. = Implicit attestation therefore can lead to semantic confusion if we're = not careful. Therefore, the rigor of treating implicit attestation = claims (assertions assumed to exist but not explicitly named) should = nevertheless be defined explicitly. Then, if there is a need for = implicit attestation, the specifications that describe them can describe = them in terms of an explicit definition. >>> * In the context of asserting trust characteristics, the verifier = needs to know that a set of characteristics applies to the instance of = the endpoint being evaluated (aka the attester). (Otherwise a MITM could = supply characteristics that may be valid, but don=E2=80=99t apply to the = specific instance). Consequently, it makes sense to consider that = *attestation* keys are needed to authenticate the endpoint being = evaluated. This doesn't imply an identity key couldn't double as an = attestation key. But if it does, we care about its relevance to the = attester endpoint. >>> -Ned >>> On 10/15/18, 6:49 PM, "Hannes Tschofenig" = wrote: >>> Here are my 5 cents on the term 'identity'. >>> I have been working on identity management for many years = (partially because of my OAuth co-chair role) and I have noticed that = the use of the term "identity" tends to confuse more than it helps (even = more so when the term is applied to devices and software rather than = humans). >>> I believe we could get away with describing what we want = without ever using the term. >>> In this context I would argue that we are about identifying = different components, such as hardware and software. >>> Ciao >>> Hannes >>> -----Original Message----- >>> From: EAT On Behalf Of Smith, Ned >>> Sent: Monday, October 15, 2018 9:00 AM >>> To: Henk Birkholz ; = rats@ietf.org; Jeremy O'Donoghue ; Denis = >>> Cc: eat@ietf.org >>> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter = updates? >>> I agree with Henk's observation that there is opportunity to = find common ground on identity as identity can be a collection of = attributes, that if signed, becomes a set of verifiable claims (about = identity attributes). Attestation has a similar structure in that it = consists of a set of attributes, that if signed becomes a set of = verifiable claims. The main difference between identity and attestation = attributes is whether the attribute semantically relate to trust (vs. = identity). For example, claims of security certification compliance = resonates as attestation. >>> It may be possible to combine a set of attestation = attributes in such a way that the combination uniquely identifies an = entity. But that doesn't make it an identity system per se and shouldn't = cause a conflict in charter goals with respect to other identity focused = efforts in IETF. >>> Also, inclusion of attributes that don't have semantics that = reasonably relate to trust should not be of interest to a working group = focused on attestation. >>> -Ned >>> On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" = = wrote: >>> Hi Jeremy & Denis, >>> all these points of view have merit, I think. >>> Please have a look at these quotes: >>>> knowing the provenance of the device >>>> having the entity creator/manufacturer provide a set of claims = which can be verified >>>> to know the characteristics of a device by issuing to the device a = public key certificate which will only be issued to the device if it = fulfills an expected set of functionalities. >>> To me, these descriptions seem to have different = intents, scope or >>> audience and require most certainly different work-flows, but >>> semantically and in consequence representation-wise they also = seem quite >>> related. >>> If you think of an identity document as a set of claims = (potentially >>> including a public key), that is signed and that can match = one or more >>> things, maybe all three types highlighted above are actually = covered by >>> the same identity document concept? >>> With respect to identity documents, I think it is safe = so say that we >>> can find common ground here rather easily. That said, the way = how these >>> identity documents come into existence, when and how they are = deployed >>> on the thing or associated with multiple things is another = question. We >>> most certainly do not want to end up with a "signing fool" = that does not >>> add value to the level of confidence (I am quoting Ned Smith = here). >>> This has to be fleshed out explicitly for each scenario = and the parts >>> that are reused in every scenario should get special = attention in the >>> upcoming RATS architecture draft. >>> Identifying claims aggregated in an identity document = most certainly can >>> include device characteristics, public key(s), or claims = about the >>> intended functions and capabilities of the thing. Claims can = even >>> originate from Claimants that are not the thing itself, but = external >>> entities providing an assertion (e.g. these things are = CC-certified). >>> All different composites of identifying claims have a = specific shared >>> intend in this context though, I think: expressing = Attestation >>> Provenance (again - one for one or more things of the same = kind). And >>> all of them originate from Claimants and therefore use a root = of trust >>> of measurement, I think. >>> That said, establishing trustworthy knowledge about = attestation >>> provenance is only the first step and provides the foundation = for more >>> complex attestation procedures. In any case, this seem to be = required by >>> every scenario that was highlighted so far and therefore will = most >>> certainly be covered in a deliverable. >>> IHTH, >>> Henk >>> On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: >>>> On 12 Oct 2018, at 14:33, Denis >>> > wrote: >>>>> The "Problem Statement" continues as follows: >>>>>=20 >>>>> (2) Today, there is no common, standard way for Relying Parties to >>>>> know the provenance and characteristics of a device (e.g., an = end-user >>>>> device, >>>>> platform or endpoint, servers, IoT devices, device subsystems and >>>>> sub-modules) that may be requesting services. >>>>>=20 >>>>> Knowing the provenance of the device is not always necessary. What = is >>>>> important is to know that a specific set of functions is = (securely) >>>>> supported by the device. >>>>> There already exists a common way to know the characteristics of a >>>>> device by issuing to the device a public key certificate which = will >>>>> only be issued to the device >>>>> if it fulfills an expected set of functionalities. In such a case = a >>>>> syntax for a trusted claim sets**is not needed. >>>>>=20 >>>> This is indeed a possible way to address the problem, but suffers = from >>>> challenges which come down to: >>>>=20 >>>> - Who issues such certificates. An option is that there is some = form of >>>> security certification behind this issuance otherwise it is of very >>>> limited value. >>>> - In order to capture the wide variety of different devices (I = prefer >>>> "entity" here as it is more general than "device"), many different = forms >>>> of such certificates would be required. This ends up being much the = same >>>> thing as a set of claims. >>>>=20 >>>> Given the multiplicity of entities for which attestation might be >>>> useful, it seems to me that having the entity creator/manufacturer >>>> provide a set of claims which can be verified is more flexible than >>>> requiring a certificate. It seems likely to me that where a formal >>>> security certification is needed there will be a certificate issued = by >>>> the Certifying Body as one of the claims about an entity, but I can >>>> think of many cases (supply chain management, to take just one = example) >>>> where provenance is by far the most useful information. >>>>=20 >>>> I'm not in favour of changes to the charter in this direction. >>>>>=20 >>>>> The simplest cases should also be part of the framework. >>>>>=20 >>>>> Note: I personally appreciate that privacy is an aspect that >>>>> will/should be taken into consideration. >>>>>=20 >>>>> Denis >>>>>=20 >>>>>> As with the earlier draft, there are many references to verify = and >>>>>> verifier in the lead up to the deliverable but no deliverables = describing >>>>>> verification rules. I'd like to see rules in one of these = documents and >>>>>> think it worth citing in the deliverables. Are bindings to = certificate >>>>>> management protocols out of scope? >>>>>>=20 >>>>>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" >>>>>> wrote: >>>>>>=20 >>>>>>> Hi all, >>>>>>>=20 >>>>>>> sorry for the delay. Please find an updated charter proposal = here: >>>>>>>=20 >>>>>>>> = https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter.md >>>>>>> The BoF proponents tried to merge all comments and proposals on >>>>>>> keystores, existing solutions, provenance & device = characteristics, etc >>>>>>> that were raised on the list - and align them in homogeneous = fashion. >>>>>>>=20 >>>>>>> This draft is intended to focus the discussion and improve the = wording. >>>>>>>=20 >>>>>>> Viele Gr=C3=BC=C3=9Fe, >>>>>>>=20 >>>>>>> Henk >>>>>>>=20 >>>>>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >>>>>>>> Hi Henk, >>>>>>>>=20 >>>>>>>> Bangkok IETF is getting close, will you be able to update the = charter >>>>>>>> for the attestation BoF to properly include EAT? I sent you = some text >>>>>>>> that just needs to be pasted along with some comments. It = doesn=E2=80=99t look >>>>>>>> like there=E2=80=99s been any updates. >>>>>>>>=20 >>>>>>>> LL >>>>>>>>=20 >>>>>>> _______________________________________________ >>>>>>> RATS mailing list >>>>>>> RATS@ietf.org >>>>>>> https://www.ietf.org/mailman/listinfo/rats >>>>>> _______________________________________________ >>>>>> EAT mailing list >>>>>> EAT@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/eat >>>>>=20 >>>>>=20 >>>>> _______________________________________________ >>>>> EAT mailing list >>>>> EAT@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/eat >>>>=20 >>>>=20 >>>>=20 >>>> _______________________________________________ >>>> EAT mailing list >>>> EAT@ietf.org >>>> https://www.ietf.org/mailman/listinfo/eat >>>>=20 >>> _______________________________________________ >>> EAT mailing list >>> EAT@ietf.org >>> https://www.ietf.org/mailman/listinfo/eat >>> _______________________________________________ >>> EAT mailing list >>> EAT@ietf.org >>> https://www.ietf.org/mailman/listinfo/eat >>> IMPORTANT NOTICE: The contents of this email and any attachments = are confidential and may also be privileged. If you are not the intended = recipient, please notify the sender immediately and do not disclose the = contents to any other person, use it for any purpose, or store or copy = the information in any medium. Thank you. >>>=20 >> _______________________________________________ >> EAT mailing list >> EAT@ietf.org >> https://www.ietf.org/mailman/listinfo/eat >=20 > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat >=20 >=20 >=20 > ________________________________ >=20 > Este mensaje y sus adjuntos se dirigen exclusivamente a su = destinatario, puede contener informaci=C3=B3n privilegiada o = confidencial y es para uso exclusivo de la persona o entidad de destino. = Si no es usted. el destinatario indicado, queda notificado de que la = lectura, utilizaci=C3=B3n, divulgaci=C3=B3n y/o copia sin autorizaci=C3=B3= n puede estar prohibida en virtud de la legislaci=C3=B3n vigente. Si ha = recibido este mensaje por error, le rogamos que nos lo comunique = inmediatamente por esta misma v=C3=ADa y proceda a su destrucci=C3=B3n. >=20 > The information contained in this transmission is privileged and = confidential information intended only for the use of the individual or = entity named above. If the reader of this message is not the intended = recipient, you are hereby notified that any dissemination, distribution = or copying of this communication is strictly prohibited. If you have = received this transmission in error, do not read it. Please immediately = reply to the sender that you have received this communication in error = and then delete it. >=20 > Esta mensagem e seus anexos se dirigem exclusivamente ao seu = destinat=C3=A1rio, pode conter informa=C3=A7=C3=A3o privilegiada ou = confidencial e =C3=A9 para uso exclusivo da pessoa ou entidade de = destino. Se n=C3=A3o =C3=A9 vossa senhoria o destinat=C3=A1rio indicado, = fica notificado de que a leitura, utiliza=C3=A7=C3=A3o, divulga=C3=A7=C3=A3= o e/ou c=C3=B3pia sem autoriza=C3=A7=C3=A3o pode estar proibida em = virtude da legisla=C3=A7=C3=A3o vigente. Se recebeu esta mensagem por = erro, rogamos-lhe que nos o comunique imediatamente por esta mesma via e = proceda a sua destrui=C3=A7=C3=A3o > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat From nobody Wed Oct 17 05:20:18 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29371130DD3; Wed, 17 Oct 2018 05:20:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id obx4oi1okH3H; Wed, 17 Oct 2018 05:20:05 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 955DC1277C8; Wed, 17 Oct 2018 05:20:04 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9HCJupQ012389 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 17 Oct 2018 14:19:57 +0200 Received: from [172.20.8.9] (213.30.51.185) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Wed, 17 Oct 2018 14:19:50 +0200 To: "rats@ietf.org" , Laurence Lundblade , Guy Fedorkow CC: Hannes Tschofenig , "Smith, Ned" , "Jeremy O'Donoghue" , "eat@ietf.org" , Denis References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> From: Henk Birkholz Message-ID: <9c73f9b7-9129-c273-254e-465f92ab3650@sit.fraunhofer.de> Date: Wed, 17 Oct 2018 14:19:44 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [213.30.51.185] Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Oct 2018 12:20:11 -0000 Hi Laurence, maybe I understand now where the general confusion is originating from. I dug through some parts of the EAT draft again and could it be that UIED are identifier and not an identities? They literally are claims (aka assertions) that can be signed as content of a CWT as illustrated in > https://tools.ietf.org/html/draft-mandyam-eat-00#section-1.4.2 1.4.2. talks about identity documents by mentioning "X.509 certificate chains or something similar but different". But as you highlighted anything with regard to that is explicitly intended _not_ to go into the EAT claim set as content, but is stored on the thing (or maybe on a thing that signs "on behalf of" the thing the EAT is about?) and consequently is only used to potentially sign the EAT claim set (via COSE). Is that correct? As a result, an EAT would never be able to act as an identity document itself, but the key material that comes along with an x.509 certificate (as one example of many highlighted) could be used to sign the EAT. RATS are able to use the "X.509 certificate chains or something similar but different" and the corresponding key material comes along with a certificate (as one example amongst others) to establish Attestation Provenance. Viele Grüße, Henk On 10/17/2018 01:19 PM, Laurence Lundblade wrote: > Wasn’t saying there was ambiguity in the TCG case. Not being a TCGer, > was just was trying to understand what the TCG definition is. > > Your mentioning 802.1AR DevID helps a lot as I have some knowledge of it. > > I see now that my speculation about SW / config version was wrong. > That’s fine. I only wrote it to try to get to clarity. > > Thanks for help clarifying. > > In EAT, we defined a UEID for what TCGer’s mean by “identity": > > UEID's identify individual manufactured entities / devices such as a > mobile phone, a water meter, a Bluetooth speaker or a networked > security camera. It may identify the entire device or a submodule or > subsystem. It does not identify types, models or classes of devices. > It is akin to a serial number, though it does not have to be > sequential. > > > See here > for more on UEID. > > > In EAT there is a strong desire to separate the signing key material > from UEID to have flexibility in the signing scheme. For example FIDO > and Android both have privacy-preserving schemes were a signing key is > shared by 100,000 devices. (Some use cases need privacy, some don’t, > perhaps because of legal agreements with customers, and correlation > between use cases and privacy schemes can’t be counted on for > high-volume devices like mobile phones). > > > I don’t know what the right answer(s) is(are) in the design yet... > > > LL > > > >> On Oct 17, 2018, at 4:26 PM, Guy Fedorkow > > wrote: >> >> Hi Laurence, >>  I don't think there's ambiguity in the TCG case...  current work in >> attestation focuses on using the 802.1AR DevID spec, which corresponds >> exactly to one of your cases below -- it's a vendor, model and serial >> number. >>  It's true that TCG technology can be used to validate software >> integrity, but that's hardly the same as identity. >>  Considerations of user privacy commonly accepted in TCG would >> preclude the inclusion of software state as part of identity, >> practicalities aside.  In general, privacy considerations lead TCG to >> carefully avoid unauthorized disclosure of either software or hardware >> based assertions. >>  Let me know if I'm missing the point... >> Thanks >> /guy fedorkow, juniper networks >> >> -----Original Message----- >> From: Laurence Lundblade > > >> Sent: Wednesday, October 17, 2018 12:31 AM >> To: Henk Birkholz > > >> Cc: Smith, Ned >; >> Hannes Tschofenig > >; rats@ietf.org >> ; Jeremy O'Donoghue > >; Denis > >; eat@ietf.org >> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates? >> >> I think the TCG has a certain developed notion of identity that is >> different from others.  A way to get sharper about what a particular >> identity means is to describe the space and how the identifier selects >> in the space.  Here’s a few examples: >> >> - The space is physical human beings with fingers. A fingerprint >> scanner select one of these humans. This is typical biometric auth. >> - The space is humans that know a password. A password authenticator >> selects the humans that know the password. Typical authentication. >> - The space is humans as legal entities / citizens with criminal >> records, passports and such. A national ID selects. >> - The space is physical manufactured devices from one maker.  A serial >> number narrows it down to one physical device. >> - The space is physical devices from one maker. A model number or >> version, narrows down to a subset of these devices. >> >> My understanding of the TCG world is that identities goes beyond any >> of the above because they include things like the version of the SW >> and configuration of the device. The identity is largely a hash of an >> identifier of the physical device, various SW components and various >> configuration states.  The point being that a change in any of these >> is a change in the security characteristics of the device and if it >> was trusted with a particular key or particular data in the past, that >> trust should be revoked until re established. >> >> - The space is physical devices from any maker >>  + Measurement of the SW (the SW versions) >>     + Measurements of some configuration >> >> Changing any of these change the identity of the device. >> >> I know I hardly need to ask, but TCG folks, did I describe this correctly? >> >> >> So that said, many, perhaps most, use cases for EAT do not want this >> kind of device identity. It is not a prerequisite for trusting  claims >> coming from the device. In some cases this level of identity seems >> extremely disruptive as small SW upgrades could result in re >> enrollment of biometrics. We already are annoyed when we have to >> answer security questions when start using a service from a new device. >> >> I think this WG needs to address both this very tight TCG-style device >> identity and the more heuristic EAT-style claims-for-risk-engines. I >> could see multi-decade evolution where risk engine use cases want more >> and more of the tight TCG-style device identity as criminals become >> more adept at forging EAT-style claims. (Today risk engines work off >> of unsecured browser parameters). >> >> The Introduction in the charter seems entirely focused on the >> TCG-based identity use case. I think text should be added for >> EAT-style attestation. I will write some after some comments on this >> message. >> >> LL >> >> >> >> >> >>> On Oct 16, 2018, at 8:24 PM, Henk Birkholz >>> >> > wrote: >>> >>> To quote Carsten, there is "the usual terminology problem about >>> identity". >>> >>> Identifying vs. Identity brings back memories about an extensive >>> discussion in SACM that in the end resulted in using Profiles... >>> >>> Profiles are the "things" that you can aggregate identity claims in >>> (in SACM these claims are "Target Endpoint Characteristics", which >>> are pretty much the same thing as Device Characteristics) - and you >>> use the Profiles to (re-)identify target endpoints. >>> >>> In the scope of remote attestation procedures, I think that "just not >>> calling" claim sets that are composed (amongst others) of identifying >>> claims "identity documents" might just end up in making up another >>> name for something that is effectively composing identity documents >>> anyways. If calling the same thing something else helps in some way, >>> I am all for it. But I am really not sure. >>> >>> That said, Ned's elaboration on the relationship of identity and >>> attestation claims and corresponding claim semantics / trust >>> semantics is spot on, I think. >>> >>> Viele Grüße, >>> >>> Henk >>> >>> On 10/16/2018 03:51 PM, Smith, Ned wrote: >>>> Agree with Hannes that identity discussion can lead to confusion as >>>> identity is often highly dependent on some sort of context (domain >>>> of interpretation). >>>> In order to have productive conversation about attestation and >>>> identity, it may be important to understand that attestation >>>> semantics sets the context for identity. >>>> * Attestation attributes have trust semantics (and trust semantics >>>> are interpreted through the eyes of the verifier). Identity >>>> attributes may also have trust semantics (in addition to identity >>>> semantics) hence can be regarded as playing a role in both identity >>>> and attestation. Since RATS should be interested primarily in trust >>>> semantics, it makes sense to understand, discuss and consider >>>> identity in terms of its trust semantics. Hence identity attributes >>>> are only interesting to RATS if they are useful for evaluating trust >>>> semantics. >>>> * In a closed ecosystem, the trust characteristics and properties >>>> may be implied because there often exists out-of-band processes that >>>> ensure the characteristics are applied (for example, if an IT >>>> organization sets a policy that all asymmetric keys are to be >>>> hardened using a smartcard, they can apply a deployment process >>>> where the IT professional verifies the smartcard is used during >>>> enrollment.) But in a non-closed ecosystem, there isn't an >>>> assumption that out-of-band processes exist. Attestation attempts to >>>> make explicit what otherwise is implicit and therefore subject to >>>> misinterpretation if the verifier, relying party and attester are >>>> not part of the same closed ecosystem. Implicit attestation >>>> therefore can lead to semantic confusion if we're not careful. >>>> Therefore, the rigor of treating implicit attestation claims >>>> (assertions assumed to exist but not explicitly named) should >>>> nevertheless be defined explicitly. Then, if there is a need for >>>> implicit attestation, the specifications that describe them can >>>> describe them in terms of an explicit definition. >>>> * In the context of asserting trust characteristics, the verifier >>>> needs to know that a set of characteristics applies to the instance >>>> of the endpoint being evaluated (aka the attester). (Otherwise a >>>> MITM could supply characteristics that may be valid, but don’t apply >>>> to the specific instance). Consequently, it makes sense to consider >>>> that *attestation* keys are needed to authenticate the endpoint >>>> being evaluated. This doesn't imply an identity key couldn't double >>>> as an attestation key. But if it does, we care about its relevance >>>> to the attester endpoint. >>>> -Ned >>>> On 10/15/18, 6:49 PM, "Hannes Tschofenig" >>>> > wrote: >>>>    Here are my 5 cents on the term 'identity'. >>>>         I have been working on identity management for many years >>>> (partially because of my OAuth co-chair role) and I have noticed >>>> that the use of the term "identity" tends to confuse more than it >>>> helps (even more so when the term is applied to devices and software >>>> rather than humans). >>>>         I believe we could get away with describing what we want >>>> without ever using the term. >>>>         In this context I would argue that we are about identifying >>>> different components, such as hardware and software. >>>>         Ciao >>>>    Hannes >>>>         -----Original Message----- >>>>    From: EAT > On >>>> Behalf Of Smith, Ned >>>>    Sent: Monday, October 15, 2018 9:00 AM >>>>    To: Henk Birkholz >>> >; rats@ietf.org >>>> ; Jeremy O'Donoghue >>> >; Denis >>> > >>>>    Cc: eat@ietf.org >>>>    Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter >>>> updates? >>>>         I agree with Henk's observation that there is opportunity to >>>> find common ground on identity as identity can be a collection of >>>> attributes, that if signed, becomes a set of verifiable claims >>>> (about identity attributes). Attestation has a similar structure in >>>> that it consists of a set of attributes, that if signed becomes a >>>> set of verifiable claims. The main difference between identity and >>>> attestation attributes is whether the attribute semantically relate >>>> to trust (vs. identity). For example, claims of security >>>> certification compliance resonates as attestation. >>>>         It may be possible to combine a set of attestation >>>> attributes in such a way that the combination uniquely identifies an >>>> entity. But that doesn't make it an identity system per se and >>>> shouldn't cause a conflict in charter goals with respect to other >>>> identity focused efforts in IETF. >>>>         Also, inclusion of attributes that don't have semantics that >>>> reasonably relate to trust should not be of interest to a working >>>> group focused on attestation. >>>>         -Ned >>>>         On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" >>>> on behalf of >>>> henk.birkholz@sit.fraunhofer.de >>>> > wrote: >>>>             Hi Jeremy & Denis, >>>>             all these points of view have merit, I think. >>>>             Please have a look at these quotes: >>>>> knowing the provenance of the device >>>>> having the entity creator/manufacturer provide a set of claims >>>>> which can be verified >>>>> to know the characteristics of a device by issuing to the device a >>>>> public key certificate which will only be issued to the device if >>>>> it fulfills an expected set of functionalities. >>>>             To me, these descriptions seem to have different >>>> intents, scope or >>>>        audience and require most certainly different work-flows, but >>>>        semantically and in consequence representation-wise they also >>>> seem quite >>>>        related. >>>>             If you think of an identity document as a set of claims >>>> (potentially >>>>        including a public key), that is signed and that can match >>>> one or more >>>>        things, maybe all three types highlighted above are actually >>>> covered by >>>>        the same identity document concept? >>>>             With respect to identity documents, I think it is safe >>>> so say that we >>>>        can find common ground here rather easily. That said, the way >>>> how these >>>>        identity documents come into existence, when and how they are >>>> deployed >>>>        on the thing or associated with multiple things is another >>>> question. We >>>>        most certainly do not want to end up with a "signing fool" >>>> that does not >>>>        add value to the level of confidence (I am quoting Ned Smith >>>> here). >>>>             This has to be fleshed out explicitly for each scenario >>>> and the parts >>>>        that are reused in every scenario should get special >>>> attention in the >>>>        upcoming RATS architecture draft. >>>>             Identifying claims aggregated in an identity document >>>> most certainly can >>>>        include device characteristics, public key(s), or claims >>>> about the >>>>        intended functions and capabilities of the thing. Claims can even >>>>        originate from Claimants that are not the thing itself, but >>>> external >>>>        entities providing an assertion (e.g. these things are >>>> CC-certified). >>>>             All different composites of identifying claims have a >>>> specific shared >>>>        intend in this context though, I think: expressing Attestation >>>>        Provenance (again - one for one or more things of the same >>>> kind). And >>>>        all of them originate from Claimants and therefore use a root >>>> of trust >>>>        of measurement, I think. >>>>             That said, establishing trustworthy knowledge about >>>> attestation >>>>        provenance is only the first step and provides the foundation >>>> for more >>>>        complex attestation procedures. In any case, this seem to be >>>> required by >>>>        every scenario that was highlighted so far and therefore will >>>> most >>>>        certainly be covered in a deliverable. >>>>             IHTH, >>>>             Henk >>>>                  On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: >>>>> On 12 Oct 2018, at 14:33, Denis >>>> >>>>> > wrote: >>>>>> The "Problem Statement" continues as follows: >>>>>> >>>>>> (2) Today, there is no common, standard way for Relying Parties to >>>>>> know the provenance and characteristics of a device (e.g., an end-user >>>>>> device, >>>>>> platform or endpoint, servers, IoT devices, device subsystems and >>>>>> sub-modules) that may be requesting services. >>>>>> >>>>>> Knowing the provenance of the device is not always necessary. What is >>>>>> important is to know that a specific set of functions is (securely) >>>>>> supported by the device. >>>>>> There already exists a common way to know the characteristics of a >>>>>> device by issuing to the device a public key certificate which will >>>>>> only be issued to the device >>>>>> if it fulfills an expected set of functionalities. In such a case a >>>>>> syntax for a trusted claim sets**is not needed. >>>>>> >>>>> This is indeed a possible way to address the problem, but suffers from >>>>> challenges which come down to: >>>>> >>>>> - Who issues such certificates. An option is that there is some form of >>>>> security certification behind this issuance otherwise it is of very >>>>> limited value. >>>>> - In order to capture the wide variety of different devices (I prefer >>>>> "entity" here as it is more general than "device"), many different >>>>> forms >>>>> of such certificates would be required. This ends up being much the >>>>> same >>>>> thing as a set of claims. >>>>> >>>>> Given the multiplicity of entities for which attestation might be >>>>> useful, it seems to me that having the entity creator/manufacturer >>>>> provide a set of claims which can be verified is more flexible than >>>>> requiring a certificate. It seems likely to me that where a formal >>>>> security certification is needed there will be a certificate issued by >>>>> the Certifying Body as one of the claims about an entity, but I can >>>>> think of many cases (supply chain management, to take just one example) >>>>> where provenance is by far the most useful information. >>>>> >>>>> I'm not in favour of changes to the charter in this direction. >>>>>> >>>>>> The simplest cases should also be part of the framework. >>>>>> >>>>>> Note: I personally appreciate that privacy is an aspect that >>>>>> will/should be taken into consideration. >>>>>> >>>>>> Denis >>>>>> >>>>>>> As with the earlier draft, there are many references to verify and >>>>>>> verifier in the lead up to the deliverable but no deliverables >>>>>>> describing >>>>>>> verification rules. I'd like to see rules in one of these >>>>>>> documents and >>>>>>> think it worth citing in the deliverables. Are bindings to >>>>>>> certificate >>>>>>> management protocols out of scope? >>>>>>> >>>>>>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" >>>>>>> on behalf >>>>>>> of henk.birkholz@sit.fraunhofer.de >>>>>>> >  wrote: >>>>>>> >>>>>>>> Hi all, >>>>>>>> >>>>>>>> sorry for the delay. Please find an updated charter proposal here: >>>>>>>> >>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_ietf-2Drats_charter_blob_RC2_ietf-2Drats-2Dcharter.md&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=rPzmwhcwy8eob4eMiwWzDg5DY-mcC5HYgQqhUGCZ2RI&e= >>>>>>>> The BoF proponents tried to merge all comments and proposals on >>>>>>>> keystores, existing solutions, provenance & device >>>>>>>> characteristics, etc >>>>>>>> that were raised on the list - and align them in homogeneous >>>>>>>> fashion. >>>>>>>> >>>>>>>> This draft is intended to focus the discussion and improve the >>>>>>>> wording. >>>>>>>> >>>>>>>> Viele Grüße, >>>>>>>> >>>>>>>> Henk >>>>>>>> >>>>>>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >>>>>>>>> Hi Henk, >>>>>>>>> >>>>>>>>> Bangkok IETF is getting close, will you be able to update the >>>>>>>>> charter >>>>>>>>> for the attestation BoF to properly include EAT?  I sent you >>>>>>>>> some text >>>>>>>>> that just needs to be pasted along with some comments. It >>>>>>>>> doesn’t look >>>>>>>>> like there’s been any updates. >>>>>>>>> >>>>>>>>> LL >>>>>>>>> >>>>>>>> _______________________________________________ >>>>>>>> RATS mailing list >>>>>>>> RATS@ietf.org >>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_rats&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=xThsQTXgadltVkHTYpOWknadi7puxZt8O6XOIUm_bzo&e= >>>>>>> _______________________________________________ >>>>>>> EAT mailing list >>>>>>> EAT@ietf.org >>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>> >>>>>> >>>>>> _______________________________________________ >>>>>> EAT mailing list >>>>>> EAT@ietf.org >>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> EAT mailing list >>>>> EAT@ietf.org >>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>> >>>>             _______________________________________________ >>>>        EAT mailing list >>>> EAT@ietf.org >>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>              _______________________________________________ >>>>    EAT mailing list >>>> EAT@ietf.org >>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>    IMPORTANT NOTICE: The contents of this email and any attachments >>>> are confidential and may also be privileged. If you are not the >>>> intended recipient, please notify the sender immediately and do not >>>> disclose the contents to any other person, use it for any purpose, >>>> or store or copy the information in any medium. Thank you. >>>> >>> _______________________________________________ >>> EAT mailing list >>> EAT@ietf.org >>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >> >> _______________________________________________ >> EAT mailing list >> EAT@ietf.org >> https://www.ietf.org/mailman/listinfo/eat > From nobody Wed Oct 17 05:23:30 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 654FA130DC1; Wed, 17 Oct 2018 05:23:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZyMrJgY0Ytye; Wed, 17 Oct 2018 05:23:24 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 48E151277C8; Wed, 17 Oct 2018 05:23:24 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9HCNK4b012477 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 17 Oct 2018 14:23:21 +0200 Received: from [172.20.8.9] (213.30.51.185) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Wed, 17 Oct 2018 14:23:14 +0200 To: Laurence Lundblade , "Diego R. Lopez" CC: Hannes Tschofenig , "Smith, Ned" , "Jeremy O'Donoghue" , "eat@ietf.org" , "rats@ietf.org" , Denis References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <21BE7882-2000-4AF9-B5F8-65AB93602A9E@telefonica.com> From: Henk Birkholz Message-ID: <63a1dc8e-28fe-7172-938c-fb7fbf6e59f8@sit.fraunhofer.de> Date: Wed, 17 Oct 2018 14:23:08 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: base64 X-Originating-IP: [213.30.51.185] Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Oct 2018 12:23:28 -0000 VGhpcyBpcyBhbiBpbnRlcmVzdGluZyBwb2ludC4gV2hlbiBJIGFtIHJlZmVycmluZyB0byBp ZGVudGl0eSBkb2N1bWVudHMsIA0KdGhlIHNjb3BlIGFuZCBpbnRlbnQgaXMgZGV2aWNlIGlk ZW50aXR5IChtZWFuaW5nIGEgc2luZ2xlIGRldmljZSBhcyB3ZWxsIA0KYXMgYSBjZXJ0YWlu IGdyb3VwIG9mIGRldmljZXMpIC0gYW5kIG5vdCBvdGhlciBlbnRpdGllcywgc3VjaCBhcyBo dW1hbnMhDQoNCk9uIDEwLzE3LzIwMTggMDE6MjEgUE0sIExhdXJlbmNlIEx1bmRibGFkZSB3 cm90ZToNCj4gSSBob3BlIHdlIGRvbuKAmXQgZG8gYW55IHdvcmsgcmVsYXRlZCB0byBpZGVu dGlmeWluZyBodW1hbnMgb3IgYWNjb3VudHMgaGVyZS4gSSBvbmx5IG1lbnRpb25lZCB0aGVt IGZvciBjb250ZXh0IGluIHRyeWluZyB0byBmaWd1cmUgb3V0IHdoYXQgcGVvcGxlIG1lYW50 IGJ5IGlkZW50aXR5Lg0KPiANCj4gTEwNCj4gDQo+PiBPbiBPY3QgMTcsIDIwMTgsIGF0IDM6 NDggUE0sIERpZWdvIFIuIExvcGV6IDxkaWVnby5yLmxvcGV6QHRlbGVmb25pY2EuY29tPiB3 cm90ZToNCj4+DQo+PiBIaSwNCj4+DQo+PiBNYXkgYmUgdGhpcyBpcyBhIGZhaXJseSBuYcOv dmUgcHJvcG9zYWwsIGJ1dCBpZiB3ZSB1c2UgImlkZW50aWZpY2F0aW9uIiByYXRoZXIgdGhh biAiaWRlbnRpdHkiIGFuZCB0aGVyZWZvcmUgYXZvaWQgdGhlIG9udG9sb2dpY2FsIGltcGxp Y2F0aW9ucyBvZiB0aGUgbGF0dGVyLCBlc3BlY2lhbGx5IHdoZW4gaXQgY29tZXMgdG8gdGhl IHBvaW50cyBpdCB0b3VjaGVzIGh1bWFuLXZzLW1hY2hpbmUgaXNzdWVzPw0KPj4NCj4+IEJl IGdvb2RlLA0KPj4NCj4+IC0tDQo+PiAiRXN0YSB2ZXogbm8gZmFsbGFyZW1vcywgRG9jdG9y IEluZmllcm5vIg0KPj4NCj4+IERyIERpZWdvIFIuIExvcGV6DQo+PiBUZWxlZm9uaWNhIEkr RA0KPj4gaHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2luL2RyMmxvcGV6Lw0KPj4NCj4+IGUt bWFpbDogZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbQ0KPj4gVGVsOiAgICAgICAgICsz NCA5MTMgMTI5IDA0MQ0KPj4gTW9iaWxlOiAgKzM0IDY4MiAwNTEgMDkxDQo+PiAtLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+Pg0KPj4g77u/T24gMTcvMTAvMjAxOCwg MDY6MzEsICJFQVQgb24gYmVoYWxmIG9mIExhdXJlbmNlIEx1bmRibGFkZSIgPGVhdC1ib3Vu Y2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBsZ2xAaXNsYW5kLXJlc29ydC5jb20+IHdyb3Rl Og0KPj4NCj4+ICAgICBJIHRoaW5rIHRoZSBUQ0cgaGFzIGEgY2VydGFpbiBkZXZlbG9wZWQg bm90aW9uIG9mIGlkZW50aXR5IHRoYXQgaXMgZGlmZmVyZW50IGZyb20gb3RoZXJzLiAgQSB3 YXkgdG8gZ2V0IHNoYXJwZXIgYWJvdXQgd2hhdCBhIHBhcnRpY3VsYXIgaWRlbnRpdHkgbWVh bnMgaXMgdG8gZGVzY3JpYmUgdGhlIHNwYWNlIGFuZCBob3cgdGhlIGlkZW50aWZpZXIgc2Vs ZWN0cyBpbiB0aGUgc3BhY2UuICBIZXJl4oCZcyBhIGZldyBleGFtcGxlczoNCj4+DQo+PiAg ICAgLSBUaGUgc3BhY2UgaXMgcGh5c2ljYWwgaHVtYW4gYmVpbmdzIHdpdGggZmluZ2Vycy4g QSBmaW5nZXJwcmludCBzY2FubmVyIHNlbGVjdCBvbmUgb2YgdGhlc2UgaHVtYW5zLiBUaGlz IGlzIHR5cGljYWwgYmlvbWV0cmljIGF1dGguDQo+PiAgICAgLSBUaGUgc3BhY2UgaXMgaHVt YW5zIHRoYXQga25vdyBhIHBhc3N3b3JkLiBBIHBhc3N3b3JkIGF1dGhlbnRpY2F0b3Igc2Vs ZWN0cyB0aGUgaHVtYW5zIHRoYXQga25vdyB0aGUgcGFzc3dvcmQuIFR5cGljYWwgYXV0aGVu dGljYXRpb24uDQo+PiAgICAgLSBUaGUgc3BhY2UgaXMgaHVtYW5zIGFzIGxlZ2FsIGVudGl0 aWVzIC8gY2l0aXplbnMgd2l0aCBjcmltaW5hbCByZWNvcmRzLCBwYXNzcG9ydHMgYW5kIHN1 Y2guIEEgbmF0aW9uYWwgSUQgc2VsZWN0cy4NCj4+ICAgICAtIFRoZSBzcGFjZSBpcyBwaHlz aWNhbCBtYW51ZmFjdHVyZWQgZGV2aWNlcyBmcm9tIG9uZSBtYWtlci4gIEEgc2VyaWFsIG51 bWJlciBuYXJyb3dzIGl0IGRvd24gdG8gb25lIHBoeXNpY2FsIGRldmljZS4NCj4+ICAgICAt IFRoZSBzcGFjZSBpcyBwaHlzaWNhbCBkZXZpY2VzIGZyb20gb25lIG1ha2VyLiBBIG1vZGVs IG51bWJlciBvciB2ZXJzaW9uLCBuYXJyb3dzIGRvd24gdG8gYSBzdWJzZXQgb2YgdGhlc2Ug ZGV2aWNlcy4NCj4+DQo+PiAgICAgTXkgdW5kZXJzdGFuZGluZyBvZiB0aGUgVENHIHdvcmxk IGlzIHRoYXQgaWRlbnRpdGllcyBnb2VzIGJleW9uZCBhbnkgb2YgdGhlIGFib3ZlIGJlY2F1 c2UgdGhleSBpbmNsdWRlIHRoaW5ncyBsaWtlIHRoZSB2ZXJzaW9uIG9mIHRoZSBTVyBhbmQg Y29uZmlndXJhdGlvbiBvZiB0aGUgZGV2aWNlLiBUaGUgaWRlbnRpdHkgaXMgbGFyZ2VseSBh IGhhc2ggb2YgYW4gaWRlbnRpZmllciBvZiB0aGUgcGh5c2ljYWwgZGV2aWNlLCB2YXJpb3Vz IFNXIGNvbXBvbmVudHMgYW5kIHZhcmlvdXMgY29uZmlndXJhdGlvbiBzdGF0ZXMuICBUaGUg cG9pbnQgYmVpbmcgdGhhdCBhIGNoYW5nZSBpbiBhbnkgb2YgdGhlc2UgaXMgYSBjaGFuZ2Ug aW4gdGhlIHNlY3VyaXR5IGNoYXJhY3RlcmlzdGljcyBvZiB0aGUgZGV2aWNlIGFuZCBpZiBp dCB3YXMgdHJ1c3RlZCB3aXRoIGEgcGFydGljdWxhciBrZXkgb3IgcGFydGljdWxhciBkYXRh IGluIHRoZSBwYXN0LCB0aGF0IHRydXN0IHNob3VsZCBiZSByZXZva2VkIHVudGlsIHJlIGVz dGFibGlzaGVkLg0KPj4NCj4+ICAgICAtIFRoZSBzcGFjZSBpcyBwaHlzaWNhbCBkZXZpY2Vz IGZyb20gYW55IG1ha2VyDQo+PiAgICAgICArIE1lYXN1cmVtZW50IG9mIHRoZSBTVyAodGhl IFNXIHZlcnNpb25zKQ0KPj4gICAgICAgICAgKyBNZWFzdXJlbWVudHMgb2Ygc29tZSBjb25m aWd1cmF0aW9uDQo+Pg0KPj4gICAgIENoYW5naW5nIGFueSBvZiB0aGVzZSBjaGFuZ2UgdGhl IGlkZW50aXR5IG9mIHRoZSBkZXZpY2UuDQo+Pg0KPj4gICAgIEkga25vdyBJIGhhcmRseSBu ZWVkIHRvIGFzaywgYnV0IFRDRyBmb2xrcywgZGlkIEkgZGVzY3JpYmUgdGhpcyBjb3JyZWN0 bHk/DQo+Pg0KPj4NCj4+ICAgICBTbyB0aGF0IHNhaWQsIG1hbnksIHBlcmhhcHMgbW9zdCwg dXNlIGNhc2VzIGZvciBFQVQgZG8gbm90IHdhbnQgdGhpcyBraW5kIG9mIGRldmljZSBpZGVu dGl0eS4gSXQgaXMgbm90IGEgcHJlcmVxdWlzaXRlIGZvciB0cnVzdGluZyAgY2xhaW1zIGNv bWluZyBmcm9tIHRoZSBkZXZpY2UuIEluIHNvbWUgY2FzZXMgdGhpcyBsZXZlbCBvZiBpZGVu dGl0eSBzZWVtcyBleHRyZW1lbHkgZGlzcnVwdGl2ZSBhcyBzbWFsbCBTVyB1cGdyYWRlcyBj b3VsZCByZXN1bHQgaW4gcmUgZW5yb2xsbWVudCBvZiBiaW9tZXRyaWNzLiBXZSBhbHJlYWR5 IGFyZSBhbm5veWVkIHdoZW4gd2UgaGF2ZSB0byBhbnN3ZXIgc2VjdXJpdHkgcXVlc3Rpb25z IHdoZW4gc3RhcnQgdXNpbmcgYSBzZXJ2aWNlIGZyb20gYSBuZXcgZGV2aWNlLg0KPj4NCj4+ ICAgICBJIHRoaW5rIHRoaXMgV0cgbmVlZHMgdG8gYWRkcmVzcyBib3RoIHRoaXMgdmVyeSB0 aWdodCBUQ0ctc3R5bGUgZGV2aWNlIGlkZW50aXR5IGFuZCB0aGUgbW9yZSBoZXVyaXN0aWMg RUFULXN0eWxlIGNsYWltcy1mb3Itcmlzay1lbmdpbmVzLiBJIGNvdWxkIHNlZSBtdWx0aS1k ZWNhZGUgZXZvbHV0aW9uIHdoZXJlIHJpc2sgZW5naW5lIHVzZSBjYXNlcyB3YW50IG1vcmUg YW5kIG1vcmUgb2YgdGhlIHRpZ2h0IFRDRy1zdHlsZSBkZXZpY2UgaWRlbnRpdHkgYXMgY3Jp bWluYWxzIGJlY29tZSBtb3JlIGFkZXB0IGF0IGZvcmdpbmcgRUFULXN0eWxlIGNsYWltcy4g KFRvZGF5IHJpc2sgZW5naW5lcyB3b3JrIG9mZiBvZiB1bnNlY3VyZWQgYnJvd3NlciBwYXJh bWV0ZXJzKS4NCj4+DQo+PiAgICAgVGhlIEludHJvZHVjdGlvbiBpbiB0aGUgY2hhcnRlciBz ZWVtcyBlbnRpcmVseSBmb2N1c2VkIG9uIHRoZSBUQ0ctYmFzZWQgaWRlbnRpdHkgdXNlIGNh c2UuIEkgdGhpbmsgdGV4dCBzaG91bGQgYmUgYWRkZWQgZm9yIEVBVC1zdHlsZSBhdHRlc3Rh dGlvbi4gSSB3aWxsIHdyaXRlIHNvbWUgYWZ0ZXIgc29tZSBjb21tZW50cyBvbiB0aGlzIG1l c3NhZ2UuDQo+Pg0KPj4gICAgIExMDQo+Pg0KPj4NCj4+DQo+Pg0KPj4NCj4+PiBPbiBPY3Qg MTYsIDIwMTgsIGF0IDg6MjQgUE0sIEhlbmsgQmlya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0 LmZyYXVuaG9mZXIuZGU+IHdyb3RlOg0KPj4+DQo+Pj4gVG8gcXVvdGUgQ2Fyc3RlbiwgdGhl cmUgaXMgInRoZSB1c3VhbCB0ZXJtaW5vbG9neSBwcm9ibGVtIGFib3V0IGlkZW50aXR5Ii4N Cj4+Pg0KPj4+IElkZW50aWZ5aW5nIHZzLiBJZGVudGl0eSBicmluZ3MgYmFjayBtZW1vcmll cyBhYm91dCBhbiBleHRlbnNpdmUgZGlzY3Vzc2lvbiBpbiBTQUNNIHRoYXQgaW4gdGhlIGVu ZCByZXN1bHRlZCBpbiB1c2luZyBQcm9maWxlcy4uLg0KPj4+DQo+Pj4gUHJvZmlsZXMgYXJl IHRoZSAidGhpbmdzIiB0aGF0IHlvdSBjYW4gYWdncmVnYXRlIGlkZW50aXR5IGNsYWltcyBp biAoaW4gU0FDTSB0aGVzZSBjbGFpbXMgYXJlICJUYXJnZXQgRW5kcG9pbnQgQ2hhcmFjdGVy aXN0aWNzIiwgd2hpY2ggYXJlIHByZXR0eSBtdWNoIHRoZSBzYW1lIHRoaW5nIGFzIERldmlj ZSBDaGFyYWN0ZXJpc3RpY3MpIC0gYW5kIHlvdSB1c2UgdGhlIFByb2ZpbGVzIHRvIChyZS0p aWRlbnRpZnkgdGFyZ2V0IGVuZHBvaW50cy4NCj4+Pg0KPj4+IEluIHRoZSBzY29wZSBvZiBy ZW1vdGUgYXR0ZXN0YXRpb24gcHJvY2VkdXJlcywgSSB0aGluayB0aGF0ICJqdXN0IG5vdCBj YWxsaW5nIiBjbGFpbSBzZXRzIHRoYXQgYXJlIGNvbXBvc2VkIChhbW9uZ3N0IG90aGVycykg b2YgaWRlbnRpZnlpbmcgY2xhaW1zICJpZGVudGl0eSBkb2N1bWVudHMiIG1pZ2h0IGp1c3Qg ZW5kIHVwIGluIG1ha2luZyB1cCBhbm90aGVyIG5hbWUgZm9yIHNvbWV0aGluZyB0aGF0IGlz IGVmZmVjdGl2ZWx5IGNvbXBvc2luZyBpZGVudGl0eSBkb2N1bWVudHMgYW55d2F5cy4gSWYg Y2FsbGluZyB0aGUgc2FtZSB0aGluZyBzb21ldGhpbmcgZWxzZSBoZWxwcyBpbiBzb21lIHdh eSwgSSBhbSBhbGwgZm9yIGl0LiBCdXQgSSBhbSByZWFsbHkgbm90IHN1cmUuDQo+Pj4NCj4+ PiBUaGF0IHNhaWQsIE5lZCdzIGVsYWJvcmF0aW9uIG9uIHRoZSByZWxhdGlvbnNoaXAgb2Yg aWRlbnRpdHkgYW5kIGF0dGVzdGF0aW9uIGNsYWltcyBhbmQgY29ycmVzcG9uZGluZyBjbGFp bSBzZW1hbnRpY3MgLyB0cnVzdCBzZW1hbnRpY3MgaXMgc3BvdCBvbiwgSSB0aGluay4NCj4+ Pg0KPj4+IFZpZWxlIEdyw7zDn2UsDQo+Pj4NCj4+PiBIZW5rDQo+Pj4NCj4+PiBPbiAxMC8x Ni8yMDE4IDAzOjUxIFBNLCBTbWl0aCwgTmVkIHdyb3RlOg0KPj4+PiBBZ3JlZSB3aXRoIEhh bm5lcyB0aGF0IGlkZW50aXR5IGRpc2N1c3Npb24gY2FuIGxlYWQgdG8gY29uZnVzaW9uIGFz IGlkZW50aXR5IGlzIG9mdGVuIGhpZ2hseSBkZXBlbmRlbnQgb24gc29tZSBzb3J0IG9mIGNv bnRleHQgKGRvbWFpbiBvZiBpbnRlcnByZXRhdGlvbikuDQo+Pj4+IEluIG9yZGVyIHRvIGhh dmUgcHJvZHVjdGl2ZSBjb252ZXJzYXRpb24gYWJvdXQgYXR0ZXN0YXRpb24gYW5kIGlkZW50 aXR5LCBpdCBtYXkgYmUgaW1wb3J0YW50IHRvIHVuZGVyc3RhbmQgdGhhdCBhdHRlc3RhdGlv biBzZW1hbnRpY3Mgc2V0cyB0aGUgY29udGV4dCBmb3IgaWRlbnRpdHkuDQo+Pj4+ICogQXR0 ZXN0YXRpb24gYXR0cmlidXRlcyBoYXZlIHRydXN0IHNlbWFudGljcyAoYW5kIHRydXN0IHNl bWFudGljcyBhcmUgaW50ZXJwcmV0ZWQgdGhyb3VnaCB0aGUgZXllcyBvZiB0aGUgdmVyaWZp ZXIpLiBJZGVudGl0eSBhdHRyaWJ1dGVzIG1heSBhbHNvIGhhdmUgdHJ1c3Qgc2VtYW50aWNz IChpbiBhZGRpdGlvbiB0byBpZGVudGl0eSBzZW1hbnRpY3MpIGhlbmNlIGNhbiBiZSByZWdh cmRlZCBhcyBwbGF5aW5nIGEgcm9sZSBpbiBib3RoIGlkZW50aXR5IGFuZCBhdHRlc3RhdGlv bi4gU2luY2UgUkFUUyBzaG91bGQgYmUgaW50ZXJlc3RlZCBwcmltYXJpbHkgaW4gdHJ1c3Qg c2VtYW50aWNzLCBpdCBtYWtlcyBzZW5zZSB0byB1bmRlcnN0YW5kLCBkaXNjdXNzIGFuZCBj b25zaWRlciBpZGVudGl0eSBpbiB0ZXJtcyBvZiBpdHMgdHJ1c3Qgc2VtYW50aWNzLiBIZW5j ZSBpZGVudGl0eSBhdHRyaWJ1dGVzIGFyZSBvbmx5IGludGVyZXN0aW5nIHRvIFJBVFMgaWYg dGhleSBhcmUgdXNlZnVsIGZvciBldmFsdWF0aW5nIHRydXN0IHNlbWFudGljcy4NCj4+Pj4g KiBJbiBhIGNsb3NlZCBlY29zeXN0ZW0sIHRoZSB0cnVzdCBjaGFyYWN0ZXJpc3RpY3MgYW5k IHByb3BlcnRpZXMgbWF5IGJlIGltcGxpZWQgYmVjYXVzZSB0aGVyZSBvZnRlbiBleGlzdHMg b3V0LW9mLWJhbmQgcHJvY2Vzc2VzIHRoYXQgZW5zdXJlIHRoZSBjaGFyYWN0ZXJpc3RpY3Mg YXJlIGFwcGxpZWQgKGZvciBleGFtcGxlLCBpZiBhbiBJVCBvcmdhbml6YXRpb24gc2V0cyBh IHBvbGljeSB0aGF0IGFsbCBhc3ltbWV0cmljIGtleXMgYXJlIHRvIGJlIGhhcmRlbmVkIHVz aW5nIGEgc21hcnRjYXJkLCB0aGV5IGNhbiBhcHBseSBhIGRlcGxveW1lbnQgcHJvY2VzcyB3 aGVyZSB0aGUgSVQgcHJvZmVzc2lvbmFsIHZlcmlmaWVzIHRoZSBzbWFydGNhcmQgaXMgdXNl ZCBkdXJpbmcgZW5yb2xsbWVudC4pIEJ1dCBpbiBhIG5vbi1jbG9zZWQgZWNvc3lzdGVtLCB0 aGVyZSBpc24ndCBhbiBhc3N1bXB0aW9uIHRoYXQgb3V0LW9mLWJhbmQgcHJvY2Vzc2VzIGV4 aXN0LiBBdHRlc3RhdGlvbiBhdHRlbXB0cyB0byBtYWtlIGV4cGxpY2l0IHdoYXQgb3RoZXJ3 aXNlIGlzIGltcGxpY2l0IGFuZCB0aGVyZWZvcmUgc3ViamVjdCB0byBtaXNpbnRlcnByZXRh dGlvbiBpZiB0aGUgdmVyaWZpZXIsIHJlbHlpbmcgcGFydHkgYW5kIGF0dGVzdGVyIGFyZSBu b3QgcGFydCBvZiB0aGUgc2FtZSBjbG9zZWQgZWNvc3lzdGVtLiBJbXBsaWNpdCBhdHRlc3Rh dGlvbiB0aGVyZWZvcmUgY2FuIGxlYWQgdG8gc2VtYW50aWMgY29uZnVzaW9uIGlmIHdlJ3Jl IG5vdCBjYXJlZnVsLiBUaGVyZWZvcmUsIHRoZSByaWdvciBvZiB0cmVhdGluZyBpbXBsaWNp dCBhdHRlc3RhdGlvbiBjbGFpbXMgKGFzc2VydGlvbnMgYXNzdW1lZCB0byBleGlzdCBidXQg bm90IGV4cGxpY2l0bHkgbmFtZWQpIHNob3VsZCBuZXZlcnRoZWxlc3MgYmUgZGVmaW5lZCBl eHBsaWNpdGx5LiBUaGVuLCBpZiB0aGVyZSBpcyBhIG5lZWQgZm9yIGltcGxpY2l0IGF0dGVz dGF0aW9uLCB0aGUgc3BlY2lmaWNhdGlvbnMgdGhhdCBkZXNjcmliZSB0aGVtIGNhbiBkZXNj cmliZSB0aGVtIGluIHRlcm1zIG9mIGFuIGV4cGxpY2l0IGRlZmluaXRpb24uDQo+Pj4+ICog SW4gdGhlIGNvbnRleHQgb2YgYXNzZXJ0aW5nIHRydXN0IGNoYXJhY3RlcmlzdGljcywgdGhl IHZlcmlmaWVyIG5lZWRzIHRvIGtub3cgdGhhdCBhIHNldCBvZiBjaGFyYWN0ZXJpc3RpY3Mg YXBwbGllcyB0byB0aGUgaW5zdGFuY2Ugb2YgdGhlIGVuZHBvaW50IGJlaW5nIGV2YWx1YXRl ZCAoYWthIHRoZSBhdHRlc3RlcikuIChPdGhlcndpc2UgYSBNSVRNIGNvdWxkIHN1cHBseSBj aGFyYWN0ZXJpc3RpY3MgdGhhdCBtYXkgYmUgdmFsaWQsIGJ1dCBkb27igJl0IGFwcGx5IHRv IHRoZSBzcGVjaWZpYyBpbnN0YW5jZSkuIENvbnNlcXVlbnRseSwgaXQgbWFrZXMgc2Vuc2Ug dG8gY29uc2lkZXIgdGhhdCAqYXR0ZXN0YXRpb24qIGtleXMgYXJlIG5lZWRlZCB0byBhdXRo ZW50aWNhdGUgdGhlIGVuZHBvaW50IGJlaW5nIGV2YWx1YXRlZC4gVGhpcyBkb2Vzbid0IGlt cGx5IGFuIGlkZW50aXR5IGtleSBjb3VsZG4ndCBkb3VibGUgYXMgYW4gYXR0ZXN0YXRpb24g a2V5LiBCdXQgaWYgaXQgZG9lcywgd2UgY2FyZSBhYm91dCBpdHMgcmVsZXZhbmNlIHRvIHRo ZSBhdHRlc3RlciBlbmRwb2ludC4NCj4+Pj4gLU5lZA0KPj4+PiBPbiAxMC8xNS8xOCwgNjo0 OSBQTSwgIkhhbm5lcyBUc2Nob2ZlbmlnIiA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4g d3JvdGU6DQo+Pj4+ICAgICBIZXJlIGFyZSBteSA1IGNlbnRzIG9uIHRoZSB0ZXJtICdpZGVu dGl0eScuDQo+Pj4+ICAgICAgICAgIEkgaGF2ZSBiZWVuIHdvcmtpbmcgb24gaWRlbnRpdHkg bWFuYWdlbWVudCBmb3IgbWFueSB5ZWFycyAocGFydGlhbGx5IGJlY2F1c2Ugb2YgbXkgT0F1 dGggY28tY2hhaXIgcm9sZSkgYW5kIEkgaGF2ZSBub3RpY2VkIHRoYXQgdGhlIHVzZSBvZiB0 aGUgdGVybSAiaWRlbnRpdHkiIHRlbmRzIHRvIGNvbmZ1c2UgbW9yZSB0aGFuIGl0IGhlbHBz IChldmVuIG1vcmUgc28gd2hlbiB0aGUgdGVybSBpcyBhcHBsaWVkIHRvIGRldmljZXMgYW5k IHNvZnR3YXJlIHJhdGhlciB0aGFuIGh1bWFucykuDQo+Pj4+ICAgICAgICAgIEkgYmVsaWV2 ZSB3ZSBjb3VsZCBnZXQgYXdheSB3aXRoIGRlc2NyaWJpbmcgd2hhdCB3ZSB3YW50IHdpdGhv dXQgZXZlciB1c2luZyB0aGUgdGVybS4NCj4+Pj4gICAgICAgICAgSW4gdGhpcyBjb250ZXh0 IEkgd291bGQgYXJndWUgdGhhdCB3ZSBhcmUgYWJvdXQgaWRlbnRpZnlpbmcgZGlmZmVyZW50 IGNvbXBvbmVudHMsIHN1Y2ggYXMgaGFyZHdhcmUgYW5kIHNvZnR3YXJlLg0KPj4+PiAgICAg ICAgICBDaWFvDQo+Pj4+ICAgICBIYW5uZXMNCj4+Pj4gICAgICAgICAgLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCj4+Pj4gICAgIEZyb206IEVBVCA8ZWF0LWJvdW5jZXNAaWV0Zi5v cmc+IE9uIEJlaGFsZiBPZiBTbWl0aCwgTmVkDQo+Pj4+ICAgICBTZW50OiBNb25kYXksIE9j dG9iZXIgMTUsIDIwMTggOTowMCBBTQ0KPj4+PiAgICAgVG86IEhlbmsgQmlya2hvbHogPGhl bmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+OyByYXRzQGlldGYub3JnOyBKZXJlbXkg TydEb25vZ2h1ZSA8am9kb25vZ2hAcXRpLnF1YWxjb21tLmNvbT47IERlbmlzIDxkZW5pcy5p ZXRmQGZyZWUuZnI+DQo+Pj4+ICAgICBDYzogZWF0QGlldGYub3JnDQo+Pj4+ICAgICBTdWJq ZWN0OiBSZTogW0VBVF0gW0VYVEVSTkFMXSBSZTogW1JhdHNdIEF0dGVzdGF0aW9uIEJvRiBj aGFydGVyIHVwZGF0ZXM/DQo+Pj4+ICAgICAgICAgIEkgYWdyZWUgd2l0aCBIZW5rJ3Mgb2Jz ZXJ2YXRpb24gdGhhdCB0aGVyZSBpcyBvcHBvcnR1bml0eSB0byBmaW5kIGNvbW1vbiBncm91 bmQgb24gaWRlbnRpdHkgYXMgaWRlbnRpdHkgY2FuIGJlIGEgY29sbGVjdGlvbiBvZiBhdHRy aWJ1dGVzLCB0aGF0IGlmIHNpZ25lZCwgYmVjb21lcyBhIHNldCBvZiB2ZXJpZmlhYmxlIGNs YWltcyAoYWJvdXQgaWRlbnRpdHkgYXR0cmlidXRlcykuIEF0dGVzdGF0aW9uIGhhcyBhIHNp bWlsYXIgc3RydWN0dXJlIGluIHRoYXQgaXQgY29uc2lzdHMgb2YgYSBzZXQgb2YgYXR0cmli dXRlcywgdGhhdCBpZiBzaWduZWQgYmVjb21lcyBhIHNldCBvZiB2ZXJpZmlhYmxlIGNsYWlt cy4gVGhlIG1haW4gZGlmZmVyZW5jZSBiZXR3ZWVuIGlkZW50aXR5IGFuZCBhdHRlc3RhdGlv biBhdHRyaWJ1dGVzIGlzIHdoZXRoZXIgdGhlIGF0dHJpYnV0ZSBzZW1hbnRpY2FsbHkgcmVs YXRlIHRvIHRydXN0ICh2cy4gaWRlbnRpdHkpLiBGb3IgZXhhbXBsZSwgY2xhaW1zIG9mIHNl Y3VyaXR5IGNlcnRpZmljYXRpb24gY29tcGxpYW5jZSByZXNvbmF0ZXMgYXMgYXR0ZXN0YXRp b24uDQo+Pj4+ICAgICAgICAgIEl0IG1heSBiZSBwb3NzaWJsZSB0byBjb21iaW5lIGEgc2V0 IG9mIGF0dGVzdGF0aW9uIGF0dHJpYnV0ZXMgaW4gc3VjaCBhIHdheSB0aGF0IHRoZSBjb21i aW5hdGlvbiB1bmlxdWVseSBpZGVudGlmaWVzIGFuIGVudGl0eS4gQnV0IHRoYXQgZG9lc24n dCBtYWtlIGl0IGFuIGlkZW50aXR5IHN5c3RlbSBwZXIgc2UgYW5kIHNob3VsZG4ndCBjYXVz ZSBhIGNvbmZsaWN0IGluIGNoYXJ0ZXIgZ29hbHMgd2l0aCByZXNwZWN0IHRvIG90aGVyIGlk ZW50aXR5IGZvY3VzZWQgZWZmb3J0cyBpbiBJRVRGLg0KPj4+PiAgICAgICAgICBBbHNvLCBp bmNsdXNpb24gb2YgYXR0cmlidXRlcyB0aGF0IGRvbid0IGhhdmUgc2VtYW50aWNzIHRoYXQg cmVhc29uYWJseSByZWxhdGUgdG8gdHJ1c3Qgc2hvdWxkIG5vdCBiZSBvZiBpbnRlcmVzdCB0 byBhIHdvcmtpbmcgZ3JvdXAgZm9jdXNlZCBvbiBhdHRlc3RhdGlvbi4NCj4+Pj4gICAgICAg ICAgLU5lZA0KPj4+PiAgICAgICAgICBPbiAxMC8xNS8xOCwgMzo1MyBQTSwgIkVBVCBvbiBi ZWhhbGYgb2YgSGVuayBCaXJraG9seiIgPGVhdC1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFs ZiBvZiBoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPiB3cm90ZToNCj4+Pj4gICAg ICAgICAgICAgIEhpIEplcmVteSAmIERlbmlzLA0KPj4+PiAgICAgICAgICAgICAgYWxsIHRo ZXNlIHBvaW50cyBvZiB2aWV3IGhhdmUgbWVyaXQsIEkgdGhpbmsuDQo+Pj4+ICAgICAgICAg ICAgICBQbGVhc2UgaGF2ZSBhIGxvb2sgYXQgdGhlc2UgcXVvdGVzOg0KPj4+Pj4ga25vd2lu ZyB0aGUgcHJvdmVuYW5jZSBvZiB0aGUgZGV2aWNlDQo+Pj4+PiBoYXZpbmcgdGhlIGVudGl0 eSBjcmVhdG9yL21hbnVmYWN0dXJlciBwcm92aWRlIGEgc2V0IG9mIGNsYWltcyB3aGljaCBj YW4gYmUgdmVyaWZpZWQNCj4+Pj4+IHRvIGtub3cgdGhlIGNoYXJhY3RlcmlzdGljcyBvZiBh IGRldmljZSBieSBpc3N1aW5nIHRvIHRoZSBkZXZpY2UgYSBwdWJsaWMga2V5IGNlcnRpZmlj YXRlIHdoaWNoIHdpbGwgb25seSBiZSBpc3N1ZWQgdG8gdGhlIGRldmljZSBpZiBpdCBmdWxm aWxscyBhbiBleHBlY3RlZCBzZXQgb2YgZnVuY3Rpb25hbGl0aWVzLg0KPj4+PiAgICAgICAg ICAgICAgVG8gbWUsIHRoZXNlIGRlc2NyaXB0aW9ucyBzZWVtIHRvIGhhdmUgZGlmZmVyZW50 IGludGVudHMsIHNjb3BlIG9yDQo+Pj4+ICAgICAgICAgYXVkaWVuY2UgYW5kIHJlcXVpcmUg bW9zdCBjZXJ0YWlubHkgZGlmZmVyZW50IHdvcmstZmxvd3MsIGJ1dA0KPj4+PiAgICAgICAg IHNlbWFudGljYWxseSBhbmQgaW4gY29uc2VxdWVuY2UgcmVwcmVzZW50YXRpb24td2lzZSB0 aGV5IGFsc28gc2VlbSBxdWl0ZQ0KPj4+PiAgICAgICAgIHJlbGF0ZWQuDQo+Pj4+ICAgICAg ICAgICAgICBJZiB5b3UgdGhpbmsgb2YgYW4gaWRlbnRpdHkgZG9jdW1lbnQgYXMgYSBzZXQg b2YgY2xhaW1zIChwb3RlbnRpYWxseQ0KPj4+PiAgICAgICAgIGluY2x1ZGluZyBhIHB1Ymxp YyBrZXkpLCB0aGF0IGlzIHNpZ25lZCBhbmQgdGhhdCBjYW4gbWF0Y2ggb25lIG9yIG1vcmUN Cj4+Pj4gICAgICAgICB0aGluZ3MsIG1heWJlIGFsbCB0aHJlZSB0eXBlcyBoaWdobGlnaHRl ZCBhYm92ZSBhcmUgYWN0dWFsbHkgY292ZXJlZCBieQ0KPj4+PiAgICAgICAgIHRoZSBzYW1l IGlkZW50aXR5IGRvY3VtZW50IGNvbmNlcHQ/DQo+Pj4+ICAgICAgICAgICAgICBXaXRoIHJl c3BlY3QgdG8gaWRlbnRpdHkgZG9jdW1lbnRzLCBJIHRoaW5rIGl0IGlzIHNhZmUgc28gc2F5 IHRoYXQgd2UNCj4+Pj4gICAgICAgICBjYW4gZmluZCBjb21tb24gZ3JvdW5kIGhlcmUgcmF0 aGVyIGVhc2lseS4gVGhhdCBzYWlkLCB0aGUgd2F5IGhvdyB0aGVzZQ0KPj4+PiAgICAgICAg IGlkZW50aXR5IGRvY3VtZW50cyBjb21lIGludG8gZXhpc3RlbmNlLCB3aGVuIGFuZCBob3cg dGhleSBhcmUgZGVwbG95ZWQNCj4+Pj4gICAgICAgICBvbiB0aGUgdGhpbmcgb3IgYXNzb2Np YXRlZCB3aXRoIG11bHRpcGxlIHRoaW5ncyBpcyBhbm90aGVyIHF1ZXN0aW9uLiBXZQ0KPj4+ PiAgICAgICAgIG1vc3QgY2VydGFpbmx5IGRvIG5vdCB3YW50IHRvIGVuZCB1cCB3aXRoIGEg InNpZ25pbmcgZm9vbCIgdGhhdCBkb2VzIG5vdA0KPj4+PiAgICAgICAgIGFkZCB2YWx1ZSB0 byB0aGUgbGV2ZWwgb2YgY29uZmlkZW5jZSAoSSBhbSBxdW90aW5nIE5lZCBTbWl0aCBoZXJl KS4NCj4+Pj4gICAgICAgICAgICAgIFRoaXMgaGFzIHRvIGJlIGZsZXNoZWQgb3V0IGV4cGxp Y2l0bHkgZm9yIGVhY2ggc2NlbmFyaW8gYW5kIHRoZSBwYXJ0cw0KPj4+PiAgICAgICAgIHRo YXQgYXJlIHJldXNlZCBpbiBldmVyeSBzY2VuYXJpbyBzaG91bGQgZ2V0IHNwZWNpYWwgYXR0 ZW50aW9uIGluIHRoZQ0KPj4+PiAgICAgICAgIHVwY29taW5nIFJBVFMgYXJjaGl0ZWN0dXJl IGRyYWZ0Lg0KPj4+PiAgICAgICAgICAgICAgSWRlbnRpZnlpbmcgY2xhaW1zIGFnZ3JlZ2F0 ZWQgaW4gYW4gaWRlbnRpdHkgZG9jdW1lbnQgbW9zdCBjZXJ0YWlubHkgY2FuDQo+Pj4+ICAg ICAgICAgaW5jbHVkZSBkZXZpY2UgY2hhcmFjdGVyaXN0aWNzLCBwdWJsaWMga2V5KHMpLCBv ciBjbGFpbXMgYWJvdXQgdGhlDQo+Pj4+ICAgICAgICAgaW50ZW5kZWQgZnVuY3Rpb25zIGFu ZCBjYXBhYmlsaXRpZXMgb2YgdGhlIHRoaW5nLiBDbGFpbXMgY2FuIGV2ZW4NCj4+Pj4gICAg ICAgICBvcmlnaW5hdGUgZnJvbSBDbGFpbWFudHMgdGhhdCBhcmUgbm90IHRoZSB0aGluZyBp dHNlbGYsIGJ1dCBleHRlcm5hbA0KPj4+PiAgICAgICAgIGVudGl0aWVzIHByb3ZpZGluZyBh biBhc3NlcnRpb24gKGUuZy4gdGhlc2UgdGhpbmdzIGFyZSBDQy1jZXJ0aWZpZWQpLg0KPj4+ PiAgICAgICAgICAgICAgQWxsIGRpZmZlcmVudCBjb21wb3NpdGVzIG9mIGlkZW50aWZ5aW5n IGNsYWltcyBoYXZlIGEgc3BlY2lmaWMgc2hhcmVkDQo+Pj4+ICAgICAgICAgaW50ZW5kIGlu IHRoaXMgY29udGV4dCB0aG91Z2gsIEkgdGhpbms6IGV4cHJlc3NpbmcgQXR0ZXN0YXRpb24N Cj4+Pj4gICAgICAgICBQcm92ZW5hbmNlIChhZ2FpbiAtIG9uZSBmb3Igb25lIG9yIG1vcmUg dGhpbmdzIG9mIHRoZSBzYW1lIGtpbmQpLiBBbmQNCj4+Pj4gICAgICAgICBhbGwgb2YgdGhl bSBvcmlnaW5hdGUgZnJvbSBDbGFpbWFudHMgYW5kIHRoZXJlZm9yZSB1c2UgYSByb290IG9m IHRydXN0DQo+Pj4+ICAgICAgICAgb2YgbWVhc3VyZW1lbnQsIEkgdGhpbmsuDQo+Pj4+ICAg ICAgICAgICAgICBUaGF0IHNhaWQsIGVzdGFibGlzaGluZyB0cnVzdHdvcnRoeSBrbm93bGVk Z2UgYWJvdXQgYXR0ZXN0YXRpb24NCj4+Pj4gICAgICAgICBwcm92ZW5hbmNlIGlzIG9ubHkg dGhlIGZpcnN0IHN0ZXAgYW5kIHByb3ZpZGVzIHRoZSBmb3VuZGF0aW9uIGZvciBtb3JlDQo+ Pj4+ICAgICAgICAgY29tcGxleCBhdHRlc3RhdGlvbiBwcm9jZWR1cmVzLiBJbiBhbnkgY2Fz ZSwgdGhpcyBzZWVtIHRvIGJlIHJlcXVpcmVkIGJ5DQo+Pj4+ICAgICAgICAgZXZlcnkgc2Nl bmFyaW8gdGhhdCB3YXMgaGlnaGxpZ2h0ZWQgc28gZmFyIGFuZCB0aGVyZWZvcmUgd2lsbCBt b3N0DQo+Pj4+ICAgICAgICAgY2VydGFpbmx5IGJlIGNvdmVyZWQgaW4gYSBkZWxpdmVyYWJs ZS4NCj4+Pj4gICAgICAgICAgICAgIElIVEgsDQo+Pj4+ICAgICAgICAgICAgICBIZW5rDQo+ Pj4+ICAgICAgICAgICAgICAgICAgIE9uIDEwLzE1LzIwMTggMTI6MjIgUE0sIEplcmVteSBP J0Rvbm9naHVlIHdyb3RlOg0KPj4+Pj4gT24gMTIgT2N0IDIwMTgsIGF0IDE0OjMzLCBEZW5p cyA8ZGVuaXMuaWV0ZkBmcmVlLmZyDQo+Pj4+PiA8bWFpbHRvOmRlbmlzLmlldGZAZnJlZS5m cj4+IHdyb3RlOg0KPj4+Pj4+IFRoZSAiUHJvYmxlbSBTdGF0ZW1lbnQiIGNvbnRpbnVlcyBh cyBmb2xsb3dzOg0KPj4+Pj4+DQo+Pj4+Pj4gKDIpIFRvZGF5LCB0aGVyZSBpcyBubyBjb21t b24sIHN0YW5kYXJkIHdheSBmb3IgUmVseWluZyBQYXJ0aWVzIHRvDQo+Pj4+Pj4ga25vdyB0 aGUgcHJvdmVuYW5jZSBhbmQgY2hhcmFjdGVyaXN0aWNzIG9mIGEgZGV2aWNlIChlLmcuLCBh biBlbmQtdXNlcg0KPj4+Pj4+IGRldmljZSwNCj4+Pj4+PiBwbGF0Zm9ybSBvciBlbmRwb2lu dCwgc2VydmVycywgSW9UIGRldmljZXMsIGRldmljZSBzdWJzeXN0ZW1zIGFuZA0KPj4+Pj4+ IHN1Yi1tb2R1bGVzKSB0aGF0IG1heSBiZSByZXF1ZXN0aW5nIHNlcnZpY2VzLg0KPj4+Pj4+ DQo+Pj4+Pj4gS25vd2luZyB0aGUgcHJvdmVuYW5jZSBvZiB0aGUgZGV2aWNlIGlzIG5vdCBh bHdheXMgbmVjZXNzYXJ5LiBXaGF0IGlzDQo+Pj4+Pj4gaW1wb3J0YW50IGlzIHRvIGtub3cg dGhhdCBhIHNwZWNpZmljIHNldCBvZiBmdW5jdGlvbnMgaXMgKHNlY3VyZWx5KQ0KPj4+Pj4+ IHN1cHBvcnRlZCBieSB0aGUgZGV2aWNlLg0KPj4+Pj4+IFRoZXJlIGFscmVhZHkgZXhpc3Rz IGEgY29tbW9uIHdheSB0byBrbm93IHRoZSBjaGFyYWN0ZXJpc3RpY3Mgb2YgYQ0KPj4+Pj4+ IGRldmljZSBieSBpc3N1aW5nIHRvIHRoZSBkZXZpY2UgYSBwdWJsaWMga2V5IGNlcnRpZmlj YXRlIHdoaWNoIHdpbGwNCj4+Pj4+PiBvbmx5IGJlIGlzc3VlZCB0byB0aGUgZGV2aWNlDQo+ Pj4+Pj4gaWYgaXQgZnVsZmlsbHMgYW4gZXhwZWN0ZWQgc2V0IG9mIGZ1bmN0aW9uYWxpdGll cy4gSW4gc3VjaCBhIGNhc2UgYQ0KPj4+Pj4+IHN5bnRheCBmb3IgYSB0cnVzdGVkIGNsYWlt IHNldHMqKmlzIG5vdCBuZWVkZWQuDQo+Pj4+Pj4NCj4+Pj4+IFRoaXMgaXMgaW5kZWVkIGEg cG9zc2libGUgd2F5IHRvIGFkZHJlc3MgdGhlIHByb2JsZW0sIGJ1dCBzdWZmZXJzIGZyb20N Cj4+Pj4+IGNoYWxsZW5nZXMgd2hpY2ggY29tZSBkb3duIHRvOg0KPj4+Pj4NCj4+Pj4+IC0g V2hvIGlzc3VlcyBzdWNoIGNlcnRpZmljYXRlcy4gQW4gb3B0aW9uIGlzIHRoYXQgdGhlcmUg aXMgc29tZSBmb3JtIG9mDQo+Pj4+PiBzZWN1cml0eSBjZXJ0aWZpY2F0aW9uIGJlaGluZCB0 aGlzIGlzc3VhbmNlIG90aGVyd2lzZSBpdCBpcyBvZiB2ZXJ5DQo+Pj4+PiBsaW1pdGVkIHZh bHVlLg0KPj4+Pj4gLSBJbiBvcmRlciB0byBjYXB0dXJlIHRoZSB3aWRlIHZhcmlldHkgb2Yg ZGlmZmVyZW50IGRldmljZXMgKEkgcHJlZmVyDQo+Pj4+PiAiZW50aXR5IiBoZXJlIGFzIGl0 IGlzIG1vcmUgZ2VuZXJhbCB0aGFuICJkZXZpY2UiKSwgbWFueSBkaWZmZXJlbnQgZm9ybXMN Cj4+Pj4+IG9mIHN1Y2ggY2VydGlmaWNhdGVzIHdvdWxkIGJlIHJlcXVpcmVkLiBUaGlzIGVu ZHMgdXAgYmVpbmcgbXVjaCB0aGUgc2FtZQ0KPj4+Pj4gdGhpbmcgYXMgYSBzZXQgb2YgY2xh aW1zLg0KPj4+Pj4NCj4+Pj4+IEdpdmVuIHRoZSBtdWx0aXBsaWNpdHkgb2YgZW50aXRpZXMg Zm9yIHdoaWNoIGF0dGVzdGF0aW9uIG1pZ2h0IGJlDQo+Pj4+PiB1c2VmdWwsIGl0IHNlZW1z IHRvIG1lIHRoYXQgaGF2aW5nIHRoZSBlbnRpdHkgY3JlYXRvci9tYW51ZmFjdHVyZXINCj4+ Pj4+IHByb3ZpZGUgYSBzZXQgb2YgY2xhaW1zIHdoaWNoIGNhbiBiZSB2ZXJpZmllZCBpcyBt b3JlIGZsZXhpYmxlIHRoYW4NCj4+Pj4+IHJlcXVpcmluZyBhIGNlcnRpZmljYXRlLiBJdCBz ZWVtcyBsaWtlbHkgdG8gbWUgdGhhdCB3aGVyZSBhIGZvcm1hbA0KPj4+Pj4gc2VjdXJpdHkg Y2VydGlmaWNhdGlvbiBpcyBuZWVkZWQgdGhlcmUgd2lsbCBiZSBhIGNlcnRpZmljYXRlIGlz c3VlZCBieQ0KPj4+Pj4gdGhlIENlcnRpZnlpbmcgQm9keSBhcyBvbmUgb2YgdGhlIGNsYWlt cyBhYm91dCBhbiBlbnRpdHksIGJ1dCBJIGNhbg0KPj4+Pj4gdGhpbmsgb2YgbWFueSBjYXNl cyAoc3VwcGx5IGNoYWluIG1hbmFnZW1lbnQsIHRvIHRha2UganVzdCBvbmUgZXhhbXBsZSkN Cj4+Pj4+IHdoZXJlIHByb3ZlbmFuY2UgaXMgYnkgZmFyIHRoZSBtb3N0IHVzZWZ1bCBpbmZv cm1hdGlvbi4NCj4+Pj4+DQo+Pj4+PiBJJ20gbm90IGluIGZhdm91ciBvZiBjaGFuZ2VzIHRv IHRoZSBjaGFydGVyIGluIHRoaXMgZGlyZWN0aW9uLg0KPj4+Pj4+DQo+Pj4+Pj4gVGhlIHNp bXBsZXN0IGNhc2VzIHNob3VsZCBhbHNvIGJlIHBhcnQgb2YgdGhlIGZyYW1ld29yay4NCj4+ Pj4+Pg0KPj4+Pj4+IE5vdGU6IEkgcGVyc29uYWxseSBhcHByZWNpYXRlIHRoYXQgcHJpdmFj eSBpcyBhbiBhc3BlY3QgdGhhdA0KPj4+Pj4+IHdpbGwvc2hvdWxkIGJlIHRha2VuIGludG8g Y29uc2lkZXJhdGlvbi4NCj4+Pj4+Pg0KPj4+Pj4+IERlbmlzDQo+Pj4+Pj4NCj4+Pj4+Pj4g QXMgd2l0aCB0aGUgZWFybGllciBkcmFmdCwgdGhlcmUgYXJlIG1hbnkgcmVmZXJlbmNlcyB0 byB2ZXJpZnkgYW5kDQo+Pj4+Pj4+IHZlcmlmaWVyIGluIHRoZSBsZWFkIHVwIHRvIHRoZSBk ZWxpdmVyYWJsZSBidXQgbm8gZGVsaXZlcmFibGVzIGRlc2NyaWJpbmcNCj4+Pj4+Pj4gdmVy aWZpY2F0aW9uIHJ1bGVzLiBJJ2QgbGlrZSB0byBzZWUgcnVsZXMgaW4gb25lIG9mIHRoZXNl IGRvY3VtZW50cyBhbmQNCj4+Pj4+Pj4gdGhpbmsgaXQgd29ydGggY2l0aW5nIGluIHRoZSBk ZWxpdmVyYWJsZXMuIEFyZSBiaW5kaW5ncyB0byBjZXJ0aWZpY2F0ZQ0KPj4+Pj4+PiBtYW5h Z2VtZW50IHByb3RvY29scyBvdXQgb2Ygc2NvcGU/DQo+Pj4+Pj4+DQo+Pj4+Pj4+IE9uIDEw LzExLzE4LCA5OjQ5IEFNLCAiUkFUUyBvbiBiZWhhbGYgb2YgSGVuayBCaXJraG9seiINCj4+ Pj4+Pj4gPHJhdHMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgaGVuay5iaXJraG9s ekBzaXQuZnJhdW5ob2Zlci5kZT4gIHdyb3RlOg0KPj4+Pj4+Pg0KPj4+Pj4+Pj4gSGkgYWxs LA0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+IHNvcnJ5IGZvciB0aGUgZGVsYXkuIFBsZWFzZSBmaW5k IGFuIHVwZGF0ZWQgY2hhcnRlciBwcm9wb3NhbCBoZXJlOg0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+ PiBodHRwczovL2dpdGh1Yi5jb20vaWV0Zi1yYXRzL2NoYXJ0ZXIvYmxvYi9SQzIvaWV0Zi1y YXRzLWNoYXJ0ZXIubWQNCj4+Pj4+Pj4+IFRoZSBCb0YgcHJvcG9uZW50cyB0cmllZCB0byBt ZXJnZSBhbGwgY29tbWVudHMgYW5kIHByb3Bvc2FscyBvbg0KPj4+Pj4+Pj4ga2V5c3RvcmVz LCBleGlzdGluZyBzb2x1dGlvbnMsIHByb3ZlbmFuY2UgJiBkZXZpY2UgY2hhcmFjdGVyaXN0 aWNzLCBldGMNCj4+Pj4+Pj4+IHRoYXQgd2VyZSByYWlzZWQgb24gdGhlIGxpc3QgLSBhbmQg YWxpZ24gdGhlbSBpbiBob21vZ2VuZW91cyBmYXNoaW9uLg0KPj4+Pj4+Pj4NCj4+Pj4+Pj4+ IFRoaXMgZHJhZnQgaXMgaW50ZW5kZWQgdG8gZm9jdXMgdGhlIGRpc2N1c3Npb24gYW5kIGlt cHJvdmUgdGhlIHdvcmRpbmcuDQo+Pj4+Pj4+Pg0KPj4+Pj4+Pj4gVmllbGUgR3LDvMOfZSwN Cj4+Pj4+Pj4+DQo+Pj4+Pj4+PiBIZW5rDQo+Pj4+Pj4+Pg0KPj4+Pj4+Pj4gT24gMTAvMDYv MjAxOCAwODoyMyBBTSwgTGF1cmVuY2UgTHVuZGJsYWRlIHdyb3RlOg0KPj4+Pj4+Pj4+IEhp IEhlbmssDQo+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+PiBCYW5na29rIElFVEYgaXMgZ2V0dGluZyBj bG9zZSwgd2lsbCB5b3UgYmUgYWJsZSB0byB1cGRhdGUgdGhlIGNoYXJ0ZXINCj4+Pj4+Pj4+ PiBmb3IgdGhlIGF0dGVzdGF0aW9uIEJvRiB0byBwcm9wZXJseSBpbmNsdWRlIEVBVD8gIEkg c2VudCB5b3Ugc29tZSB0ZXh0DQo+Pj4+Pj4+Pj4gdGhhdCBqdXN0IG5lZWRzIHRvIGJlIHBh c3RlZCBhbG9uZyB3aXRoIHNvbWUgY29tbWVudHMuIEl0IGRvZXNu4oCZdCBsb29rDQo+Pj4+ Pj4+Pj4gbGlrZSB0aGVyZeKAmXMgYmVlbiBhbnkgdXBkYXRlcy4NCj4+Pj4+Pj4+Pg0KPj4+ Pj4+Pj4+IExMDQo+Pj4+Pj4+Pj4NCj4+Pj4+Pj4+IF9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQo+Pj4+Pj4+PiBSQVRTIG1haWxpbmcgbGlzdA0K Pj4+Pj4+Pj4gUkFUU0BpZXRmLm9yZw0KPj4+Pj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9yYXRzDQo+Pj4+Pj4+IF9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQo+Pj4+Pj4+IEVBVCBtYWlsaW5nIGxpc3QNCj4+ Pj4+Pj4gRUFUQGlldGYub3JnDQo+Pj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vZWF0DQo+Pj4+Pj4NCj4+Pj4+Pg0KPj4+Pj4+IF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+Pj4+Pj4gRUFUIG1haWxpbmcg bGlzdA0KPj4+Pj4+IEVBVEBpZXRmLm9yZyA8bWFpbHRvOkVBVEBpZXRmLm9yZz4NCj4+Pj4+ PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KPj4+Pj4NCj4+ Pj4+DQo+Pj4+Pg0KPj4+Pj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCj4+Pj4+IEVBVCBtYWlsaW5nIGxpc3QNCj4+Pj4+IEVBVEBpZXRmLm9y Zw0KPj4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCj4+ Pj4+DQo+Pj4+ICAgICAgICAgICAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KPj4+PiAgICAgICAgIEVBVCBtYWlsaW5nIGxpc3QNCj4+Pj4g ICAgICAgICBFQVRAaWV0Zi5vcmcNCj4+Pj4gICAgICAgICBodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KPj4+PiAgICAgICAgICAgICAgIF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+Pj4+ICAgICBFQVQgbWFp bGluZyBsaXN0DQo+Pj4+ICAgICBFQVRAaWV0Zi5vcmcNCj4+Pj4gICAgIGh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0DQo+Pj4+ICAgICBJTVBPUlRBTlQgTk9U SUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFy ZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUg bm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBp bW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3Ro ZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRo ZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo+Pj4+DQo+Pj4gX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4+PiBFQVQg bWFpbGluZyBsaXN0DQo+Pj4gRUFUQGlldGYub3JnDQo+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCj4+DQo+PiAgICAgX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4+ICAgICBFQVQgbWFpbGluZyBsaXN0 DQo+PiAgICAgRUFUQGlldGYub3JnDQo+PiAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9lYXQNCj4+DQo+Pg0KPj4NCj4+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fDQo+Pg0KPj4gRXN0ZSBtZW5zYWplIHkgc3VzIGFkanVudG9zIHNlIGRp cmlnZW4gZXhjbHVzaXZhbWVudGUgYSBzdSBkZXN0aW5hdGFyaW8sIHB1ZWRlIGNvbnRlbmVy IGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEgbyBjb25maWRlbmNpYWwgeSBlcyBwYXJhIHVz byBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUgZGVzdGluby4gU2kgbm8g ZXMgdXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEgbm90aWZpY2FkbyBk ZSBxdWUgbGEgbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24geS9vIGNvcGlh IHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0dWQgZGUg bGEgbGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUgbWVuc2FqZSBw b3IgZXJyb3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRpYXRhbWVu dGUgcG9yIGVzdGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24uDQo+ Pg0KPj4gVGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIHRyYW5zbWlzc2lvbiBp cyBwcml2aWxlZ2VkIGFuZCBjb25maWRlbnRpYWwgaW5mb3JtYXRpb24gaW50ZW5kZWQgb25s eSBmb3IgdGhlIHVzZSBvZiB0aGUgaW5kaXZpZHVhbCBvciBlbnRpdHkgbmFtZWQgYWJvdmUu IElmIHRoZSByZWFkZXIgb2YgdGhpcyBtZXNzYWdlIGlzIG5vdCB0aGUgaW50ZW5kZWQgcmVj aXBpZW50LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0IGFueSBkaXNzZW1pbmF0aW9u LCBkaXN0cmlidXRpb24gb3IgY29weWluZyBvZiB0aGlzIGNvbW11bmljYXRpb24gaXMgc3Ry aWN0bHkgcHJvaGliaXRlZC4gSWYgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyB0cmFuc21pc3Np b24gaW4gZXJyb3IsIGRvIG5vdCByZWFkIGl0LiBQbGVhc2UgaW1tZWRpYXRlbHkgcmVwbHkg dG8gdGhlIHNlbmRlciB0aGF0IHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgY29tbXVuaWNhdGlv biBpbiBlcnJvciBhbmQgdGhlbiBkZWxldGUgaXQuDQo+Pg0KPj4gRXN0YSBtZW5zYWdlbSBl IHNldXMgYW5leG9zIHNlIGRpcmlnZW0gZXhjbHVzaXZhbWVudGUgYW8gc2V1IGRlc3RpbmF0 w6FyaW8sIHBvZGUgY29udGVyIGluZm9ybWHDp8OjbyBwcml2aWxlZ2lhZGEgb3UgY29uZmlk ZW5jaWFsIGUgw6kgcGFyYSB1c28gZXhjbHVzaXZvIGRhIHBlc3NvYSBvdSBlbnRpZGFkZSBk ZSBkZXN0aW5vLiBTZSBuw6NvIMOpIHZvc3NhIHNlbmhvcmlhIG8gZGVzdGluYXTDoXJpbyBp bmRpY2FkbywgZmljYSBub3RpZmljYWRvIGRlIHF1ZSBhIGxlaXR1cmEsIHV0aWxpemHDp8Oj bywgZGl2dWxnYcOnw6NvIGUvb3UgY8OzcGlhIHNlbSBhdXRvcml6YcOnw6NvIHBvZGUgZXN0 YXIgcHJvaWJpZGEgZW0gdmlydHVkZSBkYSBsZWdpc2xhw6fDo28gdmlnZW50ZS4gU2UgcmVj ZWJldSBlc3RhIG1lbnNhZ2VtIHBvciBlcnJvLCByb2dhbW9zLWxoZSBxdWUgbm9zIG8gY29t dW5pcXVlIGltZWRpYXRhbWVudGUgcG9yIGVzdGEgbWVzbWEgdmlhIGUgcHJvY2VkYSBhIHN1 YSBkZXN0cnVpw6fDo28NCj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fDQo+PiBFQVQgbWFpbGluZyBsaXN0DQo+PiBFQVRAaWV0Zi5vcmcNCj4+ IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0DQo+IA0K From nobody Wed Oct 17 07:40:36 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBD36130DE3; Wed, 17 Oct 2018 07:40:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l_mNTGujUmzq; Wed, 17 Oct 2018 07:40:31 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A7634130DDE; Wed, 17 Oct 2018 07:40:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost2.informatik.uni-bremen.de [IPv6:2001:638:708:30c8:406a:91ff:fe74:f2b7]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w9HEeIrG029861; Wed, 17 Oct 2018 16:40:23 +0200 (CEST) Received: from [192.168.217.114] (p54A6CA9F.dip0.t-ipconnect.de [84.166.202.159]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 42Zvwf2Dxpz1Bqf; Wed, 17 Oct 2018 16:40:18 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 X-Mao-Original-Outgoing-Id: 561480016.121739-51f36c93b1d85dd445e675488f4c9abe Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Wed, 17 Oct 2018 16:40:17 +0200 Message-Id: <6B9735FC-AD2D-4D8D-ABEA-D6D741233322@tzi.org> To: suit , teep@ietf.org, din@irtf.org, rats@ietf.org, eat@ietf.org X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: [Rats] Constrained Node/Network Cluster @ IETF103: "FINAL" AGENDA X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Oct 2018 14:40:34 -0000 Here is my usual eclectic condensed agenda based on the "FINAL" AGENDA for IETF103. A few changes from the DRAFT AGENDA. I waited a bit with sending this as a few more side meetings have become known, as well. Of course, "FINAL" doesn't mean final. cbor/teep and 6tisch/ace (was suit) are annoying but probably livable. qirg no longer conflicts with core :-). dinrg is now on top of lpwan. secdispatch on top of t2trg will all but make sure no security people attend t2trg. All times are ICT (Indochina Time) =3D=3D UTC +7 hours. There is no daylight saving time in effect in Thailand. DST will have ended in Europe by then (e.g., CET =3D UTC+0100) and will end in the US during the initial weekend (On Sun, Nov 4; e.g. EST =3D UTC-0500). (You can get pure UTC times on https://datatracker.ietf.org/meeting/agenda-utc, for those who want to listen from remote.) Please note that the Friday schedule is still evolving; plan to stick around until 13:20 or you may miss interesting conversations. Gr=C3=BC=C3=9Fe, Carsten SATURDAY/SUNDAY, November 3/4. 2018 -- Hackathon (including various interops) (Centre Ville), e.g.: T2TRG WISHI, possibly some CBOR, LPWAN, TLS 1.3, EST-COAPS, TEEP Please see https://trac.ietf.org/trac/ietf/meeting/wiki/103hackathon -- Sun 1700-1900 Welcome Reception - Garden at Queen's Park -- Sun 1800-2000 Hot RFC Lightning Talks - Chitlada 3 MONDAY, November 5, 2018 0900-1100 Morning Session I Chitlada 2 ART dispatch Dispatch WG - Joint with ARTAREA Meeting 1 OPS v6ops IPv6 Operations WG Boromph. 1/2 RTG *** roll Routing Over Low power and Lossy = networks WG Meeting 2 SEC oauth Web Authorization Protocol WG 1120-1220 Morning Session II Chitlada 1 IRTF cfrg Crypto Forum Chitlada 2 TSV tsvarea Transport Area Open Meeting 1350-1550 Afternoon Session I Boromph. 1/2 ART *** core Constrained RESTful Environments WG Meeting 1 OPS anima Autonomic Networking Integrated Model = and Approach WG Chitlada 2 SEC tls Transport Layer Security WG Chitlada 3 TSV tsvwg Transport Area Working Group WG 1610-1810 Afternoon Session II Meeting 2 INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Chitlada 1 IRTF irtfopen IRTF Open Meeting Chitlada 2 SEC mls Messaging Layer Security WG TUESDAY, November 6, 2018 0900-1100 Morning Session I Chitlada 1 ART httpbis Hypertext Transfer Protocol WG Meeting 1 INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Meeting 2 IRTF*** dinrg Decentralized Internet Infrastructure = Proposed RG Boromph. 4 SEC tokbind Token Binding WG 1120-1220 Morning Session II Chitlada 3 INT ipwave IP Wireless Access in Vehicular = Environments WG Chitlada 2 IRTF qirg Quantum Internet Proposed Research Group Meeting 1 SEC oauth Web Authorization Protocol WG 1350-1550 Afternoon Session I Chitlada 3 INT 6man IPv6 Maintenance WG Chitlada 2 SEC rats Remote ATtestation ProcedureS BOF Chitlada 1 TSV quic QUIC WG 1610-1810 Afternoon Session II Chitlada 1 IRTF maprg Measurement and Analysis for Protocols Meeting 1 IRTF*** t2trg Thing-to-Thing Meeting 2 SEC secdispatch Security Dispatch WG Pagoda -- 1700..1800 CACAO side meeting Apartment 3 -- 1800..2000 IoT Onboarding side meeting (lear/mcr) WEDNESDAY, November 7, 2018 0900-1100 Morning Session I Chitlada 3 ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Boromph. 3 RTG bier Bit Indexed Explicit Replication WG Meeting 2 SEC *** teep Trusted Execution Environment = Provisioning WG Chitlada 1 TSV quic QUIC WG 1120-1220 Morning Session II Meeting 2 INT *** lwig Light-Weight Implementation Guidance WG Chitlada 1 SEC tls Transport Layer Security WG Chitlada 2 TSV tsvwg Transport Area Working Group WG 1350-1520 Afternoon Session I Meeting 2 GEN wugh WGs Using GitHub BOF Chitlada 3 INT homenet Home Networking WG Meeting 1 IRTF panrg Path Aware Networking RG -- 1400..1500 IoT Onboarding Mechanisms side meeting 1540-1710 Afternoon Session II Chitlada 3 INT intarea Internet Area Working Group WG Meeting 1 IRTF pearg Privacy Enhancements and Assessments = Proposed Research Group Boromph. 3 RTG babel Babel routing protocol WG Boromph. 1/2 RTG rift Routing In Fat Trees WG Meeting 2 TSV taps Transport Services WG THURSDAY, November 8, 2018 0900-1100 Morning Session I Chitlada 1 ART httpbis Hypertext Transfer Protocol WG Meeting 2 IRTF icnrg Information-Centric Networking Chitlada 2 SEC *** suit Software Updates for Internet of Things = WG 1120-1220 Morning Session II Chitlada 2 ART *** core Constrained RESTful Environments WG Boromph. 1/2 RTG bier Bit Indexed Explicit Replication WG Chitlada 1 SEC mls Messaging Layer Security WG Meeting 1 TSV rmcat RTP Media Congestion Avoidance = Techniques WG 1350-1550 Afternoon Session I Meeting 2 INT dnssd Extensions for Scalable DNS Service = Discovery WG Chitlada 2 RTG detnet Deterministic Networking WG Chitlada 1 SEC saag Security Area Open Meeting 1610-1810 Afternoon Session II Boromph. 3 INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG Chitlada 3 RTG rtgarea Routing Area Open Meeting Chitlada 1 SEC *** ace Authentication and Authorization for = Constrained Environments WG Boromph. 1/2 SEC acme Automated Certificate Management = Environment WG FRIDAY, November 9, 2018 Various ad-hoc meetings, please see https://trac.ietf.org/trac/ietf/meeting/wiki/103sidemeetings#FRIDAY Boromph. 4 -- 0900..1320 T2TRG work meeting Boromph. 3 -- 1000..1200 COIN (Computing in the Network) From nobody Thu Oct 18 11:37:46 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9135130E3E; Thu, 18 Oct 2018 11:37:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wq2vyF6sj2Eo; Thu, 18 Oct 2018 11:37:23 -0700 (PDT) Received: from mga04.intel.com (mga04.intel.com [192.55.52.120]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B4EF130E12; Thu, 18 Oct 2018 11:37:23 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga004.jf.intel.com ([10.7.209.38]) by fmsmga104.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 18 Oct 2018 11:37:23 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.54,397,1534834800"; d="scan'208";a="242418503" Received: from orsmsx101.amr.corp.intel.com ([10.22.225.128]) by orsmga004.jf.intel.com with ESMTP; 18 Oct 2018 11:37:22 -0700 Received: from orsmsx111.amr.corp.intel.com (10.22.240.12) by ORSMSX101.amr.corp.intel.com (10.22.225.128) with Microsoft SMTP Server (TLS) id 14.3.319.2; Thu, 18 Oct 2018 11:37:22 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.251]) by ORSMSX111.amr.corp.intel.com ([169.254.12.89]) with mapi id 14.03.0319.002; Thu, 18 Oct 2018 11:37:22 -0700 From: "Smith, Ned" To: "Diego R. Lopez" , Laurence Lundblade , Henk Birkholz CC: Hannes Tschofenig , Jeremy O'Donoghue , "eat@ietf.org" , "rats@ietf.org" , Denis Thread-Topic: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates? Thread-Index: AQHUZJbnIP3n6SY5DUiHYjY92eJ1aaUg/QyAgAAN/YCAAWCsgIAAAMAAgADkMICAAGD6AIACLoEA Date: Thu, 18 Oct 2018 18:37:21 +0000 Message-ID: References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <21BE7882-2000-4AF9-B5F8-65AB93602A9E@telefonica.com> In-Reply-To: <21BE7882-2000-4AF9-B5F8-65AB93602A9E@telefonica.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.3.181015 x-originating-ip: [10.252.6.229] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] [EXTERNAL] Re: Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Oct 2018 18:37:36 -0000 WWVzLCB0aGVyZSBoYXMgYmVlbiBjb252ZXJzYXRpb24gYWJvdXQgdGhlIGRpZmZlcmVuY2VzIGJl dHdlZW4gJ2lkZW50aXR5JyBhbmQgJ2lkZW50aXR5IGRvY3VtZW50JyB3aGVyZSBhbiBpZGVudGl0 eSBkb2N1bWVudCBtYXkgYmUgYXMgc3Vic2V0IG9mIGlkZW50aWZ5aW5nIGF0dHJpYnV0ZXMgdGhh dCBtaWdodCBiZSBhdHRyaWJ1dGVkIHRvIGFuIGlkZW50aXR5LiBUaGUgcHVycG9zZSBmb3IgdXNp bmcgdGhlIHRlcm0gaWRlbnRpdHkgZG9jdW1lbnQgd2FzIHRvIGF2b2lkIHRoZSBwaGlsb3NvcGhp Y2FsIChldmVuIG1ldGEtcGh5c2ljYWwpIGRpc2N1c3Npb24gYWJvdXQgd2hhdCBjb25zdGl0dXRl cyBpZGVudGl0eS4gVGhlIHRlcm0gJ2lkZW50aWZpY2F0aW9uJyBtYXkgc2VydmUgdGhlIHNhbWUg cHVycG9zZSBhcyBpZGVudGl0eSBkb2N1bWVudC4gSWYgc28sIGJvdGggaGF2ZSB0aGUgc2FtZSBl bmQgc3RhdGUuIA0KDQpIb3dldmVyLCBJIGRvbid0IHRoaW5rIHRoZXJlIG5lZWRzIHRvIGJlIGFu eSBzaWduaWZpY2FudCByZWZlcmVuY2VzIHRvIGlkZW50aWZpY2F0aW9uIG9yIGlkZW50aXR5IGRv Y3VtZW50IG9yIG90aGVyIHN5bm9ueW1vdXMgdGVybSBhcyB0aGUgZm9jdXMgc2hvdWxkIGJlIG9u IHRydXN0IGF0dHJpYnV0ZXMgKGNoYXJhY3RlcmlzdGljcywgcHJvcGVydGllcykgYW5kIHByb3Zl bmFuY2UuIEluIHNvbWUgc2NlbmFyaW9zLCBpdCBpcyBuZWNlc3NhcnkgdG8gZGlzYW1iaWd1YXRl IHRoZSBlbmRwb2ludCAoZW50aXR5PykgaW5zdGFuY2UgaW4gb3JkZXIgdG8gY29uY2x1ZGUgdGhh dCBhIHNldCBvZiB0cnVzdCBhdHRyaWJ1dGVzIGJlbG9uZyB0byB0aGUgc3BlY2lmaWMgaW5zdGFu Y2UuIEJ1dCBJIGRvbid0IHRoaW5rIHdlIHNob3VsZCByZWdhcmQgdGhpcyBhcyBhbiBpZGVudGl0 eSwgaWRlbnRpdHkgZG9jdW1lbnQgb3IgaWRlbnRpZmllci4gV2Ugc2hvdWxkIHJlZmVyIHRvIGl0 IGFzIGEgdHJ1c3R3b3J0aGluZXNzIGNsYWltIHNldCBvciB0cnVzdCBkb2N1bWVudCwgb3Igc29t ZXRoaW5nIGFsb25nIHRoZXNlIGxpbmVzLiANCg0KQlRXOiBSRkMgODc1IGlzIGFwcm9wb3MuIEEg dHJ1c3R3b3J0aGluZXNzIGNsYWltIHNldCBpcyBhIEhlZmZhbHVtcC4gDQoNCu+7v09uIDEwLzE3 LzE4LCAxMToxOCBBTSwgIkVBVCBvbiBiZWhhbGYgb2YgRGllZ28gUi4gTG9wZXoiIDxlYXQtYm91 bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbT4g d3JvdGU6DQoNCiAgICBIaSwNCiAgICANCiAgICBNYXkgYmUgdGhpcyBpcyBhIGZhaXJseSBuYcOv dmUgcHJvcG9zYWwsIGJ1dCBpZiB3ZSB1c2UgImlkZW50aWZpY2F0aW9uIiByYXRoZXIgdGhhbiAi aWRlbnRpdHkiIGFuZCB0aGVyZWZvcmUgYXZvaWQgdGhlIG9udG9sb2dpY2FsIGltcGxpY2F0aW9u cyBvZiB0aGUgbGF0dGVyLCBlc3BlY2lhbGx5IHdoZW4gaXQgY29tZXMgdG8gdGhlIHBvaW50cyBp dCB0b3VjaGVzIGh1bWFuLXZzLW1hY2hpbmUgaXNzdWVzPw0KICAgIA0KICAgIEJlIGdvb2RlLA0K ICAgIA0KICAgIC0tDQogICAgIkVzdGEgdmV6IG5vIGZhbGxhcmVtb3MsIERvY3RvciBJbmZpZXJu byINCiAgICANCiAgICBEciBEaWVnbyBSLiBMb3Bleg0KICAgIFRlbGVmb25pY2EgSStEDQogICAg aHR0cHM6Ly93d3cubGlua2VkaW4uY29tL2luL2RyMmxvcGV6Lw0KICAgIA0KICAgIGUtbWFpbDog ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbQ0KICAgIFRlbDogICAgICAgICArMzQgOTEzIDEy OSAwNDENCiAgICBNb2JpbGU6ICArMzQgNjgyIDA1MSAwOTENCiAgICAtLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tDQogICAgDQogICAgT24gMTcvMTAvMjAxOCwgMDY6MzEsICJFQVQg b24gYmVoYWxmIG9mIExhdXJlbmNlIEx1bmRibGFkZSIgPGVhdC1ib3VuY2VzQGlldGYub3JnIG9u IGJlaGFsZiBvZiBsZ2xAaXNsYW5kLXJlc29ydC5jb20+IHdyb3RlOg0KICAgIA0KICAgICAgICBJ IHRoaW5rIHRoZSBUQ0cgaGFzIGEgY2VydGFpbiBkZXZlbG9wZWQgbm90aW9uIG9mIGlkZW50aXR5 IHRoYXQgaXMgZGlmZmVyZW50IGZyb20gb3RoZXJzLiAgQSB3YXkgdG8gZ2V0IHNoYXJwZXIgYWJv dXQgd2hhdCBhIHBhcnRpY3VsYXIgaWRlbnRpdHkgbWVhbnMgaXMgdG8gZGVzY3JpYmUgdGhlIHNw YWNlIGFuZCBob3cgdGhlIGlkZW50aWZpZXIgc2VsZWN0cyBpbiB0aGUgc3BhY2UuICBIZXJl4oCZ cyBhIGZldyBleGFtcGxlczoNCiAgICANCiAgICAgICAgLSBUaGUgc3BhY2UgaXMgcGh5c2ljYWwg aHVtYW4gYmVpbmdzIHdpdGggZmluZ2Vycy4gQSBmaW5nZXJwcmludCBzY2FubmVyIHNlbGVjdCBv bmUgb2YgdGhlc2UgaHVtYW5zLiBUaGlzIGlzIHR5cGljYWwgYmlvbWV0cmljIGF1dGguDQogICAg ICAgIC0gVGhlIHNwYWNlIGlzIGh1bWFucyB0aGF0IGtub3cgYSBwYXNzd29yZC4gQSBwYXNzd29y ZCBhdXRoZW50aWNhdG9yIHNlbGVjdHMgdGhlIGh1bWFucyB0aGF0IGtub3cgdGhlIHBhc3N3b3Jk LiBUeXBpY2FsIGF1dGhlbnRpY2F0aW9uLg0KICAgICAgICAtIFRoZSBzcGFjZSBpcyBodW1hbnMg YXMgbGVnYWwgZW50aXRpZXMgLyBjaXRpemVucyB3aXRoIGNyaW1pbmFsIHJlY29yZHMsIHBhc3Nw b3J0cyBhbmQgc3VjaC4gQSBuYXRpb25hbCBJRCBzZWxlY3RzLg0KICAgICAgICAtIFRoZSBzcGFj ZSBpcyBwaHlzaWNhbCBtYW51ZmFjdHVyZWQgZGV2aWNlcyBmcm9tIG9uZSBtYWtlci4gIEEgc2Vy aWFsIG51bWJlciBuYXJyb3dzIGl0IGRvd24gdG8gb25lIHBoeXNpY2FsIGRldmljZS4NCiAgICAg ICAgLSBUaGUgc3BhY2UgaXMgcGh5c2ljYWwgZGV2aWNlcyBmcm9tIG9uZSBtYWtlci4gQSBtb2Rl bCBudW1iZXIgb3IgdmVyc2lvbiwgbmFycm93cyBkb3duIHRvIGEgc3Vic2V0IG9mIHRoZXNlIGRl dmljZXMuDQogICAgDQogICAgICAgIE15IHVuZGVyc3RhbmRpbmcgb2YgdGhlIFRDRyB3b3JsZCBp cyB0aGF0IGlkZW50aXRpZXMgZ29lcyBiZXlvbmQgYW55IG9mIHRoZSBhYm92ZSBiZWNhdXNlIHRo ZXkgaW5jbHVkZSB0aGluZ3MgbGlrZSB0aGUgdmVyc2lvbiBvZiB0aGUgU1cgYW5kIGNvbmZpZ3Vy YXRpb24gb2YgdGhlIGRldmljZS4gVGhlIGlkZW50aXR5IGlzIGxhcmdlbHkgYSBoYXNoIG9mIGFu IGlkZW50aWZpZXIgb2YgdGhlIHBoeXNpY2FsIGRldmljZSwgdmFyaW91cyBTVyBjb21wb25lbnRz IGFuZCB2YXJpb3VzIGNvbmZpZ3VyYXRpb24gc3RhdGVzLiAgVGhlIHBvaW50IGJlaW5nIHRoYXQg YSBjaGFuZ2UgaW4gYW55IG9mIHRoZXNlIGlzIGEgY2hhbmdlIGluIHRoZSBzZWN1cml0eSBjaGFy YWN0ZXJpc3RpY3Mgb2YgdGhlIGRldmljZSBhbmQgaWYgaXQgd2FzIHRydXN0ZWQgd2l0aCBhIHBh cnRpY3VsYXIga2V5IG9yIHBhcnRpY3VsYXIgZGF0YSBpbiB0aGUgcGFzdCwgdGhhdCB0cnVzdCBz aG91bGQgYmUgcmV2b2tlZCB1bnRpbCByZSBlc3RhYmxpc2hlZC4NCiAgICANCiAgICAgICAgLSBU aGUgc3BhY2UgaXMgcGh5c2ljYWwgZGV2aWNlcyBmcm9tIGFueSBtYWtlcg0KICAgICAgICAgICsg TWVhc3VyZW1lbnQgb2YgdGhlIFNXICh0aGUgU1cgdmVyc2lvbnMpDQogICAgICAgICAgICAgKyBN ZWFzdXJlbWVudHMgb2Ygc29tZSBjb25maWd1cmF0aW9uDQogICAgDQogICAgICAgIENoYW5naW5n IGFueSBvZiB0aGVzZSBjaGFuZ2UgdGhlIGlkZW50aXR5IG9mIHRoZSBkZXZpY2UuDQogICAgDQog ICAgICAgIEkga25vdyBJIGhhcmRseSBuZWVkIHRvIGFzaywgYnV0IFRDRyBmb2xrcywgZGlkIEkg ZGVzY3JpYmUgdGhpcyBjb3JyZWN0bHk/DQogICAgDQogICAgDQogICAgICAgIFNvIHRoYXQgc2Fp ZCwgbWFueSwgcGVyaGFwcyBtb3N0LCB1c2UgY2FzZXMgZm9yIEVBVCBkbyBub3Qgd2FudCB0aGlz IGtpbmQgb2YgZGV2aWNlIGlkZW50aXR5LiBJdCBpcyBub3QgYSBwcmVyZXF1aXNpdGUgZm9yIHRy dXN0aW5nICBjbGFpbXMgY29taW5nIGZyb20gdGhlIGRldmljZS4gSW4gc29tZSBjYXNlcyB0aGlz IGxldmVsIG9mIGlkZW50aXR5IHNlZW1zIGV4dHJlbWVseSBkaXNydXB0aXZlIGFzIHNtYWxsIFNX IHVwZ3JhZGVzIGNvdWxkIHJlc3VsdCBpbiByZSBlbnJvbGxtZW50IG9mIGJpb21ldHJpY3MuIFdl IGFscmVhZHkgYXJlIGFubm95ZWQgd2hlbiB3ZSBoYXZlIHRvIGFuc3dlciBzZWN1cml0eSBxdWVz dGlvbnMgd2hlbiBzdGFydCB1c2luZyBhIHNlcnZpY2UgZnJvbSBhIG5ldyBkZXZpY2UuDQogICAg DQogICAgICAgIEkgdGhpbmsgdGhpcyBXRyBuZWVkcyB0byBhZGRyZXNzIGJvdGggdGhpcyB2ZXJ5 IHRpZ2h0IFRDRy1zdHlsZSBkZXZpY2UgaWRlbnRpdHkgYW5kIHRoZSBtb3JlIGhldXJpc3RpYyBF QVQtc3R5bGUgY2xhaW1zLWZvci1yaXNrLWVuZ2luZXMuIEkgY291bGQgc2VlIG11bHRpLWRlY2Fk ZSBldm9sdXRpb24gd2hlcmUgcmlzayBlbmdpbmUgdXNlIGNhc2VzIHdhbnQgbW9yZSBhbmQgbW9y ZSBvZiB0aGUgdGlnaHQgVENHLXN0eWxlIGRldmljZSBpZGVudGl0eSBhcyBjcmltaW5hbHMgYmVj b21lIG1vcmUgYWRlcHQgYXQgZm9yZ2luZyBFQVQtc3R5bGUgY2xhaW1zLiAoVG9kYXkgcmlzayBl bmdpbmVzIHdvcmsgb2ZmIG9mIHVuc2VjdXJlZCBicm93c2VyIHBhcmFtZXRlcnMpLg0KICAgIA0K ICAgICAgICBUaGUgSW50cm9kdWN0aW9uIGluIHRoZSBjaGFydGVyIHNlZW1zIGVudGlyZWx5IGZv Y3VzZWQgb24gdGhlIFRDRy1iYXNlZCBpZGVudGl0eSB1c2UgY2FzZS4gSSB0aGluayB0ZXh0IHNo b3VsZCBiZSBhZGRlZCBmb3IgRUFULXN0eWxlIGF0dGVzdGF0aW9uLiBJIHdpbGwgd3JpdGUgc29t ZSBhZnRlciBzb21lIGNvbW1lbnRzIG9uIHRoaXMgbWVzc2FnZS4NCiAgICANCiAgICAgICAgTEwN CiAgICANCiAgICANCiAgICANCiAgICANCiAgICANCiAgICAgICAgPiBPbiBPY3QgMTYsIDIwMTgs IGF0IDg6MjQgUE0sIEhlbmsgQmlya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIu ZGU+IHdyb3RlOg0KICAgICAgICA+DQogICAgICAgID4gVG8gcXVvdGUgQ2Fyc3RlbiwgdGhlcmUg aXMgInRoZSB1c3VhbCB0ZXJtaW5vbG9neSBwcm9ibGVtIGFib3V0IGlkZW50aXR5Ii4NCiAgICAg ICAgPg0KICAgICAgICA+IElkZW50aWZ5aW5nIHZzLiBJZGVudGl0eSBicmluZ3MgYmFjayBtZW1v cmllcyBhYm91dCBhbiBleHRlbnNpdmUgZGlzY3Vzc2lvbiBpbiBTQUNNIHRoYXQgaW4gdGhlIGVu ZCByZXN1bHRlZCBpbiB1c2luZyBQcm9maWxlcy4uLg0KICAgICAgICA+DQogICAgICAgID4gUHJv ZmlsZXMgYXJlIHRoZSAidGhpbmdzIiB0aGF0IHlvdSBjYW4gYWdncmVnYXRlIGlkZW50aXR5IGNs YWltcyBpbiAoaW4gU0FDTSB0aGVzZSBjbGFpbXMgYXJlICJUYXJnZXQgRW5kcG9pbnQgQ2hhcmFj dGVyaXN0aWNzIiwgd2hpY2ggYXJlIHByZXR0eSBtdWNoIHRoZSBzYW1lIHRoaW5nIGFzIERldmlj ZSBDaGFyYWN0ZXJpc3RpY3MpIC0gYW5kIHlvdSB1c2UgdGhlIFByb2ZpbGVzIHRvIChyZS0paWRl bnRpZnkgdGFyZ2V0IGVuZHBvaW50cy4NCiAgICAgICAgPg0KICAgICAgICA+IEluIHRoZSBzY29w ZSBvZiByZW1vdGUgYXR0ZXN0YXRpb24gcHJvY2VkdXJlcywgSSB0aGluayB0aGF0ICJqdXN0IG5v dCBjYWxsaW5nIiBjbGFpbSBzZXRzIHRoYXQgYXJlIGNvbXBvc2VkIChhbW9uZ3N0IG90aGVycykg b2YgaWRlbnRpZnlpbmcgY2xhaW1zICJpZGVudGl0eSBkb2N1bWVudHMiIG1pZ2h0IGp1c3QgZW5k IHVwIGluIG1ha2luZyB1cCBhbm90aGVyIG5hbWUgZm9yIHNvbWV0aGluZyB0aGF0IGlzIGVmZmVj dGl2ZWx5IGNvbXBvc2luZyBpZGVudGl0eSBkb2N1bWVudHMgYW55d2F5cy4gSWYgY2FsbGluZyB0 aGUgc2FtZSB0aGluZyBzb21ldGhpbmcgZWxzZSBoZWxwcyBpbiBzb21lIHdheSwgSSBhbSBhbGwg Zm9yIGl0LiBCdXQgSSBhbSByZWFsbHkgbm90IHN1cmUuDQogICAgICAgID4NCiAgICAgICAgPiBU aGF0IHNhaWQsIE5lZCdzIGVsYWJvcmF0aW9uIG9uIHRoZSByZWxhdGlvbnNoaXAgb2YgaWRlbnRp dHkgYW5kIGF0dGVzdGF0aW9uIGNsYWltcyBhbmQgY29ycmVzcG9uZGluZyBjbGFpbSBzZW1hbnRp Y3MgLyB0cnVzdCBzZW1hbnRpY3MgaXMgc3BvdCBvbiwgSSB0aGluay4NCiAgICAgICAgPg0KICAg ICAgICA+IFZpZWxlIEdyw7zDn2UsDQogICAgICAgID4NCiAgICAgICAgPiBIZW5rDQogICAgICAg ID4NCiAgICAgICAgPiBPbiAxMC8xNi8yMDE4IDAzOjUxIFBNLCBTbWl0aCwgTmVkIHdyb3RlOg0K ICAgICAgICA+PiBBZ3JlZSB3aXRoIEhhbm5lcyB0aGF0IGlkZW50aXR5IGRpc2N1c3Npb24gY2Fu IGxlYWQgdG8gY29uZnVzaW9uIGFzIGlkZW50aXR5IGlzIG9mdGVuIGhpZ2hseSBkZXBlbmRlbnQg b24gc29tZSBzb3J0IG9mIGNvbnRleHQgKGRvbWFpbiBvZiBpbnRlcnByZXRhdGlvbikuDQogICAg ICAgID4+IEluIG9yZGVyIHRvIGhhdmUgcHJvZHVjdGl2ZSBjb252ZXJzYXRpb24gYWJvdXQgYXR0 ZXN0YXRpb24gYW5kIGlkZW50aXR5LCBpdCBtYXkgYmUgaW1wb3J0YW50IHRvIHVuZGVyc3RhbmQg dGhhdCBhdHRlc3RhdGlvbiBzZW1hbnRpY3Mgc2V0cyB0aGUgY29udGV4dCBmb3IgaWRlbnRpdHku DQogICAgICAgID4+ICogQXR0ZXN0YXRpb24gYXR0cmlidXRlcyBoYXZlIHRydXN0IHNlbWFudGlj cyAoYW5kIHRydXN0IHNlbWFudGljcyBhcmUgaW50ZXJwcmV0ZWQgdGhyb3VnaCB0aGUgZXllcyBv ZiB0aGUgdmVyaWZpZXIpLiBJZGVudGl0eSBhdHRyaWJ1dGVzIG1heSBhbHNvIGhhdmUgdHJ1c3Qg c2VtYW50aWNzIChpbiBhZGRpdGlvbiB0byBpZGVudGl0eSBzZW1hbnRpY3MpIGhlbmNlIGNhbiBi ZSByZWdhcmRlZCBhcyBwbGF5aW5nIGEgcm9sZSBpbiBib3RoIGlkZW50aXR5IGFuZCBhdHRlc3Rh dGlvbi4gU2luY2UgUkFUUyBzaG91bGQgYmUgaW50ZXJlc3RlZCBwcmltYXJpbHkgaW4gdHJ1c3Qg c2VtYW50aWNzLCBpdCBtYWtlcyBzZW5zZSB0byB1bmRlcnN0YW5kLCBkaXNjdXNzIGFuZCBjb25z aWRlciBpZGVudGl0eSBpbiB0ZXJtcyBvZiBpdHMgdHJ1c3Qgc2VtYW50aWNzLiBIZW5jZSBpZGVu dGl0eSBhdHRyaWJ1dGVzIGFyZSBvbmx5IGludGVyZXN0aW5nIHRvIFJBVFMgaWYgdGhleSBhcmUg dXNlZnVsIGZvciBldmFsdWF0aW5nIHRydXN0IHNlbWFudGljcy4NCiAgICAgICAgPj4gKiBJbiBh IGNsb3NlZCBlY29zeXN0ZW0sIHRoZSB0cnVzdCBjaGFyYWN0ZXJpc3RpY3MgYW5kIHByb3BlcnRp ZXMgbWF5IGJlIGltcGxpZWQgYmVjYXVzZSB0aGVyZSBvZnRlbiBleGlzdHMgb3V0LW9mLWJhbmQg cHJvY2Vzc2VzIHRoYXQgZW5zdXJlIHRoZSBjaGFyYWN0ZXJpc3RpY3MgYXJlIGFwcGxpZWQgKGZv ciBleGFtcGxlLCBpZiBhbiBJVCBvcmdhbml6YXRpb24gc2V0cyBhIHBvbGljeSB0aGF0IGFsbCBh c3ltbWV0cmljIGtleXMgYXJlIHRvIGJlIGhhcmRlbmVkIHVzaW5nIGEgc21hcnRjYXJkLCB0aGV5 IGNhbiBhcHBseSBhIGRlcGxveW1lbnQgcHJvY2VzcyB3aGVyZSB0aGUgSVQgcHJvZmVzc2lvbmFs IHZlcmlmaWVzIHRoZSBzbWFydGNhcmQgaXMgdXNlZCBkdXJpbmcgZW5yb2xsbWVudC4pIEJ1dCBp biBhIG5vbi1jbG9zZWQgZWNvc3lzdGVtLCB0aGVyZSBpc24ndCBhbiBhc3N1bXB0aW9uIHRoYXQg b3V0LW9mLWJhbmQgcHJvY2Vzc2VzIGV4aXN0LiBBdHRlc3RhdGlvbiBhdHRlbXB0cyB0byBtYWtl IGV4cGxpY2l0IHdoYXQgb3RoZXJ3aXNlIGlzIGltcGxpY2l0IGFuZCB0aGVyZWZvcmUgc3ViamVj dCB0byBtaXNpbnRlcnByZXRhdGlvbiBpZiB0aGUgdmVyaWZpZXIsIHJlbHlpbmcgcGFydHkgYW5k IGF0dGVzdGVyIGFyZSBub3QgcGFydCBvZiB0aGUgc2FtZSBjbG9zZWQgZWNvc3lzdGVtLiBJbXBs aWNpdCBhdHRlc3RhdGlvbiB0aGVyZWZvcmUgY2FuIGxlYWQgdG8gc2VtYW50aWMgY29uZnVzaW9u IGlmIHdlJ3JlIG5vdCBjYXJlZnVsLiBUaGVyZWZvcmUsIHRoZSByaWdvciBvZiB0cmVhdGluZyBp bXBsaWNpdCBhdHRlc3RhdGlvbiBjbGFpbXMgKGFzc2VydGlvbnMgYXNzdW1lZCB0byBleGlzdCBi dXQgbm90IGV4cGxpY2l0bHkgbmFtZWQpIHNob3VsZCBuZXZlcnRoZWxlc3MgYmUgZGVmaW5lZCBl eHBsaWNpdGx5LiBUaGVuLCBpZiB0aGVyZSBpcyBhIG5lZWQgZm9yIGltcGxpY2l0IGF0dGVzdGF0 aW9uLCB0aGUgc3BlY2lmaWNhdGlvbnMgdGhhdCBkZXNjcmliZSB0aGVtIGNhbiBkZXNjcmliZSB0 aGVtIGluIHRlcm1zIG9mIGFuIGV4cGxpY2l0IGRlZmluaXRpb24uDQogICAgICAgID4+ICogSW4g dGhlIGNvbnRleHQgb2YgYXNzZXJ0aW5nIHRydXN0IGNoYXJhY3RlcmlzdGljcywgdGhlIHZlcmlm aWVyIG5lZWRzIHRvIGtub3cgdGhhdCBhIHNldCBvZiBjaGFyYWN0ZXJpc3RpY3MgYXBwbGllcyB0 byB0aGUgaW5zdGFuY2Ugb2YgdGhlIGVuZHBvaW50IGJlaW5nIGV2YWx1YXRlZCAoYWthIHRoZSBh dHRlc3RlcikuIChPdGhlcndpc2UgYSBNSVRNIGNvdWxkIHN1cHBseSBjaGFyYWN0ZXJpc3RpY3Mg dGhhdCBtYXkgYmUgdmFsaWQsIGJ1dCBkb27igJl0IGFwcGx5IHRvIHRoZSBzcGVjaWZpYyBpbnN0 YW5jZSkuIENvbnNlcXVlbnRseSwgaXQgbWFrZXMgc2Vuc2UgdG8gY29uc2lkZXIgdGhhdCAqYXR0 ZXN0YXRpb24qIGtleXMgYXJlIG5lZWRlZCB0byBhdXRoZW50aWNhdGUgdGhlIGVuZHBvaW50IGJl aW5nIGV2YWx1YXRlZC4gVGhpcyBkb2Vzbid0IGltcGx5IGFuIGlkZW50aXR5IGtleSBjb3VsZG4n dCBkb3VibGUgYXMgYW4gYXR0ZXN0YXRpb24ga2V5LiBCdXQgaWYgaXQgZG9lcywgd2UgY2FyZSBh Ym91dCBpdHMgcmVsZXZhbmNlIHRvIHRoZSBhdHRlc3RlciBlbmRwb2ludC4NCiAgICAgICAgPj4g LU5lZA0KICAgICAgICA+PiBPbiAxMC8xNS8xOCwgNjo0OSBQTSwgIkhhbm5lcyBUc2Nob2Zlbmln IiA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4gd3JvdGU6DQogICAgICAgID4+ICAgICBIZXJl IGFyZSBteSA1IGNlbnRzIG9uIHRoZSB0ZXJtICdpZGVudGl0eScuDQogICAgICAgID4+ICAgICAg ICAgIEkgaGF2ZSBiZWVuIHdvcmtpbmcgb24gaWRlbnRpdHkgbWFuYWdlbWVudCBmb3IgbWFueSB5 ZWFycyAocGFydGlhbGx5IGJlY2F1c2Ugb2YgbXkgT0F1dGggY28tY2hhaXIgcm9sZSkgYW5kIEkg aGF2ZSBub3RpY2VkIHRoYXQgdGhlIHVzZSBvZiB0aGUgdGVybSAiaWRlbnRpdHkiIHRlbmRzIHRv IGNvbmZ1c2UgbW9yZSB0aGFuIGl0IGhlbHBzIChldmVuIG1vcmUgc28gd2hlbiB0aGUgdGVybSBp cyBhcHBsaWVkIHRvIGRldmljZXMgYW5kIHNvZnR3YXJlIHJhdGhlciB0aGFuIGh1bWFucykuDQog ICAgICAgID4+ICAgICAgICAgIEkgYmVsaWV2ZSB3ZSBjb3VsZCBnZXQgYXdheSB3aXRoIGRlc2Ny aWJpbmcgd2hhdCB3ZSB3YW50IHdpdGhvdXQgZXZlciB1c2luZyB0aGUgdGVybS4NCiAgICAgICAg Pj4gICAgICAgICAgSW4gdGhpcyBjb250ZXh0IEkgd291bGQgYXJndWUgdGhhdCB3ZSBhcmUgYWJv dXQgaWRlbnRpZnlpbmcgZGlmZmVyZW50IGNvbXBvbmVudHMsIHN1Y2ggYXMgaGFyZHdhcmUgYW5k IHNvZnR3YXJlLg0KICAgICAgICA+PiAgICAgICAgICBDaWFvDQogICAgICAgID4+ICAgICBIYW5u ZXMNCiAgICAgICAgPj4gICAgICAgICAgLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCiAgICAg ICAgPj4gICAgIEZyb206IEVBVCA8ZWF0LWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBT bWl0aCwgTmVkDQogICAgICAgID4+ICAgICBTZW50OiBNb25kYXksIE9jdG9iZXIgMTUsIDIwMTgg OTowMCBBTQ0KICAgICAgICA+PiAgICAgVG86IEhlbmsgQmlya2hvbHogPGhlbmsuYmlya2hvbHpA c2l0LmZyYXVuaG9mZXIuZGU+OyByYXRzQGlldGYub3JnOyBKZXJlbXkgTydEb25vZ2h1ZSA8am9k b25vZ2hAcXRpLnF1YWxjb21tLmNvbT47IERlbmlzIDxkZW5pcy5pZXRmQGZyZWUuZnI+DQogICAg ICAgID4+ICAgICBDYzogZWF0QGlldGYub3JnDQogICAgICAgID4+ICAgICBTdWJqZWN0OiBSZTog W0VBVF0gW0VYVEVSTkFMXSBSZTogW1JhdHNdIEF0dGVzdGF0aW9uIEJvRiBjaGFydGVyIHVwZGF0 ZXM/DQogICAgICAgID4+ICAgICAgICAgIEkgYWdyZWUgd2l0aCBIZW5rJ3Mgb2JzZXJ2YXRpb24g dGhhdCB0aGVyZSBpcyBvcHBvcnR1bml0eSB0byBmaW5kIGNvbW1vbiBncm91bmQgb24gaWRlbnRp dHkgYXMgaWRlbnRpdHkgY2FuIGJlIGEgY29sbGVjdGlvbiBvZiBhdHRyaWJ1dGVzLCB0aGF0IGlm IHNpZ25lZCwgYmVjb21lcyBhIHNldCBvZiB2ZXJpZmlhYmxlIGNsYWltcyAoYWJvdXQgaWRlbnRp dHkgYXR0cmlidXRlcykuIEF0dGVzdGF0aW9uIGhhcyBhIHNpbWlsYXIgc3RydWN0dXJlIGluIHRo YXQgaXQgY29uc2lzdHMgb2YgYSBzZXQgb2YgYXR0cmlidXRlcywgdGhhdCBpZiBzaWduZWQgYmVj b21lcyBhIHNldCBvZiB2ZXJpZmlhYmxlIGNsYWltcy4gVGhlIG1haW4gZGlmZmVyZW5jZSBiZXR3 ZWVuIGlkZW50aXR5IGFuZCBhdHRlc3RhdGlvbiBhdHRyaWJ1dGVzIGlzIHdoZXRoZXIgdGhlIGF0 dHJpYnV0ZSBzZW1hbnRpY2FsbHkgcmVsYXRlIHRvIHRydXN0ICh2cy4gaWRlbnRpdHkpLiBGb3Ig ZXhhbXBsZSwgY2xhaW1zIG9mIHNlY3VyaXR5IGNlcnRpZmljYXRpb24gY29tcGxpYW5jZSByZXNv bmF0ZXMgYXMgYXR0ZXN0YXRpb24uDQogICAgICAgID4+ICAgICAgICAgIEl0IG1heSBiZSBwb3Nz aWJsZSB0byBjb21iaW5lIGEgc2V0IG9mIGF0dGVzdGF0aW9uIGF0dHJpYnV0ZXMgaW4gc3VjaCBh IHdheSB0aGF0IHRoZSBjb21iaW5hdGlvbiB1bmlxdWVseSBpZGVudGlmaWVzIGFuIGVudGl0eS4g QnV0IHRoYXQgZG9lc24ndCBtYWtlIGl0IGFuIGlkZW50aXR5IHN5c3RlbSBwZXIgc2UgYW5kIHNo b3VsZG4ndCBjYXVzZSBhIGNvbmZsaWN0IGluIGNoYXJ0ZXIgZ29hbHMgd2l0aCByZXNwZWN0IHRv IG90aGVyIGlkZW50aXR5IGZvY3VzZWQgZWZmb3J0cyBpbiBJRVRGLg0KICAgICAgICA+PiAgICAg ICAgICBBbHNvLCBpbmNsdXNpb24gb2YgYXR0cmlidXRlcyB0aGF0IGRvbid0IGhhdmUgc2VtYW50 aWNzIHRoYXQgcmVhc29uYWJseSByZWxhdGUgdG8gdHJ1c3Qgc2hvdWxkIG5vdCBiZSBvZiBpbnRl cmVzdCB0byBhIHdvcmtpbmcgZ3JvdXAgZm9jdXNlZCBvbiBhdHRlc3RhdGlvbi4NCiAgICAgICAg Pj4gICAgICAgICAgLU5lZA0KICAgICAgICA+PiAgICAgICAgICBPbiAxMC8xNS8xOCwgMzo1MyBQ TSwgIkVBVCBvbiBiZWhhbGYgb2YgSGVuayBCaXJraG9seiIgPGVhdC1ib3VuY2VzQGlldGYub3Jn IG9uIGJlaGFsZiBvZiBoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPiB3cm90ZToNCiAg ICAgICAgPj4gICAgICAgICAgICAgIEhpIEplcmVteSAmIERlbmlzLA0KICAgICAgICA+PiAgICAg ICAgICAgICAgYWxsIHRoZXNlIHBvaW50cyBvZiB2aWV3IGhhdmUgbWVyaXQsIEkgdGhpbmsuDQog ICAgICAgID4+ICAgICAgICAgICAgICBQbGVhc2UgaGF2ZSBhIGxvb2sgYXQgdGhlc2UgcXVvdGVz Og0KICAgICAgICA+PiAgICAgICAgICAgICAgPiBrbm93aW5nIHRoZSBwcm92ZW5hbmNlIG9mIHRo ZSBkZXZpY2UNCiAgICAgICAgPj4gICAgICAgICAgICAgID4gaGF2aW5nIHRoZSBlbnRpdHkgY3Jl YXRvci9tYW51ZmFjdHVyZXIgcHJvdmlkZSBhIHNldCBvZiBjbGFpbXMgd2hpY2ggY2FuIGJlIHZl cmlmaWVkDQogICAgICAgID4+ICAgICAgICAgICAgICA+IHRvIGtub3cgdGhlIGNoYXJhY3Rlcmlz dGljcyBvZiBhIGRldmljZSBieSBpc3N1aW5nIHRvIHRoZSBkZXZpY2UgYSBwdWJsaWMga2V5IGNl cnRpZmljYXRlIHdoaWNoIHdpbGwgb25seSBiZSBpc3N1ZWQgdG8gdGhlIGRldmljZSBpZiBpdCBm dWxmaWxscyBhbiBleHBlY3RlZCBzZXQgb2YgZnVuY3Rpb25hbGl0aWVzLg0KICAgICAgICA+PiAg ICAgICAgICAgICAgVG8gbWUsIHRoZXNlIGRlc2NyaXB0aW9ucyBzZWVtIHRvIGhhdmUgZGlmZmVy ZW50IGludGVudHMsIHNjb3BlIG9yDQogICAgICAgID4+ICAgICAgICAgYXVkaWVuY2UgYW5kIHJl cXVpcmUgbW9zdCBjZXJ0YWlubHkgZGlmZmVyZW50IHdvcmstZmxvd3MsIGJ1dA0KICAgICAgICA+ PiAgICAgICAgIHNlbWFudGljYWxseSBhbmQgaW4gY29uc2VxdWVuY2UgcmVwcmVzZW50YXRpb24t d2lzZSB0aGV5IGFsc28gc2VlbSBxdWl0ZQ0KICAgICAgICA+PiAgICAgICAgIHJlbGF0ZWQuDQog ICAgICAgID4+ICAgICAgICAgICAgICBJZiB5b3UgdGhpbmsgb2YgYW4gaWRlbnRpdHkgZG9jdW1l bnQgYXMgYSBzZXQgb2YgY2xhaW1zIChwb3RlbnRpYWxseQ0KICAgICAgICA+PiAgICAgICAgIGlu Y2x1ZGluZyBhIHB1YmxpYyBrZXkpLCB0aGF0IGlzIHNpZ25lZCBhbmQgdGhhdCBjYW4gbWF0Y2gg b25lIG9yIG1vcmUNCiAgICAgICAgPj4gICAgICAgICB0aGluZ3MsIG1heWJlIGFsbCB0aHJlZSB0 eXBlcyBoaWdobGlnaHRlZCBhYm92ZSBhcmUgYWN0dWFsbHkgY292ZXJlZCBieQ0KICAgICAgICA+ PiAgICAgICAgIHRoZSBzYW1lIGlkZW50aXR5IGRvY3VtZW50IGNvbmNlcHQ/DQogICAgICAgID4+ ICAgICAgICAgICAgICBXaXRoIHJlc3BlY3QgdG8gaWRlbnRpdHkgZG9jdW1lbnRzLCBJIHRoaW5r IGl0IGlzIHNhZmUgc28gc2F5IHRoYXQgd2UNCiAgICAgICAgPj4gICAgICAgICBjYW4gZmluZCBj b21tb24gZ3JvdW5kIGhlcmUgcmF0aGVyIGVhc2lseS4gVGhhdCBzYWlkLCB0aGUgd2F5IGhvdyB0 aGVzZQ0KICAgICAgICA+PiAgICAgICAgIGlkZW50aXR5IGRvY3VtZW50cyBjb21lIGludG8gZXhp c3RlbmNlLCB3aGVuIGFuZCBob3cgdGhleSBhcmUgZGVwbG95ZWQNCiAgICAgICAgPj4gICAgICAg ICBvbiB0aGUgdGhpbmcgb3IgYXNzb2NpYXRlZCB3aXRoIG11bHRpcGxlIHRoaW5ncyBpcyBhbm90 aGVyIHF1ZXN0aW9uLiBXZQ0KICAgICAgICA+PiAgICAgICAgIG1vc3QgY2VydGFpbmx5IGRvIG5v dCB3YW50IHRvIGVuZCB1cCB3aXRoIGEgInNpZ25pbmcgZm9vbCIgdGhhdCBkb2VzIG5vdA0KICAg ICAgICA+PiAgICAgICAgIGFkZCB2YWx1ZSB0byB0aGUgbGV2ZWwgb2YgY29uZmlkZW5jZSAoSSBh bSBxdW90aW5nIE5lZCBTbWl0aCBoZXJlKS4NCiAgICAgICAgPj4gICAgICAgICAgICAgIFRoaXMg aGFzIHRvIGJlIGZsZXNoZWQgb3V0IGV4cGxpY2l0bHkgZm9yIGVhY2ggc2NlbmFyaW8gYW5kIHRo ZSBwYXJ0cw0KICAgICAgICA+PiAgICAgICAgIHRoYXQgYXJlIHJldXNlZCBpbiBldmVyeSBzY2Vu YXJpbyBzaG91bGQgZ2V0IHNwZWNpYWwgYXR0ZW50aW9uIGluIHRoZQ0KICAgICAgICA+PiAgICAg ICAgIHVwY29taW5nIFJBVFMgYXJjaGl0ZWN0dXJlIGRyYWZ0Lg0KICAgICAgICA+PiAgICAgICAg ICAgICAgSWRlbnRpZnlpbmcgY2xhaW1zIGFnZ3JlZ2F0ZWQgaW4gYW4gaWRlbnRpdHkgZG9jdW1l bnQgbW9zdCBjZXJ0YWlubHkgY2FuDQogICAgICAgID4+ICAgICAgICAgaW5jbHVkZSBkZXZpY2Ug Y2hhcmFjdGVyaXN0aWNzLCBwdWJsaWMga2V5KHMpLCBvciBjbGFpbXMgYWJvdXQgdGhlDQogICAg ICAgID4+ICAgICAgICAgaW50ZW5kZWQgZnVuY3Rpb25zIGFuZCBjYXBhYmlsaXRpZXMgb2YgdGhl IHRoaW5nLiBDbGFpbXMgY2FuIGV2ZW4NCiAgICAgICAgPj4gICAgICAgICBvcmlnaW5hdGUgZnJv bSBDbGFpbWFudHMgdGhhdCBhcmUgbm90IHRoZSB0aGluZyBpdHNlbGYsIGJ1dCBleHRlcm5hbA0K ICAgICAgICA+PiAgICAgICAgIGVudGl0aWVzIHByb3ZpZGluZyBhbiBhc3NlcnRpb24gKGUuZy4g dGhlc2UgdGhpbmdzIGFyZSBDQy1jZXJ0aWZpZWQpLg0KICAgICAgICA+PiAgICAgICAgICAgICAg QWxsIGRpZmZlcmVudCBjb21wb3NpdGVzIG9mIGlkZW50aWZ5aW5nIGNsYWltcyBoYXZlIGEgc3Bl Y2lmaWMgc2hhcmVkDQogICAgICAgID4+ICAgICAgICAgaW50ZW5kIGluIHRoaXMgY29udGV4dCB0 aG91Z2gsIEkgdGhpbms6IGV4cHJlc3NpbmcgQXR0ZXN0YXRpb24NCiAgICAgICAgPj4gICAgICAg ICBQcm92ZW5hbmNlIChhZ2FpbiAtIG9uZSBmb3Igb25lIG9yIG1vcmUgdGhpbmdzIG9mIHRoZSBz YW1lIGtpbmQpLiBBbmQNCiAgICAgICAgPj4gICAgICAgICBhbGwgb2YgdGhlbSBvcmlnaW5hdGUg ZnJvbSBDbGFpbWFudHMgYW5kIHRoZXJlZm9yZSB1c2UgYSByb290IG9mIHRydXN0DQogICAgICAg ID4+ICAgICAgICAgb2YgbWVhc3VyZW1lbnQsIEkgdGhpbmsuDQogICAgICAgID4+ICAgICAgICAg ICAgICBUaGF0IHNhaWQsIGVzdGFibGlzaGluZyB0cnVzdHdvcnRoeSBrbm93bGVkZ2UgYWJvdXQg YXR0ZXN0YXRpb24NCiAgICAgICAgPj4gICAgICAgICBwcm92ZW5hbmNlIGlzIG9ubHkgdGhlIGZp cnN0IHN0ZXAgYW5kIHByb3ZpZGVzIHRoZSBmb3VuZGF0aW9uIGZvciBtb3JlDQogICAgICAgID4+ ICAgICAgICAgY29tcGxleCBhdHRlc3RhdGlvbiBwcm9jZWR1cmVzLiBJbiBhbnkgY2FzZSwgdGhp cyBzZWVtIHRvIGJlIHJlcXVpcmVkIGJ5DQogICAgICAgID4+ICAgICAgICAgZXZlcnkgc2NlbmFy aW8gdGhhdCB3YXMgaGlnaGxpZ2h0ZWQgc28gZmFyIGFuZCB0aGVyZWZvcmUgd2lsbCBtb3N0DQog ICAgICAgID4+ICAgICAgICAgY2VydGFpbmx5IGJlIGNvdmVyZWQgaW4gYSBkZWxpdmVyYWJsZS4N CiAgICAgICAgPj4gICAgICAgICAgICAgIElIVEgsDQogICAgICAgID4+ICAgICAgICAgICAgICBI ZW5rDQogICAgICAgID4+ICAgICAgICAgICAgICAgICAgIE9uIDEwLzE1LzIwMTggMTI6MjIgUE0s IEplcmVteSBPJ0Rvbm9naHVlIHdyb3RlOg0KICAgICAgICA+PiAgICAgICAgID4gT24gMTIgT2N0 IDIwMTgsIGF0IDE0OjMzLCBEZW5pcyA8ZGVuaXMuaWV0ZkBmcmVlLmZyDQogICAgICAgID4+ICAg ICAgICAgPiA8bWFpbHRvOmRlbmlzLmlldGZAZnJlZS5mcj4+IHdyb3RlOg0KICAgICAgICA+PiAg ICAgICAgID4+IFRoZSAiUHJvYmxlbSBTdGF0ZW1lbnQiIGNvbnRpbnVlcyBhcyBmb2xsb3dzOg0K ICAgICAgICA+PiAgICAgICAgID4+DQogICAgICAgID4+ICAgICAgICAgPj4gKDIpIFRvZGF5LCB0 aGVyZSBpcyBubyBjb21tb24sIHN0YW5kYXJkIHdheSBmb3IgUmVseWluZyBQYXJ0aWVzIHRvDQog ICAgICAgID4+ICAgICAgICAgPj4ga25vdyB0aGUgcHJvdmVuYW5jZSBhbmQgY2hhcmFjdGVyaXN0 aWNzIG9mIGEgZGV2aWNlIChlLmcuLCBhbiBlbmQtdXNlcg0KICAgICAgICA+PiAgICAgICAgID4+ IGRldmljZSwNCiAgICAgICAgPj4gICAgICAgICA+PiBwbGF0Zm9ybSBvciBlbmRwb2ludCwgc2Vy dmVycywgSW9UIGRldmljZXMsIGRldmljZSBzdWJzeXN0ZW1zIGFuZA0KICAgICAgICA+PiAgICAg ICAgID4+IHN1Yi1tb2R1bGVzKSB0aGF0IG1heSBiZSByZXF1ZXN0aW5nIHNlcnZpY2VzLg0KICAg ICAgICA+PiAgICAgICAgID4+DQogICAgICAgID4+ICAgICAgICAgPj4gS25vd2luZyB0aGUgcHJv dmVuYW5jZSBvZiB0aGUgZGV2aWNlIGlzIG5vdCBhbHdheXMgbmVjZXNzYXJ5LiBXaGF0IGlzDQog ICAgICAgID4+ICAgICAgICAgPj4gaW1wb3J0YW50IGlzIHRvIGtub3cgdGhhdCBhIHNwZWNpZmlj IHNldCBvZiBmdW5jdGlvbnMgaXMgKHNlY3VyZWx5KQ0KICAgICAgICA+PiAgICAgICAgID4+IHN1 cHBvcnRlZCBieSB0aGUgZGV2aWNlLg0KICAgICAgICA+PiAgICAgICAgID4+IFRoZXJlIGFscmVh ZHkgZXhpc3RzIGEgY29tbW9uIHdheSB0byBrbm93IHRoZSBjaGFyYWN0ZXJpc3RpY3Mgb2YgYQ0K ICAgICAgICA+PiAgICAgICAgID4+IGRldmljZSBieSBpc3N1aW5nIHRvIHRoZSBkZXZpY2UgYSBw dWJsaWMga2V5IGNlcnRpZmljYXRlIHdoaWNoIHdpbGwNCiAgICAgICAgPj4gICAgICAgICA+PiBv bmx5IGJlIGlzc3VlZCB0byB0aGUgZGV2aWNlDQogICAgICAgID4+ICAgICAgICAgPj4gaWYgaXQg ZnVsZmlsbHMgYW4gZXhwZWN0ZWQgc2V0IG9mIGZ1bmN0aW9uYWxpdGllcy4gSW4gc3VjaCBhIGNh c2UgYQ0KICAgICAgICA+PiAgICAgICAgID4+IHN5bnRheCBmb3IgYSB0cnVzdGVkIGNsYWltIHNl dHMqKmlzIG5vdCBuZWVkZWQuDQogICAgICAgID4+ICAgICAgICAgPj4NCiAgICAgICAgPj4gICAg ICAgICA+IFRoaXMgaXMgaW5kZWVkIGEgcG9zc2libGUgd2F5IHRvIGFkZHJlc3MgdGhlIHByb2Js ZW0sIGJ1dCBzdWZmZXJzIGZyb20NCiAgICAgICAgPj4gICAgICAgICA+IGNoYWxsZW5nZXMgd2hp Y2ggY29tZSBkb3duIHRvOg0KICAgICAgICA+PiAgICAgICAgID4NCiAgICAgICAgPj4gICAgICAg ICA+IC0gV2hvIGlzc3VlcyBzdWNoIGNlcnRpZmljYXRlcy4gQW4gb3B0aW9uIGlzIHRoYXQgdGhl cmUgaXMgc29tZSBmb3JtIG9mDQogICAgICAgID4+ICAgICAgICAgPiBzZWN1cml0eSBjZXJ0aWZp Y2F0aW9uIGJlaGluZCB0aGlzIGlzc3VhbmNlIG90aGVyd2lzZSBpdCBpcyBvZiB2ZXJ5DQogICAg ICAgID4+ICAgICAgICAgPiBsaW1pdGVkIHZhbHVlLg0KICAgICAgICA+PiAgICAgICAgID4gLSBJ biBvcmRlciB0byBjYXB0dXJlIHRoZSB3aWRlIHZhcmlldHkgb2YgZGlmZmVyZW50IGRldmljZXMg KEkgcHJlZmVyDQogICAgICAgID4+ICAgICAgICAgPiAiZW50aXR5IiBoZXJlIGFzIGl0IGlzIG1v cmUgZ2VuZXJhbCB0aGFuICJkZXZpY2UiKSwgbWFueSBkaWZmZXJlbnQgZm9ybXMNCiAgICAgICAg Pj4gICAgICAgICA+IG9mIHN1Y2ggY2VydGlmaWNhdGVzIHdvdWxkIGJlIHJlcXVpcmVkLiBUaGlz IGVuZHMgdXAgYmVpbmcgbXVjaCB0aGUgc2FtZQ0KICAgICAgICA+PiAgICAgICAgID4gdGhpbmcg YXMgYSBzZXQgb2YgY2xhaW1zLg0KICAgICAgICA+PiAgICAgICAgID4NCiAgICAgICAgPj4gICAg ICAgICA+IEdpdmVuIHRoZSBtdWx0aXBsaWNpdHkgb2YgZW50aXRpZXMgZm9yIHdoaWNoIGF0dGVz dGF0aW9uIG1pZ2h0IGJlDQogICAgICAgID4+ICAgICAgICAgPiB1c2VmdWwsIGl0IHNlZW1zIHRv IG1lIHRoYXQgaGF2aW5nIHRoZSBlbnRpdHkgY3JlYXRvci9tYW51ZmFjdHVyZXINCiAgICAgICAg Pj4gICAgICAgICA+IHByb3ZpZGUgYSBzZXQgb2YgY2xhaW1zIHdoaWNoIGNhbiBiZSB2ZXJpZmll ZCBpcyBtb3JlIGZsZXhpYmxlIHRoYW4NCiAgICAgICAgPj4gICAgICAgICA+IHJlcXVpcmluZyBh IGNlcnRpZmljYXRlLiBJdCBzZWVtcyBsaWtlbHkgdG8gbWUgdGhhdCB3aGVyZSBhIGZvcm1hbA0K ICAgICAgICA+PiAgICAgICAgID4gc2VjdXJpdHkgY2VydGlmaWNhdGlvbiBpcyBuZWVkZWQgdGhl cmUgd2lsbCBiZSBhIGNlcnRpZmljYXRlIGlzc3VlZCBieQ0KICAgICAgICA+PiAgICAgICAgID4g dGhlIENlcnRpZnlpbmcgQm9keSBhcyBvbmUgb2YgdGhlIGNsYWltcyBhYm91dCBhbiBlbnRpdHks IGJ1dCBJIGNhbg0KICAgICAgICA+PiAgICAgICAgID4gdGhpbmsgb2YgbWFueSBjYXNlcyAoc3Vw cGx5IGNoYWluIG1hbmFnZW1lbnQsIHRvIHRha2UganVzdCBvbmUgZXhhbXBsZSkNCiAgICAgICAg Pj4gICAgICAgICA+IHdoZXJlIHByb3ZlbmFuY2UgaXMgYnkgZmFyIHRoZSBtb3N0IHVzZWZ1bCBp bmZvcm1hdGlvbi4NCiAgICAgICAgPj4gICAgICAgICA+DQogICAgICAgID4+ICAgICAgICAgPiBJ J20gbm90IGluIGZhdm91ciBvZiBjaGFuZ2VzIHRvIHRoZSBjaGFydGVyIGluIHRoaXMgZGlyZWN0 aW9uLg0KICAgICAgICA+PiAgICAgICAgID4+DQogICAgICAgID4+ICAgICAgICAgPj4gVGhlIHNp bXBsZXN0IGNhc2VzIHNob3VsZCBhbHNvIGJlIHBhcnQgb2YgdGhlIGZyYW1ld29yay4NCiAgICAg ICAgPj4gICAgICAgICA+Pg0KICAgICAgICA+PiAgICAgICAgID4+IE5vdGU6IEkgcGVyc29uYWxs eSBhcHByZWNpYXRlIHRoYXQgcHJpdmFjeSBpcyBhbiBhc3BlY3QgdGhhdA0KICAgICAgICA+PiAg ICAgICAgID4+IHdpbGwvc2hvdWxkIGJlIHRha2VuIGludG8gY29uc2lkZXJhdGlvbi4NCiAgICAg ICAgPj4gICAgICAgICA+Pg0KICAgICAgICA+PiAgICAgICAgID4+IERlbmlzDQogICAgICAgID4+ ICAgICAgICAgPj4NCiAgICAgICAgPj4gICAgICAgICA+Pj4gQXMgd2l0aCB0aGUgZWFybGllciBk cmFmdCwgdGhlcmUgYXJlIG1hbnkgcmVmZXJlbmNlcyB0byB2ZXJpZnkgYW5kDQogICAgICAgID4+ ICAgICAgICAgPj4+IHZlcmlmaWVyIGluIHRoZSBsZWFkIHVwIHRvIHRoZSBkZWxpdmVyYWJsZSBi dXQgbm8gZGVsaXZlcmFibGVzIGRlc2NyaWJpbmcNCiAgICAgICAgPj4gICAgICAgICA+Pj4gdmVy aWZpY2F0aW9uIHJ1bGVzLiBJJ2QgbGlrZSB0byBzZWUgcnVsZXMgaW4gb25lIG9mIHRoZXNlIGRv Y3VtZW50cyBhbmQNCiAgICAgICAgPj4gICAgICAgICA+Pj4gdGhpbmsgaXQgd29ydGggY2l0aW5n IGluIHRoZSBkZWxpdmVyYWJsZXMuIEFyZSBiaW5kaW5ncyB0byBjZXJ0aWZpY2F0ZQ0KICAgICAg ICA+PiAgICAgICAgID4+PiBtYW5hZ2VtZW50IHByb3RvY29scyBvdXQgb2Ygc2NvcGU/DQogICAg ICAgID4+ICAgICAgICAgPj4+DQogICAgICAgID4+ICAgICAgICAgPj4+IE9uIDEwLzExLzE4LCA5 OjQ5IEFNLCAiUkFUUyBvbiBiZWhhbGYgb2YgSGVuayBCaXJraG9seiINCiAgICAgICAgPj4gICAg ICAgICA+Pj4gPHJhdHMtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgaGVuay5iaXJraG9s ekBzaXQuZnJhdW5ob2Zlci5kZT4gIHdyb3RlOg0KICAgICAgICA+PiAgICAgICAgID4+Pg0KICAg ICAgICA+PiAgICAgICAgID4+Pj4gSGkgYWxsLA0KICAgICAgICA+PiAgICAgICAgID4+Pj4NCiAg ICAgICAgPj4gICAgICAgICA+Pj4+IHNvcnJ5IGZvciB0aGUgZGVsYXkuIFBsZWFzZSBmaW5kIGFu IHVwZGF0ZWQgY2hhcnRlciBwcm9wb3NhbCBoZXJlOg0KICAgICAgICA+PiAgICAgICAgID4+Pj4N CiAgICAgICAgPj4gICAgICAgICA+Pj4+PiBodHRwczovL2dpdGh1Yi5jb20vaWV0Zi1yYXRzL2No YXJ0ZXIvYmxvYi9SQzIvaWV0Zi1yYXRzLWNoYXJ0ZXIubWQNCiAgICAgICAgPj4gICAgICAgICA+ Pj4+IFRoZSBCb0YgcHJvcG9uZW50cyB0cmllZCB0byBtZXJnZSBhbGwgY29tbWVudHMgYW5kIHBy b3Bvc2FscyBvbg0KICAgICAgICA+PiAgICAgICAgID4+Pj4ga2V5c3RvcmVzLCBleGlzdGluZyBz b2x1dGlvbnMsIHByb3ZlbmFuY2UgJiBkZXZpY2UgY2hhcmFjdGVyaXN0aWNzLCBldGMNCiAgICAg ICAgPj4gICAgICAgICA+Pj4+IHRoYXQgd2VyZSByYWlzZWQgb24gdGhlIGxpc3QgLSBhbmQgYWxp Z24gdGhlbSBpbiBob21vZ2VuZW91cyBmYXNoaW9uLg0KICAgICAgICA+PiAgICAgICAgID4+Pj4N CiAgICAgICAgPj4gICAgICAgICA+Pj4+IFRoaXMgZHJhZnQgaXMgaW50ZW5kZWQgdG8gZm9jdXMg dGhlIGRpc2N1c3Npb24gYW5kIGltcHJvdmUgdGhlIHdvcmRpbmcuDQogICAgICAgID4+ICAgICAg ICAgPj4+Pg0KICAgICAgICA+PiAgICAgICAgID4+Pj4gVmllbGUgR3LDvMOfZSwNCiAgICAgICAg Pj4gICAgICAgICA+Pj4+DQogICAgICAgID4+ICAgICAgICAgPj4+PiBIZW5rDQogICAgICAgID4+ ICAgICAgICAgPj4+Pg0KICAgICAgICA+PiAgICAgICAgID4+Pj4gT24gMTAvMDYvMjAxOCAwODoy MyBBTSwgTGF1cmVuY2UgTHVuZGJsYWRlIHdyb3RlOg0KICAgICAgICA+PiAgICAgICAgID4+Pj4+ IEhpIEhlbmssDQogICAgICAgID4+ICAgICAgICAgPj4+Pj4NCiAgICAgICAgPj4gICAgICAgICA+ Pj4+PiBCYW5na29rIElFVEYgaXMgZ2V0dGluZyBjbG9zZSwgd2lsbCB5b3UgYmUgYWJsZSB0byB1 cGRhdGUgdGhlIGNoYXJ0ZXINCiAgICAgICAgPj4gICAgICAgICA+Pj4+PiBmb3IgdGhlIGF0dGVz dGF0aW9uIEJvRiB0byBwcm9wZXJseSBpbmNsdWRlIEVBVD8gIEkgc2VudCB5b3Ugc29tZSB0ZXh0 DQogICAgICAgID4+ICAgICAgICAgPj4+Pj4gdGhhdCBqdXN0IG5lZWRzIHRvIGJlIHBhc3RlZCBh bG9uZyB3aXRoIHNvbWUgY29tbWVudHMuIEl0IGRvZXNu4oCZdCBsb29rDQogICAgICAgID4+ICAg ICAgICAgPj4+Pj4gbGlrZSB0aGVyZeKAmXMgYmVlbiBhbnkgdXBkYXRlcy4NCiAgICAgICAgPj4g ICAgICAgICA+Pj4+Pg0KICAgICAgICA+PiAgICAgICAgID4+Pj4+IExMDQogICAgICAgID4+ICAg ICAgICAgPj4+Pj4NCiAgICAgICAgPj4gICAgICAgICA+Pj4+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgICAgID4+ICAgICAgICAgPj4+PiBSQVRT IG1haWxpbmcgbGlzdA0KICAgICAgICA+PiAgICAgICAgID4+Pj4gUkFUU0BpZXRmLm9yZw0KICAg ICAgICA+PiAgICAgICAgID4+Pj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9yYXRzDQogICAgICAgID4+ICAgICAgICAgPj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fDQogICAgICAgID4+ICAgICAgICAgPj4+IEVBVCBtYWlsaW5n IGxpc3QNCiAgICAgICAgPj4gICAgICAgICA+Pj4gRUFUQGlldGYub3JnDQogICAgICAgID4+ICAg ICAgICAgPj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0DQogICAg ICAgID4+ICAgICAgICAgPj4NCiAgICAgICAgPj4gICAgICAgICA+Pg0KICAgICAgICA+PiAgICAg ICAgID4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQog ICAgICAgID4+ICAgICAgICAgPj4gRUFUIG1haWxpbmcgbGlzdA0KICAgICAgICA+PiAgICAgICAg ID4+IEVBVEBpZXRmLm9yZyA8bWFpbHRvOkVBVEBpZXRmLm9yZz4NCiAgICAgICAgPj4gICAgICAg ICA+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KICAgICAgICA+ PiAgICAgICAgID4NCiAgICAgICAgPj4gICAgICAgICA+DQogICAgICAgID4+ICAgICAgICAgPg0K ICAgICAgICA+PiAgICAgICAgID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCiAgICAgICAgPj4gICAgICAgICA+IEVBVCBtYWlsaW5nIGxpc3QNCiAgICAg ICAgPj4gICAgICAgICA+IEVBVEBpZXRmLm9yZw0KICAgICAgICA+PiAgICAgICAgID4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCiAgICAgICAgPj4gICAgICAgICA+ DQogICAgICAgID4+ICAgICAgICAgICAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KICAgICAgICA+PiAgICAgICAgIEVBVCBtYWlsaW5nIGxpc3QNCiAg ICAgICAgPj4gICAgICAgICBFQVRAaWV0Zi5vcmcNCiAgICAgICAgPj4gICAgICAgICBodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KICAgICAgICA+PiAgICAgICAgICAg ICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAg ICAgID4+ICAgICBFQVQgbWFpbGluZyBsaXN0DQogICAgICAgID4+ICAgICBFQVRAaWV0Zi5vcmcN CiAgICAgICAgPj4gICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0 DQogICAgICAgID4+ICAgICBJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBl bWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJl IHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFz ZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBj b250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBz dG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQog ICAgICAgID4+DQogICAgICAgID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCiAgICAgICAgPiBFQVQgbWFpbGluZyBsaXN0DQogICAgICAgID4gRUFUQGll dGYub3JnDQogICAgICAgID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9l YXQNCiAgICANCiAgICAgICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NCiAgICAgICAgRUFUIG1haWxpbmcgbGlzdA0KICAgICAgICBFQVRAaWV0Zi5vcmcN CiAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCiAgICAN CiAgICANCiAgICANCiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgIA0K ICAgIEVzdGUgbWVuc2FqZSB5IHN1cyBhZGp1bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1c2l2YW1lbnRl IGEgc3UgZGVzdGluYXRhcmlvLCBwdWVkZSBjb250ZW5lciBpbmZvcm1hY2nDs24gcHJpdmlsZWdp YWRhIG8gY29uZmlkZW5jaWFsIHkgZXMgcGFyYSB1c28gZXhjbHVzaXZvIGRlIGxhIHBlcnNvbmEg byBlbnRpZGFkIGRlIGRlc3Rpbm8uIFNpIG5vIGVzIHVzdGVkLiBlbCBkZXN0aW5hdGFyaW8gaW5k aWNhZG8sIHF1ZWRhIG5vdGlmaWNhZG8gZGUgcXVlIGxhIGxlY3R1cmEsIHV0aWxpemFjacOzbiwg ZGl2dWxnYWNpw7NuIHkvbyBjb3BpYSBzaW4gYXV0b3JpemFjacOzbiBwdWVkZSBlc3RhciBwcm9o aWJpZGEgZW4gdmlydHVkIGRlIGxhIGxlZ2lzbGFjacOzbiB2aWdlbnRlLiBTaSBoYSByZWNpYmlk byBlc3RlIG1lbnNhamUgcG9yIGVycm9yLCBsZSByb2dhbW9zIHF1ZSBub3MgbG8gY29tdW5pcXVl IGlubWVkaWF0YW1lbnRlIHBvciBlc3RhIG1pc21hIHbDrWEgeSBwcm9jZWRhIGEgc3UgZGVzdHJ1 Y2Npw7NuLg0KICAgIA0KICAgIFRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyB0cmFu c21pc3Npb24gaXMgcHJpdmlsZWdlZCBhbmQgY29uZmlkZW50aWFsIGluZm9ybWF0aW9uIGludGVu ZGVkIG9ubHkgZm9yIHRoZSB1c2Ugb2YgdGhlIGluZGl2aWR1YWwgb3IgZW50aXR5IG5hbWVkIGFi b3ZlLiBJZiB0aGUgcmVhZGVyIG9mIHRoaXMgbWVzc2FnZSBpcyBub3QgdGhlIGludGVuZGVkIHJl Y2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgZGlzc2VtaW5hdGlvbiwg ZGlzdHJpYnV0aW9uIG9yIGNvcHlpbmcgb2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5 IHByb2hpYml0ZWQuIElmIHlvdSBoYXZlIHJlY2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVy cm9yLCBkbyBub3QgcmVhZCBpdC4gUGxlYXNlIGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBzZW5k ZXIgdGhhdCB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IgYW5k IHRoZW4gZGVsZXRlIGl0Lg0KICAgIA0KICAgIEVzdGEgbWVuc2FnZW0gZSBzZXVzIGFuZXhvcyBz ZSBkaXJpZ2VtIGV4Y2x1c2l2YW1lbnRlIGFvIHNldSBkZXN0aW5hdMOhcmlvLCBwb2RlIGNvbnRl ciBpbmZvcm1hw6fDo28gcHJpdmlsZWdpYWRhIG91IGNvbmZpZGVuY2lhbCBlIMOpIHBhcmEgdXNv IGV4Y2x1c2l2byBkYSBwZXNzb2Egb3UgZW50aWRhZGUgZGUgZGVzdGluby4gU2UgbsOjbyDDqSB2 b3NzYSBzZW5ob3JpYSBvIGRlc3RpbmF0w6FyaW8gaW5kaWNhZG8sIGZpY2Egbm90aWZpY2FkbyBk ZSBxdWUgYSBsZWl0dXJhLCB1dGlsaXphw6fDo28sIGRpdnVsZ2HDp8OjbyBlL291IGPDs3BpYSBz ZW0gYXV0b3JpemHDp8OjbyBwb2RlIGVzdGFyIHByb2liaWRhIGVtIHZpcnR1ZGUgZGEgbGVnaXNs YcOnw6NvIHZpZ2VudGUuIFNlIHJlY2ViZXUgZXN0YSBtZW5zYWdlbSBwb3IgZXJybywgcm9nYW1v cy1saGUgcXVlIG5vcyBvIGNvbXVuaXF1ZSBpbWVkaWF0YW1lbnRlIHBvciBlc3RhIG1lc21hIHZp YSBlIHByb2NlZGEgYSBzdWEgZGVzdHJ1acOnw6NvDQogICAgX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICBFQVQgbWFpbGluZyBsaXN0DQogICAgRUFU QGlldGYub3JnDQogICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQN CiAgICANCg0K From nobody Fri Oct 19 12:00:40 2018 Return-Path: X-Original-To: rats@ietf.org Delivered-To: rats@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B796131089; Fri, 19 Oct 2018 11:56:33 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: rats@ietf.org, kaduk@mit.edu X-Test-IDTracker: no X-IETF-IDTracker: 6.87.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <153997539356.6592.2415191209299543310.idtracker@ietfa.amsl.com> Date: Fri, 19 Oct 2018 11:56:33 -0700 Archived-At: Subject: [Rats] rats - Requested session has been scheduled for IETF 103 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Oct 2018 18:56:42 -0000 Dear Cindy Morgan, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. rats Session 1 (2:00 requested) Tuesday, 6 November 2018, Afternoon Session I 1350-1550 Room Name: Chitlada 2 size: 250 --------------------------------------------- iCalendar: https://datatracker.ietf.org/meeting/103/sessions/rats.ics Request Information: --------------------------------------------------------- Working Group Name: Remote ATtestation ProcedureS Area Name: Security Area Session Requester: Cindy Morgan Number of Sessions: 1 Length of Session(s): 2 Hours Number of Attendees: 100 Conflicts to Avoid: First Priority: i2nsf sacm cbor core ace teep suit People who must be present: Ned Smith Benjamin Kaduk Eric Voit Henk Birkholz Monty Wiseman Resources Requested: Special Requests: --------------------------------------------------------- From nobody Fri Oct 19 22:55:15 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10FD91200D7 for ; Fri, 19 Oct 2018 22:55:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QZWeGLrpGlsW for ; Fri, 19 Oct 2018 22:55:03 -0700 (PDT) Received: from p3plsmtpa06-10.prod.phx3.secureserver.net (p3plsmtpa06-10.prod.phx3.secureserver.net [173.201.192.111]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45060130E04 for ; Fri, 19 Oct 2018 22:55:02 -0700 (PDT) Received: from [192.168.0.101] ([121.46.87.45]) by :SMTPAUTH: with ESMTPSA id DkDyg7KGd6pq4DkE0gwCgy; Fri, 19 Oct 2018 22:55:02 -0700 From: Laurence Lundblade Message-Id: <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_84BA8467-B394-4993-9FF6-D1418515FEA0" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Sat, 20 Oct 2018 11:24:57 +0530 In-Reply-To: Cc: "rats@ietf.org" , "eat@ietf.org" To: Henk Birkholz References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfAXny0mCdxX24HOL/VQwVyRAMQdZ1pg3Lw6hunLJwbDDTMPg9qYBROlqMAvl7XJ9kB7D2rwI3mpJ+34tbfdjNpWItsitjXrmpPdo0ndYE7XZxehcyVk7 HDGmTSAyJaCkbw4dFFu+CiRdovpD8dbinxwtaxNPx+QVRDSrOx2luTqIjf7Lppb8b6Jl7J437iKrXvKXdFCqz2HaGfCpaPH/9vy/C9N20N33nej/SFajuqg3 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Oct 2018 05:55:07 -0000 --Apple-Mail=_84BA8467-B394-4993-9FF6-D1418515FEA0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I=E2=80=99d like to propose this for the Introduction in the charter. I = tried pretty hard to write what I wanted through edits to the existing = intro, but really couldn=E2=80=99t make it work, so this is mostly new = text. Some phrases are re used. Apologies for not finding a better way = to do this. I have tried to put all the ideas and concepts in Henk=E2=80=99= s original charter intro in here, though I have gone for a more abstract = conceptual level. A few more notes below. RATS enables remote parties communicating with a device to evaluate the = trustworthiness, device identity, origin of manufacture, system = integrity, configuration, operational state and other characteristics of = that device. Conceptually, the remote party ends up knowing a set of = claims about the device and using them to make the evaluation. The = claims may explicitly be transmitted or implicitly derived from other = things known about the device. Various means are used to secure, or = prove the security of, claims for the remote party. Signing of the = claims is the most important but may not be the only means of securing = the claims. These claims can provide evidence that a device supports a = certain set of operations and functions and/or that it is actually the = exact device it is supposed to be. RATS includes the measurement of SW running on the device and securely = conveying those measurements to the remote party. These measurements = enable tje remote party to evaluate device trustworthiness, that it = operates as expected, does what is required and does not do other = things. RATS may include definition of procedures by which a remote party = evaluates certain claims. For example, how some measurement or other = claims are compared to expected values to evaluate trustworthiness of = the device. RATS may include the definition new protocols and/or definition of = secured data structures (e.g., signed) that are carried in existing = protocols. RATS is general purpose and aims to address a broad range of uses cases = including on-line banking, payment transactions, critical = infrastructure, network security functions, constrained devices, = business and government enterprises and management of end-user devices. Notes: I have avoided the use of the formally defined terms in the introduction = so it can stand more on its own, is easier to understand and is less = presumption about architectures and designs. Seems like it is work for = the WG to define the terms and create the designs. My use of the lower case =E2=80=9Cdevice=E2=80=9D, =E2=80=9Cclaim=E2=80=9D= and =E2=80=9Cremote party=E2=80=9D are just as broad concepts to be = able to get the general idea across. The WG documents should use the = more formal and specific definitions. Hope I=E2=80=99ve covered both EAT and RATS concepts here. It was my = goal.=20 While I used the term RATS, I still want the WG name change to CREATE. LL > On Oct 11, 2018, at 10:19 PM, Henk Birkholz = wrote: >=20 > Hi all, >=20 > sorry for the delay. Please find an updated charter proposal here: >=20 >> https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter.md >=20 > The BoF proponents tried to merge all comments and proposals on = keystores, existing solutions, provenance & device characteristics, etc = that were raised on the list - and align them in homogeneous fashion. >=20 > This draft is intended to focus the discussion and improve the = wording. >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >> Hi Henk, >> Bangkok IETF is getting close, will you be able to update the charter = for the attestation BoF to properly include EAT? I sent you some text = that just needs to be pasted along with some comments. It doesn=E2=80=99t = look like there=E2=80=99s been any updates. >> LL >=20 > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat --Apple-Mail=_84BA8467-B394-4993-9FF6-D1418515FEA0 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
I=E2=80=99d like to propose this for the Introduction in the = charter. I tried pretty hard to write what I wanted through edits to the = existing intro, but really couldn=E2=80=99t make it work, so this is = mostly new text. Some phrases are re used. Apologies for not finding a = better way to do this. I have tried to put all the ideas and concepts in = Henk=E2=80=99s original charter intro in here, though I have gone for a = more abstract conceptual level. A few more notes below.

RATS enables remote parties = communicating with a device to evaluate the trustworthiness, device identity, origin of = manufacture, system integrity, configuration, operational state and other = characteristics of that device. Conceptually, the remote party ends up knowing a set of = claims about the device and using them to make the evaluation. The claims may explicitly be transmitted or implicitly derived from other things known = about the device. Various means are used to secure, or prove the security of, = claims for the remote party. Signing of the claims is the most important but may = not be the only means of securing the claims. These claims can provide evidence = that a device supports a certain set of operations and functions and/or that it = is actually the exact device it is supposed to be.

RATS includes the measurement of = SW running on the device and securely conveying those measurements to the remote party. =  These measurements enable tje remote party to evaluate device trustworthiness, that it operates as expected, does what = is required and does not do other things.

RATS may include definition of = procedures by which a remote party evaluates certain claims. For example, how some measurement = or other claims are compared to expected values to evaluate trustworthiness = of the device.

RATS may include the definition = new protocols and/or definition of secured data structures (e.g., signed) that are carried in existing protocols.

RATS is general purpose and aims = to address a broad range of uses cases including on-line banking, payment transactions, = critical infrastructure, network security functions, constrained devices, = business and government enterprises and management of end-user = devices.

Notes:

  • I have avoided the use of the formally defined terms in the introduction so it can stand more on its own, is easier to = understand and is less presumption about architectures and designs. = Seems like it is work for the WG to define the terms and create the = designs.
  • My use of the lower case = =E2=80=9Cdevice=E2=80=9D, =E2=80=9Cclaim=E2=80=9D and =E2=80=9Cremote = party=E2=80=9D are just as broad concepts to be able to get the general = idea across. The WG documents should use the more formal and specific = definitions.
  • Hope I=E2=80=99ve covered both EAT and = RATS concepts here. It was my goal. 
  • While I used the term RATS, I still want the WG = name change to CREATE.

LL


On Oct = 11, 2018, at 10:19 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hi = all,

sorry for the delay. Please find an = updated charter proposal here:

https://github.com/ietf-rats/charter/blob/RC2/ietf-rats-charter= .md

The BoF proponents = tried to merge all comments and proposals on keystores, existing = solutions, provenance & device characteristics, etc that were raised = on the list - and align them in homogeneous fashion.

This draft is intended to focus the discussion and improve = the wording.

Viele Gr=C3=BC=C3=9Fe,

Henk

On = 10/06/2018 08:23 AM, Laurence Lundblade wrote:
Hi Henk,
Bangkok IETF is getting = close, will you be able to update the charter for the attestation BoF to = properly include EAT?  I sent you some text that just needs to be = pasted along with some comments. It doesn=E2=80=99t look like there=E2=80=99= s been any updates.
LL

_______________________________________________
EAT mailing list
EAT@ietf.org
https://www.ietf.org/mailman/listinfo/eat

= --Apple-Mail=_84BA8467-B394-4993-9FF6-D1418515FEA0-- From nobody Fri Oct 19 23:20:03 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A5D2130DE1 for ; Fri, 19 Oct 2018 23:20:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8R74nBVd0UFH for ; Fri, 19 Oct 2018 23:19:55 -0700 (PDT) Received: from p3plsmtpa09-04.prod.phx3.secureserver.net (p3plsmtpa09-04.prod.phx3.secureserver.net [173.201.193.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 76A67127332 for ; Fri, 19 Oct 2018 23:19:55 -0700 (PDT) Received: from [192.168.0.101] ([121.46.87.45]) by :SMTPAUTH: with ESMTPSA id Dkc0g5HcQU0tzDkc2gYnyF; Fri, 19 Oct 2018 23:19:54 -0700 From: Laurence Lundblade Message-Id: <09818298-9FE1-430A-8045-A9A7E76ED64C@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_D378EF7E-FBBB-4902-A402-28A3E812D93B" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Sat, 20 Oct 2018 11:49:47 +0530 In-Reply-To: <9c73f9b7-9129-c273-254e-465f92ab3650@sit.fraunhofer.de> Cc: "rats@ietf.org" , Guy Fedorkow , Denis , Hannes Tschofenig , "Smith, Ned" , Jeremy O'Donoghue , "eat@ietf.org" To: Henk Birkholz References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> <9c73f9b7-9129-c273-254e-465f92ab3650@sit.fraunhofer.de> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfC118lAFRbPw/waZ4jWa1yE0+d9yus6JLcWFTJ2QihLM3Sx29fJO0XDTLS7PKHCllQPR4bFBFaEreamPqx7YM/ojgBgEC3RIn9tyGWaZs+P9vSYC2Ujf nMgSRynIwlLm5YuYXufMjg6ccPID1XF5XFWrvxax5nCUCuyzwDkE/gD5qoB7LGUSN0CU8b5ge+GDDpx3Iwbsi55uKiibsc2IuVmxO58cOx9zpBow6wVv672Q GONJ3iWOOTMTaWc354YbNr+zIgheYrJubKPYhZDsSvCiYl4QF4N8pxX+vxIo+JehhKza4d2j6fmcF2XLf80QGN9KDZpZFpJHqnVm47zbq3ZErRvU0ndSaU0O Hh5hekvm6zt49Kp67IMSoIr4nBdK9cZxyzE2oJdemMJNcIhfadU= Archived-At: Subject: [Rats] Device Identity (was Re: [EAT] [EXTERNAL] Re: Attestation BoF charter updates?) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Oct 2018 06:20:01 -0000 --Apple-Mail=_D378EF7E-FBBB-4902-A402-28A3E812D93B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I consider device identity an absolute critical part of our work. It is = a critical part of most EAT use cases such as enrollment of IoT devices = with IoT management systems. It is the first claim defined in EAT.=20 What is the definition of an =E2=80=9Cidentity document=E2=80=9D? Maybe = you are thinking of it specifically as what was defined for IEEE Dev ID. = If I recall, the identification claims for the device are in the subject = DN of an X.509 certificate.=20 Seems like any EAT with an EUID in it could server well as an identity = document too. It provides signed, secured proof of the identity of the = device. It can include manufacturer info in addition to the EUID. The = EAT style identity could be as tiny as 150 bytes in CBOR syntax. All you = need to store on the device is the EUID and the signing key. Maybe they = are even deterministically KDF=E2=80=99d from the same seed so you maybe = you only need to store 32 bytes on the device. EAT=E2=80=99s mention of X.509 in 1.4.2 is as one of many ways to = establish key material so the remote / relying / verifying party can = verify the signature. So yes, I think you have it correct below. = (Technically speaking the private key associated with the X.509 cert is = used to sign, not the X.509 cert or keys in the cert. The X.509 is only = to help the verifier find and verify the verification key. You might = even have a means to get it from some service based on a key ID and not = even store it on the device). It is an EAT design goal to keep all the claims in the signed payload. = That includes identity of the device, identity of the manufacturer and = so on. That way you can use many different signing schemes (ECDAA, = symmetric key, non-X.509 public key, X.509 pubic key, simple public key = with just a key id=E2=80=A6) with the same claims. LL > On Oct 17, 2018, at 5:49 PM, Henk Birkholz = wrote: >=20 > Hi Laurence, >=20 > maybe I understand now where the general confusion is originating = from. >=20 > I dug through some parts of the EAT draft again and could it be that = UIED are identifier and not an identities? They literally are claims = (aka assertions) that can be signed as content of a CWT as illustrated = in >=20 >> https://tools.ietf.org/html/draft-mandyam-eat-00#section-1.4.2 >=20 > 1.4.2. talks about identity documents by mentioning "X.509 certificate = chains or something similar but different". But as you highlighted = anything with regard to that is explicitly intended _not_ to go into the = EAT claim set as content, but is stored on the thing (or maybe on a = thing that signs "on behalf of" the thing the EAT is about?) and = consequently is only used to potentially sign the EAT claim set (via = COSE). Is that correct? >=20 > As a result, an EAT would never be able to act as an identity document = itself, but the key material that comes along with an x.509 certificate = (as one example of many highlighted) could be used to sign the EAT. >=20 > RATS are able to use the "X.509 certificate chains or something = similar but different" and the corresponding key material comes along = with a certificate (as one example amongst others) to establish = Attestation Provenance. >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > On 10/17/2018 01:19 PM, Laurence Lundblade wrote: >> Wasn=E2=80=99t saying there was ambiguity in the TCG case. Not being = a TCGer, was just was trying to understand what the TCG definition is. >> Your mentioning 802.1AR DevID helps a lot as I have some knowledge of = it. >> I see now that my speculation about SW / config version was wrong. = That=E2=80=99s fine. I only wrote it to try to get to clarity. >> Thanks for help clarifying. >> In EAT, we defined a UEID for what TCGer=E2=80=99s mean by = =E2=80=9Cidentity": >> UEID's identify individual manufactured entities / devices such as = a >> mobile phone, a water meter, a Bluetooth speaker or a networked >> security camera. It may identify the entire device or a submodule = or >> subsystem. It does not identify types, models or classes of = devices. >> It is akin to a serial number, though it does not have to be >> sequential. >> See here = for more = on UEID. >> In EAT there is a strong desire to separate the signing key material = from UEID to have flexibility in the signing scheme. For example FIDO = and Android both have privacy-preserving schemes were a signing key is = shared by 100,000 devices. (Some use cases need privacy, some don=E2=80=99= t, perhaps because of legal agreements with customers, and correlation = between use cases and privacy schemes can=E2=80=99t be counted on for = high-volume devices like mobile phones). >> I don=E2=80=99t know what the right answer(s) is(are) in the design = yet... >> LL >>> On Oct 17, 2018, at 4:26 PM, Guy Fedorkow > wrote: >>>=20 >>> Hi Laurence, >>> I don't think there's ambiguity in the TCG case... current work in = attestation focuses on using the 802.1AR DevID spec, which corresponds = exactly to one of your cases below -- it's a vendor, model and serial = number. >>> It's true that TCG technology can be used to validate software = integrity, but that's hardly the same as identity. >>> Considerations of user privacy commonly accepted in TCG would = preclude the inclusion of software state as part of identity, = practicalities aside. In general, privacy considerations lead TCG to = carefully avoid unauthorized disclosure of either software or hardware = based assertions. >>> Let me know if I'm missing the point... >>> Thanks >>> /guy fedorkow, juniper networks >>>=20 >>> -----Original Message----- >>> From: Laurence Lundblade > >>> Sent: Wednesday, October 17, 2018 12:31 AM >>> To: Henk Birkholz > >>> Cc: Smith, Ned >; = Hannes Tschofenig >; rats@ietf.org = ; Jeremy O'Donoghue >; Denis >; eat@ietf.org >>> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter = updates? >>>=20 >>> I think the TCG has a certain developed notion of identity that is = different from others. A way to get sharper about what a particular = identity means is to describe the space and how the identifier selects = in the space. Here=E2=80=99s a few examples: >>>=20 >>> - The space is physical human beings with fingers. A fingerprint = scanner select one of these humans. This is typical biometric auth. >>> - The space is humans that know a password. A password authenticator = selects the humans that know the password. Typical authentication. >>> - The space is humans as legal entities / citizens with criminal = records, passports and such. A national ID selects. >>> - The space is physical manufactured devices from one maker. A = serial number narrows it down to one physical device. >>> - The space is physical devices from one maker. A model number or = version, narrows down to a subset of these devices. >>>=20 >>> My understanding of the TCG world is that identities goes beyond any = of the above because they include things like the version of the SW and = configuration of the device. The identity is largely a hash of an = identifier of the physical device, various SW components and various = configuration states. The point being that a change in any of these is = a change in the security characteristics of the device and if it was = trusted with a particular key or particular data in the past, that trust = should be revoked until re established. >>>=20 >>> - The space is physical devices from any maker >>> + Measurement of the SW (the SW versions) >>> + Measurements of some configuration >>>=20 >>> Changing any of these change the identity of the device. >>>=20 >>> I know I hardly need to ask, but TCG folks, did I describe this = correctly? >>>=20 >>>=20 >>> So that said, many, perhaps most, use cases for EAT do not want this = kind of device identity. It is not a prerequisite for trusting claims = coming from the device. In some cases this level of identity seems = extremely disruptive as small SW upgrades could result in re enrollment = of biometrics. We already are annoyed when we have to answer security = questions when start using a service from a new device. >>>=20 >>> I think this WG needs to address both this very tight TCG-style = device identity and the more heuristic EAT-style = claims-for-risk-engines. I could see multi-decade evolution where risk = engine use cases want more and more of the tight TCG-style device = identity as criminals become more adept at forging EAT-style claims. = (Today risk engines work off of unsecured browser parameters). >>>=20 >>> The Introduction in the charter seems entirely focused on the = TCG-based identity use case. I think text should be added for EAT-style = attestation. I will write some after some comments on this message. >>>=20 >>> LL >>>=20 >>>=20 >>>=20 >>>=20 >>>=20 >>>> On Oct 16, 2018, at 8:24 PM, Henk Birkholz = > wrote: >>>>=20 >>>> To quote Carsten, there is "the usual terminology problem about = identity". >>>>=20 >>>> Identifying vs. Identity brings back memories about an extensive = discussion in SACM that in the end resulted in using Profiles... >>>>=20 >>>> Profiles are the "things" that you can aggregate identity claims in = (in SACM these claims are "Target Endpoint Characteristics", which are = pretty much the same thing as Device Characteristics) - and you use the = Profiles to (re-)identify target endpoints. >>>>=20 >>>> In the scope of remote attestation procedures, I think that "just = not calling" claim sets that are composed (amongst others) of = identifying claims "identity documents" might just end up in making up = another name for something that is effectively composing identity = documents anyways. If calling the same thing something else helps in = some way, I am all for it. But I am really not sure. >>>>=20 >>>> That said, Ned's elaboration on the relationship of identity and = attestation claims and corresponding claim semantics / trust semantics = is spot on, I think. >>>>=20 >>>> Viele Gr=C3=BC=C3=9Fe, >>>>=20 >>>> Henk >>>>=20 >>>> On 10/16/2018 03:51 PM, Smith, Ned wrote: >>>>> Agree with Hannes that identity discussion can lead to confusion = as identity is often highly dependent on some sort of context (domain of = interpretation). >>>>> In order to have productive conversation about attestation and = identity, it may be important to understand that attestation semantics = sets the context for identity. >>>>> * Attestation attributes have trust semantics (and trust semantics = are interpreted through the eyes of the verifier). Identity attributes = may also have trust semantics (in addition to identity semantics) hence = can be regarded as playing a role in both identity and attestation. = Since RATS should be interested primarily in trust semantics, it makes = sense to understand, discuss and consider identity in terms of its trust = semantics. Hence identity attributes are only interesting to RATS if = they are useful for evaluating trust semantics. >>>>> * In a closed ecosystem, the trust characteristics and properties = may be implied because there often exists out-of-band processes that = ensure the characteristics are applied (for example, if an IT = organization sets a policy that all asymmetric keys are to be hardened = using a smartcard, they can apply a deployment process where the IT = professional verifies the smartcard is used during enrollment.) But in a = non-closed ecosystem, there isn't an assumption that out-of-band = processes exist. Attestation attempts to make explicit what otherwise is = implicit and therefore subject to misinterpretation if the verifier, = relying party and attester are not part of the same closed ecosystem. = Implicit attestation therefore can lead to semantic confusion if we're = not careful. Therefore, the rigor of treating implicit attestation = claims (assertions assumed to exist but not explicitly named) should = nevertheless be defined explicitly. Then, if there is a need for = implicit attestation, the specifications that describe them can describe = them in terms of an explicit definition. >>>>> * In the context of asserting trust characteristics, the verifier = needs to know that a set of characteristics applies to the instance of = the endpoint being evaluated (aka the attester). (Otherwise a MITM could = supply characteristics that may be valid, but don=E2=80=99t apply to the = specific instance). Consequently, it makes sense to consider that = *attestation* keys are needed to authenticate the endpoint being = evaluated. This doesn't imply an identity key couldn't double as an = attestation key. But if it does, we care about its relevance to the = attester endpoint. >>>>> -Ned >>>>> =EF=BB=BFOn 10/15/18, 6:49 PM, "Hannes Tschofenig" = > wrote: >>>>> Here are my 5 cents on the term 'identity'. >>>>> I have been working on identity management for many years = (partially because of my OAuth co-chair role) and I have noticed that = the use of the term "identity" tends to confuse more than it helps (even = more so when the term is applied to devices and software rather than = humans). >>>>> I believe we could get away with describing what we want = without ever using the term. >>>>> In this context I would argue that we are about = identifying different components, such as hardware and software. >>>>> Ciao >>>>> Hannes >>>>> -----Original Message----- >>>>> From: EAT > = On Behalf Of Smith, Ned >>>>> Sent: Monday, October 15, 2018 9:00 AM >>>>> To: Henk Birkholz >; rats@ietf.org = ; Jeremy O'Donoghue >; Denis > >>>>> Cc: eat@ietf.org >>>>> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF = charter updates? >>>>> I agree with Henk's observation that there is opportunity = to find common ground on identity as identity can be a collection of = attributes, that if signed, becomes a set of verifiable claims (about = identity attributes). Attestation has a similar structure in that it = consists of a set of attributes, that if signed becomes a set of = verifiable claims. The main difference between identity and attestation = attributes is whether the attribute semantically relate to trust (vs. = identity). For example, claims of security certification compliance = resonates as attestation. >>>>> It may be possible to combine a set of attestation = attributes in such a way that the combination uniquely identifies an = entity. But that doesn't make it an identity system per se and shouldn't = cause a conflict in charter goals with respect to other identity focused = efforts in IETF. >>>>> Also, inclusion of attributes that don't have semantics = that reasonably relate to trust should not be of interest to a working = group focused on attestation. >>>>> -Ned >>>>> On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" = on behalf of = henk.birkholz@sit.fraunhofer.de = > wrote: >>>>> Hi Jeremy & Denis, >>>>> all these points of view have merit, I think. >>>>> Please have a look at these quotes: >>>>>> knowing the provenance of the device >>>>>> having the entity creator/manufacturer provide a set of claims = which can be verified >>>>>> to know the characteristics of a device by issuing to the device = a public key certificate which will only be issued to the device if it = fulfills an expected set of functionalities. >>>>> To me, these descriptions seem to have different = intents, scope or >>>>> audience and require most certainly different work-flows, = but >>>>> semantically and in consequence representation-wise they = also seem quite >>>>> related. >>>>> If you think of an identity document as a set of = claims (potentially >>>>> including a public key), that is signed and that can match = one or more >>>>> things, maybe all three types highlighted above are = actually covered by >>>>> the same identity document concept? >>>>> With respect to identity documents, I think it is safe = so say that we >>>>> can find common ground here rather easily. That said, the = way how these >>>>> identity documents come into existence, when and how they = are deployed >>>>> on the thing or associated with multiple things is another = question. We >>>>> most certainly do not want to end up with a "signing fool" = that does not >>>>> add value to the level of confidence (I am quoting Ned = Smith here). >>>>> This has to be fleshed out explicitly for each = scenario and the parts >>>>> that are reused in every scenario should get special = attention in the >>>>> upcoming RATS architecture draft. >>>>> Identifying claims aggregated in an identity document = most certainly can >>>>> include device characteristics, public key(s), or claims = about the >>>>> intended functions and capabilities of the thing. Claims = can even >>>>> originate from Claimants that are not the thing itself, but = external >>>>> entities providing an assertion (e.g. these things are = CC-certified). >>>>> All different composites of identifying claims have a = specific shared >>>>> intend in this context though, I think: expressing = Attestation >>>>> Provenance (again - one for one or more things of the same = kind). And >>>>> all of them originate from Claimants and therefore use a = root of trust >>>>> of measurement, I think. >>>>> That said, establishing trustworthy knowledge about = attestation >>>>> provenance is only the first step and provides the = foundation for more >>>>> complex attestation procedures. In any case, this seem to = be required by >>>>> every scenario that was highlighted so far and therefore = will most >>>>> certainly be covered in a deliverable. >>>>> IHTH, >>>>> Henk >>>>> On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: >>>>>> On 12 Oct 2018, at 14:33, Denis >>>>>> > wrote: >>>>>>> The "Problem Statement" continues as follows: >>>>>>>=20 >>>>>>> (2) Today, there is no common, standard way for Relying Parties = to >>>>>>> know the provenance and characteristics of a device (e.g., an = end-user >>>>>>> device, >>>>>>> platform or endpoint, servers, IoT devices, device subsystems = and >>>>>>> sub-modules) that may be requesting services. >>>>>>>=20 >>>>>>> Knowing the provenance of the device is not always necessary. = What is >>>>>>> important is to know that a specific set of functions is = (securely) >>>>>>> supported by the device. >>>>>>> There already exists a common way to know the characteristics of = a >>>>>>> device by issuing to the device a public key certificate which = will >>>>>>> only be issued to the device >>>>>>> if it fulfills an expected set of functionalities. In such a = case a >>>>>>> syntax for a trusted claim sets**is not needed. >>>>>>>=20 >>>>>> This is indeed a possible way to address the problem, but suffers = from >>>>>> challenges which come down to: >>>>>>=20 >>>>>> - Who issues such certificates. An option is that there is some = form of >>>>>> security certification behind this issuance otherwise it is of = very >>>>>> limited value. >>>>>> - In order to capture the wide variety of different devices (I = prefer >>>>>> "entity" here as it is more general than "device"), many = different forms >>>>>> of such certificates would be required. This ends up being much = the same >>>>>> thing as a set of claims. >>>>>>=20 >>>>>> Given the multiplicity of entities for which attestation might be >>>>>> useful, it seems to me that having the entity = creator/manufacturer >>>>>> provide a set of claims which can be verified is more flexible = than >>>>>> requiring a certificate. It seems likely to me that where a = formal >>>>>> security certification is needed there will be a certificate = issued by >>>>>> the Certifying Body as one of the claims about an entity, but I = can >>>>>> think of many cases (supply chain management, to take just one = example) >>>>>> where provenance is by far the most useful information. >>>>>>=20 >>>>>> I'm not in favour of changes to the charter in this direction. >>>>>>>=20 >>>>>>> The simplest cases should also be part of the framework. >>>>>>>=20 >>>>>>> Note: I personally appreciate that privacy is an aspect that >>>>>>> will/should be taken into consideration. >>>>>>>=20 >>>>>>> Denis >>>>>>>=20 >>>>>>>> As with the earlier draft, there are many references to verify = and >>>>>>>> verifier in the lead up to the deliverable but no deliverables = describing >>>>>>>> verification rules. I'd like to see rules in one of these = documents and >>>>>>>> think it worth citing in the deliverables. Are bindings to = certificate >>>>>>>> management protocols out of scope? >>>>>>>>=20 >>>>>>>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" >>>>>>>> on behalf = of henk.birkholz@sit.fraunhofer.de = > wrote: >>>>>>>>=20 >>>>>>>>> Hi all, >>>>>>>>>=20 >>>>>>>>> sorry for the delay. Please find an updated charter proposal = here: >>>>>>>>>=20 >>>>>>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__github.com_ietf-2Dr= ats_charter_blob_RC2_ietf-2Drats-2Dcharter.md&d=3DDwIFaQ&c=3DHAkYuh63rsuhr= 6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VX= hmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DrPzmwhcwy8eob4eMi= wWzDg5DY-mcC5HYgQqhUGCZ2RI&e=3D >>>>>>>>> The BoF proponents tried to merge all comments and proposals = on >>>>>>>>> keystores, existing solutions, provenance & device = characteristics, etc >>>>>>>>> that were raised on the list - and align them in homogeneous = fashion. >>>>>>>>>=20 >>>>>>>>> This draft is intended to focus the discussion and improve the = wording. >>>>>>>>>=20 >>>>>>>>> Viele Gr=C3=BC=C3=9Fe, >>>>>>>>>=20 >>>>>>>>> Henk >>>>>>>>>=20 >>>>>>>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >>>>>>>>>> Hi Henk, >>>>>>>>>>=20 >>>>>>>>>> Bangkok IETF is getting close, will you be able to update the = charter >>>>>>>>>> for the attestation BoF to properly include EAT? I sent you = some text >>>>>>>>>> that just needs to be pasted along with some comments. It = doesn=E2=80=99t look >>>>>>>>>> like there=E2=80=99s been any updates. >>>>>>>>>>=20 >>>>>>>>>> LL >>>>>>>>>>=20 >>>>>>>>> _______________________________________________ >>>>>>>>> RATS mailing list >>>>>>>>> RATS@ietf.org >>>>>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_rats&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI= &r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57= -xCILnJh-EOaxl5AUwyWGM&s=3DxThsQTXgadltVkHTYpOWknadi7puxZt8O6XOIUm_bzo&e=3D= >>>>>>>> _______________________________________________ >>>>>>>> EAT mailing list >>>>>>>> EAT@ietf.org >>>>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>>>>=20 >>>>>>>=20 >>>>>>> _______________________________________________ >>>>>>> EAT mailing list >>>>>>> EAT@ietf.org >>>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>>>=20 >>>>>>=20 >>>>>>=20 >>>>>> _______________________________________________ >>>>>> EAT mailing list >>>>>> EAT@ietf.org >>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>>>=20 >>>>> _______________________________________________ >>>>> EAT mailing list >>>>> EAT@ietf.org >>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>> _______________________________________________ >>>>> EAT mailing list >>>>> EAT@ietf.org >>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>> IMPORTANT NOTICE: The contents of this email and any = attachments are confidential and may also be privileged. If you are not = the intended recipient, please notify the sender immediately and do not = disclose the contents to any other person, use it for any purpose, or = store or copy the information in any medium. Thank you. >>>>>=20 >>>> _______________________________________________ >>>> EAT mailing list >>>> EAT@ietf.org >>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>=20 >>> _______________________________________________ >>> EAT mailing list >>> EAT@ietf.org >>> https://www.ietf.org/mailman/listinfo/eat >=20 > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat --Apple-Mail=_D378EF7E-FBBB-4902-A402-28A3E812D93B Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
I consider device identity an absolute = critical part of our work. It is a critical part of most EAT use cases = such as enrollment of IoT devices with IoT management systems. It is the = first claim defined in EAT. 

What is the definition of an = =E2=80=9Cidentity document=E2=80=9D? Maybe you are thinking of it = specifically as what was defined for IEEE Dev ID. If I recall, the = identification claims for the device are in the subject DN of an X.509 = certificate. 

Seems like any EAT with an EUID in it could server well as an = identity document too. It provides signed, secured proof of the identity = of the device. It can include manufacturer info in addition to the EUID. = The EAT style identity could be as tiny as 150 bytes in CBOR syntax. All = you need to store on the device is the EUID and the signing key. Maybe = they are even deterministically KDF=E2=80=99d from the same seed so you = maybe you only need to store 32 bytes on the device.

EAT=E2=80=99s mention of = X.509 in 1.4.2 is as one of many ways to establish key material so the = remote / relying / verifying party can verify the signature. So yes, I = think you have it correct below. (Technically speaking the private key = associated with the X.509 cert is used to sign, not the X.509 cert or = keys in the cert. The X.509 is only to help the verifier find and verify = the verification key. You might even have a means to get it from some = service based on a key ID and not even store it on the = device).

It is = an EAT design goal to keep all the claims in the = signed payload. That includes identity of the device, identity of the = manufacturer and so on. That way you can use many different signing = schemes (ECDAA, symmetric key, non-X.509 public key, X.509 pubic key, = simple public key with just a key id=E2=80=A6) with the same = claims.

LL




On Oct 17, 2018, at 5:49 PM, Henk Birkholz = <henk.birkholz@sit.fraunhofer.de> wrote:

Hi = Laurence,

maybe I understand now where the = general confusion is originating from.

I = dug through some parts of the EAT draft again and could it be that UIED = are identifier and not an identities? They literally are claims (aka = assertions) that can be signed as content of a CWT as illustrated in

https://tools.ietf.org/html/draft-mandyam-eat-00#section-1.4.2<= /a>

1.4.2. talks about = identity documents by mentioning "X.509 certificate chains or something = similar but different". But as you highlighted anything with regard to = that is explicitly intended _not_ to go into the EAT claim set as = content, but is stored on the thing (or maybe on a thing that signs "on = behalf of" the thing the EAT is about?) and consequently is only used to = potentially sign the EAT claim set (via COSE). Is that correct?

As a result, an EAT would never be able to act = as an identity document itself, but the key material that comes along = with an x.509 certificate (as one example of many highlighted) could be = used to sign the EAT.

RATS are able to use = the "X.509 certificate chains or something similar but different" and = the corresponding key material comes along with a certificate (as one = example amongst others) to establish Attestation Provenance.

Viele Gr=C3=BC=C3=9Fe,

Henk

On 10/17/2018 01:19 PM, = Laurence Lundblade wrote:
Wasn=E2=80=99t saying there was ambiguity in the TCG case. = Not being a TCGer, was just was trying to understand what the TCG = definition is.
Your mentioning 802.1AR DevID helps a lot = as I have some knowledge of it.
I see now that my = speculation about SW / config version was wrong. That=E2=80=99s fine. I = only wrote it to try to get to clarity.
Thanks for help = clarifying.
In EAT, we defined a UEID for what TCGer=E2=80=99= s mean by =E2=80=9Cidentity":
   UEID's = identify individual manufactured entities / devices such as a
   mobile phone, a water meter, a Bluetooth = speaker or a networked
   security camera. =  It may identify the entire device or a submodule or
=    subsystem.  It does not identify types, models or = classes of devices.
   It is akin to a = serial number, though it does not have to be
=    sequential.
See here <https://tools.ietf.org/html/draft-mandyam-eat-00#section-3.1> for more on UEID.
In EAT there is a strong desire to = separate the signing key material from UEID to have flexibility in the = signing scheme. For example FIDO and Android both have = privacy-preserving schemes were a signing key is shared by 100,000 = devices. (Some use cases need privacy, some don=E2=80=99t, perhaps = because of legal agreements with customers, and correlation between use = cases and privacy schemes can=E2=80=99t be counted on for high-volume = devices like mobile phones).
I don=E2=80=99t know what the = right answer(s) is(are) in the design yet...
LL
On Oct 17, 2018, at 4:26 = PM, Guy Fedorkow <gfedorkow@juniper.net <mailto:gfedorkow@juniper.net>> wrote:

Hi Laurence,
 I don't think = there's ambiguity in the TCG case...  current work in attestation = focuses on using the 802.1AR DevID spec, which corresponds exactly to = one of your cases below -- it's a vendor, model and serial number.
 It's true that TCG technology can be used to validate = software integrity, but that's hardly the same as identity.
 Considerations of user privacy commonly accepted in TCG = would preclude the inclusion of software state as part of identity, = practicalities aside.  In general, privacy considerations lead TCG = to carefully avoid unauthorized disclosure of either software or = hardware based assertions.
 Let me know if I'm = missing the point...
Thanks
/guy fedorkow, = juniper networks

-----Original = Message-----
From: Laurence Lundblade <lgl@island-resort.com= <mailto:lgl@island-resort.com>>
Sent: = Wednesday, October 17, 2018 12:31 AM
To: Henk Birkholz = <henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de>>
Cc: Smith, Ned <ned.smith@intel.com <mailto:ned.smith@intel.com>>; Hannes Tschofenig = <Hannes.Tschofenig@arm.com <mailto:Hannes.Tschofenig@arm.com>>; rats@ietf.org <mailto:rats@ietf.org>; = Jeremy O'Donoghue <jodonogh@qti.qualcomm.com <mailto:jodonogh@qti.qualcomm.com>>; Denis <denis.ietf@free.fr = <mailto:denis.ietf@free.fr>>; eat@ietf.org <mailto:eat@ietf.org>
Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF = charter updates?

I think the TCG has a = certain developed notion of identity that is different from others. =  A way to get sharper about what a particular identity means is to = describe the space and how the identifier selects in the space. =  Here=E2=80=99s a few examples:

- The = space is physical human beings with fingers. A fingerprint scanner = select one of these humans. This is typical biometric auth.
- The space is humans that know a password. A password = authenticator selects the humans that know the password. Typical = authentication.
- The space is humans as legal entities / = citizens with criminal records, passports and such. A national ID = selects.
- The space is physical manufactured devices from = one maker.  A serial number narrows it down to one physical = device.
- The space is physical devices from one maker. A = model number or version, narrows down to a subset of these devices.

My understanding of the TCG world is that = identities goes beyond any of the above because they include things like = the version of the SW and configuration of the device. The identity is = largely a hash of an identifier of the physical device, various SW = components and various configuration states.  The point being that = a change in any of these is a change in the security characteristics of = the device and if it was trusted with a particular key or particular = data in the past, that trust should be revoked until re established.

- The space is physical devices from any = maker
 + Measurement of the SW (the SW versions)
    + Measurements of some = configuration

Changing any of these change = the identity of the device.

I know I hardly = need to ask, but TCG folks, did I describe this correctly?


So that said, many, perhaps = most, use cases for EAT do not want this kind of device identity. It is = not a prerequisite for trusting  claims coming from the device. In = some cases this level of identity seems extremely disruptive as small SW = upgrades could result in re enrollment of biometrics. We already are = annoyed when we have to answer security questions when start using a = service from a new device.

I think this WG = needs to address both this very tight TCG-style device identity and the = more heuristic EAT-style claims-for-risk-engines. I could see = multi-decade evolution where risk engine use cases want more and more of = the tight TCG-style device identity as criminals become more adept at = forging EAT-style claims. (Today risk engines work off of unsecured = browser parameters).

The Introduction in = the charter seems entirely focused on the TCG-based identity use case. I = think text should be added for EAT-style attestation. I will write some = after some comments on this message.

LL




On Oct 16, 2018, at = 8:24 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de>> wrote:

To quote Carsten, there is "the usual = terminology problem about identity".

Identifying vs. Identity brings back memories about an = extensive discussion in SACM that in the end resulted in using = Profiles...

Profiles are the "things" that = you can aggregate identity claims in (in SACM these claims are "Target = Endpoint Characteristics", which are pretty much the same thing as = Device Characteristics) - and you use the Profiles to (re-)identify = target endpoints.

In the scope of remote = attestation procedures, I think that "just not calling" claim sets that = are composed (amongst others) of identifying claims "identity documents" = might just end up in making up another name for something that is = effectively composing identity documents anyways. If calling the same = thing something else helps in some way, I am all for it. But I am really = not sure.

That said, Ned's elaboration on = the relationship of identity and attestation claims and corresponding = claim semantics / trust semantics is spot on, I think.

Viele Gr=C3=BC=C3=9Fe,

Henk

On 10/16/2018 03:51 PM, Smith, Ned wrote:
Agree with Hannes that = identity discussion can lead to confusion as identity is often highly = dependent on some sort of context (domain of interpretation).
In order to have productive conversation about attestation = and identity, it may be important to understand that attestation = semantics sets the context for identity.
* Attestation = attributes have trust semantics (and trust semantics are interpreted = through the eyes of the verifier). Identity attributes may also have = trust semantics (in addition to identity semantics) hence can be = regarded as playing a role in both identity and attestation. Since RATS = should be interested primarily in trust semantics, it makes sense to = understand, discuss and consider identity in terms of its trust = semantics. Hence identity attributes are only interesting to RATS if = they are useful for evaluating trust semantics.
* In a = closed ecosystem, the trust characteristics and properties may be = implied because there often exists out-of-band processes that ensure the = characteristics are applied (for example, if an IT organization sets a = policy that all asymmetric keys are to be hardened using a smartcard, = they can apply a deployment process where the IT professional verifies = the smartcard is used during enrollment.) But in a non-closed ecosystem, = there isn't an assumption that out-of-band processes exist. Attestation = attempts to make explicit what otherwise is implicit and therefore = subject to misinterpretation if the verifier, relying party and attester = are not part of the same closed ecosystem. Implicit attestation = therefore can lead to semantic confusion if we're not careful. = Therefore, the rigor of treating implicit attestation claims (assertions = assumed to exist but not explicitly named) should nevertheless be = defined explicitly. Then, if there is a need for implicit attestation, = the specifications that describe them can describe them in terms of an = explicit definition.
* In the context of asserting trust = characteristics, the verifier needs to know that a set of = characteristics applies to the instance of the endpoint being evaluated = (aka the attester). (Otherwise a MITM could supply characteristics that = may be valid, but don=E2=80=99t apply to the specific instance). = Consequently, it makes sense to consider that *attestation* keys are = needed to authenticate the endpoint being evaluated. This doesn't imply = an identity key couldn't double as an attestation key. But if it does, = we care about its relevance to the attester endpoint.
-Ned
=EF=BB=BFOn 10/15/18, 6:49 PM, "Hannes = Tschofenig" <Hannes.Tschofenig@arm.com <mailto:Hannes.Tschofenig@arm.com>> wrote:
   Here are my 5 cents on the term = 'identity'.
        I have been = working on identity management for many years (partially because of my = OAuth co-chair role) and I have noticed that the use of the term = "identity" tends to confuse more than it helps (even more so when the = term is applied to devices and software rather than humans).
        I believe we = could get away with describing what we want without ever using the = term.
        In = this context I would argue that we are about identifying different = components, such as hardware and software.
        Ciao
   Hannes
        -----Original = Message-----
   From: EAT <eat-bounces@ietf.org = <mailto:eat-bounces@ietf.org>> On Behalf Of Smith, = Ned
   Sent: Monday, October 15, 2018 9:00 = AM
   To: Henk Birkholz <henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de>>; rats@ietf.org <mailto:rats@ietf.org>; = Jeremy O'Donoghue <jodonogh@qti.qualcomm.com <mailto:jodonogh@qti.qualcomm.com>>; Denis <denis.ietf@free.fr = <mailto:denis.ietf@free.fr>>
   Cc: eat@ietf.org <mailto:eat@ietf.org>
   Subject: Re: [EAT] [EXTERNAL] Re: [Rats] = Attestation BoF charter updates?
        I agree with = Henk's observation that there is opportunity to find common ground on = identity as identity can be a collection of attributes, that if signed, = becomes a set of verifiable claims (about identity attributes). = Attestation has a similar structure in that it consists of a set of = attributes, that if signed becomes a set of verifiable claims. The main = difference between identity and attestation attributes is whether the = attribute semantically relate to trust (vs. identity). For example, = claims of security certification compliance resonates as attestation.
        It may be = possible to combine a set of attestation attributes in such a way that = the combination uniquely identifies an entity. But that doesn't make it = an identity system per se and shouldn't cause a conflict in charter = goals with respect to other identity focused efforts in IETF.
        Also, = inclusion of attributes that don't have semantics that reasonably relate = to trust should not be of interest to a working group focused on = attestation.
        -Ned
        On 10/15/18, = 3:53 PM, "EAT on behalf of Henk Birkholz" <eat-bounces@ietf.org = <mailto:eat-bounces@ietf.org> on behalf of henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de>> wrote:
          &nb= sp; Hi Jeremy & Denis,
          &nb= sp; all these points of view have merit, I think.
          &nb= sp; Please have a look at these quotes:
knowing the provenance of the device
having the entity creator/manufacturer provide a set of = claims which can be verified
to know the characteristics = of a device by issuing to the device a public key certificate which will = only be issued to the device if it fulfills an expected set of = functionalities.
        &n= bsp;   To me, these descriptions seem to have different = intents, scope or
       audience and = require most certainly different work-flows, but
       semantically and in = consequence representation-wise they also seem quite
       related.
          &nb= sp; If you think of an identity document as a set of claims = (potentially
       including a public = key), that is signed and that can match one or more
       things, maybe all = three types highlighted above are actually covered by
       the same identity = document concept?
          &nb= sp; With respect to identity documents, I think it is safe so say = that we
       can find = common ground here rather easily. That said, the way how these
       identity documents = come into existence, when and how they are deployed
       on the thing or = associated with multiple things is another question. We
       most certainly do = not want to end up with a "signing fool" that does not
       add value to the = level of confidence (I am quoting Ned Smith here).
          &nb= sp; This has to be fleshed out explicitly for each scenario and the = parts
       that are = reused in every scenario should get special attention in the
       upcoming RATS = architecture draft.
          &nb= sp; Identifying claims aggregated in an identity document most = certainly can
       include device = characteristics, public key(s), or claims about the
       intended functions = and capabilities of the thing. Claims can even
       originate from = Claimants that are not the thing itself, but external
       entities providing = an assertion (e.g. these things are CC-certified).
          &nb= sp; All different composites of identifying claims have a specific = shared
       intend in = this context though, I think: expressing Attestation
       Provenance (again - = one for one or more things of the same kind). And
       all of them = originate from Claimants and therefore use a root of trust
       of measurement, I = think.
          &nb= sp; That said, establishing trustworthy knowledge about = attestation
       provenance is only = the first step and provides the foundation for more
       complex attestation = procedures. In any case, this seem to be required by
       every scenario that = was highlighted so far and therefore will most
       certainly be = covered in a deliverable.
          &nb= sp; IHTH,
          &nb= sp; Henk
          &nb= sp;      On 10/15/2018 12:22 PM, Jeremy = O'Donoghue wrote:
On = 12 Oct 2018, at 14:33, Denis <denis.ietf@free.fr <mailto:denis.ietf@free.fr>
<mailto:denis.ietf@free.fr>> wrote:
The "Problem Statement" = continues as follows:

(2) Today, there is = no common, standard way for Relying Parties to
know the = provenance and characteristics of a device (e.g., an end-user
device,
platform or endpoint, servers, IoT = devices, device subsystems and
sub-modules) that may be = requesting services.

Knowing the provenance = of the device is not always necessary. What is
important = is to know that a specific set of functions is (securely)
supported by the device.
There already exists a = common way to know the characteristics of a
device by = issuing to the device a public key certificate which will
only be issued to the device
if it fulfills an = expected set of functionalities. In such a case a
syntax = for a trusted claim sets**is not needed.

This is indeed a possible way to address the = problem, but suffers from
challenges which come down = to:

- Who issues such certificates. An = option is that there is some form of
security = certification behind this issuance otherwise it is of very
limited value.
- In order to capture the wide = variety of different devices (I prefer
"entity" here as it = is more general than "device"), many different forms
of = such certificates would be required. This ends up being much the same
thing as a set of claims.

Given = the multiplicity of entities for which attestation might be
useful, it seems to me that having the entity = creator/manufacturer
provide a set of claims which can be = verified is more flexible than
requiring a certificate. It = seems likely to me that where a formal
security = certification is needed there will be a certificate issued by
the Certifying Body as one of the claims about an entity, but = I can
think of many cases (supply chain management, to = take just one example)
where provenance is by far the most = useful information.

I'm not in favour of = changes to the charter in this direction.

The simplest cases should also = be part of the framework.

Note: I = personally appreciate that privacy is an aspect that
will/should be taken into consideration.

Denis

As with the earlier draft, there are many references to = verify and
verifier in the lead up to the deliverable but = no deliverables describing
verification rules. I'd like to = see rules in one of these documents and
think it worth = citing in the deliverables. Are bindings to certificate
management protocols out of scope?

On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz"
<rats-bounces@ietf.org <mailto:rats-bounces@ietf.org> on behalf of henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de>> =  wrote:

Hi all,

sorry for the delay. = Please find an updated charter proposal here:

https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__github.c= om_ietf-2Drats_charter_blob_RC2_ietf-2Drats-2Dcharter.md&d=3DDwIFaQ&am= p;c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZO= bmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AU= wyWGM&s=3DrPzmwhcwy8eob4eMiwWzDg5DY-mcC5HYgQqhUGCZ2RI&e=3D
The BoF proponents tried to merge all comments = and proposals on
keystores, existing solutions, provenance = & device characteristics, etc
that were raised on the = list - and align them in homogeneous fashion.

This draft is intended to focus the discussion and improve = the wording.

Viele Gr=C3=BC=C3=9Fe,

Henk

On = 10/06/2018 08:23 AM, Laurence Lundblade wrote:
Hi Henk,

Bangkok = IETF is getting close, will you be able to update the charter
for the attestation BoF to properly include EAT?  I sent = you some text
that just needs to be pasted along with some = comments. It doesn=E2=80=99t look
like there=E2=80=99s = been any updates.

LL

_______________________________________________RATS mailing list
RATS@ietf.org <mailto:RATS@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_rats&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBX= eMK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&am= p;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DxThsQTXgadltVkHT= YpOWknadi7puxZt8O6XOIUm_bzo&e=3D
_______________________________________________EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D


_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org> <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D



_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D

        &n= bsp;   _______________________________________________
       EAT mailing list
EAT@ietf.org = <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D
          &nb= sp;  _______________________________________________
   EAT mailing list
EAT@ietf.org = <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D
   IMPORTANT NOTICE: The contents of this = email and any attachments are confidential and may also be privileged. = If you are not the intended recipient, please notify the sender = immediately and do not disclose the contents to any other person, use it = for any purpose, or store or copy the information in any medium. Thank = you.

_______________________________________________EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D

_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org>
https://www.ietf.org/mailman/listinfo/eat

_______________________________________________
EAT mailing list
EAT@ietf.org
https://www.ietf.org/mailman/listinfo/eat

= --Apple-Mail=_D378EF7E-FBBB-4902-A402-28A3E812D93B-- From nobody Sat Oct 20 02:49:29 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ECCED130DFC; Sat, 20 Oct 2018 02:49:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1oToeROhEujB; Sat, 20 Oct 2018 02:49:23 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7DB26126BED; Sat, 20 Oct 2018 02:49:20 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9K9nCvo004222 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 20 Oct 2018 11:49:13 +0200 Received: from [172.20.8.9] (88.157.232.34) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Sat, 20 Oct 2018 11:49:06 +0200 To: Laurence Lundblade , "rats@ietf.org" CC: Guy Fedorkow , Denis , Hannes Tschofenig , "Smith, Ned" , "Jeremy O'Donoghue" , "eat@ietf.org" References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> <9c73f9b7-9129-c273-254e-465f92ab3650@sit.fraunhofer.de> <09818298-9FE1-430A-8045-A9A7E76ED64C@island-resort.com> From: Henk Birkholz Message-ID: Date: Sat, 20 Oct 2018 11:49:05 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <09818298-9FE1-430A-8045-A9A7E76ED64C@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [88.157.232.34] Archived-At: Subject: Re: [Rats] Device Identity (was Re: [EAT] [EXTERNAL] Re: Attestation BoF charter updates?) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Oct 2018 09:49:28 -0000 Hello Laurence, unfortunately, I am traveling at the moment, but let me try to address an eclectically chosen topic. In an attempt to answer your question "What is the definition of an “identity document” I will just reference > https://tools.ietf.org/html/draft-birkholz-core-coid-00#section-1 for now (instead of writing a wall of text again. Sorry, if I do that sometimes, that does not always help...) Based on the reference text, the important principle here is that an identity document is signed using secret keys issued by a (sub) certificate authority that one or more entities *can* put trust into. In comparison, if a CWT is signed with key material deployed on the device in question, what you provide is proof-of-possession of that signing (most likely intended to be secret) key. Again, you *can* put trust into that proof-of-possession, but the trust relationships here can have vastly different semantics. In both cases though, putting trust into, for example, CoID (via TVP) or EAT (via PoP) is a decision, I think. If you choose to put trust into the signature of these CWT, both are Trusted Claim Sets - to you. This trust has unfortunately nothing to do with the actual trustworthiness of the thing in question. As Ned illustrated already, "in a closed ecosystem, the trust characteristics and properties may be implied". In consequence, if you choose to trust that possession of a key provides an appropriate level of confidence in trustworthiness - that is a decision you make. This does not provide actual evidence that a thing is really trustworthy. And providing this evidence via interoperable network protocols is the gap that RATS intent to address - not only in closed ecosystems, but also the Internet in general. IHTH, Henk On 10/20/2018 08:19 AM, Laurence Lundblade wrote: > I consider /device identity/ an absolute critical part of our work. It > is a critical part of most EAT use cases such as enrollment of IoT > devices with IoT management systems. It is the first claim defined in EAT. > > What is the definition of an “identity document”? Maybe you are thinking > of it specifically as what was defined for IEEE Dev ID. If I recall, the > identification claims for the device are in the subject DN of an X.509 > certificate. > > Seems like any EAT with an EUID in it could server well as an identity > document too. It provides signed, secured proof of the identity of the > device. It can include manufacturer info in addition to the EUID. The > EAT style identity could be as tiny as 150 bytes in CBOR syntax. All you > need to store on the device is the EUID and the signing key. Maybe they > are even deterministically KDF’d from the same seed so you maybe you > only need to store 32 bytes on the device. > > EAT’s mention of X.509 in 1.4.2 is as one of many ways to establish key > material so the remote / relying / verifying party can verify the > signature. So yes, I think you have it correct below. (Technically > speaking the private key associated with the X.509 cert is used to sign, > not the X.509 cert or keys in the cert. The X.509 is only to help the > verifier find and verify the verification key. You might even have a > means to get it from some service based on a key ID and not even store > it on the device). > > It is an EAT design goal to keep /all/ the claims in the signed payload. > That includes identity of the device, identity of the manufacturer and > so on. That way you can use many different signing schemes (ECDAA, > symmetric key, non-X.509 public key, X.509 pubic key, simple public key > with just a key id…) with the same claims. > > LL > > > > >> On Oct 17, 2018, at 5:49 PM, Henk Birkholz >> > > wrote: >> >> Hi Laurence, >> >> maybe I understand now where the general confusion is originating from. >> >> I dug through some parts of the EAT draft again and could it be that >> UIED are identifier and not an identities? They literally are claims >> (aka assertions) that can be signed as content of a CWT as illustrated in >> >>> https://tools.ietf.org/html/draft-mandyam-eat-00#section-1.4.2 >> >> 1.4.2. talks about identity documents by mentioning "X.509 certificate >> chains or something similar but different". But as you highlighted >> anything with regard to that is explicitly intended _not_ to go into >> the EAT claim set as content, but is stored on the thing (or maybe on >> a thing that signs "on behalf of" the thing the EAT is about?) and >> consequently is only used to potentially sign the EAT claim set (via >> COSE). Is that correct? >> >> As a result, an EAT would never be able to act as an identity document >> itself, but the key material that comes along with an x.509 >> certificate (as one example of many highlighted) could be used to sign >> the EAT. >> >> RATS are able to use the "X.509 certificate chains or something >> similar but different" and the corresponding key material comes along >> with a certificate (as one example amongst others) to establish >> Attestation Provenance. >> >> Viele Grüße, >> >> Henk >> >> On 10/17/2018 01:19 PM, Laurence Lundblade wrote: >>> Wasn’t saying there was ambiguity in the TCG case. Not being a TCGer, >>> was just was trying to understand what the TCG definition is. >>> Your mentioning 802.1AR DevID helps a lot as I have some knowledge of it. >>> I see now that my speculation about SW / config version was wrong. >>> That’s fine. I only wrote it to try to get to clarity. >>> Thanks for help clarifying. >>> In EAT, we defined a UEID for what TCGer’s mean by “identity": >>>    UEID's identify individual manufactured entities / devices such as a >>>    mobile phone, a water meter, a Bluetooth speaker or a networked >>>    security camera.  It may identify the entire device or a submodule or >>>    subsystem.  It does not identify types, models or classes of devices. >>>    It is akin to a serial number, though it does not have to be >>>    sequential. >>> See here >>> for >>> more on UEID. >>> In EAT there is a strong desire to separate the signing key material >>> from UEID to have flexibility in the signing scheme. For example FIDO >>> and Android both have privacy-preserving schemes were a signing key >>> is shared by 100,000 devices. (Some use cases need privacy, some >>> don’t, perhaps because of legal agreements with customers, and >>> correlation between use cases and privacy schemes can’t be counted on >>> for high-volume devices like mobile phones). >>> I don’t know what the right answer(s) is(are) in the design yet... >>> LL >>>> On Oct 17, 2018, at 4:26 PM, Guy Fedorkow >>> > wrote: >>>> >>>> Hi Laurence, >>>>  I don't think there's ambiguity in the TCG case...  current work in >>>> attestation focuses on using the 802.1AR DevID spec, which >>>> corresponds exactly to one of your cases below -- it's a vendor, >>>> model and serial number. >>>>  It's true that TCG technology can be used to validate software >>>> integrity, but that's hardly the same as identity. >>>>  Considerations of user privacy commonly accepted in TCG would >>>> preclude the inclusion of software state as part of identity, >>>> practicalities aside.  In general, privacy considerations lead TCG >>>> to carefully avoid unauthorized disclosure of either software or >>>> hardware based assertions. >>>>  Let me know if I'm missing the point... >>>> Thanks >>>> /guy fedorkow, juniper networks >>>> >>>> -----Original Message----- >>>> From: Laurence Lundblade >>> > >>>> Sent: Wednesday, October 17, 2018 12:31 AM >>>> To: Henk Birkholz >>> >>>> > >>>> Cc: Smith, Ned >>>> >; Hannes Tschofenig >>>> >>>> >; rats@ietf.org >>>> ; Jeremy O'Donoghue >>>> >>>> >; Denis >>> >; >>>> eat@ietf.org >>>> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter >>>> updates? >>>> >>>> I think the TCG has a certain developed notion of identity that is >>>> different from others.  A way to get sharper about what a particular >>>> identity means is to describe the space and how the identifier >>>> selects in the space.  Here’s a few examples: >>>> >>>> - The space is physical human beings with fingers. A fingerprint >>>> scanner select one of these humans. This is typical biometric auth. >>>> - The space is humans that know a password. A password authenticator >>>> selects the humans that know the password. Typical authentication. >>>> - The space is humans as legal entities / citizens with criminal >>>> records, passports and such. A national ID selects. >>>> - The space is physical manufactured devices from one maker.  A >>>> serial number narrows it down to one physical device. >>>> - The space is physical devices from one maker. A model number or >>>> version, narrows down to a subset of these devices. >>>> >>>> My understanding of the TCG world is that identities goes beyond any >>>> of the above because they include things like the version of the SW >>>> and configuration of the device. The identity is largely a hash of >>>> an identifier of the physical device, various SW components and >>>> various configuration states.  The point being that a change in any >>>> of these is a change in the security characteristics of the device >>>> and if it was trusted with a particular key or particular data in >>>> the past, that trust should be revoked until re established. >>>> >>>> - The space is physical devices from any maker >>>>  + Measurement of the SW (the SW versions) >>>>     + Measurements of some configuration >>>> >>>> Changing any of these change the identity of the device. >>>> >>>> I know I hardly need to ask, but TCG folks, did I describe this >>>> correctly? >>>> >>>> >>>> So that said, many, perhaps most, use cases for EAT do not want this >>>> kind of device identity. It is not a prerequisite for trusting >>>>  claims coming from the device. In some cases this level of identity >>>> seems extremely disruptive as small SW upgrades could result in re >>>> enrollment of biometrics. We already are annoyed when we have to >>>> answer security questions when start using a service from a new device. >>>> >>>> I think this WG needs to address both this very tight TCG-style >>>> device identity and the more heuristic EAT-style >>>> claims-for-risk-engines. I could see multi-decade evolution where >>>> risk engine use cases want more and more of the tight TCG-style >>>> device identity as criminals become more adept at forging EAT-style >>>> claims. (Today risk engines work off of unsecured browser parameters). >>>> >>>> The Introduction in the charter seems entirely focused on the >>>> TCG-based identity use case. I think text should be added for >>>> EAT-style attestation. I will write some after some comments on this >>>> message. >>>> >>>> LL >>>> >>>> >>>> >>>> >>>> >>>>> On Oct 16, 2018, at 8:24 PM, Henk Birkholz >>>>> >>>> >>>>> > wrote: >>>>> >>>>> To quote Carsten, there is "the usual terminology problem about >>>>> identity". >>>>> >>>>> Identifying vs. Identity brings back memories about an extensive >>>>> discussion in SACM that in the end resulted in using Profiles... >>>>> >>>>> Profiles are the "things" that you can aggregate identity claims in >>>>> (in SACM these claims are "Target Endpoint Characteristics", which >>>>> are pretty much the same thing as Device Characteristics) - and you >>>>> use the Profiles to (re-)identify target endpoints. >>>>> >>>>> In the scope of remote attestation procedures, I think that "just >>>>> not calling" claim sets that are composed (amongst others) of >>>>> identifying claims "identity documents" might just end up in making >>>>> up another name for something that is effectively composing >>>>> identity documents anyways. If calling the same thing something >>>>> else helps in some way, I am all for it. But I am really not sure. >>>>> >>>>> That said, Ned's elaboration on the relationship of identity and >>>>> attestation claims and corresponding claim semantics / trust >>>>> semantics is spot on, I think. >>>>> >>>>> Viele Grüße, >>>>> >>>>> Henk >>>>> >>>>> On 10/16/2018 03:51 PM, Smith, Ned wrote: >>>>>> Agree with Hannes that identity discussion can lead to confusion >>>>>> as identity is often highly dependent on some sort of context >>>>>> (domain of interpretation). >>>>>> In order to have productive conversation about attestation and >>>>>> identity, it may be important to understand that attestation >>>>>> semantics sets the context for identity. >>>>>> * Attestation attributes have trust semantics (and trust semantics >>>>>> are interpreted through the eyes of the verifier). Identity >>>>>> attributes may also have trust semantics (in addition to identity >>>>>> semantics) hence can be regarded as playing a role in both >>>>>> identity and attestation. Since RATS should be interested >>>>>> primarily in trust semantics, it makes sense to understand, >>>>>> discuss and consider identity in terms of its trust semantics. >>>>>> Hence identity attributes are only interesting to RATS if they are >>>>>> useful for evaluating trust semantics. >>>>>> * In a closed ecosystem, the trust characteristics and properties >>>>>> may be implied because there often exists out-of-band processes >>>>>> that ensure the characteristics are applied (for example, if an IT >>>>>> organization sets a policy that all asymmetric keys are to be >>>>>> hardened using a smartcard, they can apply a deployment process >>>>>> where the IT professional verifies the smartcard is used during >>>>>> enrollment.) But in a non-closed ecosystem, there isn't an >>>>>> assumption that out-of-band processes exist. Attestation attempts >>>>>> to make explicit what otherwise is implicit and therefore subject >>>>>> to misinterpretation if the verifier, relying party and attester >>>>>> are not part of the same closed ecosystem. Implicit attestation >>>>>> therefore can lead to semantic confusion if we're not careful. >>>>>> Therefore, the rigor of treating implicit attestation claims >>>>>> (assertions assumed to exist but not explicitly named) should >>>>>> nevertheless be defined explicitly. Then, if there is a need for >>>>>> implicit attestation, the specifications that describe them can >>>>>> describe them in terms of an explicit definition. >>>>>> * In the context of asserting trust characteristics, the verifier >>>>>> needs to know that a set of characteristics applies to the >>>>>> instance of the endpoint being evaluated (aka the attester). >>>>>> (Otherwise a MITM could supply characteristics that may be valid, >>>>>> but don’t apply to the specific instance). Consequently, it makes >>>>>> sense to consider that *attestation* keys are needed to >>>>>> authenticate the endpoint being evaluated. This doesn't imply an >>>>>> identity key couldn't double as an attestation key. But if it >>>>>> does, we care about its relevance to the attester endpoint. >>>>>> -Ned >>>>>> On 10/15/18, 6:49 PM, "Hannes Tschofenig" >>>>>> >>>>>> > wrote: >>>>>>    Here are my 5 cents on the term 'identity'. >>>>>>         I have been working on identity management for many years >>>>>> (partially because of my OAuth co-chair role) and I have noticed >>>>>> that the use of the term "identity" tends to confuse more than it >>>>>> helps (even more so when the term is applied to devices and >>>>>> software rather than humans). >>>>>>         I believe we could get away with describing what we want >>>>>> without ever using the term. >>>>>>         In this context I would argue that we are about >>>>>> identifying different components, such as hardware and software. >>>>>>         Ciao >>>>>>    Hannes >>>>>>         -----Original Message----- >>>>>>    From: EAT >>>>>> > On Behalf Of Smith, Ned >>>>>>    Sent: Monday, October 15, 2018 9:00 AM >>>>>>    To: Henk Birkholz >>>>> >>>>>> >; rats@ietf.org >>>>>> ; Jeremy O'Donoghue >>>>>> >>>>>> >; Denis >>>>> > >>>>>>    Cc: eat@ietf.org >>>>>>    Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF >>>>>> charter updates? >>>>>>         I agree with Henk's observation that there is opportunity >>>>>> to find common ground on identity as identity can be a collection >>>>>> of attributes, that if signed, becomes a set of verifiable claims >>>>>> (about identity attributes). Attestation has a similar structure >>>>>> in that it consists of a set of attributes, that if signed becomes >>>>>> a set of verifiable claims. The main difference between identity >>>>>> and attestation attributes is whether the attribute semantically >>>>>> relate to trust (vs. identity). For example, claims of security >>>>>> certification compliance resonates as attestation. >>>>>>         It may be possible to combine a set of attestation >>>>>> attributes in such a way that the combination uniquely identifies >>>>>> an entity. But that doesn't make it an identity system per se and >>>>>> shouldn't cause a conflict in charter goals with respect to other >>>>>> identity focused efforts in IETF. >>>>>>         Also, inclusion of attributes that don't have semantics >>>>>> that reasonably relate to trust should not be of interest to a >>>>>> working group focused on attestation. >>>>>>         -Ned >>>>>>         On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" >>>>>> >>>>>> on behalf of >>>>>> henk.birkholz@sit.fraunhofer.de >>>>>> >>>>>> > wrote: >>>>>>             Hi Jeremy & Denis, >>>>>>             all these points of view have merit, I think. >>>>>>             Please have a look at these quotes: >>>>>>> knowing the provenance of the device >>>>>>> having the entity creator/manufacturer provide a set of claims >>>>>>> which can be verified >>>>>>> to know the characteristics of a device by issuing to the device >>>>>>> a public key certificate which will only be issued to the device >>>>>>> if it fulfills an expected set of functionalities. >>>>>>             To me, these descriptions seem to have different >>>>>> intents, scope or >>>>>>        audience and require most certainly different work-flows, but >>>>>>        semantically and in consequence representation-wise they >>>>>> also seem quite >>>>>>        related. >>>>>>             If you think of an identity document as a set of >>>>>> claims (potentially >>>>>>        including a public key), that is signed and that can match >>>>>> one or more >>>>>>        things, maybe all three types highlighted above are >>>>>> actually covered by >>>>>>        the same identity document concept? >>>>>>             With respect to identity documents, I think it is safe >>>>>> so say that we >>>>>>        can find common ground here rather easily. That said, the >>>>>> way how these >>>>>>        identity documents come into existence, when and how they >>>>>> are deployed >>>>>>        on the thing or associated with multiple things is another >>>>>> question. We >>>>>>        most certainly do not want to end up with a "signing fool" >>>>>> that does not >>>>>>        add value to the level of confidence (I am quoting Ned >>>>>> Smith here). >>>>>>             This has to be fleshed out explicitly for each >>>>>> scenario and the parts >>>>>>        that are reused in every scenario should get special >>>>>> attention in the >>>>>>        upcoming RATS architecture draft. >>>>>>             Identifying claims aggregated in an identity document >>>>>> most certainly can >>>>>>        include device characteristics, public key(s), or claims >>>>>> about the >>>>>>        intended functions and capabilities of the thing. Claims >>>>>> can even >>>>>>        originate from Claimants that are not the thing itself, but >>>>>> external >>>>>>        entities providing an assertion (e.g. these things are >>>>>> CC-certified). >>>>>>             All different composites of identifying claims have a >>>>>> specific shared >>>>>>        intend in this context though, I think: expressing Attestation >>>>>>        Provenance (again - one for one or more things of the same >>>>>> kind). And >>>>>>        all of them originate from Claimants and therefore use a >>>>>> root of trust >>>>>>        of measurement, I think. >>>>>>             That said, establishing trustworthy knowledge about >>>>>> attestation >>>>>>        provenance is only the first step and provides the >>>>>> foundation for more >>>>>>        complex attestation procedures. In any case, this seem to >>>>>> be required by >>>>>>        every scenario that was highlighted so far and therefore >>>>>> will most >>>>>>        certainly be covered in a deliverable. >>>>>>             IHTH, >>>>>>             Henk >>>>>>                  On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: >>>>>>> On 12 Oct 2018, at 14:33, Denis >>>>>> >>>>>>> > wrote: >>>>>>>> The "Problem Statement" continues as follows: >>>>>>>> >>>>>>>> (2) Today, there is no common, standard way for Relying Parties to >>>>>>>> know the provenance and characteristics of a device (e.g., an >>>>>>>> end-user >>>>>>>> device, >>>>>>>> platform or endpoint, servers, IoT devices, device subsystems and >>>>>>>> sub-modules) that may be requesting services. >>>>>>>> >>>>>>>> Knowing the provenance of the device is not always necessary. >>>>>>>> What is >>>>>>>> important is to know that a specific set of functions is (securely) >>>>>>>> supported by the device. >>>>>>>> There already exists a common way to know the characteristics of a >>>>>>>> device by issuing to the device a public key certificate which will >>>>>>>> only be issued to the device >>>>>>>> if it fulfills an expected set of functionalities. In such a case a >>>>>>>> syntax for a trusted claim sets**is not needed. >>>>>>>> >>>>>>> This is indeed a possible way to address the problem, but suffers >>>>>>> from >>>>>>> challenges which come down to: >>>>>>> >>>>>>> - Who issues such certificates. An option is that there is some >>>>>>> form of >>>>>>> security certification behind this issuance otherwise it is of very >>>>>>> limited value. >>>>>>> - In order to capture the wide variety of different devices (I prefer >>>>>>> "entity" here as it is more general than "device"), many >>>>>>> different forms >>>>>>> of such certificates would be required. This ends up being much >>>>>>> the same >>>>>>> thing as a set of claims. >>>>>>> >>>>>>> Given the multiplicity of entities for which attestation might be >>>>>>> useful, it seems to me that having the entity creator/manufacturer >>>>>>> provide a set of claims which can be verified is more flexible than >>>>>>> requiring a certificate. It seems likely to me that where a formal >>>>>>> security certification is needed there will be a certificate >>>>>>> issued by >>>>>>> the Certifying Body as one of the claims about an entity, but I can >>>>>>> think of many cases (supply chain management, to take just one >>>>>>> example) >>>>>>> where provenance is by far the most useful information. >>>>>>> >>>>>>> I'm not in favour of changes to the charter in this direction. >>>>>>>> >>>>>>>> The simplest cases should also be part of the framework. >>>>>>>> >>>>>>>> Note: I personally appreciate that privacy is an aspect that >>>>>>>> will/should be taken into consideration. >>>>>>>> >>>>>>>> Denis >>>>>>>> >>>>>>>>> As with the earlier draft, there are many references to verify and >>>>>>>>> verifier in the lead up to the deliverable but no deliverables >>>>>>>>> describing >>>>>>>>> verification rules. I'd like to see rules in one of these >>>>>>>>> documents and >>>>>>>>> think it worth citing in the deliverables. Are bindings to >>>>>>>>> certificate >>>>>>>>> management protocols out of scope? >>>>>>>>> >>>>>>>>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" >>>>>>>>> >>>>>>>>> on behalf of >>>>>>>>> henk.birkholz@sit.fraunhofer.de >>>>>>>>> >>>>>>>>> >  wrote: >>>>>>>>> >>>>>>>>>> Hi all, >>>>>>>>>> >>>>>>>>>> sorry for the delay. Please find an updated charter proposal here: >>>>>>>>>> >>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_ietf-2Drats_charter_blob_RC2_ietf-2Drats-2Dcharter.md&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=rPzmwhcwy8eob4eMiwWzDg5DY-mcC5HYgQqhUGCZ2RI&e= >>>>>>>>>> The BoF proponents tried to merge all comments and proposals on >>>>>>>>>> keystores, existing solutions, provenance & device >>>>>>>>>> characteristics, etc >>>>>>>>>> that were raised on the list - and align them in homogeneous >>>>>>>>>> fashion. >>>>>>>>>> >>>>>>>>>> This draft is intended to focus the discussion and improve the >>>>>>>>>> wording. >>>>>>>>>> >>>>>>>>>> Viele Grüße, >>>>>>>>>> >>>>>>>>>> Henk >>>>>>>>>> >>>>>>>>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >>>>>>>>>>> Hi Henk, >>>>>>>>>>> >>>>>>>>>>> Bangkok IETF is getting close, will you be able to update the >>>>>>>>>>> charter >>>>>>>>>>> for the attestation BoF to properly include EAT?  I sent you >>>>>>>>>>> some text >>>>>>>>>>> that just needs to be pasted along with some comments. It >>>>>>>>>>> doesn’t look >>>>>>>>>>> like there’s been any updates. >>>>>>>>>>> >>>>>>>>>>> LL >>>>>>>>>>> >>>>>>>>>> _______________________________________________ >>>>>>>>>> RATS mailing list >>>>>>>>>> RATS@ietf.org >>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_rats&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=xThsQTXgadltVkHTYpOWknadi7puxZt8O6XOIUm_bzo&e= >>>>>>>>> _______________________________________________ >>>>>>>>> EAT mailing list >>>>>>>>> EAT@ietf.org >>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>> >>>>>>>> >>>>>>>> _______________________________________________ >>>>>>>> EAT mailing list >>>>>>>> EAT@ietf.org >>>>>>>> >>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>> >>>>>>> >>>>>>> >>>>>>> _______________________________________________ >>>>>>> EAT mailing list >>>>>>> EAT@ietf.org >>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>> >>>>>>             _______________________________________________ >>>>>>        EAT mailing list >>>>>> EAT@ietf.org >>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>              _______________________________________________ >>>>>>    EAT mailing list >>>>>> EAT@ietf.org >>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>    IMPORTANT NOTICE: The contents of this email and any >>>>>> attachments are confidential and may also be privileged. If you >>>>>> are not the intended recipient, please notify the sender >>>>>> immediately and do not disclose the contents to any other person, >>>>>> use it for any purpose, or store or copy the information in any >>>>>> medium. Thank you. >>>>>> >>>>> _______________________________________________ >>>>> EAT mailing list >>>>> EAT@ietf.org >>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>> >>>> _______________________________________________ >>>> EAT mailing list >>>> EAT@ietf.org >>>> https://www.ietf.org/mailman/listinfo/eat >> >> _______________________________________________ >> EAT mailing list >> EAT@ietf.org >> https://www.ietf.org/mailman/listinfo/eat > From nobody Sat Oct 20 03:42:02 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 532FB1294D0; Sat, 20 Oct 2018 03:42:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1-aJPIDgIjLr; Sat, 20 Oct 2018 03:41:59 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B53171292F1; Sat, 20 Oct 2018 03:41:57 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9KAfrdu005170 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 20 Oct 2018 12:41:55 +0200 Received: from [172.20.8.9] (88.157.232.34) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Sat, 20 Oct 2018 12:41:47 +0200 From: Henk Birkholz To: "rats@ietf.org" CC: "eat@ietf.org" Message-ID: Date: Sat, 20 Oct 2018 12:41:47 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [88.157.232.34] Archived-At: Subject: [Rats] Preliminary RATS BoF Agenda X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Oct 2018 10:42:01 -0000 Hi all, please find below a first agenda draft for the RATS BoF ("may be subject to change") create by the BoF proponents. In order to support the discussion about intersection of RATS and EAT, we reserved a presentation slot for the EAT draft. > RATS BOF Agenda at IETF 103 in Bangkok, Thailand > Tuesday, November 6th, 2018, Chitlada 2 > Afternoon Session I 1350-1550 (UTC+7) > > https://datatracker.ietf.org/meeting/103/floor-plan?room=chitlada-2 > > 0) Minute Takers, Jabber Scribe, Bluesheets (chairs) > > 1) Hello Room & Agenda Bash (chairs) > > 2) Introduction & Summary of Current IETF Work (Ned & Henk) > > 3) The Entity Attestation Token (TBD) > > 4) Compromise Trustworthy Visibility in Working Systems (Eric) > > 5) Charter Text Discussion (Ned & Henk) > > 6) Wrap Up (chairs) The current plan is to limit presentations to approx. 15 min or shorter - item 5 is an exception to this rule as it is intended to be a kick-off presentation to start charter discussions in the time remaining until wrap up. Viele Grüße, Henk From nobody Sat Oct 20 06:59:45 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 60182129C6B for ; Sat, 20 Oct 2018 06:59:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3fa0M9DD-jvp for ; Sat, 20 Oct 2018 06:59:36 -0700 (PDT) Received: from p3plsmtpa12-09.prod.phx3.secureserver.net (p3plsmtpa12-09.prod.phx3.secureserver.net [68.178.252.238]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8EA1127333 for ; Sat, 20 Oct 2018 06:59:35 -0700 (PDT) Received: from [192.168.0.101] ([121.46.87.45]) by :SMTPAUTH: with ESMTPSA id DrmpgUVjpvHF8Drmrg0VJw; Sat, 20 Oct 2018 06:59:34 -0700 From: Laurence Lundblade Message-Id: <35F3F15E-5B24-4CBA-921E-FAC50A1F3122@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_FC27D8DE-327A-4BFC-A142-246BB86E6C2D" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Sat, 20 Oct 2018 19:29:26 +0530 In-Reply-To: Cc: "rats@ietf.org" , Guy Fedorkow , Hannes Tschofenig , "Smith, Ned" , Jeremy O'Donoghue , "eat@ietf.org" , Denis To: Henk Birkholz References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> <9c73f9b7-9129-c273-254e-465f92ab3650@sit.fraunhofer.de> <09818298-9FE1-430A-8045-A9A7E76ED64C@island-resort.com> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfHMlrl5FvSFWaxB6zXPj88LFOQ4VZe0iaKBUsU1drHDVT1pnssoo4Wb+yeWSKkRQ4pyeUI9uRU2uK2FvXMxXPoWaqFMZG5/8RdBx6enkl7hCdfqhi6NN DLvvFHLe9mHBPPDSXHvi/FhgwTQS2bz+759IfoIdPEiQKMgsAZIYY+Rvat/Jiuj+RnMUAV5fuACTCxhgBuh6gVn7VaLHJtn8oWcWWWzwLiFndp+8pF7k0Cl2 tiOPy9Nb8yo7Hkc2UpTXn4iD4MggE/f2NtQcU6mJK3VbsLucfEL/CUH6G3ZQQSSG8hGa0IP/Y9Mu02gpl29a9ox4MFAt35PvewLr1mMPlf4Xe8PD/RnLDszw C6MLcfikQC1rLVOmDXIfmLwCyt7j49PF1mSiPDEYEuY16axCWA0= Archived-At: Subject: Re: [Rats] [EAT] Device Identity (was Re: [EXTERNAL] Re: Attestation BoF charter updates?) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Oct 2018 13:59:43 -0000 --Apple-Mail=_FC27D8DE-327A-4BFC-A142-246BB86E6C2D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Henk, I think you are grossly misunderstanding EAT. I certainly wouldn=E2=80=99t= propose such an insecure system as you assume it is and folks like = FIDO, Google and ARM would not be supporting systems that are very = similar if it wasn=E2=80=99t a secure model. =20 It is true that EAT doesn=E2=80=99t directly specify how the remote = party comes to know the key material on the device is authentic, but it = leaves this out with foresight and intention so that the EAT claims can = be used with key material established by IEEE-802.1AR, ECDAA as deployed = by Intel, Googles Attestation Service and others to come.=20 I don=E2=80=99t think we can rely solely on IEEE-802.1AR. It has size = issues for small devices. It has operational issues. Maybe even some of = the central / hierarchy issues that caused X.500 to fail. The core picture and system diagram shows how this works and the loop. = In this picture the IEEE-802.1AR roots/CAs correspond to the Entity = Manufacturer box. EAT certainly doesn=E2=80=99t preclude a group of = manufacturers getting together and running a central CA based on = IEEE-802.1AR. If EAT was just proof-of-possesion, then there would only be the one = line from the Entity/Device to the Relying Party. There would be no = provisioning step of any obtaining of Verification Keys. LL > On Oct 20, 2018, at 3:19 PM, Henk Birkholz = wrote: >=20 > Hello Laurence, >=20 > unfortunately, I am traveling at the moment, but let me try to address = an eclectically chosen topic. >=20 > In an attempt to answer your question "What is the definition of an = =E2=80=9Cidentity document=E2=80=9D I will just reference >=20 >> https://tools.ietf.org/html/draft-birkholz-core-coid-00#section-1 >=20 > for now (instead of writing a wall of text again. Sorry, if I do that = sometimes, that does not always help...) >=20 > Based on the reference text, the important principle here is that an = identity document is signed using secret keys issued by a (sub) = certificate authority that one or more entities *can* put trust into. >=20 > In comparison, if a CWT is signed with key material deployed on the = device in question, what you provide is proof-of-possession of that = signing (most likely intended to be secret) key. >=20 > Again, you *can* put trust into that proof-of-possession, but the = trust relationships here can have vastly different semantics. In both = cases though, putting trust into, for example, CoID (via TVP) or EAT = (via PoP) is a decision, I think. If you choose to put trust into the = signature of these CWT, both are Trusted Claim Sets - to you. >=20 > This trust has unfortunately nothing to do with the actual = trustworthiness of the thing in question. As Ned illustrated already, = "in a closed ecosystem, the trust characteristics and properties may be = implied". In consequence, if you choose to trust that possession of a = key provides an appropriate level of confidence in trustworthiness - = that is a decision you make. >=20 > This does not provide actual evidence that a thing is really = trustworthy. And providing this evidence via interoperable network = protocols is the gap that RATS intent to address - not only in closed = ecosystems, but also the Internet in general. >=20 > IHTH, >=20 > Henk >=20 >=20 > On 10/20/2018 08:19 AM, Laurence Lundblade wrote: >> I consider /device identity/ an absolute critical part of our work. = It is a critical part of most EAT use cases such as enrollment of IoT = devices with IoT management systems. It is the first claim defined in = EAT. >> What is the definition of an =E2=80=9Cidentity document=E2=80=9D? = Maybe you are thinking of it specifically as what was defined for IEEE = Dev ID. If I recall, the identification claims for the device are in the = subject DN of an X.509 certificate. >> Seems like any EAT with an EUID in it could server well as an = identity document too. It provides signed, secured proof of the identity = of the device. It can include manufacturer info in addition to the EUID. = The EAT style identity could be as tiny as 150 bytes in CBOR syntax. All = you need to store on the device is the EUID and the signing key. Maybe = they are even deterministically KDF=E2=80=99d from the same seed so you = maybe you only need to store 32 bytes on the device. >> EAT=E2=80=99s mention of X.509 in 1.4.2 is as one of many ways to = establish key material so the remote / relying / verifying party can = verify the signature. So yes, I think you have it correct below. = (Technically speaking the private key associated with the X.509 cert is = used to sign, not the X.509 cert or keys in the cert. The X.509 is only = to help the verifier find and verify the verification key. You might = even have a means to get it from some service based on a key ID and not = even store it on the device). >> It is an EAT design goal to keep /all/ the claims in the signed = payload. That includes identity of the device, identity of the = manufacturer and so on. That way you can use many different signing = schemes (ECDAA, symmetric key, non-X.509 public key, X.509 pubic key, = simple public key with just a key id=E2=80=A6) with the same claims. >> LL >>> On Oct 17, 2018, at 5:49 PM, Henk Birkholz = > wrote: >>>=20 >>> Hi Laurence, >>>=20 >>> maybe I understand now where the general confusion is originating = from. >>>=20 >>> I dug through some parts of the EAT draft again and could it be that = UIED are identifier and not an identities? They literally are claims = (aka assertions) that can be signed as content of a CWT as illustrated = in >>>=20 >>>> https://tools.ietf.org/html/draft-mandyam-eat-00#section-1.4.2 >>>=20 >>> 1.4.2. talks about identity documents by mentioning "X.509 = certificate chains or something similar but different". But as you = highlighted anything with regard to that is explicitly intended _not_ to = go into the EAT claim set as content, but is stored on the thing (or = maybe on a thing that signs "on behalf of" the thing the EAT is about?) = and consequently is only used to potentially sign the EAT claim set (via = COSE). Is that correct? >>>=20 >>> As a result, an EAT would never be able to act as an identity = document itself, but the key material that comes along with an x.509 = certificate (as one example of many highlighted) could be used to sign = the EAT. >>>=20 >>> RATS are able to use the "X.509 certificate chains or something = similar but different" and the corresponding key material comes along = with a certificate (as one example amongst others) to establish = Attestation Provenance. >>>=20 >>> Viele Gr=C3=BC=C3=9Fe, >>>=20 >>> Henk >>>=20 >>> On 10/17/2018 01:19 PM, Laurence Lundblade wrote: >>>> Wasn=E2=80=99t saying there was ambiguity in the TCG case. Not = being a TCGer, was just was trying to understand what the TCG definition = is. >>>> Your mentioning 802.1AR DevID helps a lot as I have some knowledge = of it. >>>> I see now that my speculation about SW / config version was wrong. = That=E2=80=99s fine. I only wrote it to try to get to clarity. >>>> Thanks for help clarifying. >>>> In EAT, we defined a UEID for what TCGer=E2=80=99s mean by = =E2=80=9Cidentity": >>>> UEID's identify individual manufactured entities / devices such = as a >>>> mobile phone, a water meter, a Bluetooth speaker or a networked >>>> security camera. It may identify the entire device or a = submodule or >>>> subsystem. It does not identify types, models or classes of = devices. >>>> It is akin to a serial number, though it does not have to be >>>> sequential. >>>> See here = for more = on UEID. >>>> In EAT there is a strong desire to separate the signing key = material from UEID to have flexibility in the signing scheme. For = example FIDO and Android both have privacy-preserving schemes were a = signing key is shared by 100,000 devices. (Some use cases need privacy, = some don=E2=80=99t, perhaps because of legal agreements with customers, = and correlation between use cases and privacy schemes can=E2=80=99t be = counted on for high-volume devices like mobile phones). >>>> I don=E2=80=99t know what the right answer(s) is(are) in the design = yet... >>>> LL >>>>> On Oct 17, 2018, at 4:26 PM, Guy Fedorkow > wrote: >>>>>=20 >>>>> Hi Laurence, >>>>> I don't think there's ambiguity in the TCG case... current work = in attestation focuses on using the 802.1AR DevID spec, which = corresponds exactly to one of your cases below -- it's a vendor, model = and serial number. >>>>> It's true that TCG technology can be used to validate software = integrity, but that's hardly the same as identity. >>>>> Considerations of user privacy commonly accepted in TCG would = preclude the inclusion of software state as part of identity, = practicalities aside. In general, privacy considerations lead TCG to = carefully avoid unauthorized disclosure of either software or hardware = based assertions. >>>>> Let me know if I'm missing the point... >>>>> Thanks >>>>> /guy fedorkow, juniper networks >>>>>=20 >>>>> -----Original Message----- >>>>> From: Laurence Lundblade > >>>>> Sent: Wednesday, October 17, 2018 12:31 AM >>>>> To: Henk Birkholz = > >>>>> Cc: Smith, Ned = >; Hannes Tschofenig = = >; rats@ietf.org = ; Jeremy O'Donoghue = = >; Denis >; eat@ietf.org = >>>>> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter = updates? >>>>>=20 >>>>> I think the TCG has a certain developed notion of identity that is = different from others. A way to get sharper about what a particular = identity means is to describe the space and how the identifier selects = in the space. Here=E2=80=99s a few examples: >>>>>=20 >>>>> - The space is physical human beings with fingers. A fingerprint = scanner select one of these humans. This is typical biometric auth. >>>>> - The space is humans that know a password. A password = authenticator selects the humans that know the password. Typical = authentication. >>>>> - The space is humans as legal entities / citizens with criminal = records, passports and such. A national ID selects. >>>>> - The space is physical manufactured devices from one maker. A = serial number narrows it down to one physical device. >>>>> - The space is physical devices from one maker. A model number or = version, narrows down to a subset of these devices. >>>>>=20 >>>>> My understanding of the TCG world is that identities goes beyond = any of the above because they include things like the version of the SW = and configuration of the device. The identity is largely a hash of an = identifier of the physical device, various SW components and various = configuration states. The point being that a change in any of these is = a change in the security characteristics of the device and if it was = trusted with a particular key or particular data in the past, that trust = should be revoked until re established. >>>>>=20 >>>>> - The space is physical devices from any maker >>>>> + Measurement of the SW (the SW versions) >>>>> + Measurements of some configuration >>>>>=20 >>>>> Changing any of these change the identity of the device. >>>>>=20 >>>>> I know I hardly need to ask, but TCG folks, did I describe this = correctly? >>>>>=20 >>>>>=20 >>>>> So that said, many, perhaps most, use cases for EAT do not want = this kind of device identity. It is not a prerequisite for trusting = claims coming from the device. In some cases this level of identity = seems extremely disruptive as small SW upgrades could result in re = enrollment of biometrics. We already are annoyed when we have to answer = security questions when start using a service from a new device. >>>>>=20 >>>>> I think this WG needs to address both this very tight TCG-style = device identity and the more heuristic EAT-style = claims-for-risk-engines. I could see multi-decade evolution where risk = engine use cases want more and more of the tight TCG-style device = identity as criminals become more adept at forging EAT-style claims. = (Today risk engines work off of unsecured browser parameters). >>>>>=20 >>>>> The Introduction in the charter seems entirely focused on the = TCG-based identity use case. I think text should be added for EAT-style = attestation. I will write some after some comments on this message. >>>>>=20 >>>>> LL >>>>>=20 >>>>>=20 >>>>>=20 >>>>>=20 >>>>>=20 >>>>>> On Oct 16, 2018, at 8:24 PM, Henk Birkholz = = > wrote: >>>>>>=20 >>>>>> To quote Carsten, there is "the usual terminology problem about = identity". >>>>>>=20 >>>>>> Identifying vs. Identity brings back memories about an extensive = discussion in SACM that in the end resulted in using Profiles... >>>>>>=20 >>>>>> Profiles are the "things" that you can aggregate identity claims = in (in SACM these claims are "Target Endpoint Characteristics", which = are pretty much the same thing as Device Characteristics) - and you use = the Profiles to (re-)identify target endpoints. >>>>>>=20 >>>>>> In the scope of remote attestation procedures, I think that "just = not calling" claim sets that are composed (amongst others) of = identifying claims "identity documents" might just end up in making up = another name for something that is effectively composing identity = documents anyways. If calling the same thing something else helps in = some way, I am all for it. But I am really not sure. >>>>>>=20 >>>>>> That said, Ned's elaboration on the relationship of identity and = attestation claims and corresponding claim semantics / trust semantics = is spot on, I think. >>>>>>=20 >>>>>> Viele Gr=C3=BC=C3=9Fe, >>>>>>=20 >>>>>> Henk >>>>>>=20 >>>>>> On 10/16/2018 03:51 PM, Smith, Ned wrote: >>>>>>> Agree with Hannes that identity discussion can lead to confusion = as identity is often highly dependent on some sort of context (domain of = interpretation). >>>>>>> In order to have productive conversation about attestation and = identity, it may be important to understand that attestation semantics = sets the context for identity. >>>>>>> * Attestation attributes have trust semantics (and trust = semantics are interpreted through the eyes of the verifier). Identity = attributes may also have trust semantics (in addition to identity = semantics) hence can be regarded as playing a role in both identity and = attestation. Since RATS should be interested primarily in trust = semantics, it makes sense to understand, discuss and consider identity = in terms of its trust semantics. Hence identity attributes are only = interesting to RATS if they are useful for evaluating trust semantics. >>>>>>> * In a closed ecosystem, the trust characteristics and = properties may be implied because there often exists out-of-band = processes that ensure the characteristics are applied (for example, if = an IT organization sets a policy that all asymmetric keys are to be = hardened using a smartcard, they can apply a deployment process where = the IT professional verifies the smartcard is used during enrollment.) = But in a non-closed ecosystem, there isn't an assumption that = out-of-band processes exist. Attestation attempts to make explicit what = otherwise is implicit and therefore subject to misinterpretation if the = verifier, relying party and attester are not part of the same closed = ecosystem. Implicit attestation therefore can lead to semantic confusion = if we're not careful. Therefore, the rigor of treating implicit = attestation claims (assertions assumed to exist but not explicitly = named) should nevertheless be defined explicitly. Then, if there is a = need for implicit attestation, the specifications that describe them can = describe them in terms of an explicit definition. >>>>>>> * In the context of asserting trust characteristics, the = verifier needs to know that a set of characteristics applies to the = instance of the endpoint being evaluated (aka the attester). (Otherwise = a MITM could supply characteristics that may be valid, but don=E2=80=99t = apply to the specific instance). Consequently, it makes sense to = consider that *attestation* keys are needed to authenticate the endpoint = being evaluated. This doesn't imply an identity key couldn't double as = an attestation key. But if it does, we care about its relevance to the = attester endpoint. >>>>>>> -Ned >>>>>>> =EF=BB=BFOn 10/15/18, 6:49 PM, "Hannes Tschofenig" = = > wrote: >>>>>>> Here are my 5 cents on the term 'identity'. >>>>>>> I have been working on identity management for many = years (partially because of my OAuth co-chair role) and I have noticed = that the use of the term "identity" tends to confuse more than it helps = (even more so when the term is applied to devices and software rather = than humans). >>>>>>> I believe we could get away with describing what we want = without ever using the term. >>>>>>> In this context I would argue that we are about = identifying different components, such as hardware and software. >>>>>>> Ciao >>>>>>> Hannes >>>>>>> -----Original Message----- >>>>>>> From: EAT = > On Behalf Of Smith, Ned >>>>>>> Sent: Monday, October 15, 2018 9:00 AM >>>>>>> To: Henk Birkholz = >; rats@ietf.org = ; Jeremy O'Donoghue = = >; Denis > >>>>>>> Cc: eat@ietf.org >>>>>>> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF = charter updates? >>>>>>> I agree with Henk's observation that there is = opportunity to find common ground on identity as identity can be a = collection of attributes, that if signed, becomes a set of verifiable = claims (about identity attributes). Attestation has a similar structure = in that it consists of a set of attributes, that if signed becomes a set = of verifiable claims. The main difference between identity and = attestation attributes is whether the attribute semantically relate to = trust (vs. identity). For example, claims of security certification = compliance resonates as attestation. >>>>>>> It may be possible to combine a set of attestation = attributes in such a way that the combination uniquely identifies an = entity. But that doesn't make it an identity system per se and shouldn't = cause a conflict in charter goals with respect to other identity focused = efforts in IETF. >>>>>>> Also, inclusion of attributes that don't have semantics = that reasonably relate to trust should not be of interest to a working = group focused on attestation. >>>>>>> -Ned >>>>>>> On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" = = on behalf of = henk.birkholz@sit.fraunhofer.de = > wrote: >>>>>>> Hi Jeremy & Denis, >>>>>>> all these points of view have merit, I think. >>>>>>> Please have a look at these quotes: >>>>>>>> knowing the provenance of the device >>>>>>>> having the entity creator/manufacturer provide a set of claims = which can be verified >>>>>>>> to know the characteristics of a device by issuing to the = device a public key certificate which will only be issued to the device = if it fulfills an expected set of functionalities. >>>>>>> To me, these descriptions seem to have different = intents, scope or >>>>>>> audience and require most certainly different work-flows, = but >>>>>>> semantically and in consequence representation-wise they = also seem quite >>>>>>> related. >>>>>>> If you think of an identity document as a set of = claims (potentially >>>>>>> including a public key), that is signed and that can = match one or more >>>>>>> things, maybe all three types highlighted above are = actually covered by >>>>>>> the same identity document concept? >>>>>>> With respect to identity documents, I think it is = safe so say that we >>>>>>> can find common ground here rather easily. That said, the = way how these >>>>>>> identity documents come into existence, when and how they = are deployed >>>>>>> on the thing or associated with multiple things is = another question. We >>>>>>> most certainly do not want to end up with a "signing = fool" that does not >>>>>>> add value to the level of confidence (I am quoting Ned = Smith here). >>>>>>> This has to be fleshed out explicitly for each = scenario and the parts >>>>>>> that are reused in every scenario should get special = attention in the >>>>>>> upcoming RATS architecture draft. >>>>>>> Identifying claims aggregated in an identity = document most certainly can >>>>>>> include device characteristics, public key(s), or claims = about the >>>>>>> intended functions and capabilities of the thing. Claims = can even >>>>>>> originate from Claimants that are not the thing itself, = but external >>>>>>> entities providing an assertion (e.g. these things are = CC-certified). >>>>>>> All different composites of identifying claims have = a specific shared >>>>>>> intend in this context though, I think: expressing = Attestation >>>>>>> Provenance (again - one for one or more things of the = same kind). And >>>>>>> all of them originate from Claimants and therefore use a = root of trust >>>>>>> of measurement, I think. >>>>>>> That said, establishing trustworthy knowledge about = attestation >>>>>>> provenance is only the first step and provides the = foundation for more >>>>>>> complex attestation procedures. In any case, this seem to = be required by >>>>>>> every scenario that was highlighted so far and therefore = will most >>>>>>> certainly be covered in a deliverable. >>>>>>> IHTH, >>>>>>> Henk >>>>>>> On 10/15/2018 12:22 PM, Jeremy O'Donoghue = wrote: >>>>>>>> On 12 Oct 2018, at 14:33, Denis >>>>>>>> > wrote: >>>>>>>>> The "Problem Statement" continues as follows: >>>>>>>>>=20 >>>>>>>>> (2) Today, there is no common, standard way for Relying = Parties to >>>>>>>>> know the provenance and characteristics of a device (e.g., an = end-user >>>>>>>>> device, >>>>>>>>> platform or endpoint, servers, IoT devices, device subsystems = and >>>>>>>>> sub-modules) that may be requesting services. >>>>>>>>>=20 >>>>>>>>> Knowing the provenance of the device is not always necessary. = What is >>>>>>>>> important is to know that a specific set of functions is = (securely) >>>>>>>>> supported by the device. >>>>>>>>> There already exists a common way to know the characteristics = of a >>>>>>>>> device by issuing to the device a public key certificate which = will >>>>>>>>> only be issued to the device >>>>>>>>> if it fulfills an expected set of functionalities. In such a = case a >>>>>>>>> syntax for a trusted claim sets**is not needed. >>>>>>>>>=20 >>>>>>>> This is indeed a possible way to address the problem, but = suffers from >>>>>>>> challenges which come down to: >>>>>>>>=20 >>>>>>>> - Who issues such certificates. An option is that there is some = form of >>>>>>>> security certification behind this issuance otherwise it is of = very >>>>>>>> limited value. >>>>>>>> - In order to capture the wide variety of different devices (I = prefer >>>>>>>> "entity" here as it is more general than "device"), many = different forms >>>>>>>> of such certificates would be required. This ends up being much = the same >>>>>>>> thing as a set of claims. >>>>>>>>=20 >>>>>>>> Given the multiplicity of entities for which attestation might = be >>>>>>>> useful, it seems to me that having the entity = creator/manufacturer >>>>>>>> provide a set of claims which can be verified is more flexible = than >>>>>>>> requiring a certificate. It seems likely to me that where a = formal >>>>>>>> security certification is needed there will be a certificate = issued by >>>>>>>> the Certifying Body as one of the claims about an entity, but I = can >>>>>>>> think of many cases (supply chain management, to take just one = example) >>>>>>>> where provenance is by far the most useful information. >>>>>>>>=20 >>>>>>>> I'm not in favour of changes to the charter in this direction. >>>>>>>>>=20 >>>>>>>>> The simplest cases should also be part of the framework. >>>>>>>>>=20 >>>>>>>>> Note: I personally appreciate that privacy is an aspect that >>>>>>>>> will/should be taken into consideration. >>>>>>>>>=20 >>>>>>>>> Denis >>>>>>>>>=20 >>>>>>>>>> As with the earlier draft, there are many references to = verify and >>>>>>>>>> verifier in the lead up to the deliverable but no = deliverables describing >>>>>>>>>> verification rules. I'd like to see rules in one of these = documents and >>>>>>>>>> think it worth citing in the deliverables. Are bindings to = certificate >>>>>>>>>> management protocols out of scope? >>>>>>>>>>=20 >>>>>>>>>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" >>>>>>>>>> = on behalf of = henk.birkholz@sit.fraunhofer.de = > wrote: >>>>>>>>>>=20 >>>>>>>>>>> Hi all, >>>>>>>>>>>=20 >>>>>>>>>>> sorry for the delay. Please find an updated charter proposal = here: >>>>>>>>>>>=20 >>>>>>>>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__github.com_ietf-2Dr= ats_charter_blob_RC2_ietf-2Drats-2Dcharter.md&d=3DDwIFaQ&c=3DHAkYuh63rsuhr= 6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VX= hmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DrPzmwhcwy8eob4eMi= wWzDg5DY-mcC5HYgQqhUGCZ2RI&e=3D >>>>>>>>>>> The BoF proponents tried to merge all comments and proposals = on >>>>>>>>>>> keystores, existing solutions, provenance & device = characteristics, etc >>>>>>>>>>> that were raised on the list - and align them in homogeneous = fashion. >>>>>>>>>>>=20 >>>>>>>>>>> This draft is intended to focus the discussion and improve = the wording. >>>>>>>>>>>=20 >>>>>>>>>>> Viele Gr=C3=BC=C3=9Fe, >>>>>>>>>>>=20 >>>>>>>>>>> Henk >>>>>>>>>>>=20 >>>>>>>>>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >>>>>>>>>>>> Hi Henk, >>>>>>>>>>>>=20 >>>>>>>>>>>> Bangkok IETF is getting close, will you be able to update = the charter >>>>>>>>>>>> for the attestation BoF to properly include EAT? I sent = you some text >>>>>>>>>>>> that just needs to be pasted along with some comments. It = doesn=E2=80=99t look >>>>>>>>>>>> like there=E2=80=99s been any updates. >>>>>>>>>>>>=20 >>>>>>>>>>>> LL >>>>>>>>>>>>=20 >>>>>>>>>>> _______________________________________________ >>>>>>>>>>> RATS mailing list >>>>>>>>>>> RATS@ietf.org >>>>>>>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_rats&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI= &r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57= -xCILnJh-EOaxl5AUwyWGM&s=3DxThsQTXgadltVkHTYpOWknadi7puxZt8O6XOIUm_bzo&e=3D= >>>>>>>>>> _______________________________________________ >>>>>>>>>> EAT mailing list >>>>>>>>>> EAT@ietf.org >>>>>>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>>>>>>=20 >>>>>>>>>=20 >>>>>>>>> _______________________________________________ >>>>>>>>> EAT mailing list >>>>>>>>> EAT@ietf.org = >>>>>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>>>>>=20 >>>>>>>>=20 >>>>>>>>=20 >>>>>>>> _______________________________________________ >>>>>>>> EAT mailing list >>>>>>>> EAT@ietf.org >>>>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>>>>>=20 >>>>>>> _______________________________________________ >>>>>>> EAT mailing list >>>>>>> EAT@ietf.org >>>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>>>> _______________________________________________ >>>>>>> EAT mailing list >>>>>>> EAT@ietf.org >>>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>>>> IMPORTANT NOTICE: The contents of this email and any = attachments are confidential and may also be privileged. If you are not = the intended recipient, please notify the sender immediately and do not = disclose the contents to any other person, use it for any purpose, or = store or copy the information in any medium. Thank you. >>>>>>>=20 >>>>>> _______________________________________________ >>>>>> EAT mailing list >>>>>> EAT@ietf.org >>>>>> = https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf.org_mailma= n_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&= r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-= xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=3D= >>>>>=20 >>>>> _______________________________________________ >>>>> EAT mailing list >>>>> EAT@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/eat >>>=20 >>> _______________________________________________ >>> EAT mailing list >>> EAT@ietf.org >>> https://www.ietf.org/mailman/listinfo/eat >=20 > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat --Apple-Mail=_FC27D8DE-327A-4BFC-A142-246BB86E6C2D Content-Type: multipart/related; type="text/html"; boundary="Apple-Mail=_DBC99868-74A1-46F9-A361-8ABD90B4D8E9" --Apple-Mail=_DBC99868-74A1-46F9-A361-8ABD90B4D8E9 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Henk,

I = think you are grossly misunderstanding EAT. I certainly wouldn=E2=80=99t = propose such an insecure system as you assume it is and folks like FIDO, = Google and ARM would not be supporting systems that are very similar if = it wasn=E2=80=99t a secure model.  

It is true that EAT doesn=E2=80=99t = directly specify how the remote party comes to know the key material on = the device is authentic, but it leaves this out with foresight and = intention so that the EAT claims can be used with key material = established by IEEE-802.1AR, ECDAA as deployed by Intel, Googles = Attestation Service and others to come. 

I don=E2=80=99t think we can rely = solely on IEEE-802.1AR. It has size issues for small devices. It has = operational issues.  Maybe even some of the central / hierarchy = issues that caused X.500 to fail.

The core picture and system diagram = shows how this works and the loop. In this picture the IEEE-802.1AR = roots/CAs correspond to the Entity Manufacturer box. EAT certainly = doesn=E2=80=99t preclude a group of manufacturers getting together and = running a central CA based on IEEE-802.1AR.

If EAT was just proof-of-possesion, = then there would only be the one line from the Entity/Device to the = Relying Party. There would be no provisioning step of any obtaining of = Verification Keys.



LL





On Oct = 20, 2018, at 3:19 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hello = Laurence,

unfortunately, I am traveling at = the moment, but let me try to address an eclectically chosen topic.

In an attempt to answer your question "What is = the definition of an =E2=80=9Cidentity document=E2=80=9D I will just = reference

https://tools.ietf.org/html/draft-birkholz-core-coid-00#section= -1

for now (instead of = writing a wall of text again. Sorry, if I do that sometimes, that does = not always help...)

Based on the reference = text, the important principle here is that an identity document is = signed using secret keys issued by a (sub) certificate authority that = one or more entities *can* put trust into.

In= comparison, if a CWT is signed with key material deployed on the device = in question, what you provide is proof-of-possession of that signing = (most likely intended to be secret) key.

Again, you *can* put trust into that proof-of-possession, but = the trust relationships here can have vastly different semantics. In = both cases though, putting trust into, for example, CoID (via TVP) or = EAT (via PoP) is a decision, I think. If you choose to put trust into = the signature of these CWT, both are Trusted Claim Sets - to you.

This trust has unfortunately nothing to do = with the actual trustworthiness of the thing in question. As Ned = illustrated already, "in a closed ecosystem, the trust characteristics = and properties may be implied". In consequence, if you choose to trust = that possession of a key provides an appropriate level of confidence in = trustworthiness - that is a decision you make.

This does not provide actual evidence that a thing is really = trustworthy. And providing this evidence via interoperable network = protocols is the gap that RATS intent to address - not only in closed = ecosystems, but also the Internet in general.

IHTH,

Henk


On 10/20/2018 08:19 AM, Laurence Lundblade = wrote:
I consider = /device identity/ an absolute critical part of our work. It is a = critical part of most EAT use cases such as enrollment of IoT devices = with IoT management systems. It is the first claim defined in EAT.
What is the definition of an =E2=80=9Cidentity document=E2=80=9D= ? Maybe you are thinking of it specifically as what was defined for IEEE = Dev ID. If I recall, the identification claims for the device are in the = subject DN of an X.509 certificate.
Seems like any EAT = with an EUID in it could server well as an identity document too. It = provides signed, secured proof of the identity of the device. It can = include manufacturer info in addition to the EUID. The EAT style = identity could be as tiny as 150 bytes in CBOR syntax. All you need to = store on the device is the EUID and the signing key. Maybe they are even = deterministically KDF=E2=80=99d from the same seed so you maybe you only = need to store 32 bytes on the device.
EAT=E2=80=99s = mention of X.509 in 1.4.2 is as one of many ways to establish key = material so the remote / relying / verifying party can verify the = signature. So yes, I think you have it correct below. (Technically = speaking the private key associated with the X.509 cert is used to sign, = not the X.509 cert or keys in the cert. The X.509 is only to help the = verifier find and verify the verification key. You might even have a = means to get it from some service based on a key ID and not even store = it on the device).
It is an EAT design goal to keep /all/ = the claims in the signed payload. That includes identity of the device, = identity of the manufacturer and so on. That way you can use many = different signing schemes (ECDAA, symmetric key, non-X.509 public key, = X.509 pubic key, simple public key with just a key id=E2=80=A6) with the = same claims.
LL
On Oct 17, 2018, at 5:49 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de>> wrote:

Hi Laurence,

maybe = I understand now where the general confusion is originating from.

I dug through some parts of the EAT draft = again and could it be that UIED are identifier and not an identities? = They literally are claims (aka assertions) that can be signed as content = of a CWT as illustrated in

https://tools.ietf.org/html/draft-mandyam-eat-00#section-1.4.2<= /a>

1.4.2. talks about = identity documents by mentioning "X.509 certificate chains or something = similar but different". But as you highlighted anything with regard to = that is explicitly intended _not_ to go into the EAT claim set as = content, but is stored on the thing (or maybe on a thing that signs "on = behalf of" the thing the EAT is about?) and consequently is only used to = potentially sign the EAT claim set (via COSE). Is that correct?

As a result, an EAT would never be able to act = as an identity document itself, but the key material that comes along = with an x.509 certificate (as one example of many highlighted) could be = used to sign the EAT.

RATS are able to use = the "X.509 certificate chains or something similar but different" and = the corresponding key material comes along with a certificate (as one = example amongst others) to establish Attestation Provenance.

Viele Gr=C3=BC=C3=9Fe,

Henk

On 10/17/2018 01:19 PM, = Laurence Lundblade wrote:
Wasn=E2=80=99t saying there was ambiguity in the TCG case. = Not being a TCGer, was just was trying to understand what the TCG = definition is.
Your mentioning 802.1AR DevID helps a lot = as I have some knowledge of it.
I see now that my = speculation about SW / config version was wrong. That=E2=80=99s fine. I = only wrote it to try to get to clarity.
Thanks for help = clarifying.
In EAT, we defined a UEID for what TCGer=E2=80=99= s mean by =E2=80=9Cidentity":
   UEID's = identify individual manufactured entities / devices such as a
   mobile phone, a water meter, a Bluetooth = speaker or a networked
   security camera. =  It may identify the entire device or a submodule or
   subsystem.  It does not identify = types, models or classes of devices.
   It = is akin to a serial number, though it does not have to be
   sequential.
See here <https://tools.ietf.org/html/draft-mandyam-eat-00#section-3.1> for more on UEID.
In EAT there is a strong desire to = separate the signing key material from UEID to have flexibility in the = signing scheme. For example FIDO and Android both have = privacy-preserving schemes were a signing key is shared by 100,000 = devices. (Some use cases need privacy, some don=E2=80=99t, perhaps = because of legal agreements with customers, and correlation between use = cases and privacy schemes can=E2=80=99t be counted on for high-volume = devices like mobile phones).
I don=E2=80=99t know what the = right answer(s) is(are) in the design yet...
LL
On Oct 17, 2018, at 4:26 = PM, Guy Fedorkow <gfedorkow@juniper.net <mailto:gfedorkow@juniper.net> <mailto:gfedorkow@juniper.net>> wrote:

Hi Laurence,
 I don't think = there's ambiguity in the TCG case...  current work in attestation = focuses on using the 802.1AR DevID spec, which corresponds exactly to = one of your cases below -- it's a vendor, model and serial number.
 It's true that TCG technology can be used to validate = software integrity, but that's hardly the same as identity.
 Considerations of user privacy commonly accepted in TCG = would preclude the inclusion of software state as part of identity, = practicalities aside.  In general, privacy considerations lead TCG = to carefully avoid unauthorized disclosure of either software or = hardware based assertions.
 Let me know if I'm = missing the point...
Thanks
/guy fedorkow, = juniper networks

-----Original = Message-----
From: Laurence Lundblade <lgl@island-resort.com= <mailto:lgl@island-resort.com> <mailto:lgl@island-resort.com>>
Sent: = Wednesday, October 17, 2018 12:31 AM
To: Henk Birkholz = <henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de> <mailto:henk.birkholz@sit.fraunhofer.de>>
Cc: Smith, Ned <ned.smith@intel.com <mailto:ned.smith@intel.com> <mailto:ned.smith@intel.com>>; Hannes Tschofenig = <Hannes.Tschofenig@arm.com <mailto:Hannes.Tschofenig@arm.com> <mailto:Hannes.Tschofenig@arm.com>>; rats@ietf.org <mailto:rats@ietf.org> = <mailto:rats@ietf.org>; Jeremy O'Donoghue <jodonogh@qti.qualcomm.com <mailto:jodonogh@qti.qualcomm.com> <mailto:jodonogh@qti.qualcomm.com>>; Denis <denis.ietf@free.fr = <mailto:denis.ietf@free.fr> <mailto:denis.ietf@free.fr>>; eat@ietf.org <mailto:eat@ietf.org> = <mailto:eat@ietf.org>
Subject: Re: [EAT] = [EXTERNAL] Re: [Rats] Attestation BoF charter updates?

I think the TCG has a certain developed notion of identity = that is different from others.  A way to get sharper about what a = particular identity means is to describe the space and how the = identifier selects in the space.  Here=E2=80=99s a few examples:

- The space is physical human beings with = fingers. A fingerprint scanner select one of these humans. This is = typical biometric auth.
- The space is humans that know a = password. A password authenticator selects the humans that know the = password. Typical authentication.
- The space is humans as = legal entities / citizens with criminal records, passports and such. A = national ID selects.
- The space is physical manufactured = devices from one maker.  A serial number narrows it down to one = physical device.
- The space is physical devices from one = maker. A model number or version, narrows down to a subset of these = devices.

My understanding of the TCG world = is that identities goes beyond any of the above because they include = things like the version of the SW and configuration of the device. The = identity is largely a hash of an identifier of the physical device, = various SW components and various configuration states.  The point = being that a change in any of these is a change in the security = characteristics of the device and if it was trusted with a particular = key or particular data in the past, that trust should be revoked until = re established.

- The space is physical = devices from any maker
 + Measurement of the SW (the = SW versions)
    + Measurements of = some configuration

Changing any of these = change the identity of the device.

I know I = hardly need to ask, but TCG folks, did I describe this correctly?


So that said, many, perhaps = most, use cases for EAT do not want this kind of device identity. It is = not a prerequisite for trusting  claims coming from the device. In = some cases this level of identity seems extremely disruptive as small SW = upgrades could result in re enrollment of biometrics. We already are = annoyed when we have to answer security questions when start using a = service from a new device.

I think this WG = needs to address both this very tight TCG-style device identity and the = more heuristic EAT-style claims-for-risk-engines. I could see = multi-decade evolution where risk engine use cases want more and more of = the tight TCG-style device identity as criminals become more adept at = forging EAT-style claims. (Today risk engines work off of unsecured = browser parameters).

The Introduction in = the charter seems entirely focused on the TCG-based identity use case. I = think text should be added for EAT-style attestation. I will write some = after some comments on this message.

LL




On Oct 16, 2018, at = 8:24 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de> <mailto:henk.birkholz@sit.fraunhofer.de>> wrote:

To quote Carsten, there is "the usual = terminology problem about identity".

Identifying vs. Identity brings back memories about an = extensive discussion in SACM that in the end resulted in using = Profiles...

Profiles are the "things" that = you can aggregate identity claims in (in SACM these claims are "Target = Endpoint Characteristics", which are pretty much the same thing as = Device Characteristics) - and you use the Profiles to (re-)identify = target endpoints.

In the scope of remote = attestation procedures, I think that "just not calling" claim sets that = are composed (amongst others) of identifying claims "identity documents" = might just end up in making up another name for something that is = effectively composing identity documents anyways. If calling the same = thing something else helps in some way, I am all for it. But I am really = not sure.

That said, Ned's elaboration on = the relationship of identity and attestation claims and corresponding = claim semantics / trust semantics is spot on, I think.

Viele Gr=C3=BC=C3=9Fe,

Henk

On 10/16/2018 03:51 PM, Smith, Ned wrote:
Agree with Hannes that = identity discussion can lead to confusion as identity is often highly = dependent on some sort of context (domain of interpretation).
In order to have productive conversation about attestation = and identity, it may be important to understand that attestation = semantics sets the context for identity.
* Attestation = attributes have trust semantics (and trust semantics are interpreted = through the eyes of the verifier). Identity attributes may also have = trust semantics (in addition to identity semantics) hence can be = regarded as playing a role in both identity and attestation. Since RATS = should be interested primarily in trust semantics, it makes sense to = understand, discuss and consider identity in terms of its trust = semantics. Hence identity attributes are only interesting to RATS if = they are useful for evaluating trust semantics.
* In a = closed ecosystem, the trust characteristics and properties may be = implied because there often exists out-of-band processes that ensure the = characteristics are applied (for example, if an IT organization sets a = policy that all asymmetric keys are to be hardened using a smartcard, = they can apply a deployment process where the IT professional verifies = the smartcard is used during enrollment.) But in a non-closed ecosystem, = there isn't an assumption that out-of-band processes exist. Attestation = attempts to make explicit what otherwise is implicit and therefore = subject to misinterpretation if the verifier, relying party and attester = are not part of the same closed ecosystem. Implicit attestation = therefore can lead to semantic confusion if we're not careful. = Therefore, the rigor of treating implicit attestation claims (assertions = assumed to exist but not explicitly named) should nevertheless be = defined explicitly. Then, if there is a need for implicit attestation, = the specifications that describe them can describe them in terms of an = explicit definition.
* In the context of asserting trust = characteristics, the verifier needs to know that a set of = characteristics applies to the instance of the endpoint being evaluated = (aka the attester). (Otherwise a MITM could supply characteristics that = may be valid, but don=E2=80=99t apply to the specific instance). = Consequently, it makes sense to consider that *attestation* keys are = needed to authenticate the endpoint being evaluated. This doesn't imply = an identity key couldn't double as an attestation key. But if it does, = we care about its relevance to the attester endpoint.
-Ned
=EF=BB=BFOn 10/15/18, 6:49 PM, "Hannes = Tschofenig" <Hannes.Tschofenig@arm.com <mailto:Hannes.Tschofenig@arm.com> <mailto:Hannes.Tschofenig@arm.com>> wrote:
   Here are my 5 cents on the term = 'identity'.
        I have been = working on identity management for many years (partially because of my = OAuth co-chair role) and I have noticed that the use of the term = "identity" tends to confuse more than it helps (even more so when the = term is applied to devices and software rather than humans).
        I believe we = could get away with describing what we want without ever using the = term.
        In = this context I would argue that we are about identifying different = components, such as hardware and software.
        Ciao
   Hannes
        -----Original = Message-----
   From: EAT <eat-bounces@ietf.org = <mailto:eat-bounces@ietf.org> <mailto:eat-bounces@ietf.org>> On Behalf Of Smith, = Ned
   Sent: Monday, October 15, 2018 9:00 = AM
   To: Henk Birkholz <henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de> <mailto:henk.birkholz@sit.fraunhofer.de>>; rats@ietf.org <mailto:rats@ietf.org> = <mailto:rats@ietf.org>; Jeremy O'Donoghue <jodonogh@qti.qualcomm.com <mailto:jodonogh@qti.qualcomm.com> <mailto:jodonogh@qti.qualcomm.com>>; Denis <denis.ietf@free.fr = <mailto:denis.ietf@free.fr> <mailto:denis.ietf@free.fr>>
   Cc: eat@ietf.org <mailto:eat@ietf.org> <mailto:eat@ietf.org>
   Subject: Re: [EAT] [EXTERNAL] Re: [Rats] = Attestation BoF charter updates?
        I agree with = Henk's observation that there is opportunity to find common ground on = identity as identity can be a collection of attributes, that if signed, = becomes a set of verifiable claims (about identity attributes). = Attestation has a similar structure in that it consists of a set of = attributes, that if signed becomes a set of verifiable claims. The main = difference between identity and attestation attributes is whether the = attribute semantically relate to trust (vs. identity). For example, = claims of security certification compliance resonates as attestation.
        It may be = possible to combine a set of attestation attributes in such a way that = the combination uniquely identifies an entity. But that doesn't make it = an identity system per se and shouldn't cause a conflict in charter = goals with respect to other identity focused efforts in IETF.
        Also, = inclusion of attributes that don't have semantics that reasonably relate = to trust should not be of interest to a working group focused on = attestation.
        -Ned
        On 10/15/18, = 3:53 PM, "EAT on behalf of Henk Birkholz" <eat-bounces@ietf.org = <mailto:eat-bounces@ietf.org> <mailto:eat-bounces@ietf.org> on behalf of henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de> <mailto:henk.birkholz@sit.fraunhofer.de>> wrote:
          &nb= sp; Hi Jeremy & Denis,
          &nb= sp; all these points of view have merit, I think.
          &nb= sp; Please have a look at these quotes:
knowing the provenance of the device
having the entity creator/manufacturer provide a set of = claims which can be verified
to know the characteristics = of a device by issuing to the device a public key certificate which will = only be issued to the device if it fulfills an expected set of = functionalities.
        &n= bsp;   To me, these descriptions seem to have different = intents, scope or
       audience and = require most certainly different work-flows, but
       semantically and in = consequence representation-wise they also seem quite
       related.
          &nb= sp; If you think of an identity document as a set of claims = (potentially
       including a public = key), that is signed and that can match one or more
       things, maybe all = three types highlighted above are actually covered by
       the same identity = document concept?
          &nb= sp; With respect to identity documents, I think it is safe so say = that we
       can find = common ground here rather easily. That said, the way how these
       identity documents = come into existence, when and how they are deployed
       on the thing or = associated with multiple things is another question. We
       most certainly do = not want to end up with a "signing fool" that does not
       add value to the = level of confidence (I am quoting Ned Smith here).
          &nb= sp; This has to be fleshed out explicitly for each scenario and the = parts
       that are = reused in every scenario should get special attention in the
       upcoming RATS = architecture draft.
          &nb= sp; Identifying claims aggregated in an identity document most = certainly can
       include device = characteristics, public key(s), or claims about the
       intended functions = and capabilities of the thing. Claims can even
       originate from = Claimants that are not the thing itself, but external
       entities providing = an assertion (e.g. these things are CC-certified).
          &nb= sp; All different composites of identifying claims have a specific = shared
       intend in = this context though, I think: expressing Attestation
       Provenance (again - = one for one or more things of the same kind). And
       all of them = originate from Claimants and therefore use a root of trust
       of measurement, I = think.
          &nb= sp; That said, establishing trustworthy knowledge about = attestation
       provenance is only = the first step and provides the foundation for more
       complex attestation = procedures. In any case, this seem to be required by
       every scenario that = was highlighted so far and therefore will most
       certainly be = covered in a deliverable.
          &nb= sp; IHTH,
          &nb= sp; Henk
          &nb= sp;      On 10/15/2018 12:22 PM, Jeremy = O'Donoghue wrote:
On = 12 Oct 2018, at 14:33, Denis <denis.ietf@free.fr <mailto:denis.ietf@free.fr> <mailto:denis.ietf@free.fr>
<mailto:denis.ietf@free.fr>> wrote:
The "Problem Statement" = continues as follows:

(2) Today, there is = no common, standard way for Relying Parties to
know the = provenance and characteristics of a device (e.g., an end-user
device,
platform or endpoint, servers, IoT = devices, device subsystems and
sub-modules) that may be = requesting services.

Knowing the provenance = of the device is not always necessary. What is
important = is to know that a specific set of functions is (securely)
supported by the device.
There already exists a = common way to know the characteristics of a
device by = issuing to the device a public key certificate which will
only be issued to the device
if it fulfills an = expected set of functionalities. In such a case a
syntax = for a trusted claim sets**is not needed.

This is indeed a possible way to address the = problem, but suffers from
challenges which come down = to:

- Who issues such certificates. An = option is that there is some form of
security = certification behind this issuance otherwise it is of very
limited value.
- In order to capture the wide = variety of different devices (I prefer
"entity" here as it = is more general than "device"), many different forms
of = such certificates would be required. This ends up being much the same
thing as a set of claims.

Given = the multiplicity of entities for which attestation might be
useful, it seems to me that having the entity = creator/manufacturer
provide a set of claims which can be = verified is more flexible than
requiring a certificate. It = seems likely to me that where a formal
security = certification is needed there will be a certificate issued by
the Certifying Body as one of the claims about an entity, but = I can
think of many cases (supply chain management, to = take just one example)
where provenance is by far the most = useful information.

I'm not in favour of = changes to the charter in this direction.

The simplest cases should also = be part of the framework.

Note: I = personally appreciate that privacy is an aspect that
will/should be taken into consideration.

Denis

As with the earlier draft, there are many references to = verify and
verifier in the lead up to the deliverable but = no deliverables describing
verification rules. I'd like to = see rules in one of these documents and
think it worth = citing in the deliverables. Are bindings to certificate
management protocols out of scope?

On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz"
<rats-bounces@ietf.org <mailto:rats-bounces@ietf.org> <mailto:rats-bounces@ietf.org> on behalf of henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de> <mailto:henk.birkholz@sit.fraunhofer.de>> =  wrote:

Hi all,

sorry for the delay. = Please find an updated charter proposal here:

https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__github.c= om_ietf-2Drats_charter_blob_RC2_ietf-2Drats-2Dcharter.md&d=3DDwIFaQ&am= p;c=3DHAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZO= bmOub9NX0cE_5cRieGL_7VXhmfk&m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AU= wyWGM&s=3DrPzmwhcwy8eob4eMiwWzDg5DY-mcC5HYgQqhUGCZ2RI&e=3D
The BoF proponents tried to merge all comments = and proposals on
keystores, existing solutions, provenance = & device characteristics, etc
that were raised on the = list - and align them in homogeneous fashion.

This draft is intended to focus the discussion and improve = the wording.

Viele Gr=C3=BC=C3=9Fe,

Henk

On = 10/06/2018 08:23 AM, Laurence Lundblade wrote:
Hi Henk,

Bangkok = IETF is getting close, will you be able to update the charter
for the attestation BoF to properly include EAT?  I sent = you some text
that just needs to be pasted along with some = comments. It doesn=E2=80=99t look
like there=E2=80=99s = been any updates.

LL

_______________________________________________RATS mailing list
RATS@ietf.org <mailto:RATS@ietf.org> = <mailto:RATS@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_rats&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBX= eMK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&am= p;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DxThsQTXgadltVkHT= YpOWknadi7puxZt8O6XOIUm_bzo&e=3D
_______________________________________________EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org> <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D


_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org> <mailto:EAT@ietf.org> <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D



_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org> <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D

        &n= bsp;   _______________________________________________
       EAT mailing list
EAT@ietf.org = <mailto:EAT@ietf.org>= <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D
          &nb= sp;  _______________________________________________
   EAT mailing list
EAT@ietf.org = <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D
   IMPORTANT NOTICE: The contents of this = email and any attachments are confidential and may also be privileged. = If you are not the intended recipient, please notify the sender = immediately and do not disclose the contents to any other person, use it = for any purpose, or store or copy the information in any medium. Thank = you.

_______________________________________________EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org> <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=3Dhttps-3A__www.ietf= .org_mailman_listinfo_eat&d=3DDwIFaQ&c=3DHAkYuh63rsuhr6Scbfh0UjBXe= MK-ndb3voDTXcWzoCI&r=3DsebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&= ;m=3Dp5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=3DN7kKkDdCvl_MNmB3G= uyg9HC-kQnMrX1cP5w44SbDsAw&e=3D

_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org> <mailto:EAT@ietf.org>
https://www.ietf.org/mailman/listinfo/eat

_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org>
https://www.ietf.org/mailman/listinfo/eat

_______________________________________________
EAT mailing list
EAT@ietf.org
https://www.ietf.org/mailman/listinfo/eat

= --Apple-Mail=_DBC99868-74A1-46F9-A361-8ABD90B4D8E9 Content-Transfer-Encoding: base64 Content-Disposition: inline; filename=PastedGraphic-2.png Content-Type: image/png; x-unix-mode=0666; name="PastedGraphic-2.png" Content-Id: <7ACD3186-5466-4E4B-8B88-A715B07CFC62> iVBORw0KGgoAAAANSUhEUgAABuYAAAOkCAYAAABap4ICAAAMKGlDQ1BJQ0MgUHJvZmlsZQAASImV lwdYU8kWgOeWJCQktEAoUkJvgvQqvQYQkCrYCEkgocSQEFTsyKICa0FFBCu6KmJbCyCLitjLItj7 w4KKsi4WbKi8SQLo6vfe+975vrn3z5kzZ845d+7kDgCqsWyRKAdVAyBXmC+OCwtkTkhJZZIeAgog w+YCTNgciSggNjYKQBm+/1PeXQeI7H7FTubr5/7/KupcnoQDABILOZ0r4eRCPggA7sYRifMBIPRC ven0fBFkIowSaIphgJDNZJypYA8Zpys4Sm6TEBcEOQ0AJSqbLc4EQEUWF7OAkwn9qJRDdhByBULI LZB9OXw2F/JnyKNzc6dBVrWCbJX+nZ/Mf/hMH/HJZmeOsCIXuSgFCySiHPbM/7Mc/1tyc6TDc5jC RuWLw+NkOcvqlj0tUsZUyGeF6dExkDUgXxVw5fYyfsKXhicO2X/gSIJgzQADAJTKZQdHQtaHbCLM iY4a0vtmCEJZkGHt0QRBPitBMRbliqfFDflHZ/AkIfHDzBbL55LZlEqzEwOGfG7g81jDPpsL+QnJ ijjRjgJBUjRkFch3JdnxkUM2zwv5QdHDNmJpnCxm+MwxkCEOjVPYYGa5kuG8MC++gBU9xFH5/IRw xVhsCoctj00HchZPMiFqOE4uLzhEkRdWxBMmDsWPVYjyA+OG7LeKcmKH7LEWXk6YTG8CuV1SED88 ti8fLjZFvjgQ5ccmKGLDNbPYEbGKGHAbEAWCQDBgAils6WAayAKC9t7GXvhL0RMK2EAMMgEP2A1p hkcky3uE8BoPCsFfkHhAMjIuUN7LAwVQ/2VEq7jagQx5b4F8RDZ4AjkXRIIc+FsqHyUcmS0JPIYa wU+zc2CsObDJ+n7SMVWHdcQQYjAxnBhKtMb1cF/cG4+CV3/YnHAP3HM4rm/2hCeETsJDwjVCF+HW VEGR+IfImWAc6IIxhg5ll/59drgF9OqKB+I+0D/0jTNwPWCHu8CZAnA/OLcr1H4fq3Qk42+1HPJF diCjZG2yP9nqxwhUbFRcR7zIKvV9LRRxpY9UK2ik58c8gr6rHxfeI3+0xBZjB7Az2HHsHNaCNQIm dgxrwi5iR2Q8sjYey9fG8Gxx8niyoR/BT/Oxh+aUVU3iUO/Q4/B5qA/k82bky16WoGmimWJBJj+f GQB3ax6TJeTYj2Y6OTjCXVS29yu2ljcM+Z6OMM5/0+W1AuBZCpWZ33RsuAcdfgIA/d03nelruOyX A3CkgyMVFyh0uOxCgP8oqvBN0QWGcO+yghk5ATfgDfxBCIgAMSABpIApsM58uE7FYDqYDRaAElAG loPVoBpsBFvADrAb7AeNoAUcB6fBBdABroE7cK10gxegD7wDAwiCkBAaQkd0ESPEHLFFnBAPxBcJ QaKQOCQFSUMyESEiRWYjC5EypAKpRjYjdcjvyGHkOHIO6URuIQ+QHuQ18gnFUCqqiRqgFugY1AMN QCPRBHQymonmoYVoMboUrUJr0V1oA3ocvYBeQ7vQF2g/BjBljIEZY3aYBxaExWCpWAYmxuZipVgl VovtwZrhk76CdWG92EeciNNxJm4H12s4nohz8Dx8Ll6OV+M78Ab8JH4Ff4D34V8JNII+wZbgRWAR JhAyCdMJJYRKwjbCIcIp+O50E94RiUQG0ZLoDt+9FGIWcRaxnLieuJfYSuwkPiL2k0gkXZItyYcU Q2KT8kklpLWkXaRjpMukbtIHJWUlIyUnpVClVCWhUpFSpdJOpaNKl5WeKg2Q1cjmZC9yDJlLnkle Rt5KbiZfIneTByjqFEuKDyWBkkVZQKmi7KGcotylvFFWVjZR9lQeryxQnq9cpbxP+azyA+WPVA2q DTWIOokqpS6lbqe2Um9R39BoNAuaPy2Vlk9bSqujnaDdp31QoavYq7BUuCrzVGpUGlQuq7xUJaua qwaoTlEtVK1UPaB6SbVXjaxmoRakxlabq1ajdljthlq/Ol3dUT1GPVe9XH2n+jn1ZxokDQuNEA2u RrHGFo0TGo/oGN2UHkTn0BfSt9JP0bs1iZqWmizNLM0yzd2a7Zp9WhpaLlpJWjO0arSOaHUxMIYF g8XIYSxj7GdcZ3zSNtAO0OZpL9Heo31Z+73OKB1/HZ5Oqc5enWs6n3SZuiG62bordBt17+nhejZ6 4/Wm623QO6XXO0pzlPcozqjSUftH3dZH9W304/Rn6W/Rv6jfb2BoEGYgMlhrcMKg15Bh6G+YZbjK 8KhhjxHdyNdIYLTK6JjRc6YWM4CZw6xinmT2GesbhxtLjTcbtxsPmFiaJJoUmew1uWdKMfUwzTBd Zdpm2mdmZDbObLZZvdltc7K5hznffI35GfP3FpYWyRaLLBotnlnqWLIsCy3rLe9a0az8rPKsaq2u WhOtPayzrddbd9igNq42fJsam0u2qK2brcB2vW3naMJoz9HC0bWjb9hR7QLsCuzq7R7YM+yj7Ivs G+1fjjEbkzpmxZgzY746uDrkOGx1uOOo4RjhWOTY7PjaycaJ41TjdNWZ5hzqPM+5yfmVi60Lz2WD y01Xuus410Wuba5f3NzdxG573HrczdzT3Ne53/DQ9Ij1KPc460nwDPSc59ni+dHLzSvfa7/X3952 3tneO72fjbUcyxu7dewjHxMfts9mny5fpm+a7ybfLj9jP7Zfrd9Df1N/rv82/6cB1gFZAbsCXgY6 BIoDDwW+D/IKmhPUGowFhwWXBreHaIQkhlSH3A81Cc0MrQ/tC3MNmxXWGk4IjwxfEX6DZcDisOpY fRHuEXMiTkZSI+MjqyMfRtlEiaOax6HjIsatHHc32jxaGN0YA2JYMStj7sVaxubF/jGeOD52fM34 J3GOcbPjzsTT46fG74x/lxCYsCzhTqJVojSxLUk1aVJSXdL75ODkiuSuCWMmzJlwIUUvRZDSlEpK TUrdlto/MWTi6ondk1wnlUy6Ptly8ozJ56boTcmZcmSq6lT21ANphLTktJ1pn9kx7Fp2fzorfV16 HyeIs4bzguvPXcXt4fnwKnhPM3wyKjKeZfpkrszs4fvxK/m9giBBteBVVnjWxqz32THZ27MHc5Jz 9uYq5ablHhZqCLOFJ6cZTpsxrVNkKyoRdeV55a3O6xNHirdJEMlkSVO+JvzIvii1kv4ifVDgW1BT 8GF60vQDM9RnCGdcnGkzc8nMp4Whhb/NwmdxZrXNNp69YPaDOQFzNs9F5qbPbZtnOq94Xvf8sPk7 FlAWZC/4s8ihqKLo7cLkhc3FBsXzix/9EvZLfYlKibjkxiLvRRsX44sFi9uXOC9Zu+RrKbf0fJlD WWXZ53JO+flfHX+t+nVwacbS9mVuyzYsJy4XLr++wm/Fjgr1isKKRyvHrWxYxVxVuurt6qmrz1W6 VG5cQ1kjXdNVFVXVtNZs7fK1n6v51ddqAmv2rtNft2Td+/Xc9Zc3+G/Ys9FgY9nGT5sEm25uDtvc UGtRW7mFuKVgy5OtSVvP/ObxW902vW1l275sF27v2hG342Sde13dTv2dy+rReml9z65Juzp2B+9u 2mO3Z/Next6yfWCfdN/z39N+v74/cn/bAY8Dew6aH1x3iH6otAFpmNnQ18hv7GpKaeo8HHG4rdm7 +dAf9n9sbzFuqTmidWTZUcrR4qODxwqP9beKWnuPZx5/1Da17c6JCSeunhx/sv1U5Kmzp0NPnzgT cObYWZ+zLee8zh0+73G+8YLbhYaLrhcP/en656F2t/aGS+6Xmjo8O5o7x3Yevex3+fiV4Cunr7Ku XrgWfa3zeuL1mzcm3ei6yb357FbOrVe3C24P3Jl/l3C39J7avcr7+vdr/2X9r71dbl1HHgQ/uPgw /uGdR5xHLx5LHn/uLn5Ce1L51Ohp3TOnZy09oT0dzyc+734hejHQW/KX+l/rXlq9PPi3/98X+yb0 db8Svxp8Xf5G9832ty5v2/pj+++/y3038L70g+6HHR89Pp75lPzp6cD0z6TPVV+svzR/jfx6dzB3 cFDEFrPlnwIYbGhGBgCvtwNAS4HfDh0AUCYqzmZyQRTnSTmB/8SK85tc3ADY7g9A4nwAouA3ygbY zCFT4V32CZ7gD1Bn55E2JJIMZyeFLyo8sRA+DA6+MQCA1AzAF/Hg4MD6wcEvW2GwtwBozVOcCWUi O4NuspdRR/f9e+AH+Tf0anIgHx38vAAAAAlwSFlzAAAWJQAAFiUBSVIk8AAAAWJpVFh0WE1MOmNv bS5hZG9iZS54bXAAAAAAADx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1w dGs9IlhNUCBDb3JlIDUuNC4wIj4KICAgPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3Lncz Lm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4KICAgICAgPHJkZjpEZXNjcmlwdGlvbiBy ZGY6YWJvdXQ9IiIKICAgICAgICAgICAgeG1sbnM6ZXhpZj0iaHR0cDovL25zLmFkb2JlLmNvbS9l eGlmLzEuMC8iPgogICAgICAgICA8ZXhpZjpVc2VyQ29tbWVudD5TY3JlZW5zaG90PC9leGlmOlVz ZXJDb21tZW50PgogICAgICA8L3JkZjpEZXNjcmlwdGlvbj4KICAgPC9yZGY6UkRGPgo8L3g6eG1w bWV0YT4KbszeLgAAQABJREFUeAHsveezJMeZn5sY772fATDwHkM4wlsCIEAuQLO75HK1G6JCipBC +qSI+4/og77ohu5dXVEKUlySSweCJAjCAwRhCDvwmAFmgPHeO9z3yUEN6tRU9+k+p7tPn3OeDDa7 T3dVmiezsgb5q9+bZ5w4ceKzZJKABCQggXFN4IwzzhjX7bfxEpCABCQgAQlIQAISkIAEJCABCUhA AhKQgAR6QWBSLwqxDAlIQAIS6D8CinH91yfWSAISkIAEJCABCUhAAhKQgAQkIAEJSEACEhjbBBTm xnb/2joJSEACAwgoxg3A4R8SkIAEJCABCUhAAhKQgAQkIAEJSEACEpCABHpKQGGup7gtTAISkEBv CSjE9Za3pUlAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISaEZAYa4ZHX+TgAQkMMoIKMSNsg6zuhKQ gAQkIAEJSEACEpCABCQgAQlIQAISkMC4IqAwN66628ZKQAJjiYAi3FjqTdsiAQlIQAISkIAEJCAB CUhAAhKQgAQkIAEJjAcCCnPjoZdtowQkMOoJKMKN+i60ARKQgAQkIAEJSEACEpCABCQgAQlIQAIS kIAEksKcg0ACEpBAHxFQgOujzrAqEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQ6TEBhrsNAzU4C EpBAMwIKb83o+JsEJCABCUhAAhKQgAQkIAEJSEACEpCABCQggbFNQGFubPevrZOABHpIQNGth7At SgISkIAEJCABCUhAAhKQgAQkIAEJSEACEpDAKCSgMDcKO80qS0AC3SOguNY9tuYsAQlIQAISkIAE JCABCUhAAhKQgAQkIAEJSGC8E1CYG+8jwPZLYAQJKIKNIHyLloAEJCABCUhAAhKQgAQkIAEJSEAC EpCABCQggZ4TmOTCeM+ZW6AEJCABCUhAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkMA4JDBhHLbZ JktAAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUig5wQU5nqO3AIlIAEJSEACEpCABCQg AQlIQAISkIAEJCABCUhAAhKQgATGIwGFufHY67ZZAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAE JCABCUig5wQU5nqO3AIlIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATGIwGFufHY67ZZ AhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUig5wQU5nqO3AIlIAEJSEACEpCABCQgAQlI QAISkIAEJCABCUhAAhKQgATGIwGFufHY67ZZAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCAB CUig5wQU5nqO3AIlIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATGIwGFufHY67ZZAhKQ gAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUig5wQU5nqO3AIlIAEJSEACEpCABCQgAQlIQAIS kIAEJCABCUhAAhKQgATGIwGFufHY67ZZAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUig 5wQU5nqO3AIlIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATGIwGFufHY67ZZAhKQgAQk IAEJSEACEpCABCQgAQlIQAISkIAEJCABCUig5wQU5nqO3AIlIAEJSEACEpCABCQgAQlIQAISkIAE JCABCUhAAhKQgATGIwGFufHY67ZZAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUig5wQU 5nqO3AIlIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATGIwGFufHY67ZZAhKQgAQkIAEJ SEACEpCABCQgAQlIQAISkIAEJCABCUig5wQU5nqO3AIlIAEJSEACEpCABCQgAQlIQAISkIAEJCAB CUhAAhKQgATGIwGFufHY67ZZAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUig5wQU5nqO 3AIlIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATGIwGFufHY67ZZAhKQgAQkIAEJSEAC EpCABCQgAQlIQAISkIAEJCABCUig5wQU5nqO3AIlIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhA AhKQgATGIwGFufHY67ZZAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUig5wQU5nqO3AIl IAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATGIwGFufHY67ZZAhKQgAQkIAEJSEACEpCA BCQgAQlIQAISkIAEJCABCUig5wQU5nqO3AIlIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQ gATGIwGFufHY67ZZAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUig5wQU5nqO3AIlIAEJ SEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATGIwGFufHY67ZZAhKQgAQkIAEJSEACEpCABCQg AQlIQAISkIAEJCABCUig5wQU5nqO3AIlIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATG IwGFufHY67ZZAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUig5wQU5nqO3AIlIAEJSEAC EpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATGIwGFufHY67ZZAhKQgAQkIAEJSEACEpCABCQgAQlI QAISkIAEJCABCUig5wQU5nqO3AIlIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATGIwGF ufHY67ZZAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUig5wQU5nqO3AIlIAEJSEACEpCA BCQgAQlIQAISkIAEJCABCUhAAhKQgATGIwGFufHY67ZZAhKQgAQkIAEJSEACEpCABCQgAQlIQAIS kIAEJCABCUig5wQU5nqO3AIlIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATGIwGFufHY 67ZZAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUig5wQU5nqO3AIlIAEJSEACEpCABCQg AQlIQAISkIAEJCABCUhAAhKQgATGIwGFufHY67ZZAhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAE JCABCUig5wQU5nqO3AIlIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgATGIwGFufHY67ZZ AhKQgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUig5wQm9bzEUoF/+MMf0jPPPJMOHz5c+ra3 H6+55pp0++23pwULFvS24D4s7bXXXkuPPfZY2rx584DaXXfddem2225L8+fPH/B9r/5wnPSKdGvl 9Os4Gaz2r776ah7fW7ZsOe1Q54HTkPiFBE4j8NJLL6XHH388bd++fcBvN9xwQ7r11lvT3LlzB3zv HyNDYCTvmXfddVe66aab0rRp02ob7xiqxeKXEpCABCQgAQlIQAISkIAEJCABCYwzAiMqzK1duzb9 8pe/TPv27Rsx7GeccUZiUV5hLqWNGzemRx55JL377rsD+mPSpEmZ0UgJc46TAd0x4n/06zhpBub4 8ePp6aefTj/84Q/Trl27Tjt0/fr16cwzz3QeOI2MX0jgCwJcJ7/73e8S7+U0ffr0fI9QmCtTGbnP I3nPXLFiReJhnkbCnGNo5MaFJUtAAhKQgAQkIAEJSEACEpCABCTQPwRGVJg7ceJE4sWi+Uglyjed JPDZZ5/V9sdIM3Kc9NcI7ddx0owSYiKL1Tt37sxjvHosv/G67LLLEiKDSQISOJ1Ao7l4pO8Rp9d0 fH/TqJ96QYX7Q7PUqG6OoWbU/E0CEpCABCQgAQlIQAISkIAEJCCBsUbAPebGWo/aHglI4DQCr7zy Snr//fdrRTkO3rt3b/rLX/6SXaOnnewXEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIIEOERhR x1yH2mA2EpCABBoSOHDgQGJ/OVxzzRJ7HxHG9dxzz00TJnT+mQWEwQ8//DAdOXJkQDUuvvjidPbZ Z6eJEycO+L7RH53Kp1H+4/n7scx2LLdtPI9Z2y4BCUhAAhKQgAQkIAEJSEACEpCABCQw+gj0pTC3 evXqvFA9derUrhM1dF3XEXetAMdJ19COqYzfeeedxOvgwYNN27V58+b02muv5b2ylixZ0vTYofyI 8Pcv//Ivaffu3QNO//73v59WrlzZsjDXqXwGVMI/MoGxzHYst83h2xqBXtwzebCBfWlNEpCABCQg AQlIQAISkIAEJCABCUhAAo0J9OXqyVVXXZW++c1vpvnz5zeueYd+mTt3buJlGn0EHCejr896XWP2 OyJE5QcffDCgaBaojx07ljZt2pTf+ZG9Ll944YV02223pW4Ic+xvRz127NgxoC6N9r0bcFDpj07l U8rSj58TGMtsO9G2s846K911111p27ZtA8bMFVdc4d6MA4j05x+9uGcuWrQo9eKhqv4kbK0kIAEJ SEACEpCABCQgAQlIQAISkEBrBPpSmFuwYEE6//zzEws8Jgk0IuA4aUTG7wsCW7ZsSW+++eZpYhgL 1HPmzEmPPPLIgBCXhLJcu3ZtQmiYOXNmkY3vEpBAECDs6rJly04Lx8rDLbNmzZJRnxPwntnnHWT1 JCABCUhAAhKQgAQkIAEJSEACEhg3BPpSmBs39G2oBCTQVQKvv/56eu+990654igMwe3yyy9PhLFl 363y3nPsR/fyyy+nG2+8MYsQXa2cmUtglBGYPXt24mWSgAQkIAEJSEACEpCABCQgAQlIQAISkIAE hk5AYW7o7DxTAhLoYwJHjhxJr7zySvroo48G1BI3Li/cPxdddFEW4vbv33/qGEJf4py74IILWt73 7dTJfpCABCQgAQlIQAISkMAYIvDMpzvSS1t3pSMnPhtDrbIpEpCABCQgAQm0QmD+1MnpthUL03lz jSrVCi+PkUA7BBTm2qHlsRKQwKghsG7duvT222+nffv2DajzlVdemdhjbvr06Tlk5VNPPZWPKw7a unVrevXVV9O1116bli9fXnztuwQkIAEJSEACEpCABMYdgbd27k0Pf7QlHTh2fNy13QZLQAISkIAE xjuBVTOnpQvnzVKYG+8DwfZ3hYDCXFewmqkEJDDSBHC+Earys8++eLqXPZYuueSStHDhwly9NWvW pHPPPTe98847p447ceJEevHFF9Mdd9yhMDfSnWj5EpCABCQgAQlIQAIjSuB4/Fv6yPET+TWiFbFw CUhAAhKQgAR6TgDH/InSulrPK2CBEhjDBBTmWuzcPXv2pJ07d6ajR48OOGPu3Llp/vz5adKkL1Cy sP/JJ5+k1157La1fvz7t2LEjHTx4MM2YMSMtXrw4LVmyJL+fddZZ+fPkyZMH5DncPw4fPpzLfeON N3I9du/enQjVN3HixFyHRYsWZcfQhRdemIWHTpc/3PqP5vMdJ/3Re7t27UrsL7d58+YBFSJ0JUJc MeaXLl2aLr300vT888+n7du3nzr2gw8+SG+++WbCXTfUPbXIj3oUwiB/Hz9++pPG27ZtS5Q3derU U+WzDx4iIt91Kp9TmbfwgfkCxyGC5aZNmxLjGuchc9u0adPyPn3Me2effXZiHoFjwbSF7Fs+hLmM UKQbNmzIHJhL4UH9pkyZkvtmzpw5qXhRH+ZV5tpWUq/Zwo8xCVvuEVu2bMljhHYSenXChAlp1qxZ ad68eYl7C++IyIxZ3s8444xWmpWP6Ubb2pnfWq7o5weS94cffpjDyMJo7969uZ+7NebaactI39Pb ZTlej+/2GGo0Zrhu+bddu/cK5lTmNK79IpEX/0ZjTmsnMSeSF3NJNVE35hOTBCQgAQlIQAISkIAE JCABCUhAAv1D4As1qX/q1Jc1IbTdr3/969MW+r/yla+k+++/Py+iswDP3lR//OMf895WH3/8cV5E PnDgQBb0WEhm0ZUXCzgsZt92223pjnDmsHAy3HTo0KH00ksvpccffzwvqH/66acJUQ5RkIUfFnWL OrDov2zZsiw83H777Xk/reGW7/kph0B0nIz8SHjrrbfytVhe8GT8I7Qh3hQJsRrX3OoIbYmQUSSu Ga6lm266KV122WXF1229P/roo+kPf/jDqUVXxCXmgmpivqC+1KVI1Okb3/hGrlen8inybvaOCPfM M89kxyDzF8IRi9HMLSz4IlAgwCEYEgqUeYR57Lzzzku33HJL5sv8NtxEv61duzbPpQishRgHPxag qQu8EAmLF/VBLEQo/PKXv5yuuuqqQcWsXrGlzux3iAD83nvv5fsIczPiE2x54APRljFasKU9vBBp V61ala655po8HvlcfhCkEetutK2V+2Cj+tR9zz2TcUY4WRyuhVhZcGEcdGvMtdKWkb6n1zHzu4EE ejmGeNDqX/7lX7KAXK4FYtrf/d3fpTvvvHPAPF4+pu7zc889lx5++OEsqBW/Mwd85zvfSXfddVdb Dzvg8n7ooYfynF3kxTtzInW77rrryl/7WQISkIAEJCABCUhAAhKQgAQkIIERJqAw12IH8AQ/C/U4 HcrpnHPOyYvELF4/+eST6Te/+U1eYGQhmQXFcjp27FhemGexm8TCMo4UFqAfeOCBLAAgnA0lUa/f /va3eSEbcbC6r1aRZ7kO7L+Fq+/Pf/5z+upXv3qaG7A4x/fWCThOWmfVrSMROF5++eXTFk/ZLw7H HC6kcrr44ovT+eefn6+FspDHwj3XJ+e0IoSU8+Qzi7jPPvtsFl6qv5X/5jhe5cQ8cPfdd+evOpVP Of/qZ+YL6vrII4+cEkjKLMrHI4rxYs5jvDN/sSjMPMLi79e+9rUE06EwY5GdeQlBExGLz2XXYbke 9DN1pB7lhJDHuRdccEG677770g033JAfhigfU3zuNlvag/OSxXfqhCMM0al6byjqwzviY1XAxf2M cMVDFwh0jA3uPSziN0rdaNtg81ujutR9j7vniSeeyPcs7kPcF6uO9OK8boy5wdoy0vf0ou2+NybQ 6zGESI54/PTTT59WKUIkX3311flhhdN+rPmCsc68yZzLgyDltDoeFOEhknb2OOUaQoxH8C8n5guT BCQgAQlIQAISkIAEJCABCUhAAv1HQGGuA32CCIcgVzxJ3WhBu1oUC8sIaiwuEa7t3/27f5edHjx9 3U5i8fqHP/xhXuAhLF6zRd9yviwaU/c//elPebGJUEecb+oOAcdJd7hWc924cWMWi6oLlISsJCRg 9foiZNjll1+ehSmuwyJxXSLO4b5auXJl8fWYe2dc/upXv0q/+MUvspsLB1e7CbEJVohBhOX83ve+ l66//vrsZms1L+Yj5qL/83/+T8JJQujgVueychmIjDgQ2V+Q/iQPnMk463qZmN9pz49+9KP83khg bKVOLOLjuEQUQOijXf/qX/2rLIA2E+dayXskjuEa5X6JuxjHXKv3zHJdOzHmyvmVP4/0XF2ui5/r CYzEGOI+QKhc5pLqPMnch7iMi7iVxLXMdVwV5TiXB0L4vVVhDhEZHnUPZPFgyYoVK1qpksdIQAIS kIAEJCABCUhAAhKQgAQk0EMCCnPDhM1CzI9//OMc/o2F0+pCchFuDacaT/3XJRZVWMDlKekzzzyz LRGABegf/OAHWZRjIbuacN4QJrPYn4iQaohvLGqycEyiziwqUVcWx02dJ+A46TzTRjkiECHKlK9F wi9eccUVOSRg9TyEDcIe4kAqC3Oc/8ILL+RQs2NVmCPc7U9/+tMsktTNX7CCTxF6l/kEwRLhok5M QQzFTcI7ri8EMVwmrSRCPf7v//2/c1hD5qlqYn4q9vSkPsxVLEQjeDGHVt1W/I3TjPmROiAUDsXF V61Hq38X7YFH1QFX5EGoymJ/vIITxzI/M59XF/8Zk8wluKM5/h/+4R/yPaPIbzS8I9wivvIwC661 unsOwgf7bCFy0O8w4Vj6uXxd097hjLk6XiM9V9fVye8GEhipMUSYWdzV7BNcvldQO/4NtXXr1iyW D6xt/V9ENkB8q0uEu0Vo475UfZCk7niOZdwW/6YrjmF+ob6dCJVe5Om7BCQgAQlIQAISkIAEJCAB CUhAAp0hoDA3TI6EzEN0K7sh2GOJfakIa8R+QCygsojNgjYLLrhBWEgpL0jyO2G9OIc9m1pZQGYh 5uc//3mtKMeCDCGMbr311rynFnVigb0IQcfCFqE5CftG3UnVRZ1hovH0EgHHSQlGFz+ygI8wx/VV TgjehDZstP8ZLgicBVwTiCJFYrEVcedLX/pSFoWK71t5JxTZX//1X58SsBDRcUJUBXqOY/EUAaJI hIJkbyBSp/Ip8i7eEbXYk+gnP/lJXiAuz0ccg2BEGEjmEeYkRLFCJGHOYA4htCIiKHNgkZjLEKX+ 5//8n1nQu/HGGwe0rTiu/M7cSLhHwmlWRTnqAQOci+wPiCjHAjkJlvQ5/USoSMot5jN+p16EgMQN yGI6Y6CcusWWBXrYMtdTv3Jibse5iVBI+Dv6GSGqCGMMP9rF/E6YUJjgKivPzwhUv//977PYjKum 7n7RrbaV29LuZ/qZvvjlL39Z685m31O4cB/kM/dOhAmY0K+IGYSMxiVevo6GMuYa1X0k5+pGdfL7 LwiM9BjiPsGDGlVhjgcbuGYRjgcT05hrC1fcFy374hNjnbC3XOfV0MtfHPXFJ+pC2dXEfY17XzG3 VH/3bwlIQAISkIAEJCABCUhAAhKQgARGjoDC3DDZswBbJBatWcC/99578zsLIixms2jKYg3uB45n oRvHAHuClBe0WdhBnGNRnoXbZonz/vjHP+a9mKpOOdxxX//61/NeTyxEs7hZDndGXXAZ4GZBiMC5 QHi08kJns7L9rX0CjpP2mQ3lDIRvFjyr4cFwyzXbkwuhZ82aNdmtxbVQJK4JrpFbbrkli0PF9628 IyQhvBSCF+FmWUCtXmcc981vfvOU2ETeCOvMHaRO5ZMz+/z/mAOYaxBIcM0VdeRnFpWp9/3335+F fRZ3qU95DkEkYoGcuYz5A7EEF12R+J357Wc/+1l2a7CY3SwhpuJOZCG6nHB6fOMb30j33HNP7j9E ubpFb85DRET0QRArX29FHyLeVYW5brCl/owZ9twri7x8zzhjP0/24YMJ7cPNWZeo980335yuvfba fL8gz7IrkH6jDMYt95pq6lbbquW0+jfiGftpMV6qIZMZW7TzwQcfzO+E3quGHmXMItrRLkRc9iEs ixHtjrlG9S6PnV7e0xvVx++/INAPY4j7CA9c8e+68r/feKCAf8NxzRdz9xc1H/iJuXNdhDGvznfF UYx17mNc460Ic4Vbrzi/eL/wwgsNY1nA8F0CEpCABCQgAQlIQAISkIAEJNBnBPpSmMMdgEsAp0S3 EgsnLLAMtoDSavksGN955515ERmnQrXuLCbPmDEjOz4I0YWLgoXs8lPXLCzytD5PSg8mzOF0wzFR dQbhCEKU+/u///tcVt0iNt/h0uCFA4XFG8JxslBfXUhutf0jcZzjxHFSHneIS1w/OLnKieuOPeQG 22cH8e68887L+5OxMFokrjUcOohVjUSU4tjyOwuq5UVVPpddccWxfM9CL+JXXepUPuW8WfRFIKmG /OQYwqcxfyAKUXZZkCvyoB2ISgiWCHfMo+xTVxbnWER/6qmnMjfcT43mWlgjzLFQXU6Ue/fdd6fv fve7mU/dXFYcz3xLHzMPs+hNqEfKLxJhEHkhbJX7sBtseQADl155bqce1P+OO+7I4SdxVNe53Ir6 8o6Ix7jgQQvGNi4axmGR4IYLk3tAnTDXjbYVZQ/lHecp/YJ4UU70M67Kf/zHf8yiWyNXK/wIbYkw h0uQB04QYsviXKtjrlx+o8+9vqc3qkcnv+chHubH6sM8wymjmAvg1e3UD2OI8cl9grFYHntco1zz CLuN5rqCD33AdVu+zxS/Fe/M0RzDfadZ4t+SXFNVkY9+4UGEVvepa1aGv0lAAhKQgAQkIAEJSEAC EpCABCTQeQJ9KczhDOAJ4MEWLoeD49JLL82Lz4MtoLRSBovCPOn/t3/7t1lQGyxsEAuKuNVwO7Cg Ul6cYfGYRTMWeeoWxKkPAh7CJYtU5Se2+Y1Fy7/6q79qKMpxTDlRd86BA/XG0TBaxDnHieOkPJZZ EOWaKItD/I7IzUJq1YFTPpfPCE3MC+z3WF5wRRBBaOE6Qcge7Yn55plnnsltKotXtAvx8oEHHki3 3357FrkGaytzNHy/853vZOHr0UcfHSCIwY491nDWIfjVJRaWN23alPeLK//OgwOcgzjVTJQrn4NI iGv5xRdfHLB/E+4z5lrqQz93MzF2eGigGsKScuHKQns79zYEW0RS+qwaNhQhgPKa3S+62dZW8+Y+ 1eieRZ8x5nA8IqIPlhgLXIfcb9mjiwdUyk7CVsbcYGX0+p4+WH069TtzG2OzLE4PN28E4O9973t5 fhxuXs3O75cxxL/LcLsyV5bvE9Sdf7fyHaGJmyUE9upDVdXjmRPJj3mk2XXBNcC/G6v/FuRhCK6T ZudWy/RvCUhAAhKQgAQkIAEJSEACEpCABHpHoC+FOcJcVUNddRoJi53VvYyGUgZPiSOEsTDFAnWr C8gs6rB4w2IlYSWLhNuCJ59ZMC/2USp+K95ZrCnvDVd8z8IvjgwccK3Wg3N5sprwmdddd112HI0W Yc5x4jgpxj7vXBOEsqwuUOJgXb16dfnQ2s9cM4g6HFtecEX0QAQmb0SERoJ5baZ9+CXzB0JjVcBk viFkJA8NtOt+wX3MwwmIX/RDOfE3L+aYOlcgC8+84FxOPMDAonI7cxl9wzzG/FnuQ/LFUcdc1+1U PFxRLYdFcl6DPbhRPY+/ESm5Z8Cj7Izh3sE82Ox+UZdfr79DUGT/v/K9jjrQXwhy9Fm7AgLXInuo sg8fLvNyGmzMlY+tfh6Je3q1Dt36GzFoMEGo3bLZu5F5o9upn8YQTjT2mWNMl+ctRE/mnWZCOXMd banOv4ilnFfcv7imueeQH/ekRqkQA6u/U0ceahjt96tqu/xbAhKQgAQkIAEJSEACEpCABCQwVgj0 pTA3muDiBGFBmoXpdhaQcUwQ0pKwSOXFShZmcMwhGjYS5lgMYmGn7LSDGeHRcPzULX4PxpS6szA6 lEXjwfL295QdQ46T7o0EHDNcF9Xwgbg5cCixeNxKQtRmQZO8ynvBITjhxsPBRQiz0ZwIG/nuu+9m 5225HTwogDMLp0W7CcELR+Hzzz+fRZLyQw8ISQgl5F0Xopc5p87Bw7zIC4dwO4IaczEPKbCwXU44 JhH7up2Y13lYA7GpnBhXzRbYy8dWP7O4jjhH/cvCHGz27duX9y9tdL+o5jUSfzPmCN9XvWchHDBu hjLmuGcRApOHWxBECkGD9g025poxGIl7erP6+NtJAv00hrgHMM/grCz/+41xh4ONa7LRww2MVe4n 5fmJf7MxPxCGl9+KxDxNfs3mDYS58r6IxbmFq6/423cJSEACEpCABCQgAQlIQAISkIAE+ouAwtww +4OnppcuXdrWwnFRJAs3dSIawhwLO3UCAAubiHKEOSonFm4R5er2Giof5+eRIeA46S539icjPBjX TTmxOEkYyzrhp3xc8RmhnL3mCBtYduGwiEp4RPZUq7sui/P7/Z35AxdGdf6g3jjaWABuRwQrt5f5 rBBBy+w4ppiz6oQ5zkNApY/KIQnpy9/97ne5TjgZWw3/iNA3kn3Etf61r31tgFAEA4TBwcKpclyj xL2i7sEJXNZlbo3OH6nvEQ8R5aoORuqDWw5Ha6vXZ7UN3HvJo26PwmZjrppP+e9ez9Xlsv1cT6Df xhBzJPcW9m8rC3PMrwhluFgbCXPsHYfYVk64Pwlz+8ILLwwQ5phHEeoQnevmv3KI3nJ+iPgIh50I 1V7O188SkIAEJCABCUhAAhKQgAQkIAEJdI7AhM5l1dmcEJp68RpurYs6DiWfRsIcoSQPHjxYmyWi HYvqLMaWE09us7jD+3hKBf9uvw+XaVG/oeTjOBmcGqEZWYgvhxWDOYv+hA9sJyEC1QlIb775Zhb/ yk66dvLth2OZPz799NPT5hcWmmlzq87CRm1BBGWxuppwieDqKPdPcQxlU2517mKRm304/8t/+S/p v/23/5adUdS/Lo8ir354RzxjQXzhwoUDXrjdhip60i4W5uvO515Qdt/0A4NyHQjZV3fPwuGHGFw3 XsrnN/uMaw4xGOddNTUbc9Vjy3/3eq4ul+3negL9OIZwVyPiVlOx72P1e/5GYKx7MAK3HI5ixnH5 Gsd5zH0NJ11d4rriVRXmmcuredWd73cSkIAEJCABCUhAAhKQgAQkIAEJjByBvnTM8eTwUPY5agcj i6Y8UTySCZdA3VPQLLKUw3KV68iT1ixSVRenCd3GU9LthNMs5zsaPztOHCeMWxwLr7322mkuMMQe XA1cF+0kFlsRDHAvlN0QhClDALz++utrhbt2yhipY3Ff1AlkOI9YyB2Oo4s2rQ7HHXuhsbjMInSR YMfeazxwULeXGA8VMIdV911iPyb6AcfVY489lhfCmbdZFEcEpM51ruOi3NHyDhdERx7KQPhFaOM+ wAuBkvkeR2jdAxtw5ph+TexpVu1X6soDB1ybQ3XLFe1l3NQ5gwYbc8X5nXwfyj29k+UPlte1116b rr766o6GdOV6Zp7tZurHMcQ8x0MfzD/l67IILck1i8hbTsyB/F4O9ctcSRhhXsxtuH2L0JTkUYSz rHtooiirXAaf6Y860bB6nH9LQAISkIAEJCABCUhAAhKQgAQkMHIE+lKYY4Hivvvuy3uwjRya7pdc XbRppUQWOFm8rSb2Nao6TqrHdOtvnuhm4ay8EN9uWSwisTjfjjDgOGlMuR/HSePaDu+Xt956K7sQ qq4hQrviHCg7EFopCcfTmjVr0hNPPJEFv/I5L730Ui6LBdShXL/lvEbiM86LarhP6oEY9PDDD+e9 4IZTr0JAquaBcLRr166E0FYnzLF3H44RFq4RqMqJcwkNxwsBlnmORWrmPPYmo48RUlmM5oGLdvu7 XFYvPsMfVw3OGVxdtAsRicV63G88lMFcWrwK0Y1j6pwzMO/nRH/WjTnEtLqx0G5bGA/kw/VYZjHY mGu3nFaO7/c5AXfht7/97XydtNKeVo6hze3ct1vJs3pMP44h7hP8G4S5CIGsSMxzPEBV9xAC1zz/ ViqPU85H4COMMg8cIPgVwhx5IsxxDvek6vii3GqIWK4F6sX8aJKABCQgAQlIQAISkIAEJCABCUig fwn0pTDXv7hGvmYsbFfDWFKrRuEOe1HjJ598Mj300EOnhVNqp2yE2G9961tdX+Brp06j+dh+HCfd 4Mni+8svvzxgP7iiHBYsf/rTn6ZHHnmk+Krld4TNsluuOJEFV8QhXCejceGTcVEXipPFZBxpnRC1 EEgLMangxjsL1XVl8xuL01z/9Bn9VXag8HuRCrGF+rJXE45jXFcIdLwQTBHpCGFKiMQ6R3KRVy/f cb6xwP7cc88lhGQESBbfC8GB38uL9b2sW7fLajTmEOYI7znchECCOMd7dXw1G3PDLXc0ng8j/q0w Ug/xDJVZv46hwplWFuYQ1BHeEdx52KicmLMQ2coJ5y8PJiG6EdISYY49E4v5gHsRe6jyQFa535gz EParDzKwzzAv+tokAQlIQAISkIAEJCABCUhAAhKQQP8SUJjr376prRkLjVVnEAeyX89wQ4LVFtjC l+xxsnbt2tp6tXB6PoSFdBaaTJ0h0I/jpDMtG5gLi5yMPYSaasLJycJl1WVQPa7ubxZF68Qh3Ewv vvhiDrU7GoW5RuOCxeS69taxGep3jcou8mOB+vvf/35epH700Uez2DrYnEB/IHDxev3117PoUDhQ CNtHSOTVEV5zpAQ6hMQ33ngj0Z5iH0QW2huFKi5YjKX3RnvgzZs3ryPCHNd34ZqrE+bq7pdjie94 aEu/jiHmFkQw5pfyNV2EmCwLczzo8eGHH572wEfhkqMfuaeQJ+65IjICczOiPv/OKgtzPMTAfqHV MV+IheNhXNhGCUhAAhKQgAQkIAEJSEACEpDAaCagMDfKeo9FmLrFakS5TrhdRhkOq9uAwHgZJzgL EODqHFos5ta5Sxsga/lr9vpCDLz88stH3f5mjcZFy40fxoH0Rd3cVWTJ/piEH2XPsOuuuy49//zz 6ZlnnskhH1sRDRFTCffIiz3pEMSeffbZdNNNN6V77rkn70dXlNWLd8I3Pv744+kXv/hFeuWVV7J4 XLhgGpWPyMQ8znzOq7xnKAIT/cdC/WhK1LksWhR1xy3XqRCIjfJqVHZRB99HB4FG/dio34fSqkZ5 NSqbMjiHBwoIoYsLtkh1ISZxvbHHZ/lawL2Iy7fYBxWBjzCU7PlZCHPkWTjtEPGKVIh/xd+8cz6u O9zDJglIQAISkIAEJCABCUhAAhKQgAT6m4DCXH/3T8u1Y7GnTpxoOQMPHBcExtI4IbwZwlw1NFi3 OxLBBffTjTfemBdBu11eJ/NH9CmLPUXe7EvEInE3XbcsPg/28AB1Y1EacY5F6FtuuSWHcWNh+s03 38wiHcLbYAIXcyEOE1wluE1Y5P6bv/mbHCauaHM33xmbv/zlL9OPfvSjLBzXubYQpQhhV4SyY3Ef FxnuZxbYYVF2exKy9be//W3ev6qbde903o3GHHNRWaQYTrmN8mpU9nDK8tzeE2jUj436fSg1bJRX o7Ipg+uzcKiVhTlcsbjZeBihEJ+ZwwiFXE6441atWjXA0Vs46NiPrkjc4wiPWc6Pv8t70XEsghz7 1XVi78aibN8lIAEJSEACEpCABCQgAQlIQAIS6A4BhbnucO1aruwbUrd4vn///q64g7rWEDPuKoHx ME5YuGSxExGk1wmRBMEHUaVO6Op1fVotb/r06bV7D+HaeOCBB7J7o9W82j0OsQ3RrZUEU0JS8lqz Zk1ioRuhjQVqHJKwp//rQrmV80eg45if/exniT3NHnzwwVPulPJxnfyMow2n3I9//OOEu7L6wATi 2zXXXJOFXbjDpQjryCI+olxdIp+nn3667qe+/o421d2zCO3XqWsXsbbOVdlovPc1MCt3GoF+HkM4 1BDYuScUDwwg8hFGeceOHflhAIR55iseFCgnRDjOLafyHnGFoI8gx7yHEMfvzDHFPnblc4u6lAX9 8u9+loAEJCABCUhAAhKQgAQkIAEJSKB/CNSvAPZP/axJhUCjBSocIXULk5XTu/Lnrbfemhe9hxNi jbCAOHZMnSHQj+OkMy37Ihdca4QsrKabb7457y1W3o+nekyrfyMc/OpXv8qLruVzcEfg1kNgaVVs Kp8/Up+bCRUsEsOu3xIOshUrVuQXIh37CRb7yiHUseA9mJsOpwri3LnnnpuYr7qZqM9vfvObLB5W RTkYIw7iBGT/KULhjfXEmKMPq6lTwhz3HfKqu/8xD/KQgml0E+jnMYQTmHkF4b+812kRzpK5q+x4 K3oCsZqwlTx8UE60lQc+2G+u7LArHHcIc9u2bTvtoQTEuMJtV87PzxKQgAQkIAEJdJ/A1IkT0sJp U9KcKbHv7InP0t6jx9OuwxGG/viJ7hduCRKQgAQkIAEJjFoCCnOjrOsIUVS3yDmSwtzVV1+dLrvs smGRZPGURVRTZwj04zjpTMtO5oIwwx5iLFCWE4uaCC/f+c53OrL/G44FykAAZPG/SIgBL774Yrr9 9ttHlTCH+A2jasJVhruj3xNh5Qj5yOviiy/Oe64VbjocJIilTz75ZHarFO6Vok247D788MN0ww03 1Dq4iuOG+/7CCy+k1157LRVulyI/wtZ997vfTV/72tfSggULiq/H/PusWbNq53ZEDJzew02I5+RT 92BIo7KHW6bn95ZAo37shzGEuxdBbPny5bXCHKQKUa1MDcEOcb5uPi4EtrIwxz2IPequvfba7JbD fVee4xAIceAiEJokIAEJ9BuBc+bMSLetWJRWzhr6f+s9+cn29OfNO9OhHggdE+JhhxmTJqajEa2g Tli5bcXCdN3S+WlSHPfbj7akv2z74r8RCvaD5VEc14v3yxfOSTcvX5CFo6K8xzduS3/esisdaZFn NDXdtWpxumbxvDRpQvwR6aWtu9Nzn+5Iu44cLbIdl++XLJid7ly5KK2ePSNNj3FzIva93nf0WPrZ B5+mF4JxP6d+Gqf9zMm6SUACEpCABLpFQGGuW2S7lC9PUdc5gUZSmGNhqW5xqUsIzLYFAv04Tlqo dsuHvP7669kpRciwcmJhknBendpjBxH8S1/6Unrqqaey2FIuC2fU2rVr05VXXjlqnE8sHteJQoiO CJCHDx+uFf7L7e6nz2U33RVXXJGuu+66dOmll+a93RBuy2INY4XFbMIeIux1IyFuUm517ycERUTc u+++u5Z/N+rSL3niKCVUZzV1yjHXSJxhbBAmdDy4Eqtsx9rf/T6GENIIScn9oEjMNYTfZU7loYCy yMYx3KcQ5+pSse/kSy+9dCoULvMW4tzOnTsTbrzqHINrj/3qmGtMEpCABPqNwKJpU9ONy+any0Ig GmradOBQejmEoNSikDTUcpZMn5puChFrYihRz23akTbuP3RaVhfOm5XuOXNxmhIPZ7yxY+9pwlwr eZyWaRe/WDlzWro1xMSzQzjK6bOUXV3r9hyobV9dVRZHH94SXBDnEHNIiHqvhCg5noU5xLgHz1mW 7gjheXa45Yq07eCR9IcNAx8gLX7rl/d+G6f9wsV6SEACEpCABHpJ4It/PfSyVMsaMgEW1nkyuppY rME5cvTo0a66Qarl+nd/EhjL44Qx/sorr+TFySp9RDLEuU4mwqyyUEq4xLLQg1OHfYVuuumm7N7q ZJndymvZsmXZ4UcYNTgWiXaxiIxYUg2tVhzT7++0icXx++67L8+FhBvlVU78jZDTLWGuCLFZZkv5 xV55o5VtmWG7nxEfEMgQDMrXD6EncTnSH3XCXavlrFu37rS9uziXsQ7vRnv2tZq/x408gX4fQ4y1 s88+Oz8QUuybiGOWfeYQ5Rij+/btOwWSsJPNhDmuh8L9xr/tSLjjyKsIi1kV5i666KLT9qs7VaAf JCABCfQBAbQc5JxD8W/OnYeOtu1823X4aHYidbMpy2ZMDZFlebo7RLc6wa0om3ZMiNYUbSq+573V PMrn9OJz1Dbzz2VFAy6ePyscjNNbFubOnzcznTlrRhYse1Hf0VAGAuXNKxakm5ctyKLcpgOH09qd e9OWeN8RYSzX7Rl+ZIhucejXcdqt9pqvBCQgAQlIoF8JKMz1a880qBeiHIuNuAF4ErtILHIiHBCS jvBIQ0mEAyvnOZQ8PKc/CIzlccIi51tvvTVgoRPqhPDCLYUI0MmEw4xQrc8991wWr8p5s88dYcpY ZB3MqcBiLK9qKocjq/5W9/dw8iFcLPMDC7/VhV3a8v7772d+dfWsq0v1O/rm0UcfPU00Zc665557 csi36jnsx/b888+fcobwO+HhCPlI2LZ260LYO/qLxfKqMMcid3mBvFqX4bAlr0buLRw/uFhp10il 4bZtqPXGTY2TB6d3ITKQFyLdn/70p3TjjTdmp+NQ8kcE+fOf/5xDlFbPZ5yPRyG0ymEs/N3vY4hQ 3NwDuM4Jl1skhOdnn302i2nl/Sa5P69evbrhvrrME+THAzbla4Z7DW5x3HflPRVxiBf70hVl+y4B CUigXwls3HcoPbR+c/pg94G2qrhx/8HasJJtZTLIwfOmTkmXRljCFeEwe3vnFw9UVE97ZfuexM5h E+Of9e/tHii+tJpHNc9e/c3+Z/znyJkhyp0VL8JwDhbOEgHqonknuYTZLqfT/4umVy3on3IId4pj bn7sLbf7yLE8rh+LEKH74jNhUPcfO94/la3UpN/HaaW6/ikBCUhAAhIYswQU5kZZ1/L0//nnn58X gFj0KRKL++xtdOedd6Yzzzyz7cVsnsRGeKgu1hf5+z66CIzlcYJbDgGpKmgRTozFSRZJO5lYJCWc JQ4GXGXlRPhH9jUjhCKLqM0Swl2dMIOzohqSs5v5EPKRReHqtf7222/n/dn4bbC2NKofDwf8/Oc/ z/1TPgY+CDB1iZCgDz300ID9xhCRENYuueSShNDWbsI9V+eUatQHRf6Nfm+1j3iwoeqWK/Kujtfi +1beEbHoL0IWDzUNt21DLZe+RCjlvlQWGciP0H+E6+PaHcreWIQN5fwqF9qKSI+D0jT6CYyGMVQ4 1srCHCEnmROqYSwJO8nYZJw2SsU+c8ypRWIOYA/N6v5yiNC8On3vK8r1XQISkEAnCewN0eKtcBW9 sm1PJ7PtSF5sndaK4PR6CHOFILc/9hIrp1bzKJ/Ty8+fRkjQ6XH/WTR9Sjpv7sy0OESlunCd5Tot DSch+wTOmjwp7Th0JIfwLIdtLB87nj5PnzQhTZ2IdzKlrQcPpzdjXHxQEWr7lUe/j9N+5Wa9JCAB CUhAAp0mMHKP73e6JeMovzVr1iQWz6tpw4YN+WlqXBvtJFx2P/3pT9PTTz+dijBM7Zzvsf1JYCyO E0Itvvbaa6cJZCzcNmpvJ3oHMZyF0upeirggEMQRCgdLCEV1C7E4H9pxqg43n4svvjghzlUFL+rx yCOPpBdffDEhRLWbEKQQ9wi1xufyi0VoHGN1CfcIXMvHF2Hg2LNtKImF67p5EKdgtd3l/IfLlvzr 9jSjPozdoSQEPR6a+OMf/5iGyoNyh9u2odS9OIdwsIisOL3LCZc2+zcizrabGK+ci4uoKnoSVpAx Tn+YxgaBfh9DjDnEZx4KKBL/tsLhRpjxcmoWxrI4jgcTENvK9xwe4ECIxplcToWIV/7OzxKQgAQk 0D0CB8IJhUDF63CX97zrdCsQjnAfnoh/X170eTjLwcq4cO6s7LDbc+RoWr/3YNpTESMHO3+s/s4+ hMV+ewdjTByO/y40SUACEpCABCQggXYI6Jhrh1afHMtiDYuc7G9VdgqwmE0YOUSEO+64I+93MliV eaL7Jz/5SSKc3HAWfQcrx997T2AsjhOEH9ydVeGIkHU4FhB5upEIFcb+dYjXVREBhwSuBoTB2bNn NyyeBds6YQ4BqR1BfLj5IEyxLx4CHO7DcmJPpF/84hc5BCAuwVYdGIhqzD3wQWwppyLEaKOwgrhH WIRmEbucEDy//OUv57oQgrPVhKuRc6vuRtjzQEMjgZD8h8sWAbJu/zqclYRfxTlIaNRW06FDh3K4 x//1v/5XItRoOwJutYzhtq2aXzt/I5DRdsZc9frB9YZjkn5B3GglMd4QKh9//PG0Z8/AJ+4R6Rk3 3CPrrrdW8veY/iPQ72MIQb4IJ1nMZVy/vMoJoY1/ow0Wcpm5l+OYN/l3WpGqAj+CO0Ifc6hJAhKQ wHgkQOjJc8P5RfjAN3fsjZCCR7O767wQk1ZFSMqZkyfmMIOf7j+UXgtHE+4wRKlyWhzusUvmz06X RV58Jq2cNS3dtWpRumLhnPRB7BX27q79CfGFdEkcd144yBBlcP6t33sgn9dKHtPCYUWdF0+fmnbH vnnsZbcl3FaN0rT49+sVC2fn/eDYZ4/jcWcNNRFycXsIiuwvl8NZzm4ezhLx6cIQ8JbPnJre3rUv fRzC3MJw2bWacGadFeEez50zMy0Jtpw7c/KkvNfgjthrkLasjbChG/cdTMcr/VKU0Yk+LvKiP8+N vjsaZb0WffdxlFuXZkcdLwvuy2ZMO1VHhFgS7sEL5s3K+wkS9pQ0f+rkdMvyBensaOvhiHTx2va9 aUMl706wyIV9/n+whA3ORz7TV/tCNN0UrkjG5UfRV4TULKd2xnonWJXL5vqirrviGl0b43hG/Bvm qsVzMzP6/t0YXy9v3Z15l6/QecH2gjjv7OC+NK6baRFCdE9cC5ti7BByluuvmUA+1HLLdfezBCQg AQlIoFsE+lKYw/nFvhzsSdOLxMIHC4Isvo+GxCL1bbfdloU59tcpuwVY9Pwf/+N/5O9uv/32hu4Q nrzGeYRT7rHHHjstrN1o4OA4ad5LY22c4E5DjC6HCisIELYOgaebC/EIb5RRDaPJwisuBsQuXB2N EqJd2f1QHIfYyFhGSG0ldSIf2kLYW8Sr8j5shQOQNj3wwANZ4B9sARlhBIHkhz/8YXYvlfdSoj2U BZdG4hqC6uoQzAgJSsjGIhGq95//+Z+z2HnDDTfUsiuOLd4J9fazn/0sh3urCoTM8SxgN3PMDZct 4gG8aGt5QR4h+be//W0OX3fvvfcOem9jTmec/+53v8uCJ2J0O+JtwaP8Pty2lfNq9zNiGX1IH+Me LItp9BNsOOZv/uZvshiB2NAoIUwgyv3oRz867VrkHOYC7o/s92UaOwRGwxhiLluxYsVpDxmUe4H9 FnHWtfLQA044xP6yMFfOi88IcqPp36/V+vu3BCQggeESWLNobvra2UuzsHMo3GsLp00OQW1xWhmC CQv6UyIkPd8j2CGuPfzR5rz4X4hslL90+rR0z5lL0hWL5iQEGdJZIVjNn7o0sSfbb+Ic9sYrzlkT 4g5lToq89x9dn4WBVvMgv6sXz0u3rFiYRZT/762P07ZPjpwmFuZKxP+dPWd6+vrqZVk0fGbTjiwS Fr8N5R1REjHj/BAur4z25nCWIZjRvrq0PDiyjxoiyltxHuLgVS1u5z1nyqR047IF6baVi7IIODtE UkQ5+uRY1ONAiEh7jx7P/B7dsDU9v3ln2hPCYTV1oo+LPK9eMi/dd9aS3JeEVW0kzM2ZMjndsWJR uiaOfzUE3W0HTzokyefCEOW+cc7ytCzEStpIWhKC0d0xhtivD+Fpz5GPBghznWJBWZND4aNed65c nEVTwpHCNTTQLFDtiQfYbll+MD3+yfb0VLwQYovU6jhlrHeCVVEu71fFuL//7CVp3Z4DaV7wRdy8 fun8LCoyLj8KIRNhsRCe4z8NMmuuzSvjmkN8JIQq7T947ESi/z4J9+cT0cYn47Wt1M7hlFs+188S kIAEJCCBbhNovPrV7ZKb5M9T9YTqabY41+T0tn+69dZb84LgaBHmaCB79twRrjgcLsXT2XyPkwDB 7b//9/+eWNi+6qqr0upY9MaNwP5WOOwQ7wiN9qc//Snv8VNeJCWP0ZIcJ4P31FgaJ+zTw55U1RCF iHGErWtV2BqcWv0R7LuGCwc3VtVdiuBASD3CRDaatxBt6sIcIvThWkXIYR87EmIFTjPEheoCbify 4aGHr3/961kQxC1bFrH4TBsR7OCN04k5hPYj7jCPEEYQEYy55vnnn8/CJPNN1dHFIvQ999yTnST1 VOMJ03A5Itrg3vvggw9OHYZIh0vsv/7X/5rLwAWFsFaEvqQeCFgIVtSF83mgg3mt6paDIQ8qIBCy wN8oDZctYxGn4TPPPJPDepbLQWj7p3/6pzxObr755jxWaEvRv7BjXCHC0RZC4OHExG1XFTvL+bb6 ebhta7WcRsdxD3rwwQfzPYt9ssr7KtJ/v/71r/NvsGHMITYgZNNftB9Bj/GIK5N+ZrzVOWcRlK+5 5poBIQUb1cnvRxeBfh9DONyY83iApNE1207YSeZdhDnuKeXrpdxr5EeZzea18vF+loAEJDDWCCB4 LIs90CbFYv0DIWCtCqcbC/jspbYuHEMIbYhsCHW4beZOnRSCUPwbc9sXIcYPxb85Nx88lBbvn5Im hwjFvmH74xjyOBm28ugANxd54qSaPPGMEKxO7hfaah4ID4hb0+M86n1JuNFei7rsiO/qEo6oy0OU WBRtQmDBZTbc9H4IIwhSOMIuCnFk5czpDYU5RKgzg+mOw0fS+xEGc1KTf0zlYOMAAEAASURBVEeX 64Uo+vUQL++P14o4nza/v/tAiCeHE26ouSHMnB8uKPqLvsHJBZs/hTgX/7wfkDrRx0WGc2O8LI++ o1+Lvit+K78znuYHc4RJQn9OjjFRpL1RT77D5TUpxhauRhxbmw8cjjCfR7NgxPgpUidZ4NK8NUTd b5+3Il0cfYM4TF++tHVX2h9tQqS7KNyf1y6Zn+seQzQ98vHWU4Jnq+OUuneCVcGA95P9OC33//yp U9KZwQ42/PfcGciK0e9HQ7guuv/LIdo9GALol0JAnhn/FqKdr+/Ykw6FKIdD8fx5M7PYtyLGL3sm PrQuBPRwxFZTu+VWz/dvCUhAAhKQQDcJ9KUwx0Ikr14lFsOrC8q9Knuo5bBgyYI3AiYL6+WQlixo s4AJQ5wFhFYrwqtxHAucPIG9c+fOU4tHuEgQAfiuKjoMtY7dPs9xMjjhsTROEL8QsaoLnixKsjiJ aNTNxOIoossTTzxx2jXCNYOYgqCAG6IuITTgzmUBtexyRVjCcYYoRZhDfmc++spXvpJda8W1W+TZ qXyo53e+850sytGmsjjHHMLcwt5ICG/UAaEQcYe6cyyCPg8FsKccQl01cSwiCe6lOkGyOB6BDTGm EKHKDwrAAfGP+YqHCXCj8QAF+eFK43fqwrxGPRBvy041yiB/3Ixf/epXBw0f1wm2CIiIa8ylzLVF YtzyfRFqk/mWMUtbYLpv3778QqSiLTjDymOda5l+qYpRRf6DvXeibYOV0ex3xjXC9Xe/+908drhe ymID1xB7xsHoD3/4Qx5zCMiInYwveMKOh1HK97uiTEROxtvdd9/t3nIFlDH23u9jiDmPf08yVzJe q4m5iIcLeMihlcS/ywiPyX2hPJcU58KjHaGvOM93CUhAAiNJANGLMI6rIpRiq2l/CCHsa3Y8Fu0b JYQdxKsPQnT6wdsf57CL+0IcIXQkoQe/vnppDld5+YI5aU0s9BOesnBnfRKL+b/4cFMWjr593vIQ JGanDyOfX63blF1PO0NUQjRqllrNAzGHcJQ3hsiwIAQ3wl8SVrJOmEMYQRjDBUhYRIQxWAw3sVcc 7Sc0Y7NwlohTlL8sxClcY9SB41tJl0a77ohQoIQffD3OffijLeHU2xscTwpW9MuKyAvx7tpwf10Q Dr6rFs3Lrsayw6tc1nD6uJzPcD8TMhURDmH1O+evTAti3BE+kvHyToRjxBVZDk/aSRYXhBh1bzj+ CM+Ia+yRDZuzW4xQrUfivzVwzl0dLlJclrBHGCWk5QtbduVmtzpOh8uo2fkI5IijjKeH1p90oy6I Mb49XIm46UiItXeH8/X6EOdwIeJ0xRVH/RHvEFVxe341WOCmo52b9h8O8XpLdsjWld9KuXXn+Z0E JCABCUigmwT6UpjrZoPHUt4IEn/3d3+XFy3Z36m8sM6CLo6XIkwd+wux+FteCC1YsPjDgiYLm4QU Gy3CXFF/35sTGAvjhIV5hDlCPlYTbjkWQ1mk7HYiTB6uCNxMuFOLxLWFg5PwkI2EOYQYzue46jWG 0IAwVU6ERasTYTqVD7yoz7/9t/82C0SPPPJIbb2oG2IJqZhHEIhoc6PEwvM3vvGN9K1vfSuLkY2O K75HcPvrv/7rPIf9/ve/z6JU8RvviHVlPog1CKXUo25OK87lmBtvvDH9wz/8QxaFOK9Z6gRbFtFx hiFaPvzwwwPmZcqGJ/uq8aIPCqa0o44pjjocheSLk7HuGmjWpuK3TrStyGuo77QV4ZJ2/+AHP0iE Yi4LqTBAlOTFMfQfYgbf09eNEuPtm9/8Zn4RStA0dgn08xhirBbhLOuEuSJserMHFco9xzVQCHl1 whxzAve+XoV9L9fNzxKQgASGSgARCjGDMHStpqcjhOMfI9QhAlmjhGsJMeT3H29JvwsRqBDdOP69 ELQmxxw9L/5Nxd5x54fYhDhYHIN7CvFiVogauOlI1A9xDjGsldROHu/u3pfzxi1HXXD0rQ3RCkGn nM6L3wgjSd0R89ZHHQceUT669c/kQThLRA7CROJcQ/SqhrNEHFkdoTQRUxHVcCO1IszRF1+KvcPY W4599P64YVt2bVVFxQ9jbzDyZv869qCDA27HRsLccPq4dTqDH4n7jxeuONxzpKL/CfdZTp1kwR5y CFWIyzjlnt20Lf3k/U/yWCqPHQSqueEomxdiF+IV4i/7+MG/qOdwxnq5fUP5jFuUcJW/CVEONx/7 HvIdljmuP9p5Q+zXR+hLwlb+ccP29M/vfZJFO0KgFumjGD+EqJ02aUIIlXMiZOrCfK1zLdWlwcqt O8fvJCABCUhAAt0moDDXbcJdzJ9FIBwI3//+9/PCDAvadYs3VKEsIpSrhGhz//3350V09roabOG6 fK6fRweBsTBOCL/K+Kzus4VrivCEvVqMxwlBeYTSqwokhNZDbCF8LMdVEwILLldCGiKCVdtSPb7R 353Kh/xZ5Cbc6b/5N/8mC4oISYhwdYIgxzeaR/iNhLhPGMG77roru9TY/4jF5VYSC9D/+l//6yzk PfTQQzlUYdkxVs4DkaaZUMOYZz/AOyLcL85DQpDiOBssdYotYVW/973vZXcffY3Tq05047tGrOFG GDvEXuZoHIxlcXKwtlR/71Tbqvm2+zeiBGIpD4Rw/8HVzQMkVT78Pdh4mzp1ar4e/+qv/ipzame8 tVtvj+8fAv08hnCwcd1yL6gm3G/cq1qdEzmfeZH8eDCleo0wx3EN+e+2Kmn/loAE+pkAYeUIz9hO QkB6JgScwdKr2/akF8MZVAhuxfHsl/VGhMD75MDCLMwtCNECYWKkEqIfQhdOsRUhfuFKw9GEC6tI /PP5shBUcBbi1ntrV0S9CTGjUwnHXA5nGYJGo3CWF4VwSPnsr4YTsXUxFVfgnkTYRcSrFwizGG2o JhyQ6yNf8keYmxl70OGka5ZGSx9/0YbOsUBMxlmI6IZD7rkQrHGYlUU5ykWsenbTzjzG2ZMNN19z ql/UtlefcB0y5ot94Y4eOXGqaAThNQvnZrF4Q+x9yN6K60KEK4tyHMzekS9v3R2hLuemc0IEviKc c4S3fCeE70bu2mblnqqAHyQgAQlIQAI9JDBy/yLtYSPHclEsyLDozII274QAY38TwqBVF3HKHAi5 xAI6QgFuDJ7kRvwwjU0Co32csNdYef+xopdwC+Bg69X+kCyoEs6ScqvCHGEVX3rppXTLLbekNWvW FFUc8M5C6j/+4z/m6+2xxx7LIRoHEx8GZPD5H53Kh+wKEQvHGu5DQkbyQqAru3Dr6lF8h+MNJxSC S7HfX7t9Qj1YhMb9wVxGHXCIEcay7Koqyqx7p38QxQifSfhKREf2pWpn4boTbKkHbkTmWcYCjmba U3VK1rUBAY02XH/99ZkpPHG7NXrooi6PRt91om2N8m7newQ1riPuO9yH2HOu2NewmQOyKANRj7HC tQYnxJA6Mbw43vexR6BfxxDXKmFjEQ+r8ydjtt2HSJi/yI8xXw3hijsP0c4kAQlIYDQRyHuNhSiE k6rVhChF2L7BEkITIk9dwpVz4HNxCLdRq3ul1eXVie9e3743u/QQIXA0IYCVhbklIcLgZCOc5esh YiDAENKvUwmRDSche8cV4Sxfib3u2CuNNCUEMgRDwv8hoHwcbr0TJbdSs3oQUvHPm3elN3fsy+sR hausfA6i3fxwdOGSK0RSnFJ83yyNpj6mHZ1kwV5/OBshhJsTFoR1rEu4MndF38KTaw5xup8Sglsj Z+TSCHNJOxkPCLccWxUfi7bQLq4NQsEyjrluCHPZSERuVm6Rp+8SkIAEJCCBXhIYUWHu3nvvzftn DGVhupOQeOKYxZRmib2jWPhjH6ByYqGTxdehJASF//gf/+Npi7WE5WpnsYVFZxZuWMBhIRoB4513 3skOC8IpsZjDYicL5ThaEBVY+GYxk/OKBfQrr7wy/ef//J9z2Lhye1avXp3DqJW/6+Vnx4nj5Npr r81jsDpXsLCPa7SXievh3//7f59w6VQTc0Sz/YO4VrlGEbIQxBGd2CuRUI0Ie4gyLMDyauS8o8xO 5VOuP/vIUSfmpVtvvTULj7j7cAIyj7DITEhRXHbMI4RR4xzeCd9ZOEVacaaVyy1/RtDC9US+cOLB ARghghIaElbUA1Y45lj8LurBObyY01iwZmwQCrHd1Cm25AOXYozefvvtuS3sIVfsj4ngiMDAHMzY 4XjGF/ck3jkX3qROzM/DbVsn74P0DQIk9176mn7mxT6SOOi4b9HX9DPOWPqacUf/ct8tWPEdom67 qZNtKcru1D29yG+o743umQhD3d6Lc7A6d5L7SI+hurZyvRLKljHNPFVO/LuL8dpO4prlXsN9rvqA AvMcc55JAhKQwGgigHuHEHaEUmw14YDbH/8t2yyhGbF32sEGoa9Z2D/+uYZxRmR0Bv83gmnjfvaM 2xf7Y82OcJEzcsjK12IvtkJ8w8WGaMW/jXH5EGqzkwkU9AHhK5dE2MkinCXCBWlViEBnhwsJge7t 2DcN12KrCa2IkIm8SPPD4UVIRcSWBVPjFeEqCVnJ90tinzbEyVbSaOtj2tRJFvODWSFiImpVnaFl hoSEXH+0s2OmnP9wPjP2ilCgdfkg2BbtZJ+8v79wZdM9HlfMnJ7mTDn530vzYkzNjP/GqBPmBiu3 ri5+JwEJSEACEug2gfZXLTtYIxYaer2oPtTqs4DIq5OJxXlenUosXOLSYLGGBXbcGcUiNiHhWPRn AZiFHBaziwXfonzEwHYEweK8br87ThwnLGjy6oeESMDiMq+hJBZaEe8QoBAcCWnJgiviOQvNCDW8 KKeZsNSpfMpt4D/+i3kJR9OuXbuyKEcdCbmIMEq5zCO8mHN4IcY1q2u5jFY+MzcV89HVV1+dhUtc wMV8BiscwcxpRR14p05wG4pQU65XJ9nSlwgiCEo82FF+FX1OO2DIQx4s3PN3NRU8qt+3+/dw2taN +yB8ENp40b/bt2/PohzXBGOOexfjobh/ce+C03DHWzfaUlw77fZJp4/v53tmN7iP1Bhq1G88pMCr UwnBl5dJAhKQwFggcCicb4Thw/HTyXTssxM5tF0jZw37V518hSjXyYKHmBfONAQ39gy7IEQ43Gm4 fTaEC4p9tS6JcJ+EucQB+E4IYwgZnU6F64oQgAiBCByFMHfRvNkR9nN6hEE8nPtqMGG0rm64AK+L cJ3kjwCH2DIz3Ewz4539viZGRxCmE2dUK2m09XG5TZ1ggRNsauynRoLboQYidLncfvyM+Lwv/lvu aPwbvy7NC5GNsKYkXIIrYg9Crt5GaUJc0RPjmiFlYe7zc6vHD1Zu9Xj/loAEJCABCfSCwIgKc71o 4Hgsg4VX3HO8TBJoRMBx0ohMb75HBEOMGY7DjJp2Kp9qqxE++mEeYdF9pASPTrJFWEJU4tUPqZNt 61R7CpG1U/mZz/gj4Bgaf31uiyUgAQlAAGdSq6EW+4XY2thnbn044XCTse8eofgQ5hBx2HNtRghY L2/bHsccCLdfM2liaC1C3CGcJft8lcNZnhFCRxHG8plPd+Q6tVs8DrxvnLs83bBsfloUTq9JZ0xI hLTceuhw3i+MsJ0bo63sG3b3mUvSZS3sO9jLPkYrbE0uHJx9p1gwBmDwRepUDb/IcSif2mVFOxDQ BzSlVDBCbdEyxiehKhuF7Cydlj++Fy7UwqlZ/W2wcqvH+7cEJCABCUigFwQU5npB2TIkIAEJSEAC EpCABCQgAQlIQAISkEAQ2H7oaA4TeVWEksQdR0jLv8Q+bxfNn5WdQsdDvMBVR7jJbqW3QxwkrOay GfNOhbOcEQ/nnR1hNNmf7O3Y3w+HYzuJMJX3nb0k3bVqUQ4x+FaU8WwIfIiQuyPcKGEGEelwAS6P dn85XIOkL+SYdkpr79hCYBxMTJrCPoSfu7DaK2Hg0Z1kAbdirzgcZVMjzGizVOzXN1TBulusGkty J1vD2Cj2lHw/hLlfrduUdsS10koilG2jEJ+DldtK/h4jAQlIQAIS6DQBhblOEzU/CUhAAhKQgAQk IAEJSEACEpCABCTQgACCyRuxr9zHyxakL4U4h3MOgY53Qj9uCMHsg90H0v4QKrqV1oUb7+MQzK6M cJO45AhnuTRCaq6Md/aVW7fn4CkxqNU6nBsC4+UL5qS5EZKQMJw/ff/ThPNub4TEH+j4SonwjNMi 2g8pi2WFVarVwto8DnHmRLwmRWETmghvs0L4mhZ1G27qJIudIWQWYwG2hAVtlGZPmZTuPWtJOi+c l4hbz27a0dY+geTba1ZFW3aGgxM3JwnxcW/sl/dxuCsbpTnR1tnBg/CwiHJH490kAQlIQAISGC0E mj9mM1paYT0lIAEJSEACEpCABCQgAQlIQAISkMAQCOAQKsLrDeaoapR9u3m8v2d/3sON/a8IeXh1 CHSrQhRDrMItRxjLok6NyhzO9/tD9MjhLGMvO8JZIs4RVnPx9CkJNx2hNdstn1Cci0LcI721c196 JVyAOOWqohwaHM48yiKxV1i3XXOERMSJOCUEn5nhDJwczrhqol65DeH8G27qJIutBw+HyzD22Y5K MVbYA7BwxVXrSV/etnxh+trZS3N/Vt11rYzTXrMq2rA52sl4IV0Y7lHGSKN9CNFWb1mxMP2nK85J /9eXzkt3rFyUQ8AWefkuAQlIQAIS6HcCp/9LpN9rbP0kIAEJSEACEpCABCQgAQlIQAISkECHCLDf WRH2DyGjTrQZrKh280AYY685xIhVs6al21YsCiFiRtp/7HgWtbbE991Ob4d4tjHccdPDgXVriBxr Fs3N4g9ut01DKJ99jAvjG4JKnXjE77gEEVIWfy7iTQyVpZEA0ykGuyIkIswpZ82iOVn0qeZ9WbgH bw5Ri73xhps6yYK9AN/cuSdCoB6J0KPT0nVL5qXl4aysJkTda+M3QqMiXOF85JxyamWc9ppVUb9N sf/gGyFKE75y2fST1wRtKcZUcRzvF82bne6MMXTz8gXp8ui3aXHdHj2hY67MyM8SkIAEJNDfBAxl 2d/9Y+0kIAEJSEACEpCABCQgAQlIQAKjngAhGr+yakm6dP6cttqyMxw0OK/a3e+snUIOhRh25PNF /XPDkXTbyoVpYbi5KBPhit8HS0PJAxGC/ddwOV0cDiFEI0SxdeGmIzxftxOuvI/idWUIVRdEuxGT +Htd1KmVNlfrt+nAoUTYxaXR1+R5575F6alPt2eBCLcXDrmLQ1C556zF8fvcU3ulIYZ2Yl+3an3K f7+ze1+ux6KoA3v77Ty8PD2xcVs4A08KkzjR7oi98S6JfggMbbsFy2XxuZMscFUSEpQwoTeFEIV4 iJD86IZt2fXI74uD+c0RGvUrqxan+VMnZ9cl182+ECPLqZVx2mtWRf3YR++pT7bnPrgx2vLlpfOy KPf7j7dmEXtPzAXTQ3zE2YkjEB6Idi9t3ZUFPTiYJCABCUhAAqOFgMLcaOkp6ykBCUhAAhKQgAQk IAEJSEACEhilBBBl7grhgzB57ST2Qtscgk83hbkdISbhUMsCx7Sp6b7Yo+uGpfPTnzbvTL9ctzlt bLLPVdGWoeSBo4l9wHBwzZ48KYtBr4dY91EIY71IB0IIKcJZsscd6a0QBgljOZT0VjgAXw0xaGU4 AFdGfg+esyxdHQ6ureGEQkFBMMLxxT5ufw62c+PvS+fPzt+zX1gWxNobHi1X891d+9PL23alsyI8 4rwoF7fVxRG+E+F3SoS1RLCjD56Lei2POuIeHE7qNAv2WvvN+s2xp9qkLEx95czFOfwo4/Z4MKPu Z8+ZnpbE+N0YYuOv41jCiRZO0KItrYzTXrMq6sY7YvGv45qbEe25LMYGjjj6DDcdwh19tTzGFmL2 jBhHL27ZlY8f6pgtl+1nCUhAAhKQQC8JKMz1krZlSUACEpCABCQgAQlIQAISkIAExiEBwkPOm9r+ bhrsOcVifDfTgWPHsvto4dQp6ZoQkhaFuEGYxV1HjoXja0dLwtxQ8iD03ps79qTrQwTEMUfYwXdD GMN11quUw1mG6IMwh/BB+expNpRECMKHQhBCfCVU5fKZU7OIciz+RnTjnb31fvvR5ix6XrN4Xgh1 J1kTxnPelMlda/u+o8fSw+u3hPj6WbjKFoXYMyNdEs4rEuEdt0WbHwlnFuLXt85dMWxhrtMsYPdi OMNwwN0dohzCMc6xy8446RqjHYRBRVj8Q7TjhS0749hjfD0gtTJOe82qXEHGzgvRzj1x7d0Z/YRz 7tw5M7MIiWaLQ453hPpHPt6Sr9s3QxDuhcO0XE8/S0ACEpCABIZL4IzPIg03E8+XgAQkIAEJSEAC EpCABCQgAQlIYGwR+L/fWJd+/N4nCWfVUNLC2Kvrgnkzs+AylPM5Z2+IC2+HWLTt4MC9si4Mt9PZ 4aRhqZ692ho5Zth76uJw3iAA7Y7FfkJFVvfdopwpcdzqEGtw4lDv+DOHOTy559XJsmkLAhJ7p70Z zrZqma3kQVnlRN3+w+Wr895gT0fYx/9n7UcJsawTCbHtvAjRODP2kMNx9cGeA1l8K+fN/nKIgktD iEQUgSVOvmpqJS/Ogc2ScJ+dP3dWds4tCJYToo92HTmSuW/afzhCZR5Iu0N8XEb9QnTBQVdXv073 MfWjb8+JfctoDyE32RUP1xmvD3cfyO8XBo+zYhzsQCgNR+OuilBaZoaIipiJE62aOsmiyJtwp9Sd sY94vCheU2JDuT1xnWwJV9mH0cewRGRtlFodp51gRR0uytfqjHQiJLW1cd0QHnawBDuuWa433Izs +zcrXHQIcDsPHwlh7nCM5/1ZRG7kwh1KuYPVy98lMN4IrIq58D9dcU7eh3S8td32SqDbBBTmuk3Y /CUgAQlIQAISkIAEJCABCUhAAqOQwHCFuVHY5JBpUpoaYhUePfadw6nUbmonj7tiT7DvX3xmOjME iP937fr00/c/rXU6tVuHkT4eYYW942bAMoAg7h48duK00IojVU8cnAiCJJxm3dyfrFsscJLOjDZM DMCHgi1i3PE2nr1vdZz2klXdeGD/wRmTJiVE9mOfnUgHwjXItTmES7Mue7+TgASaEFCYawLHnyQw TAKGshwmQE+XgAQkIAEJSEACEpCABCQgAQlIYGwQQIY71MRt1EorW80D0eryCEfInlkfhYvsvdgH bX9N+MFWyuy3Y9jbDKGomXNrJOtMGNGdh0/0pArdYoE4dWQYbWh1nPaSVV2HII7viZC2e+p+9DsJ SEACEpDAKCWgMDdKO85qS0ACEpCABCQgAQlIQAISkIAEJDB6COD8mTpxYnaNEZbv1hUL05djrzCc QH/Ztjvvv9a+P2/0tN+aSkACEpCABCQgAQmcJKAw50iQgAQkIAEJSEACEpCABCQgAQlIQAJdJjBv 6uR031lL8757CHSrY5+wZTOm5X3Mnt+8M22v7KPX5eqYvQQkIAEJSEACEpDACBFQmBsh8BYrAQlI QAISkIAEJCABCUhAAhKQwPghwPZfF8ybmb4S+8oVaeP+Q+nX6zan17bvif2z9MsVXHyXgAQkIAEJ SEACY5mAwtxY7l3bJgEJSEACEpCABCQgAQlIQAISkEBfENgb+8e9um1PWjhtSq7Pxn2H0svbdqUX Nu+KPbSO9UUdrYQEJCABCUhAAhKQQPcJKMx1n7ElSEACEpCABCQgAQlIQAISkIAEJDDOCRw5fiI9 +cn29PaufZnErsNH0/ZDR9KhY8fHORmbLwEJSEACEpCABMYXAYW58dXftlYCEpCABCQgAQlIQAIS kIAEJCCBESKw5eDhxMskAQlIQAISkIAEJDB+CUwYv0235RKQgAQkIAEJSEACEpCABCQgAQlIQAIS kIAEJCABCUhAAhLoHQGFud6xtiQJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIIFxTEBh bhx3vk2XgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhLoHQGFud6xtiQJSEACEpCABCQg AQlIQAISkIAEJCABCUhAAhKQgAQkIIFxTEBhbhx3vk2XgAQkIAEJSEACEpCABCQgAQlIQAISkIAE JCABCUhAAhLoHQGFud6xtiQJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhKQgAQkIIFxTEBhbhx3 vk2XgAQkIAEJSEACEpCABCQgAQlIQAISkIAEJCABCUhAAhLoHYFJvSvKkiQgAQlIQAISkIAEJCAB CUhAAhIYzwTmT52clkyfmg4dP5E2Hzgc78fHMw7bLgEJSEACQyCwYua0tHDalLQp7iPbDx1JJz77 bAi5eIoEJCCBkSOgMDdy7C1ZAhKQgAQkIAEJSEACEpCABCQwbghMmzgx3X3m4nT9sgXpDx9vTVsO Hh43bR+Jht6+clG6bsm8NOGMlH770db0yrbdQ67GbSsWpuuWzk+Tzjgj8tqS/jKMvIZciTF6IuLC V1YtTufPm5k+3HMgPbFxW9q4/1Dft9Yx0fddNKwK9vu4PGv29HTfWUvTJ3GtPLR+c9qw7+Cw2uvJ EpCABHpNwFCWvSZueRKQgAQkIAEJSEACEpCABCQggXFI4KrFc0OYW5LmTJ6Udh4+mo6Ea87UPQIX zZuV7j1rSbo3mK+aNW1YBV0Yed0ToupXI79Vs6YPKy9PHkhgVlwP14SAev/ZS9O18T4vXKWjITkm RkMvDb2O/T4uN+47lCbGgwLMcVw3MyZNHHpjPVMCEpDACBBQmBsB6BYpAQlIQAISkIAEJCABCUhA AhIYTwQIO3bHqkWJ92c37Uhv7dybjht6rKtDINasU/wvncGHYSZymBC5FXkOMztPryGQ+yp/P/z+ qsm+4185JjqOtC8z7NdxiVPuubiX8IAHTmyE4tFx5fRlN1spCUhgBAgYynIEoFukBCQgAQlIQAIS kIAEJCABCUhgvBCYHLEUb4lQiNcunpfW7z2QwyDuDsecafQQeGX7noS/cWKsfL+3e//oqbg17RoB x0TX0JpxCwR4sOPPW3alq5bMTbcsX5huW7kw9ps7lPeca+F0D5GABCQw4gQU5ka8C6yABCQgAQlI QAISkIAEJCABCUhg7BI4Z87MUyH6frluUxZ2Phu7zR2TLXs9hLlCkNt/9NiYbKONao+AY6I9Xh7d eQLbDh1OL2/dnS5bMCfdGHuXso/mloNH0gnd2J2HbY4SkEDHCRjKsuNIzVACEpCABCQgAQlIQAIS kIAEJCABCIRZLl0de8tdOHdWdjK8t2t/2ndEYWe0jY4Dx46nHYeO5Ndh9wYcbd3Xlfo6JrqC1Uzb IHAinvB4ffve9NHeg2nFjGnpyoVz08JpU9rIwUMlIAEJjBwBHXMjx96SJSABCUhAAhKQgAQkIAEJ SEACY5rAypnT0+UL56T50yanlzfsThv2H0yDueXmTZ2cLpg7M509Z0ZaOn1qmjZpYtoToS83HTyc 3t65L4fD7KQ4NDE2Tjt79ox05aI5adWsaWn6xCgvXGEb9x1Kr+/YkzbsO5guiv2Lzo06HTh6PH+3 +cDhnvQbi8yXLpidzouy+Uxd90XdCNn2yrY9eUH66AmCTA6eCCl6frTjonkz0/Lol2kTJ6Tth47m 9r2za1/O8xgr3TXpEuoQ/TEhyqdcQpKWE3WED266N3fsTQdDyLsgyjo/vlseC+YTo2yEPfrvjfh9 95HOhjKFzSXzZ8eYmZ4WTZuaaOuuGDNbGDPRtvV7DqRDTQTFyz5nvCvqtTbqN2PSpHRVCMqMC0Lm vRt54MzZGvnVEyrTGPi5PL7OnDU9TQ3uO6NuiAmML/buaycN5/pYEtfTJQtmpflTpyTGMHs9UpdG ibJgszjOo+1ro//oR9JgY6KcZyfG8XDaXa5Lo8+dZFMuoxP1Lq4vHmrg+uL6OSeux/PigYdVsW/n zMkT47tj6dPYd+21cLdujPfBXGOdHpcjdQ1+GnPhRzEf8QDINUvmRXjLnWnbEK7Tcp/5WQISkEAv CCjM9YKyZUhAAhKQgAQkIAEJSEACEpCABMYhgTWL5mZxBr0HcaOZoBWaT7owxJx7zlwSzoc5WYia PWVSFlkOHjuR9sbC8ych7D3xyfb0ZLy2fS4QDAfrrMmT0h0rF+X9iVaHCMMi+pQJE0LEOZ6FnQ9C 0Hlo/eZ0cdSL4zbHgu+Ow0eatmM49SnORVhikfnOlYvThfNnpcUhPM2MuiLhIEruOXo09lU6mB4P Dk/Fa/sgLOZOmZy+etbSdOeqRQlxiL8nRRm4nhBmPoh9434RYUZfjVBwdeLcmuiPr529NM6ZEOLb +tOEOfqZ3xEMEe+WzZia931aGu+URd8eDFETcfXVEPZ+E0wJjTmYeFDwaPQ+LUTUNSGo0jcXB6cF wYk+pQ6Ig3tDKESseObTHcFqW9oSYlSdsHZV7H94/9lL0rro73lRX0TF65fOz2OQOn4U4iyCKOJU O2l21OX2qNvtsf9VMb5geODYsbQzRNE3Qxh7LXjQF4OlTlwfcLl+6YJ0XYytj6NNP3h7Q9q5dVfD omH6rXOXZ4HykQ1bT4Uz5YTBxgTHdGIcd6Ld1GWw1Ek2lNXJehfX18boMwTmhfGgw12rFqeVIcp9 MWedyILdu+FKfvijzVlI5hqoS50clyN9DR4JHu/GXIIIf1bMbZeGQL92x76Oi/91HP1OAhKQwHAI KMwNh57nSkACEpCABCQgAQlIQAISkIAEJFBLAGfQBeHOQpxBHEHcONRgoZgMvhxCyIPnLE9fCqFl ZjiWEA5wFB0KUW5+CGbnR14IKCvC7bVo+pT00LrN2RlSW3gLX84IJ969Zy1J3w7h4czZ07OQ82EI MzjkEBTYGw8XBqIYrr2Vseh7ImQdFqK7mRAIbl2xMH37vBVZEETIgcVLIaDsD37U56JYfL52yfxw voUbLTSdRz7emvY0CBGK6HP3mYuzU6twPrEXE8LBudHG1dF2FvinRxuPhfuO0HBVwYyF/GXhfJsc hcGtmuaEgIoYh3MHIQenI+3AIUff8z37QJ0X5a2IsubG8T98d2PCqTfURP1vXDY/feu85dkthyuP vns1HEOIl4gX582ZFX04L7dv+cyp6ecfbsriW7XMk/WflkU73GSMBwSPz0KUOwM5NNS8o6Eu14l6 1byKv4vxBY9ifL0fAgJuJq4N2N+8fEF2h1LWYKkT18fOEJX3hNuK9iJ+42jEgYUQXU04qi6PPrss juPztti7CxdikQYbE50ax51od1HnZu+dZEM5nax3cX1xLT+well29uJQwy22LpyX9MVZn1/HXHtz p07K7t6/xHVeTZ0cl/1yDTKP4HDG4Yqozj2n067cKkf/loAEJDBcAgpzwyXo+RKQgAQkIAEJSEAC EpCABCQgAQmcRgAhJ4s5ISxtDKcbC/uNhA2EobvDAYJLCQcEjg9ccZ+EiIEgwmIy4Ry/GkIagsL9 uLP2Hw6n2JamIQpPq1TpC1wo94ZgxYI2Tr7ffbwlvbBlV4TqO5rFrqVRfxxmNy5bkIUMhIZeJMRM BENCCOIUfGTDSRYIXEdCOMM5d3XU/euxQE+4T1gQFpG61yVEFUKDIoz+8N0NWXhDYKE5uOdY6IfF NUvmZqHs48irWXjDujKK7xBQF4Sw9eGe/dlpiDCw+/CxNCWEKEJhUuero5ybQpBCRNt2KByIwXso 6YII43dPcCJUKiFGH/toW3pm0468lyECI+Iuji/GzMUhZOLE3BJjEHch7su6hKhB6E3qhlOSxf4F IfBtj/Nw07WTCI16TzG+ws3zu4+2pD9v3hVsj2TnIQIlv18XAuusEMqapU5dHwiWCHFcZwgYFwWf pZunnuaApC7Uj/CkOBDfCLGTPm0nhGwnxnGn2t2MbfFbJ9l0q96L44GERSHI4eT9wdsf5zCt+2Ls E5aW0JZfX700i9QIqjhJP4g+qwr2nRyX/XINMjfioOaBAsQ5wpIOR/QvxoTvEpCABLpJoPmdv5sl m7cEJCABCUhAAhKQgAQkIAEJSEACY5YAghcLySSEHvYfq0sIRzeEUIMbDqfaHzdsT//83idZCDkW C61FYh8hXBDTJk3I7qvbIjwg4RDXRjjAdhMOlBvCbYXYx4L8HzZsSz//YNOAPcTWh0CFYDcjHHI3 r1iQXUPtltPu8bBANGFhHafcs5u2pZ+8/0mIIgcGhJhElJwbItg8XGHRBvZXY/+vRoy3xqL1r0No ejheZSHsg90Hsui5JBwmiHTnxuI+TpyhCnOTo84IX78NEep3H20d4FqBJf2JO4w9s25avjDvh7Xj UL2g2IwdDiHCVyI+wOyJjdvymMFZyJ5wRfpo34Fgcjx970LcmyfDkb4X7poXwn1YOqw4PLsGCVdJ qE1ciOzbhZMQyxziX6sJMQvHFH1DaNDHYnz9Itx65VCa7NMHK4TWL0doyayU1hTQ6euD6wWXVTFu zox9Fat7BlINxhShAUnsC4j422rqxDjudLtbqXsn2HSz3rh1Cdn4+3iIAKG3LLoxF3L9zZsyJdy9 0/J+kjhky8d0clz20zXIHI4TlIc6cMsxn8Gi1f03WxkbHiMBCUig0wQmdDpD85OABCQgAQlIQAIS kIAEJCABCUhAAjjOihB9OJQa7XdECMQ1CyNkZIh4G8KhhOtpXYgWZVEOmuyt9PLW3XmPsgMh8l1B KL5wlxHCsN2Eq4JQgogub4Wg9WyUiSDzhaSTssCzbu/+9OSn27Nzqt0yhnI8C+m4UBDdcIE8B4uK KEe+CJTPbtqZBR+chXlvtyYFErry2dhnrSzKcTgL12+HUMX5JMpFKBpOwiX3fLj3qqHkKIvfXgn3 FWIZDp/V8SKsY7sJNxduOPavQ1x8KjhVRTnypJxnN++IMKC782ecg4QBnRFuukYJRxnuQxw41JkF f8SN6nhsdD7fnxQ5T44vBJPnN+8cIMpxDIIdrh5+QzhtlDp9fWwPhyLl7gixnPCeXAcINuWEAws3 HY5XxEOOb0es7cQ47nS7y+1r9LkTbLpdb/ZofDHGZ1lwoz3Mr29E6N9PPr+WF8S1XO3XTo7LfrsG 4cGemcwnS+JeQvhckwQkIIF+JtD+v376uTXWTQISkIAEJCABCUhAAhKQgAQkIIG+IIArrdiPbG8I aQdDWKtLCHiIcjhN1ocIhTiHaFGXWHxGqEJUYNGZkGVFGXXHN/oOQQhXBendEB0ItVlXItVAuGNf sF4k3EuwQGrEJYfYRCjPuvTu7n3px+9tTP+09qMsJDUSPjn3/RCvPg3HWl0irCXh8EgsauNaHGpC vFobwtbGqHddQij7IISqHRHOkbIQCgrxtu74Rt/Rd8V5b+3amx1fZadc+TxEYcTHrRE2k5CaCCdz KkJU+XjGH2LUcFLZLYowx/ip60XGOeOLkK2NUqevD8L9vR7iKCFLcRUhwCHQlRPCNcIp7tS3s8Pu wAAnYvnYus+dGMedbnddPavfdYJNt+vNnEBY4LqEw5OHFkg4bifFnFpOnRyX/XYNlu8xs+Pec9Lp Wm69nyUgAQn0F4GBj8T0V92sjQQkIAEJSEACEpCABCQgAQlIQAKjlAALowgh6EqII4dCVKtL8yMc Y+HsYM+0v79wZQhF9WEvOX/FzOmx59vknBXiDHuJNdozrK48viNcI6HYSNtDJGp2Pvug4ZrqRZof 9SpYIA5VXTHlOhBacf3RegGsfByCFTwPN+B/5Phn6fjn4h/i6HD20iOUJqJps73IdkS7Ct7zYz86 2rs51YuG5XaUP5f7D5FiT+xj1yzhhszHzE4pM2ZPt5ot4xDPECoREIeTinaRB+1tNp6pf8Gjrsxu XB/sPcaecexjyP57CKQIiEV4z0vi+zMjFC3CIWEs2WuvndSJcdyNdrfShuGy6Wa96R/mooPH68cn /RWXc05IchVdLnVyXPbbNchcWTycwMMaQ3HitjI+PEYCEpBApwgozHWKpPlIQAISkIAEJCABCUhA AhKQgAQkkAkg7hAOD0cOi6WEGGvkaJoXIlsRdgynzYpw73y+tlxLc0L4yYrwlVmYG0LIMkRDFm5x yCBwHYmQhY3SwWMnog0n8rGNjunU93lBOVxKJMScQw0W4NspD9GNBfvGTJv91k5JiAYnw8k1O2t/ jIWiXUU/NDu+7rf5n4fpo015QX4QTuV65fEW/V+X2KNq37Fjw96bakaMyUIYoB8ZP43S3qNH8/XR 6PduXB8Ij+xJeN2Sw2lFXHPnRfhUwn0iSuJ0vTBCxC4KkXhDuLPeD8Gu0d6FjerciXHcjXY3qm/5 ++Gy6Wa9j312Iof05XquT3x/8reBXrmTR3dyXPbbNbivJMzlh0Li3mOSgAQk0M8EFOb6uXesmwQk IAEJSEACEpCABCQgAQlIYBQSOCX1xBox4tepv2vagkurWETGtUOoykbhG6unvxfhHBH92k3HQohD KJySJuQQmoh9xxtIV9SN6I5nVO0n7RbawvHUaeCae0GmhZMbHHJyqf7kYn2DQzr29Wf0dbyaJZbL 4U3KI2OQ4/OBdf9Hn9R9X/Pdyf47+UOzc+DfXMSsybz2qzKDZiXGXobR4VwjjVK3rg/2I1u/70B2 xl0S4SxXxr59CHPnxT58hLJEVMcttz5CXjauXX2tOzGOu9Xu+hoP/HY4bLpZb+aGZmNlYCvq/ir3 5PDGZc49smieyxd16PY1eCJGacGmyeX0RYX8JAEJSGCECSjMjXAHWLwEJCABCUhAAhKQgAQkIAEJ SGCsEWBhFKccTjScQyzyN0p5b6DPHUW4c361blOE/2stdCQh3XBDtZt2RehDnDE4e2aFQ4i9tBqF L8TNhwOj1QXodutSPp6QhkU4NsotXFflY8qfi7CTxYJ0+beR+DwjwlJOm1jvRivqQ+hKeJMQVZuF vSzOqb6fHDPHczjSWcGJMvedaDwOKHP65/VizDRySDYTkKt1aPY3DjnaNSsirlK/6dHeo0fqXXMw m9qEWbeuj0/3H479FfenKxfODYfcrBDoZuT97i79PLQlTr+3Yn+5LREGtN3UiXHcrXa30pbhsBnJ eg/Wts6Py/65BqfGPaa4zwx1XhmMn79LQAIS6CQBhblO0jQvCUhAAhKQgAQkIAEJSEACEpCABDIB hC7EidkhfCEw4STBSVNNO0t7cHHc3jjv4wih1ygRam92hL8kb0S5o/HebtoZ+8ohPCyePiUtmT41 zY38Gglz/E7IzF6knXl/s5MCE3Wa2SDkInWB671nLUnnzZmZww0+u2lH+mR/e3uBdbpN7NuH0Ilg 2EgsXFDaRy/vDzcEYRVO9B99U+x1xd+NUj4m6kVij66huCwb5V33fbGvHOUW7W0kIM+dOulUKNe6 vLp1fRwN0fzNcMTdsOxgunje/8/eewbHdZ3puh+RE5EIMGeKpAIpispWlhVsSZZk2ZJGluWgCZ4z Y5dv3Zr7Y05N1fkxNX+m5tStc894PHXkKQfJVrJk5Ugr50wFJjFHRCLnxPu9C9hkswWACA2iG3iW q9mN7h3WetbeMtkP3m/NtOW+vuPyIj3yrciv9y8ON/s6dG2m8p6jbYm4jidq3CMZy3jYTGa/TzS2 hF6XSXYPxpbF1X/Lo3K5J2LC5xCAAAQmi8DQv7I2WT3ivBCAAAQgAAEIQAACEIAABCAAAQikPAGJ En05qqRZfka/nBtsUFWeyGl0WaK2ykvqLZmZGyTeYNuqHNol82fZT9cus//nrBV2xYIyU+JotG1n Y5tVuMSSJlw7q9CWuZQYrFKlzndmWVEo7Tfac4xl+xpnoTSf+nWKC5IFBblBcg12rEX+2WXzZtn1 S+bY6aUzT5iuG+wYiX4vy8Wq+j3HhdlgTTLxFF+/bJYLUckxCdjGMYi5qjZx6r9mNPbFfs0MlWiU 3DzVE2GSeJKFOudhl8ET2VSOVX1UO9Wvac3VUP1b5eu7zfcykkO1ibw/tvo6c+qrygBq3i7x62nh wDWnco77hhHkQ/VX7yfiOp7IcQ/X9+izsbKZ7H5H/R/sOaHXZZLdg/Hr53WMQSgPxoz3IAABCEwU AcTcRJHluBCAAAQgAAEIQAACEIAABCAAgWlMoMblR6NLJrUyFzFKug3WKv0LXq1lpfKVc3Nz7LL5 ZbZUomyQjVd7sudKl3EXzyu1NS7UclwEKd0S27SfEm6SHXooxRW/PtzB1nb79HBTEDQLC3Ls6wvL 7RRPnkWlIXU8JfzWlxd7f2ZZmSefhmsjOedw+0ef1TqzzfX9/Zqbl2PnzS62eXlflVwq3XiufyZO kodKyk20bIr6ONyzOKhfa8sKTZIutonn2c7zTJ83lZX8sqElJLLi5y92n6Fe73WZJHGisoFaD+1r fj3MHURuhXN6f87y86o0aEVbh+1yKds6TLpuqHOO5n0JLZVllXxU/y6YU2JzBplHSbDz5hQPKTJ1 zkTfH7HjaOjqsm0+D0ouam05Xeu6Z2r8ntzu7zcOyM/YfUbyOhHX8USOeyRjGCubye73cGNL5HWZ bPdgeU62/39MZkh46r+FbRN8jw/Hmc8gAAEIjITA4H8rHsmebAMBCEAAAhCAAAQgAAEIQAACEIAA BIYgsKepNaxPtdITUvqyXyX99KV1fNOaam8eOmynebLoa3NL7XwXFRI8G/bX2BZf40qlByVylIxS OmxNaWH4/OOahiD04kvtSQh9w0s8ShCpPb+vOhy/s/dYGU3t866Xfjzdz3mRS50L55aEdeR0zAMt HZbhEknSS9JktaetJHiGayM553D7R5+pX29X1IUxql8Xe4JJKa+XD9TaDhc9+rzcBc/Fzukql4kl LiBVjvDT2kYv7dgbHWZSn+e7ULxl+byQ4PugqsFUNlRfmEsyXufzt9hFlVJyb/k4d/k1MpYmIff6 oVpb7fMn2SehJKn66kHn5EJJZU5VRlLXwLWLZvtc5ob33jhUF66pvmOXwlhOf8J9dE1rfKf5NbvO E5eXu0yWPlb/dvk8qq9KqF2zuDz0P15ixp4g0fdH7LFVWVYlK/fPa/d+FIXyqLrW1fc9ze2Dlp6N 3X+o14m4jidy3EP1O/b9sbKZ7H7HjiH+dSKvy2S6B7VWqMS35PsBl+KVLuC7J/omj4fLzxCAAARG SQAxN0pgbA4BCEAAAhCAAAQgAAEIQAACEIDAiQlIwulLUpUUW+BiTqJkqLa3uc2e2VMVylKeUTIz JOJUnlDH0JfJWWlpNs+PoZKAKln2UXVD2F7Hj2+SHkr/SPKpfeHiKl2xsjhvtc/FwyM7D4WykefN LrELPdW0yiWcUkLaXCJRx/q0tsnm+pe+Omavf9k72NppIz1nfF8H+1mlFp/bWxUkiWTkVYvKQ7+q vcyl3KISgEtcNM32hMhBl4jP+LZKjw3Wr8GOP5HvaQ1BpaWUBLtz1UK71IWZ1nvKzUizxQV5nmrL 9vnssxcHZGnzGMpYRv3f3tDaf824tF3p83a1i0pJ1MDJ50lf0ut60Rf2Xf7zGy7FNvh5azwddjLa VpfKT+6uNEkDSTjJ4tP82q7t6LQ0V8ta33CRX+N7/TpU2Vcl64Zqibw/4s+hYyvdd4Zfa1qnS1Jt s5exPOSp0vG0RFzHEznukYxtrGwmu9/DjS2R12Wy3IO6x5XKllTWtVwxyC+ADMeEzyAAAQhMBgHE 3GRQ55wQgAAEIAABCEAAAhCAAAQgAIEpTkBf8O/2L/0Pu4jQ+l4qzahkkN6Pb0o3fOhptSYXNVcu LAtSbbmXlpQoU7hJeTU9a124P++vDgmyzS4+lIwaa1MJxc+9nGWbi6PdXhpREkzJvgVe2lIyaY/3 /UMXgNtceikBJjHX5ftMdBKjx1l85CyUgLvapZyEofp2xoz+pKDG2+qy8t2qenvJU4UfVtcHsTNW DoncT+Ly5YM1pjGo5KhKOEZpQ7FTGUmlxpR2U/nN8TTN/TueetRac0oPKmmp1KUEU9S0jZKGb3pS 7s2KwyYZe7IEpoS0+qfrXfO43hNp67zEZ9RU5lKC+UW/ntX/4cTcRN4fEt9Kpp7vc6W1FiXUQhlO v/7G0xJxHU/kuEcytrGymex+Dze2RF6XyXIP6t4pH1hDUv+NqUbMDXcJ8BkEIJAkBBBzSTIRdAMC EIAABCAAAQhAAAIQgAAEIDDVCGz2MnlKBM3Pz3XJlu9ryGWb1jkarEmQfeaiTImndyvrQwJCa7sV eEJMXwCrJGJFa2cof1jj2wwlyCSAnvKk0scuPdS2u5gZTAbqM8mDLxt9jS1Peal8X1F2huV5AkvH kPA56PJI55cUVFM/BlsTbTTn7D/S8H9KDKo8pcb5tgslfelc5o8sj/I1ebpKXzxLJkqiSB4M1l7x 8pcqmyitKfEyVJPke3xXhb3nEknH7t/n+K1fdZEmyapkoEpnDtXEaW9Tu33gslD9V3JOyb4+J1jl Y9Fnu718ZYOXJ1WpwPE2Je4kMVW67g0vh6rUjFhp7cH23l6rck5KVe5xVo1+Tp/uQZsE5w5P4Kmf W4YZ36A7D/Om+qdrWX1441B/Sdd8v54koKu03p33S4JSa7ypnKuuQ61/OFhL1P0x2LE/qVEp1F1W 7CVH6/y61/pyQ6A6uvtIrolEXMcTOe6jgxnmxVjY6HCJ7PdI72Vdb3/aWRHK4apcrP4bMVhL5HU5 2fdgpv83Ub/AoVRzkMr+35fWnv61TQcbO+9BAAIQSBYCM454S5bO0A8IQAACEIAABCAAAQhAAAIQ gAAEkoPArzbtsT/uOGRK9oy1KSF3x8oFduuK+SHl9cvPdwcBMZIvIjL8C9e8jIwgWXqO9IUvuiXA hpIro+ljUZaXg/SURbqXyFQK77ALkcGEm465Zlah/eSMpWENLqW9frtlX0hhjeZ8491WpTxVmlEl OTu8FKRknMpGJkv72zVLwxxL3P2/G3eEEpPqmwSZRJR62urST4J0Insdccp0XrpWJEf0nAxNAkGl IrNd/Hb4/Om+Gs8cTuT9MVG8ovkZz3WciuMWz2Ttd6Kvy2iOT9Y9qGT1f/P//mid0Md3Vdr9X+4f dC3Tibqmp/px9csVP127LJQlnupjZXwQONkESMydbOKcDwIQgAAEIAABCEAAAhCAAAQgME0ISMS8 5yUXVcbvrLIiXwss3z7zJJXSHCdqSrM1ecqp6UQbjuFzCZIrvGTmGaWFLtlawlpgKlkZ33Jcopxd XuwSLzd8pASdJN7JbpJLXZ3JIZhGM3aVzevoPXm8kpmTEp7d4bo/8bU/EsYTeX+M5Pxj2SYR85OK 4xarZO13oq/LRMzxaK6tNbNm2lIvwark6Ub//xalTmkQgAAEUoFAWip0kj5CAAIQgAAEIAABCEAA AhCAAAQgkJoEVEZwY22TNXt6SZJLX6JOdmvx9JZKVJ7ua5Jpfa9L582yOV4KLVoPTf1T2u8CT2Fc Mq/USrKzwhe+u700pMoQ0iAAAQhAYHIJlHvpWiWaZ3nJY60HutVL9kqA0iAAAQikAgESc6kwS/QR AhCAAAQgAAEIQAACEIAABCCQogS0LpvWz1pdVGBnlReG5NweX2tMa35NVlMZQX2Re1rJTFvmovDa xbPtFE/zHWjusMr2Dl+VbYavi5dja/1LX4lElbl83ddZ+7yuaVzlBydrvJwXAhCAwFQiMMMHc+7s Ylvjqec9vv7lO76Wo9YnpUEAAhBIFQKIuVSZKfoJAQhAAAIQgAAEIAABCEAAAhBIUQJ7/YvTlw7U 2PyCHLvY02mb6prtIxdjk5VtUKjifS+xWehrzd24dG5Yb26ei7j28l5r9kScL5VmMz1Rl+MlL2vb u0xryz2zp9IqW/niN0UvQboNAQhMIQILfO2z8+eU+jqk6fbM3ir74nATabkpNL8MBQLTgQBibjrM MmOEAAQgAAEIQAACEIAABCAAAQhMIgGVF/vARdwCF3MXzCmxRf6lqtZ0a/aSkpPVGjq77eUDtbav uf1oMq40OzN80at1l3Z62Uol+1QebbOXHAB9AABAAElEQVSLRKUxeo9MlkqcLEojO+8W5/NcRpUL zRm2v6V9ZDuxFQQgAIExElhemB9+sUJJ5rcqDk9qAnuMQ2A3CEBgmhNAzE3zC4DhQwACEIAABCAA AQhAAAIQgAAETgaBJi9d+eK+avvckw2SYl1eHnKyW11Hl33Y2WXbG1qsxNcpUvoiKy3N+lzAtXu5 yzr/rN77yrpFw8/UxtpG2+EiU20yS5QO30s+hQAEpgqBnY0tdv+XB8IvTFS2dkyVYTEOCEBgGhFA zE2jyWaoEIAABCAAAQhAAAIQgAAEIACBySRQ2dZpeiRTU1lLyTc9aGMj0OTlP/WgQQACEDgZBA66 jNODBgEIQCBVCaSlasfpNwQgAAEIQAACEIAABCAAAQhAAAIQgAAEIAABCEAAAhCAAARSiQBiLpVm i75CAAIQgAAEIAABCEAAAhCAAAQgAAEIQAACEIAABCAAAQikLAHEXMpOHR2HAAQgAAEIQAACEIAA BCAAAQhAAAIQgAAEIAABCEAAAhBIJQKsMZdKs0VfIQABCEAAAhCAAAQgAAEIQGBaEOg7csS6unut s7vHOnsGnv3nDv0cHr3W09tn2q63z599obT+1/7sr3vDz339z0c/69+u1/cJ2/t+0ev+7Qf2G3h/ Twa/yzstLjYGCQEIQAACEIAABCBwUgkg5k4qbk4GAQhAAAIQgAAEIAABCEAAAlORgLuuIMxaOrqs 1R9tXZFA03O/WOvw57bOriDUjr137PPovfDc02PdPX1h2x4XZZJw/Y9e6x54LRF3RJLNz61n9eHY e8f/HLtdtM2x7b+6n7ZftG6Z5Swsm4rTxZggAAEIQAACEIAABCAwaQQQc5OGnhNDAAIQgAAEIAAB CEAAAhCAQDISkLhSMq21vcsk2qJHa0d3/+uY9yXhWsLP3dbR1X004dblKbdjMs2l2oBc0/tKp0WS Tc+RaDu6vRJr/pA4m8xW1tlt2ZPZAc4NAQhAAAIQgAAEIACBKUgAMTcFJ5UhQQACEIAABCAAAQhA AAIQgMAxAkp/tXX2WGNbh9W3dFiTP0eyrV+qSb4dk26tnmrrl2zHSkjGlpNUKUkJtqikpBJu/cKt 79hJp8IricHJtoNTgSNjgAAEIAABCEAAAhCAQAwBxFwMDF5CAAIQgAAEIAABCEAAAhCAQGoRUMqs ub0zCLeG1n7x1tDabnod+7NEnORcm6fAjkq34+Sal5Qc+FmSTWuwTffmxTD9fzQIQAACEIAABCAA AQhAIJEEEHOJpMmxIAABCEAAAhCAAAQgAAEIQCAhBCSEOlyiNbR1WkNLu9VLtHnaLTy7eFPyTeKt yT/vX9Ot29oHxFu7l5TUQxJOMk4iTuUiaaMjoKQhZm50zNgaAhCAAAQgAAEIQAACJyKAmDsRIT6H AAQgAAEIQAACEIAABCAAgQkhoLRbvUu3qoZWf7RYVWOrVfvrw81tQbo1+9pt7ZJrA5ItiDdJt4H3 9LPKSWpNOFriCQQvB9vEg+WIEIAABCAAAQhAAALTmgBiblpPP4OHAAQgAAEIQAACEIAABCAwsQQk zVRqUsItEnCVknD+c42LuJB688+b27rCdtq21cVbe1eP9XhJSZTbxM7PsEdHyg2Lhw8hAAEIQAAC EIAABCAwFgKIubFQYx8IQAACEIAABCAAAQhAAAIQOI6AykbWNEXybSAB5wJOQq7OU3EqOakEnMRb UxBx/QJOqTlachI4mpibMSM5O0ivIAABCEAAAhCAAAQgkIIEEHMpOGl0GQIQgAAEIAABCEAAAhCA wGQQ6PIEmySbZFtIvdUr+dafflP5ycYB+dYv4STi+mVcN8m3yZiucZ8zrDE37qNwAAhAAAIQgAAE IAABCEAglgBiLpYGryEAAQhAAAIQgAAEIAABCExzAr19Rzzd1jFQdvJY8i2UnvREnEpPKvkWybf+ 9FsXa71NxevGI3OhmiWBuak4u4wJAhCAAAQgAAEIQGCSCCDmJgk8p4UABCAAAQhAAAIQgAAEIDBZ BLRuW2tHV1jjLVr3LXqu9nXf6kPpyePLTja5jFO5yt4+Sk9O1ryd7PMGKYeZO9nYOR8EIAABCEAA AhCAwBQngJib4hPM8CAAAQhAAAIQgAAEIACB6Uugs7vHDje395ed9PKT/WUn+0tP1vn7Sr2FxNvA mm+Sby0u7FR6kgYBlbLU/2gQgAAEIAABCEAAAhCAQOIIIOYSx5IjQQACEIAABCAAAQhAAAIQmBQC EmlKuu2pbrD9tU1WObD2W21T/7pvx5WddPnW7EKuU+u+hTTUpHSZk6YAgXB94OVSYKboIgQgAAEI QAACEIBAKhFAzKXSbNFXCEAAAhCAAAQgAAEIQGDaE9AacBJue2sabE+VP1zG7atpdDHXEtJx9S0d R5Nw7V3d1ufb0yAwJgJKzCFvx4SOnSAAAQhAAAIQgAAEIDAUAcTcUGR4HwIQgAAEIAABCEAAAhCA wCQT6HMpItG2TxKuutEf9S7kGq3KE3GHm9uCiFOpysbWDuui/OQkz9bUOz1OburNKSOCAAQgAAEI QAACEJh8Aoi5yZ8DegABCEAAAhCAAAQgAAEIQCCs5KWSkwdqJeD6k3B7/flQ3TEJV+cyTqJOa8eR g5v6F80MH2JGepplZ2b4I/245xx/L9M/S09Ls7S0GeERXs+Y4e/1/5x29LW28/fCzwPbD3w23D6H /JwHMtKNFQen/rXGCCEAAQhAAAIQgAAETh4BxNzJY82ZIAABCEAAAhCAAAQgAAEIHCXQ0tHl0q05 lKPcPSDiKvxnlalUGq7Ok3B1Le3W3uUSjujSUW7J/iLLRVZ+dqbl52RZrj9LqEmiRWItz9+TbOt/ 79j7kXyL3Tbbj6Xjafv4R2Z6epBtM1ywSbj1P1t4Hup1tJ1v/pV9jvvM/HhpZg/vqrSKAzVmvX3J jp3+QQACEIAABCAAAQhAIGUIIOZSZqroKAQgAAEIQAACEIAABCCQqgQ6XK5V1LuEGxBwWhvugCRc Y+tAOcp+EdfW6WvCIeGSYpqVVstyoRZJtoLcLCtw2VaQk+mPbCvI7Zdv/e8NfObb5GZlBumW5UJO 8kyptlipJtGm9Fr/ezHSzZNv8dtqGwmzyWoFFXVB9E3W+TkvBCAAAQhAAAIQgAAEpiIBxNxUnFXG BAEIQAACEIAABCAAAQhMGgGt9Vbd0HpMwrmMU3nK6gEJpySc1oVr6ej0IBIFKU/mREmKFeblWElB jhXn59jMo7LNxZq/VsotVrRFiTcl16JEW3ge+FnyLUrCRduku0ybPJV2MmlyLghAAAIQgAAEIAAB CEBgLAQQc2Ohxj4QgAAEIAABCEAAAhCAAAScQI+X+Kv1spP7qhttd3V9kHH7axqtysWc5JvWhDvs 5Si1dpy2pU0MAaXK8jzJJtlW4o/i/FwrdvnW/9p/LsgNr2fmZYcEnFJtedkqIxk9BgRbxrHSklEJ yYnpMUeFAAQgAAEIQAACEIAABKYrAcTcdJ15xg0BCEAAAhCAAAQgAAEIjIqASkzWt3TYvpqG/jSc l6Pc6xKusqHl6JpwknGNrR2m1BwtMQQkyCTUIslW4pJNAu448eY/K+mmhFueS7fw7OKtX8D5z0HE Zfp6bZ5mm8TSkIkhwlEgAAEIQAACEIAABCAAgVQmgJhL5dmj7xCAAAQgAAEIQAACEIDAhBBQgcmm tg7bX9N0tCTlXi9JWVHfEhJyIQnnEq7BRV1nd49RkHJ805DvabfywnybU1zgj/7n2UX5Vjoz10tP esrNpVtelou2IcRbjn+W4Wu00SAAAQhAAAIQgAAEIAABCCQ7AcRcss8Q/YMABCAAAQhAAAIQgAAE JpyAh+GCcNtx6LBtOVBrOyrq7FBdk9U2eSlKF3B61HtJyvYul3DamDZqAkq+zXLR1i/fjgk4ibhZ M/OCgJOE07pvhbnZvuabhJxSbummUpU0CEAAAhCAAAQgAAEIQAACU4EAYm4qzCJjgAAEIAABCEAA AhCAAARGTUDrvu2qqrct+2uCjNvtryvqmr00ZavVNLVaW0e3qXwlbeQE0tNmWJGXlZxT5OKtZCAB 58m3OSUFnojLs6K8nCDgJN9muniLRJzWekO+jZwzW0IAAhCAAAQgAAEIQAACqUsAMZe6c0fPIQAB CEAAAhCAAAQgAIFREFDabb+vD7fZE3GScTsr6+3g4aawRlyVy7jm9k7r60PEnQipwmtaz61cws1L T84dKD2p1+VFeaY14JR4C8m3kIDT62zL8zXf0ik3eSK8fA4BCEAAAhCAAAQgAAEITHECiLkpPsEM DwIQgAAEIAABCEAAAtOVQE9vn5ejbLatEnEHauxLL1N5oNZFnK8TV9nQYg2tHaZtaIMT0LptZV5i Mlrz7dhzQf/ab5JvLt4KY9JvWgsuM5213gYnyrsQgAAEIAABCEAAAhCAAATMEHNcBRCAAAQgAAEI QAACEIDAlCCgspM1jW0u4JSIq7VtB2ttX02jVQyIuLrmNuvs7p0SY03UIDJcopXk+7pvcWUn53ga rkylJ70sZSg5KfkWJJzWfsuy7IwMY9m3RM0Cx4EABCAAAQhAAAIQgAAEphMBxNx0mm3GCgEIQAAC EIAABCAAgSlGQKm3nRV1oTzlVk/F7alu6F8nzmVcTVObtXd223QvTqm121RWcnZUcjJm/bfZhflW XODrvoX028C6bwNlKHOzMi3N14yjQQACEIAABCAAAQhAAAIQgEDiCCDmEseSI0EAAhCAAAQgAAEI QAACE0ygzUWb5JvWiNviJSq1Ttyhuv7ylFonrrWjy5Scm64tOzM9rPu2dHax6bFgVqHNLfHSk77u W0i+5cXIN0/A5WdnmlJzNAhAAAIQgAAEIAABCEAAAhA4OQQQcyeHM2eBAAQgAAEIQAACEIAABMZA oKun1w4ebgoSTuvEbT9UZwe1TpyvEadHY2un9fZNz3XiJNRme8nJJQMSTiJuUVlRSMbNmplrs1zG KQ1X4Am4rIx0I/s2hguQXSAAAQhAAAIQgAAEIAABCCSYAGIuwUA5HAQgAAEIQAACEIAABCAwdgK9 fUes2oXbtoOHXcbVhOf9tQPrxHl5yvqWdpOsm24t3UtKlrpsW1Len4RbOqc4vJ7j5Sn1/qyCvPBc lJdjmRkk4Kbb9cF4IQABCEAAAhCAAAQgAIHUIYCYS525oqcQgAAEIAABCEAAAhCYcgRUdLK+ud22 V0jE1do2f4R14uqbrbK+1deJa7WOrp4pN+7hBjTD14Qrzs+xxeVFoRylknBL/LVKUs6amecPF3H+ rDScknA0CEAAAhCAAAQgAAEIQAACEEgdAoi51JkregoBCEAAAhCAAAQgAIEpQaClvct2H10nrsZ2 hXXiXMR5Uq66sdXaOrqn1Tpxhb7Wm9aCk4CLHvNLZ9qsQpdwXo5SibgSf87JzDB3djQIQAACEIAA BCAAAQhAAAIQSGECiLkUnjy6DgEIQAACEIAABCAAgVQg0NndY/t8Xbit+2tCKm5Hha8T5+vGhXXi vDxlc7vWiVN2buq3vOxMk3STgFumcpT+vKC00Mok4VzAlXoSrtQlXG52hqVh4ab+BcEIIQABCEAA AhCAAAQgAIFpRwAxN+2mnAFDAAIQgAAEIAABCEBg4gnU+Vpwm/fV2Kd7Kr085WEXc41emrLFqjwV p3Xiunv7Jr4Tk3yGbE+4qfzk0tkqSVkSZNzCskIrDxKuf004ybj87CxL8zXkaBCAAAQgAAEIQAAC EIAABCAw9Qkg5qb+HDNCCEAAAhCAAAQgAAEInBQCtU1t9sW+avt4Z4Vt8ufdVQ0hGaf3Ozw1N5Vb Znq6lRflBfkWylF6Gm5RWZHNLsofSML1rws3MzfL0tPSpjIKxgYBCEAAAhCAAAQgAAEIQAACwxBA zA0Dh48gAAEIQAACEIAABCAAgaEJqPhkdUNrv4zbccg2eanKPb523P6aRjvc3DZlU3Hpnm6b5SUn l5R7Em5OfxJusb+eU5wfSlEqBadHYV6OZaYj4Ya+gvgEAhCAAAQgAAEIQAACEIDA9COAmJt+c86I IQABCEAAAhCAAAQgMGYCR44c8bXhWu3zPVX2kSfjthxwGefJuP1eqlLlK3umWIlKFZgsLsixxeXF R9NwWhdunpeojNaE03Nxfo5lZaSPmSs7QgACEIAABCAAAQhAAAIQgMD0IICYmx7zzCghAAEIQAAC EIAABCAwZgJ9LuMq6pp9vbiqUKZy64Ha/mScy7j6lg7r7Zta68Wp3OQyT8KdtrDcTl1Y5q+LbXZx v4ibVZBrJf7IzsowVoUb8yXFjhCAAAQgAAEIQAACEIAABKYtAcTctJ16Bg4BCEAAAhCAAAQgAIGh CfT2HbGDdU326e5IxtXYXi9RecBlXEOrZJwKWU6Nlp2ZYYvLCl3Cldtpi8rslHmltnBWoZemLLC5 noybmZvt68Kh4abGbDMKCEAAAhCAAAQgAAEIQAACk0sAMTe5/Dk7BCAAAQhAAAIQgAAEkoaAylAe ONxkG3dV2se7KmzbwdoBGddkjW0d1jdFZFyGr/umUpSrF5S5iCu3VfNn2SIXc5Jwc13GFXsijrXh kuaypCMQgAAEIAABCEAAAhCAAASmFAHE3JSaTgYDAQhAAAIQgAAEIACB0RGQjFMSbqOLuE9cyEUy 7qALuqa2TlMZy1RvM2bMsLLCPFs5v9RO91SchNyS2UUu4mYGEafPsjNZHy7V55n+QwACEIAABCAA AQhAAAIQSAUCiLlUmCX6CAEIQAACEIAABCAAgQQS6Orptb3VDZ6KqwxC7stDh22fyznJuOb2rikh 44rysm353FJfJ64/FbdsdrHNK3UR56m48sJ8y8vONPd1NAhAAAIQgAAEIAABCEAAAhCAwEklgJg7 qbg5GQQgAAEIQAACEIAABCaHQGd3j+2uqh+QcZW2XTLO14s7eLjZWjq67EiKJ+NyszJDCi4ScStc ys0fEHEqT1mQk2VprBM3ORcfZ4UABCAAAQhAAAIQgAAEIACBowQQc0dR8AICEIAABCAAAQhAAAJT i0B7V4/tqqyzj3dW2Mbdlbajoi4k4w7VNVtrp2Rc6o43Mz09iLdTQyKuzFbO0zpxKk+ZH1JxRXk5 prXkaBCAAAQgAAEIQAACEIAABCAAgWQigJhLptmgLxCAAAQgAAEIQAACEBgngbbObtvuAk4y7jPJ OBdzKlNZ4TJOn6Wqi0vzupOzi/Jt1YJZXp5S68TNssXlA+vEuYybVZBnWawTN86rh90hAAEIQAAC EIAABCAAAQhAYKIJIOYmmjDHhwAEIAABCEAAAhCAwAQTUCnK7Yck4w7Zp3uUjKu3/S7jKhtagoyb 4NNP2OFLCnJMJSlPW1RuSsaFdeJKonXi8ixH68RN2Nk5MAQgAAEIQAACEIAABCAAAQhAIPEEEHOJ Z8oRIQABCEAAAhCAAAQgMOEEmts7bdvBw/bRjkP22d4qL1lZH5JxknEdXsIyFVu+rwO3dHZRSMRJ xi2fW9K/TpyvETenON/0uZJzNAhAAAIQgAAEIAABCEAAAhCAQKoSQMyl6szRbwhAAAIQgAAEIACB aUegub3LthyosQ+3H7TP91b3y7jaRqtuaLWO7tSTcVkZ6bawrNBFXJkn4spt5fxSWzir0OZKxJUU WFFetqWnsU7ctLvQGTAEIAABCEAAAhCAAAQgAIEpTAAxN4Unl6FBAAIQgAAEIAABCKQ+gd6+I7a3 psHe3XYgPLa6mNvrZSprGluts7s3pQY4w9Nucz35Jgl32qIyWzW/bGCduPwg40oLci3TZR0NAhCA AAQgAAEIQAACEIAABCAwVQkg5qbqzDIuCEAAAhCAAAQgAIGUJtDQ2mGf7amyNzbvs093V/oacoft wOGmlFszTqUn55fOtHXL5trZy+eFteKUklMqrqzQ14nL4p8kKX2h0nkIQAACEIAABCAAAQhAAAIQ GBUB/hU8KlxsDAEIQAACEIAABCAAgYkj0NPbZzt9rbh3tu63971c5Zb9Nbarqt7qW9pNyblUaelp M7wkZZGd5TJu/Yq5duoCT8bNLrZFXqayKD/Hy1OyTlyqzCX9hAAEIAABCEAAAhCAAAQgAIHEEkDM JZYnR4MABCAAAQhAAAIQgMCoCdQ2tdknuyrsrS37PSXn6biKOjtU12wdXamzblxGepotKnMZt7w/ Gbd6wSxbUl4c1pArzM22NGTcqK8LdoAABCAAAQhAAAIQgAAEIACBqUcAMTf15pQRQQACEIAABCAA AQikAIGunl770stTSsZ96Om4rQdrbXdVgzV6Ccu+I6mRjstMT/ckXFEoUbnehdyq+bN8zTjJuJk2 UzLOy1jSIAABCEAAAhCAAAQgAAEIQAACEDhGADF3jAWvIAABCEAAAhCAAAQgMOEEqhpa7MMdh+xt F3Kf760K6bhKf6+ru3fCz52IE2RlpNuyOcW23teLO2vZPFu1oDTIuAWzXMblZNkMZFwiMHMMCEAA AhCAAAQgAAEIQAACEJiiBBBzU3RiGRYEIAABCEAAAhCAQPIQaPeSlFsP1Hg6bp9LuQrb5um4vdUN 1tTeZUdSIB2XnZlhy+eWhGScSlWunKdkXKHNLy20giDjkoc1PYEABCAAAQhAAAIQgAAEIAABCCQz AcRcMs8OfYMABCAAAQhAAAIQSFkC8m0H65rsgy8P2tvb9tsXe6ttZ2WdVTe2WbeXsUz2lpuVYae4 gDt7xTxbt2yuv/ZkXJlk3EzLk4xL9gHQPwhAAAIQgAAEIAABCEAAAhCAQBISQMwl4aTQJQhAAAIQ gAAEIACB1CXQ0tFlm/b1p+M+3lkR1pHbW9NgrUrHJfmw8rMzbaWvEycZd+bSARlXXmTzSgoszz+j QQACEIAABCAAAQhAAAIQgAAEIDA+Aoi58fFjbwhAAAIQgAAEIAABCFifx+P21jTae9sO2Lv+2Ly/ JqTjapvarKe3L6kJzczNslVBxs13GTcnJOMWeTJursu43CxkXFJPHp2DAAQgAAEIQAACEIAABCAA gZQjgJhLuSmjwxCAAAQgAAEIQAACyUKgsa3TPttT6WvH7bdPdlXY9kN1dqC20Vo7u5Oli4P2ozAv 205dWGbnLJ9na13GLZ/bX6ZyTnGB5XgJSxoEIAABCEAAAhCAAAQgAAEIQAACE0OAf3VPDFeOCgEI QAACEIAABCAwRQkoAbe7qsHe2brf3tt+wLZ4Om5XZb3VtbRbb1/yFqsszs+x0xaV2zlepnLNktm2 fE6JLfYylbOL8i07k38WTNHLlWFBAAIQgAAEIAABCEAAAhCAQJIR4F/gSTYhdAcCEIAABCAAAQhA IDkJSLx9trvK3tm231NyVbajos4OHm6y9q6e0OH0tDRLT0uuvpcU5Nrpnow7y5Nxpy8ut2WzJeMK rdxlXFZGenJ1lt5AAAIQgAAEIAABCEAAAhCAAASmAQHE3DSYZIYIAQhAAAIQgAAEIDA2At09vban usE+2llhG3dXeqnKw+HnxtaOsK6cyj4mW+lHybjV88tCKm7Vglm2pLzYFvqacWUzcy0TGTe2C4G9 IAABCEAAAhCAAAQgAAEIQAACCSKAmEsQSA4DAQhAAAIQgAAEIDB1CDS0dtrOisO2+UCNP9cHGVfd 2GpdLuokvvRIljbDO6I145bOLrYV80rD88JZhTavdKaVePnKjGSL8SULOPoBAQhAAAIQgAAEIAAB CEAAAhCYBAKIuUmAzikhAAEIQAACEIAABJKPQK+vHadylQfrmu2QPyr8IRnX29dnEl16JFNLT59h pS4I53u/5pcU2JziAisrzLOZuVleUjPJamomEzj6AgEIQAACEIAABCAAAQhAAAIQmEQCiLlJhM+p IQABCEAAAhCAAAQmn0C3CzmVpqxtagtirt5ft3d2W4ELLj2SqSkdp9KZxXme2puZ44m4XCvyVFxe dqbLOH1KgwAEIAABCEAAAhCAAAQgAAEIQCCZCSDmknl26BsEIAABCEAAAhCAwIQRUFnKlvYua2zr sGZ/buvoNqXmCnOywmPCTjyGA6e5dMt1+VaYmx1kYb6/zs3KpEzlGFiyCwQgAAEIQAACEIAABCAA AQhAYDIJIOYmkz7nhgAEIAABCEAAAhA4qQSO+Nm6unuspaMrPJSM6+zu9XKVRywrMz08TmqHhjnZ DA/AZWakmyRcvstCibgc72NGerrpMxoEIAABCEAAAhCAAAQgAAEIQAACqUcAMZd6c0aPIQABCEAA AhCAAARGSeDIkSPW3tUv5NpcxnX46+7eXvO3XXLNcNmVPKYrzfuT6+Uqg4xzKZctYeiCTu/TIAAB CEAAAhCAAAQgAAEIQAACEEhtAoi51J4/eg8BCEAAAhCAAAQgMAwBJeHau7pDqUql4zo8LadylUrO JVOTclNiT2vF5WdnhXXkJOPS09MMHZdMM0VfIAABCEAAAhCAAAQgAAEIQAAC4yOAmBsfP/aGAAQg AAEIQAACEEhCAj0u31qjcpWejusvV9mXdD1NH1g7TjJOKTml41S+knRc0k0VHYIABCAAAQhAAAIQ gAAEIAABCCSEAGIuIRg5CAQgAAEIQAACEIBAMhDoDOvHdVtrZ1coV9nl68f1qV5lEjVVpMzOUKnK zJCQy87MCGm5jLS0JOolXYEABCAAAQhAAAIQgAAEIAABCEBgIggg5iaCKseEAAQgAIGUJ/DJJ5/Y E088YXv37h1yLGFdKv9yPTs724qLi2316tV24YUX2pIlSywzM3PI/ZL9g8cee8w2bNhgPT09dtdd d9lll12WsC5P5LET1skkO1AqMOv1tdqam5stKyvL8vLyTjrBiFFXd7d986bv2Jr15/n6cV6uMsmE XIaXpczLchnnQq4/HZdhmSpVydpxJ/2a4YQQgAAEIAABCEAAAhCAAAQgAIHJIoCYmyzynBcCEIAA BJKawP79++3pp5+2jz/+eMh+6sv0NE+4ZLicy83NtTlz5tjy5cvt4osvtltvvdVWrVo15L7J/IGk 5P3332+dnZ12wQUXJFTMTeSxk5npePqW7MwOHDgQ7hWJ3Ouuu85WrFgxnuGOat9o/bi333vf/vCH P/g122WLTjndVq09e1THmciN9d+JHC9PmZ+jUpWZvnZcuoW140jHTSR2jg0BCEAAAhCAAAQgAAEI QAACEEhaAoi5pJ0aOgYBCEAAApNNQGkbPQoKCmz27NlBvsX3SUmh9vZ2q6urs23btoWHREpbW5v9 zd/8TUjPxe+T7D9H4+7rS3ziaCKPnexcx9q/ZGamROk999xjDz74YMIl7nC8JOTaXMI1t3f5s5et 9LXkev167Tvi16z/LxlaSMdlZ1q0dlyW1o4jHZcMU0MfIAABCEAAAhCAAAQgAAEIQAACk0oAMTep +Dk5BCAAAQikAoHTTjvNfvjDH4ZSlfH9lbzq9vJ5hw4dsieffNJef/11q6iosPvuu8/mz59vd955 ZyhzGb9fMv986aWXhiSgElDr1q1LaFcn8tgJ7WgSHSyZmdXU1Nj7779vu3btsrPPnviUmuRba0e3 C7lOF3I91unXaJ9LOom6ZGhpSsdl9a8dp3RcWDsuI93S03xRORoEIAABCEAAAhCAAAQgAAEIQAAC EHACiDkuAwhAAAIQgMAJCJSVldn5558fHkNtqtTc+vXr7X/9r/9lTz31lO3bty9IOkkVrT+XSu1r X/taEHJKahUWFia06xN57IR2NIkOlszMlBiVnJ7o1uPrxbUOJOTaPSHX2aPzJoeM09gzXb7lezou zx8ScxJyGV6qkqXjJvrK4PgQgAAEIAABCEAAAhCAAAQgAIHUI4CYS705o8cQgAAEIJCEBLTG3Lnn nhvW2FIpyy1btoSylkrSrV27Ngl7PHSXZs6caXpMRJvIY09Ef5PhmNOZmYRci5epbFHJyq5u6+p2 IefCOBlamqfgcpWOy/a141zIZXupyqz0dE+bko5LhvmhDxCAAAQgAAEIQAACEIAABCAAgWQlgJhL 1pmhXxCAAAQgkHIEZng8RhJuyZIlQcxp/a3q6uowjnfffdc+//xzi9J3zc3N9uqrr4btMjIyQtru iiuusAULFnjK5tgX+yqL+cEHH4TtJPm6urqsvLzcFi1aFEoHqsxmXl7eUVb79+8P2+u8ixcvDrJQ 6+MN1VSK8L333rMDBw6Ec5933nmmY3z22WemNJQSfzpHbNP7O3bssHfeeSc819bWmsYwZ86cUL5T 5S+1T35+fuxu4bXGMtyxtdFoxxydRCUVxVgJxQsuuMBmzZplmzZtCudTf5uamsJ7y5Yts4suushW rFhh6S5SRtui8yhNeOGFF4Zxbty40T799FPbs2ePqQSomEvU6nP1I76N5nr48MMPj2OmNQ/FcTxz PHfu3KNdUuJt69at9sUXX4TrQPzFSteV5lTXpBKj4qV5Vjt48GDog64BvVZTOcuHH37Y3n77bVuz Zo2dddZZYX3G8OHAH7rexEriWtdZa2tr4KN75pxzzrFTTz01rOXY7deYZJykXLuXrOxSQm6cQm7n 9m22ddMX1tbaYpmZWXbm+nNs6YpTQtnW2D7W1x22bZu/sF07tlvloYNhDcni4hKbt2Chnb52XShp W1o809NxWSEd1+jbv/bmB3bIOWiuNee6P4dqWn/yrbfesp07d4Z7WdfqwoULw/021vtqqHPxPgQg AAEIQAACEIAABCAAAQhAAALJRwAxl3xzQo8gAAEIQCCFCUia5OTkhBHElvmThLv33nuDsIrkxPPP P29VVVVBDKxatSoIJUkQNX15r/Xq/vSnPwUBou0aGxuD9NE5SkpKbOnSpfatb33LvvOd7wQRIKGn c77wwgu2YcMGW7lypf3jP/5jkEThoIP8Ienzy1/+MoiZO+64I5SwfOONN+y3v/1tkIBFRUXHiTmV 7Hzsscfsj3/8o23evNk0FsmVNC/bp2SXtpdkUb+++93vfkVQDHfssY45GpZ4qd8SSJJKEkzqpwSI +tnR0REkmuSJpJHWDbz88su/Io+i4w31HJ1H4xRvCVitL6jypYcPHw6lHcVCYlRiU+fR+cQoaqO5 HuKZSeSMd46jftTV1dmzzz4brrPt27dbQ0NDuM7EKisrK8ypRKdE6+23327XXnutlZaWhrH+4Q9/ CBKuvr4+HG7btm3hetZ+P/rRj8I86FpVk/xTkvSBBx6wN998M8yN9pNolsDV9ax5+9aNN9lV37je CopLrd0Tct09feMWcjr/ts2b7OHf/9Y++uBdk/a+4ppv2tnnX3icBD9yxAWli7tnn/iTffLh+1Zb 3X/PdXd3WV5unhU6h0WLl9rN3/623fbd71jJrIWmNeXavWzlq6+8Eq4BXf//9E//FGRm7HyrD1GT lPz1r38dhPgNN9wQJOZ476vo2DxDAAIQgAAEIAABCEAAAhCAAAQgkPwEEHPJP0f0EAIQgAAEUoiA ZFAkKpRs0xf1ahIgSlOpKen05ZdfBlmkL++1lpukmoSGniUxJEskzJSM6u7uDpLtkksuCdKvsrIy JKhecRkg6aTj/uQnP7HTTz89JJwkTnQ+pXKU4pLIiU3VhU74H0p2KfGkhwTT/PnzQ4JH/ZdskpxR si9q6tdzzz1n//7v/24fffRR2DZKB0mqaUySM0pO6SHp8oMf/MDmzZsXHSKwGerYYx1zdPCo3zrv f/3Xf4U0n+ZDAk1JLEkn9U+pJEk0Jf0kjiTnRtOi80iU/ud//mc4lvgp8aU0ntJmUSJOHHSef/iH fwipyOg8o7keovNF86EU23jnWP2QrPzNb35jv/vd746mt5T41HWg61CSUdePeGkcSlVK0knO6XoS V6XlOjs7Q6pMMlLj17P6mJmZGQ3XXnzxRbvnnnuCbBYfiWitnafjBFHt59H1vGPHTtu6c7d96zu3 24JFS47uP54XX27dbA/e+2t7+cVnQz8l/q50MTd3/vHp1Ldff9UefeD39tH771pLS7MtXbbc1p97 nhUVzrTG+jr73FOkH7z7llVXHLDm+lr78Y9/HGSimOheb2lpCfei7tmLL744MBis30qo6p7Ttal7 Q+nK8d5Xg52H9yAAAQhAAAIQgAAEIAABCEAAAhBITgKIueScF3oFAQhAAAIpSEDiR0k1JWLUlACK LRmo91S+T2LqlFNOOfrFvtJwkiESa2qSIffff3/48l6S4/vf/35IoC31hJxKCUpsSIz9/ve/NyXe lFxS6Tx9ya/kkcoOKlGlhNLHH38cxJHEVHyTbFHpRx1P8u6MM84IZQTjt4t+lkCRQFApQqXx7r77 brvyyiuDrJE8lHBUukv9UmnEJ554IvQlVsxFx4p/Hu+YY4+nkp+SHiqnqMTg2WefHQSpUkkq1ygZ pXKUkiPqr2SURNdom8arh7gpISbBpzSeBJrOo1TUyy+/bE8//XTgpTmWsIptI7keYrfXa61nmIg5 FoNHH300XK+SZEr2SS5KNKkpCalrRON46aWXwrwr6adSpcuXL7e//uu/Duz+4z/+I0g8cdB7ujYk m1TqU03y+MEHHwzXpPqu89x8880u8ZabpaVbZc1h++iTjfbYIw/Zxg8/sEcffMDK5y6w62+abTm+ /Xja9q1bBqTcc9bp83Lt9TfaHT/8S1t92hmW6SI8agf27bHnn3rc3nr9FcvOzrHv3n6H3ejpvVUr T7H8vFxrb2u1L/xeue+++4LwVjJTYlLXtuSiBLXEsu5liTmNOX6udS7JTt2Xuj713wBdexKbE3Vf RePjGQIQgAAEIAABCEAAAhCAAAQgAIHkIYCYS565oCcQgAAEIJCkBJSGilJBsV1U0k1JMSWaVAZQ 8kIlDZWQktyQtFIyKLYpVaP1pCRyVDpSa84plaaEkiSc5N4jjzwShJESbbfccov9/Oc/D8eJ1vfS 8STaJD7+5//8n0GYqGSjhMnXv/71IG30udZyk3xRkm0wMSeBoASZxiGxsHr16tiufuW1JI2Eg8ST 1qK78cYbj9tH59AxlKwSE4kdJcPEb7i13BIx5tiygTqvROWdd94ZpGasdDvzzDNDkk+SUWOREFR/ Y7f5ysCHeEPJPIkZidO77rrruLXkVMZSiTGdRwkpyTmta3fNNdccd7QTXQ/HbRzzg8TceOZY1+1r r70WBKquwdtuuy1cj1HCMzqVZJuEplKZko0SrpJKkp06v1KDum7VJIUll8U4arqGJZ0k9MRL5/nZ z35mp6w61Tq8TGWrryGXUVhmRXMWWH5hUTjX5598ZC+/8KzLs9PtjDPPig416ucdX261h+77TThW Z6dLuRtudil3t6089fTj0ny93sc3XnnZPnzvHev28pm3fvdW+9nP/y9b62I3N6c/xaqTn+bjlXgV OyUiH3/88XDP6V5QqVKNXfeUxLU46f3Y1KCOoetN4l4sJMPFcPfu3RNyX+l8NAhAAAIQgAAEIAAB CEAAAhCAAASSjwBiLvnmhB5BAAIQgECSEVCq7F/+5V8GlTf6gl1f1EvASFxJMunL+G9+85vhIVkR 3yRVrrrqqpCS02f6sj9qOobScErWSLRF8itebEnKXXfddWFb7aMv/JWekwxQSk/iROIlEipKc8VK F/VZ51FJR8ml9evXD7sWnfongaeHmuSMxqzUT2zflJT6u7/7O/vGN74RSnNK7Eg6DtcSMebYselc KvspSRkv3FS6UhJSiS+JOSXeNGdjbZdddlkYa+wc6ljZ2dlhfTn1Q5Jm06ZNYU0+/azUWGwb7nqI 3S72dSLmWBwkTcVO12M8Q51PMljryyntJzGndKVE3Uib0qFKJarkpa6Va679ps1etMxqWzp8Dbke 6/Hz65LKzsm1cy+8KJSR3LV9m2386H3btmWTrT59TejDSM8XbbfTjyEp9+fnnwkS7Lobb7G/+MHd LgRXW0ZMiU1tX1lx0JN671mVX9MrPSF300032vp1a8P1Gx1Pz0rGXXHFFWE8Wl8xKhWre0ci/txz zw1yXtez5NzVV18d1hmMjqFSsJK0kvhire0lkHUfTcR9FZ2XZwhAAAIQgAAEIAABCEAAAhCAAASS iwBiLrnmg95AAAIQgEASEpCE0uNETQJKiTGV6fvud78bXg8mpSQohirvKFEmWaQv6lVWUFIkVnzF 9kHSSQLu+eefDykcSRAl1fSlv0oTPvPMMyGpJAGnVI5SPVGLZJHSZRJYSvvEJvKi7WKfVUpTQkhj UjLoX//1X4PQifqp/ii5psRUbGoq9hiDvU7UmGOPraTiggULYt86+loSLUp5Sawq1TWWJgErqaaS pYM1zYPKaaqkoVKLEjKSMErTxbbhrofY7WJf65oYzxzn5OSE9J76rzkbTCBL2qk0o66VSF7qPT1G 2nRNSsqJ8dIVK614znxrbO8+KuRij5OXl2/LfJvSWeW2b88uF2WHXHq3ejK0f53G2G2He71rx3bb uukL2/Dc09bga8Ndd9O3Xcr92E5Zfepx13hGeprlZ2fZjoZaq6+t9nH1hPtNpTi13uNgTWJXKTcJ aM2n0pZKvIqf5kP3v4Svkqr6PHauta1SrJLukqK65zQPE3VfDdZ/3oMABCAAAQhAAAIQgAAEIAAB CEBg8gkg5iZ/DugBBCAAAQgkOQGlYSR59KV8bJPQkOCR6FE5QEkriRiJKr0eTKhJapWXlx9dfyv2 eHpdWVkZ5Jpeq+RlfBJL78e22G0kUSKBorWrlFZTQkdJOokhJfAiURiVuJSAUEk9yaETNcmI66+/ PqxLp8TQiy++GESD+qCHZJiEnGRhVMrxRMfU54kac3QuzYskYX5+fvTWcc8SatHcKMUUpZWO22gE Pyi1KOkWn4CL3VXXQSS9ovmJlTUnuh5ijxX/ejxzHF27kaCUDJY0kkRTPzUneuh9rYO3Y8eOcPrR stKx6gcSidtc8P3y3/8/mzmw9lz8ePTz/r17rKmxPnxU5yVhWzyhNxoxJ2moMpjtngitdwGm1td3 JKTkIvGcnZlu+V6iUlIuNyvDOloarbWlOWyrMpP/9m//dnSdvfBm3B8SbyrRqiY+KuepOZag1fWv JJ3uDx1L5Uuj60OCXJJT11xs6diJuq/ius2PEIAABCAAAQhA4CsEer2CQbeXFlcJgxn+d+jwSJ/h zzPCL2+Fn/3fLzZ8AYyvHJc3IAABCEAAAhAYngBibng+fAoBCEAAAhAIKZi77747pGlicUhuqGSh BJAeEjUSHZEAiN02eq2EjESf9husRV/0S9joy/6h5FK0rwRUJAy1tp1KDaqpLypruWHDhlBiU9JF a95JCkoqfPLJJyEFKCEnmaDtT9Q0LpXolJy59957g/RT2k0PsYgEpsSTZJ9Sg0oX6bPhWqLGHJ1D 4k1lB/U8WBPbSFAO9vlI34tlP9Q+Ss2pL2paT07r88W2E10PsdvGv07EHCvVpWvknXfeCfMosasE mK4jPUt0aV5Hk5JTP3t6+6zFv+TZtf/gUVm811NwB/btdfbxIzn2c59fW1rzTa2+/rAz6xdmx7YY /lWf9/fg/n1+H/q96Em7Nk+Efvju27Zu/Tm2xK/L+XPKXchlWo4LuUxPzOk6OOz3jeSamnioFOVw 14fEWsRDCcjonpOAUwLxhRdeCPfXxx9/HMqcKoGnZKZSpjq2yoIqvap7UW2i7qtwcP6AAAQgAAEI QAACwxBoq2+2+r3V1tXWFWScBFz0d2XJOf3FLfzsr/vFXSTs+n/OKcqzgvIiy/C/X9EgAAEIQAAC EBg5AcTcyFmxJQQgAAEITFMCEjBaR0pfuo+36Ut4CaOhvviX9IoeIzlXbOIrfj+V1pMYU1pOUkBJ H8kArZmnNE9nZ2dI7mibofoT3wftr1KdKtknuae17ST9lARSGU1JP61FppSezvHTn/40SLrhZGXU bz2PpA03Zu0vEXgiGTiS85xom5GcRwJH/VVTSi+e84muhxP1YTxzrLm755577Nlnn7VDhw6FcpOR XFUJVQlWiVtdrw888IC9++67J+qO9Xo6ramt05raO62to9uaWzuCpNOOq049zVasXO3HG7xMZPzB V512ukvnmfFvn/DnIheJN3z7u1ZYXGIvPvOk7dr+pb3w9BN2wTln2RnLv2HZWX7/xRwldo4kqVVi cqhSljG7hZdKocZKbf03QveT2EblLCXmJPx0X0h2ar1H8Y29JybivorvKz9DAAIQgAAEIACBeALd LuRaapuss3n4NYTD32El6STo9BepAWFXvLDMcgrzEHPxYPkZAhCAAAQgcAICiLkTAOJjCEAAAhCA QCIJxIuZ+GNLAip1p+SSHm1ekk+pq6GattE6cWpKzimBFbWlS5eGZM6bb74ZJJoE3bnnnhuSbnot CaOfFy1aFO0yomf1R4k4lVJUqUKVP9T6WTqmyvVJSOj9p556ypYsWWLqx1DrvemEiRzziAaQoI2U lNL8DNeUxIqdn6isYbTPia6HaLuhnsc6x1oz8b777rOHHnooyFSlK1WmVFJJ5VM1J0psqkSr1idU CkwtkqiD9aerp9dqm9qsoKHFOv21SkgWeGotSgyuOvV0u+Uvvm9lA0mxwY4R+15Obp5foyWxb53w tWTp1dd9y+780V/ZnLJSm9HdaQ/UVNvWzV/Y0088ZqetOiWMMfZAGmeUOpWY+6u/+qtQijZ2m6Fe K9EqVlFT6VKVcn311VdDOk4lLS+77DJTek5yTpJzqNKxib6voj7xDAEIQAACEIAABIYiEPsLb0Nt o/fDL9DpFwj7f9/s6KZ9/nc+GgQgAAEIQAACoyeAmBs9M/aAAAQgAAEITBgBrTelL+i1rle09tpw Yi7aRh2KBFfUuWj9uOeeey4IMyV2osdhX39LaSutQxcr86J9B3vu7u4OEkf7am01CZxly5aFh1JH koTqtyTOb37zG9u2bVs4r0pdDifmEjnmwfo9Ue9F8lRjj9asiz+XBKW2U1MJw1iJE7/tWH4e6xxv 2rTJ3n77bdNcKg3693//93bDDTeE/sWnDVWCMxKQ8V/exIYcO7t7rdmTcu2+VknUZrnYU1lJNZXx 1Ppyi5cujz7+ynNjQ72vMddo2S6Yi4qKLdPXQBxN0zycd+45dsH6My0/N9vu+v73bMeXW+2ll14K yUDJZF27knFRi64//dze3h6EtVJuQzWlQpUO1X2j48SWpdX5tX6c1lt87bXXQppU5SuVKtW9oXXo 1IfYlN1E3VdD9Z/3IQABCEAAAhCAQETgiP8ilekxxnZ0Dbox7s9uEIAABCAAgelKADE3XWeecUMA AhCAQFISUPnAaO0pJc8kt5Q6GyxZpcSWSkbqC38JAcmAefPmHTcuJeJUmi8qO6k0npI7kkmRQDhu h2F+eOKJJ+yxxx4LMudv/uZvQknLqByfzi9Rp4dSRFqzTH1XiUSJjOFaosc83LkS+ZlEk0oWir+S a/FN8mbjxo1hLT9xl+wRn0S3scyxrgHNjZr2v/TSS0M6Lr5v+u1olSRVKlJNYi6ScxJwjV62squn /1en+z87/oudufMXWHFp/5i3bvrcdu/YbstXrLR0L+ka37T/qxtesFf//EI4x7U33GSXX3WtFTi7 kTQvrBTuk+KCPCv1kkppM2bY2S4dtdbhnj17wnWvkpwqI3n11Vcflamx15+SbSrLGl9qMjq/+qj7 QGlQ3UO333673XjjjceJNok3Ce/33nsvXB9Kz4m35KbScvGlYyfqvor6zDMEIAABCEAAAhAYioDE 3EjLyQ92jFDaUmvR0SAAAQhAAAIQGBWBtFFtzcYQgAAEIAABCEwoAQkBiRIlcSREnnnmmSAV4k/a 09NjL7/8ciiZJ0EnMbRmzZqvlL1UKcJzzjknCDutLSexpgTPwoULQ1JKn4+0aX0srVX34osv2pNP Pmk7duwYdNfYEo8qERhfvjF+p0SPOf74E/WzvsRQEuutt94KSavY80TzozKiKmWpVJpkTWy6Knb7 8bweyxxHck3nlWDSI75pfEp9Pfroo6FUqT7XuFrbu6ymsdUq61usxeVcVNFIorK7u+u4w8xfsMjW rj/bZpWV2yEvd/rKhudt544vB/0CaPPnn9mGZ5+y11/eYJ9+/KF1tLedMDGXmZFuJQW5VpCT1b/e iZ89XWsMupRTU6rtW9/6VhBxkqMSqSrfKVEWNd07EmZK0u3du9cef/xxUwnKwb6kUqnWRx55JIg5 yWfNbfx6dEq4qjSohJ/WddQ9J9mn8+veji8dO1H3VTQ+niEAAQhAAAIQgMBQBI74Lx2F1NxQG5zg fSXmjv4l7ATb8jEEIAABCEAAAscIfPXXlY99xisIQAACEIAABE4yAa37dsstt4QSkK+88kr4Ul/S RKmfs846K0gula/885//bH/4wx/CF/5aw+vmm28OMiC+DKF+VsnK1atXm46n9Jrkyk033TRkKmio IUteSP5pzTHJOZXj+973vhfeU0pOZQBVIvG3v/1tKN2nFN35559vp5xyylCHDO8neszDnizBH4rF L3/5yzD2a665JqQdxXjDhg127733htSgUnJKVSlJNRFtLHOsFKZKOKrM6BtvvBHmSNfE8uXLTcfT moFKY95///0muai5VWtuabWq+karbW63nt4+y8rO9Ud2+Gz7ti320vPPWE11lS1YuMgWLl5quX5t XnnNN23TZxvtzVdesrffeDWk4a676RZbu+5sK/Lrva2t1T7f+Ik9+chD9uknH4XPz7/oEhd65wwp MrNcyBXkZgUhl5uVablZGYOmStUxlRD9i7/4iyDbXn/99a+UtNS1q/tH0vnZZ58N17ak3B133BGE nSS5BJwScL/73e9CGlSfX3nllSF1OlgpWKVRdc9p3UVx1D2nteckZ+NF9UTdV2FS+AMCEIAABCAA AQgMQyD8IpL/vWasjcTcWMmxHwQgAAEITHcCiLnpfgUwfghAAAIQSDoCEnB/+Zd/aVrbSyUoH3zw QVOJPaXcMjMzTYk0lYmUVJEU+Pa3v23f//73h1zHTYk0SaEo4aPUlmSAJMxomraXiFOqSP1S8kil GiU+1I+urq5QHlFpI6WnJBMlN+LLaw52zkSPebBzJPo9lfGcO3duSA7+27/9W0haSVZK4mh+9nj5 RCUGNTeSXrHrmiW6L6OdYyW6VL5SiS4lKH/1q18FcatrTF/QaG08XV9aH+/Kr19lNbW19vFHH1p1 dbVV19Rad09vEGFKws2ZO98FWo5VV1bYU489Ym++9opdfPmV9p2/+L4tWrLUlnnpym/f9j1r9ev5 808+ttdf2mB7du0wpelyXYp1dXbaof37bM/uXdbW2mKScjffesega9EdJ+SyMy0rPS30Y7BSrxFj fabx6j7Rtat5iUpaSqZKIKu8pO45pdfefffdkIhTyk0CU3PY6X2UhJVo0zZf//rX7e677w7lSaPz xD5r7cV169YFqamSpurDUKVjJ/K+iu0TryEAAQhAAAIQgEA8gf5SlvHvjvznIOYGKhWMfC+2hAAE IAABCEAAMcc1AAEIQAACEEgyAkrUXH/99WHNL8kvpa+U5lFiJ/xWq/dXKTl98S/ho4fSORIMgzUl giQmlHJTok3bStSptN5omuSbRIbaww8/bEofKU2lFokRST+V6lOfJPGUEJJMPFFL9JhPdL5EfC4x pzXGND6VN3zhhRdCSUjNkTiIseSkEpCjlaCj7d9o51hlG3/84x+HvqtUpaSTHhqL+q/nNWvW2s3f vc0uuuxKe+P114LUqqo4ZLt3brd6TwWWehIwz68trQVXW1Nl77/9ltVUVQZBV1Jaaldc/Y0g5nSs Cy66NKTjXnzmKXvz1Zdsx7attnXTF+G60e9oq/DkgkWL7fqbb7Frr7/J1qxbH2RvxCE70xNyOdn9 CbnsDMscEHLR5yd61v0iMffZZ58FoRw9S7xJaqocpWRbqfdb1/Zzzz1nX3zxRRDQ0bWtc0i43Xnn nXbb7bnh+QAAQABJREFUbbeFNGh8+i3qRyS/dRyVv5ScVjlTpRTj20TeV/Hn4mcIQAACEIAABCAQ S6C/lGVUmDz2k5G9VinL2L8rjWwvtoIABCAAAQhAADHHNQABCEAAAhAYhIC+RP/nf/5nO3z4cEii jVesqJSeUmH6h6vKO56oKV0lUbDU17+SUDh06JAdPHgwpLGU4JH8WrVqVZAKWmMsvoRl/PGvuOIK U8nImpqakPKK+hK/nX6WTDr99NP7SwrG9VXHkDRUwkjJOJU8rPU0lRJFKtm4YMGCcHzJDqWv4mXh cMce75hvvfXWUFZTYmk4xjrPT3/6U7vhhhuC/NRYx9I0lxqnZOVll10WknPiobnQ/IiRSn8ONj+j uR6GYxbb79HMsfaTNP37v/97u/jii0NyTiVSVTa1rLzcikrLbNbsebZo+QorKCy2y7Nybf6iJdbs ac0ly5ZbTm5OOLXGuvass+0nP/u/7Rs33OzXV7X1etnGxZ6Uk2iLWr5fs+vP9XXcPF136ZVXubyr 9JKXlZ7+bHQBl+uSr8wW+vYrVp1qc1xiZWZmhV2zMzNs5kDJyhwvV5mZnu73UHTUY88jYaQ1337+ 85/btddeG9KdkpMScVFT2lEsdN3qGtc9p4dSgxJwkmoSc5pTbRO/tlx0nOhZacooJal1HnWtSOYO 1sZ7Xw12TN6DAAQgAAEIQAACJyIw3sRcWtoMxNyJIPM5BCAAAQhAYBACM/zLq7EXkx7kgLwFAQhA AAIQgEDiCUh8NTY2BqGgNI4kgp4ns0nitLW1BVmoNbSU2lIKbyj5MNq+JuOYNYZ/+qd/sv/9v/93 kFi/+MUvQglEvS8WmiMJO82PZE4q/Aax5lFryKlEY3tnt/WlZVpfeqZ1+xpyvX0j/2ui/krZ0dFu +s3rLC9tOdx10NPd7ddNi3X4eTM8UZefXxDWqpPok3cLQi4v2/K9XKXWj8sYQsiJ+0S1bu+jysaK jVJ/uraVbjuRBI/6o+Tdv/zLv4Tyl//jf/yPIIOLioqij4d8nuj7asgT8wEEIACBQQj8atMe++OO Q9bmJYxpEIDA1CNw4OMdVuP3uI38r3zHQViwbrmVrZxvaV7NgAYBCEw9AgsLcu2na5fZpfNnTb3B MSIITDKBwX9td5I7xekhAAEIQAACEDiegCTcYGXwjt/q5P6kNJxkhR4T0ZJxzMONU+US9Ui1pnnM donYdSTdOtM7Pf3Ybd3do/8CVhIyN3dk45eMKyouCY+IVxByLuEKc13I5WRaTlamC7l+URdtczKf JeOUAh1Lk9DTmo4qD6pkq8rOStaOpE30fTWSPrANBCAAAQhAAAJTn4B+qUqJubFKORFijbmpf50w QghAAAIQmBgCiLmJ4cpRIQABCEAAAhCAQNITUCKutaPLGts6rbWzy7p7+o6uY3gyO6815CTkCvyh kpWTKeTGMu6urq6QrJNUU2ry8ccfD2s6KkV5+eWXh/UGUyE9OZaxsw8EIAABCEAAAqlJoL+M5Rij ctGQVcrSHzQIQAACEIAABEZHADE3Ol5sDQEIQAACEIAABFKegAqZt3d1u5DrsJb2Luv0hFzfJFQ3 z8rw1KWXrJyZk9VfstJ/TsWvdrTO4n333WeffPJJEHRaf3Hv3r1hXUmtaTfP182jQQACEIAABCAA gWQiEMTcKMqWx/edtFw8EX6GAAQgAAEIjJwAYm7krNgSAhCAAAQgAAEIpDyBzu6ekJCTkJOcG806 cokafKaEnMu4gtwsy/N15DInYQ25RI1Fx9G6cxs3brSHHnro6GGXL18e1h+86KKLwhp1Rz/gBQQg AAEIQAACEEgCAloX2EsljLknM2Z4yXHScmPmx44QgAAEIDC9CSDmpvf8M3oIQAACEIAABEZJ4Nxz z7Uf/ehH1udfZmj9sFRpPb191uQlK5vbO61N68j5zye7qURlgQs5peTyfA25rAz/QsfXpkv1Vlxc bBJwhw4dCkNZsWKFXXHFFXb11VePeZ26VGdC/yEAAQhAAAIQSG4C4y1lSWIuueeX3kEAAhCAQHIT QMwl9/zQOwhAAAIQgAAEkoyA1gxbt25d6FVZWVlS9U5rmlVVVVldXZ1lZGSYhNEs72NfWoY1tfav I9c1CevIpftvUx8Vcp6QUwnLtCkg5KLJz87OtltuucXOOeecIBp1Xah8ZX5+frQJzxCAAAQgAAEI QCCpCCgxJzk31oaYGys59oMABCAAAQiYIea4CiAAAQhAAALjIFBRUWEPP/xwKGO3Zs0a+/a3v21K y0xGe+yxx2zDhg3W09Njd911l1122WWT0Y0pf87S0lLTI9na+++/b48++qht2rTJWltbQ3lFibk7 fnC3rb/gIuvwEpZ94/jyZSzjlZBTqcpCT8jlZ2eZB+astaXF+rK8hGVe3lgOmbB9Enm/KPW3cOHC 8EhYBzkQBCAAAQhAAAIQmEAC40/MUcpyAqeHQ0MAAhCAwBQngJib4hPM8CAAAQhAYGIJNDY22ksv vWRPP/20XXvttXbJJZdMmpj75JNP7P7777fOzk674IILEHMTO/VJdfQtW7bYr371qyDm6uvrj/Zt 9py59rWvf9NWe+nKk9mUhjsm5DItOzPDyzweDPeJxPF11103afdJxIH7JSLBMwQgAAEIQAAC05FA EHPj+KWtNP8FrKlQknw6zj1jhgAEIACBySeAmJv8OaAHEIAABCCQwgSO+ILp8Y/JGk7UD619pte0 6UGgt7fXnnrqqSC9JOUWLlpsp5+5zmbPne9lLMtt+cqTtw6evpzJy8roT8j5WnISckrN7d271+65 5x578MEHk0Yac79Mj/uDUUIAAhCAAAQgMDiBviPj/DdDmpdC8L/n0SAAAQhAAAIQGD0BxNzombEH BCAAAQhAICkJXHrppaF8oRJJ0RpoSdlROpVQAs3NzbZ58+awtlxxSand9N3b7apvfstmFhZaZmaW 5c8sSOj5BjuYvpLJyeovWVmQk+mvJeT8y5qBVlNTYyq1uWvXLjv77LOjtyf1mftlUvFzcghAAAIQ gAAEJpuA0nLj+GU+1pib7Ank/BCAAAQgkMoEEHOpPHv0HQIQgAAEIBBD4Gtf+1oQckoCFbqUoU0P Ak3NLb6mXFtISc6eO9fWnHW2nbL61JM2+KyMdCvyNeQKcrMt14VchhaSi2tK9SnJmUyN+yWZZoO+ QAACEIAABCBwsgkcGWeVDUpZnuwZ43wQgAAEIDCVCCDmptJsMhYIQAACEJjWBGbOnGl60KYPgY6u HqtpcDHX0RkGnZdXYNnZOScFgATcTC9XOdOlXH52pmW4oEulYkbcLyflMuEkEIAABCAAAQgkKYE+ T8xpnbmxthmUshwrOvaDAAQgAAEIGGKOiwACEIAABCAwDAGVhdyyZYu99dZb9uWXX1p7e7vNnj3b Vq9ebUrcDJcCevvtt+2LL77wcoKZdvHFF9uqVYOv9dXQ0GDvvPNOWIdrwYIFdt5559lcTz6pvfvu u/b5559bWVmZnX/++aayha+++mroU0ZGhq1fv96uuOIK034ffvihffbZZ6Z0ksr0nXbaaeEYKiGo YxQXF4f1vWbNmmWbNm0K2+7YscOamppM7y1btswuuugiW7FihaWnp4d94/8Qj61bt9qbb75p2rel pcVKS0vDPuKxcuVK+/jjj8P5JD703uLFi+MPM+TPUV9LSkrCeNVn8f/0009t27Ztgbf6uWbNGjvz zDPDuXWwxsbGwFrbbd++3dTPOXPmBO7nnnvukMJS86fxaJ4OHDhgFRUVgUdeXl7YX1zFXUzEO7ZF fR0P17FeI+vPPscOVVbZ+x9+ZDt37bbdu3eHrh2urbFX//yi7d653bJzcu2sc86zxUuXHe22xrtn 1w7bvm2rVVdWWE11lbU2N1lObp6V+np0c+b0J+4WLVni18Dx440OkubryDU3HLatn2+0HX6cw7XV 1ufXnDgsXbrULrnkEjv11FMtKyvLDh48aB988EG4vvVaTeUsH374YdPYNY9nnXWWFRQUhJ+5X0Z3 v0RzwjMEIAABCEAAAhAYLYEjvZSyHC0ztocABCAAAQgkisDg37gk6ugcBwIQgAAEIJDCBCTMHn30 UXvsscfCGl7V1dXW3d0dJI+kzwUXXBBElt4brL388st23333WX5+vkk0DSXmDh8+bH/605/spZde CiJJMigSc5Jw9957b5BsWqdr48aN9vzzz4f1xNL8t1R1TAkR7fPGG2/Yb3/7W+vq6rKioqKjYu71 118P70suSThJPv3xj3+0nTt3mo7Z0dER+ig5J0nywx/+0C6//PIgS2LHFc9D+3Z2doZ9JQ7Xrl1r P/rRj+yjjz4K3BYtWhTk1mjEXNRXCT6JnX379gX+Ek/irzKd6uf8+fPtrrvusttuuy108fe//709 +eSTtmfPnjAmyUmJwWeffda+973v2a233mrz5s2LHY7V1dWFz8VeMk/jk+ATD51b+4utBOftt99u 11577VERqANFfR0P17FcI+df+DXLyC/2a3KT3X/vb+3Qgf3W6H1Xq6o8ZM8/9ZhlZWdbSeksK/L+ R2KusaHe3njlJXv5hWdt7+5d1tzU6GK12Tp9vGEtOpdjBV4Cdfkpq+wbN9xkX7v0ct+/JBxXfygN l25H7MN337Tnn37SNn228ajIlPDLzc0NfDQPt9xyi910001h/v7whz8E6VZfXx+OJcFaVVUVGOt6 ET+JubGwkPCezvdLAMofEIAABCAAAQhAYAwEjhzpG2dibobN8F/YokEAAhCAAAQgMHoCiLnRM2MP CEAAAhCYBgSUTJPs+c///M+QlJM4UEJLEkHiRgm0p556KogyCarBmoSbhJIEj5JlQzWJtMrKyrCt ji/ZFTXJI8kmNYkppfZ0Pkk5SSr9Y1gSSc8SH3v37g39U/+jFr2v8/zXf/1XSLpJzi3xVJSSTRJS kiVKwEmE1dbWBlEiORc1HU+C5Ze//GXog2Sj0k6nnHJKEIFK4EmsKBXV2toajqU+trW1RYcY0XNs X++5554gzMRGKTkJMo1dCTeNU32SFNU+999/f+iHhJ62E3dxU+JQ45PIkyhSelFNx/nNb35jv/vd 74KgLC8vD2JR24ml5k7pOzFRwktpOkk6yTmNSy22r2PlOpZrZO7CxXa4sdmyvWzlwsVLLc3Tjd09 OzzN2WY5npKbO3+BFXpfi4qKfR77S5vW1x22xx9+0J7600O239mVzCq1laeeZrM9ISfl1lBfZ19u 3Wz79+y2g/v2hjSdJN3Fl13Zf415mcr87Azb8Nwz9utf/R/b+MnHgb3E8JVXXhmu8UOHDgUpu2HD hsBMclRzoetM14WuayVOdT9oPvUswR3NyVhYTPf7JVyI/AEBCEAAAhCAAATGQEBlLPXvibE2lbKc kYaYGys/9oMABCAAgelNADE3veef0UMAAhCAwBAEVKrxgQceCBJIia/vf//7ds011wSRIBkkWSMZ JAmhlNVEt/379wcZJRH24x//OAhCpY4kkk4//fQRnV7iREJOQu0f//Ef7eyzzw7JOskSlRCUqFJ5 RpXVVPpOCTiVqVTTzxJzEnjiceedd9rVV18dkn0qGymhpxSeEmoSLMOV+BxJZyVy1F+VDFVfVU5S KUAJzoceesgeeeSRUOLyF7/4RRBEkqZKz2l7leGUzFN68LnnngtyT/OpYyjFp6ZxKg2pMpkqt6mU 4DnnnBPkmz6XXNQc//rXvw5JRiUVX/X04rp1676SvBsPV53rRK3XvzRp7ei2rp7esGmff4GiL1HW rjvb5i1YaBUuDe/79f+xwzXVNt9/vuX2O+20NWstwyXk3Hnzwz6fb/zE/vz807Zrx3Zbd/a5duN3 brPT166zmS7f1NpdoO53IffEHx+w9956w7Zu/sKTcSo1udaWLl5khb6O3JYvPrPHH33YPnj/vSDV 7rjjDrv55puDZMvJyQn3gRiJmbiK/3//7//d/vqv/zpcS//xH/8Rro0zzjgjvCeJqrKwhQN9CB1J 0B/T7X5JEDYOAwEIQAACEIDANCLQL+bGPuAg5UjMjR0ge0IAAhCAwLQmgJib1tPP4CEAAQhAYDAC Sli98MILYQ02pdFUBvEnP/lJkDpRuRYlzVRuUlJOcm6im4TUwoULQ6lICRGVjlRiTP1R8mgkTbJJ YkpSTaIxkm7aV2JLiTolyVTiUmkxpcS0jVJ7Kp+plKAEjMo6/u3f/m0oIRilx5SM0rHVT5UyVFpq PE1JOx3vBz/4QXiofGXUtNabxM8rr7wSEm0Sbnfffbd94xvfCKU6tZ3Or4dSc1p7T5JNY9MxdezX XnstSFdxlNATU4m/2CaBJGmpY0hcKqknsRlfEnOsXGPPNdTrjq4ea2jtsNrmtqNiLtq2xJnooVRc 4UDf8zzJuHT5iiDdou00ho/ef8fXndthxSWldu31N9k3b/y2Fczsl3LRditWrg5lLQ+6BN7x5VY7 uHeX9XU02+zifEv3X4Z++c8b7F2XthLT1113nf3sZz8zMYoSbzqO0nFKXCrdqfUOxezrX/96SGZG 16nKukom65qbqDbd7peJ4shxIQABCEAAAhCYugSOeCly/226MQ8wJOYQc2Pmx44QgAAEIDC9CSDm pvf8M3oIQAACEBiEgNYbU2lGfbmvdeQkfCR0IimnXSQjlDjTZ9pWEmuimwTUVVddFVJyOlesrBrp uS+55JIgSmKlnPZVqc4LL7zQli9fHsScxIoEpZokmKSceFxxxRV2/fXXB0kYy0MpNUkaJag2b94c HmHncfyh9cOUUowfp6So1hWLmvqkbbV+XtSi/khmSswpxRdb3lNjlbiTjBPTeCmn40gASjgqlSgx 19TUFERddI7Y57Fwjd0//rVScc3tnUHKKS3X2d1jem8sTQWGzlx/ThhvgUvc8y++5CtSTsdN9/Fq fbnZLpwl5rq8NGbGkV7LycwIaU3JWkk3laHUNSC5FivldAyJTkk7CWsJ3aVLl447PanjjqVNt/tl LIzYBwIQgMCJCKwsLrCrF5VbV+/Yv7w/0Tn4HAIQmBwCGxtarTE9zTrGePoFM3PtogVlVjZrZL8k OMbTsBsEIDCJBEpysmy2V0+hQQACiSeAmEs8U44IAQhAAAIpTkDlGlVKUU2pHsmqWAkVDU9SQuUP 9fnJEHMqYxmf1or6MtJnrQkWK7Vi95MAi1JNSs+pRKWaxJxKA6qdddZZoYzmYDyUnjv33HMDD8m5 8TaV3FTZzPgmiaY17tSUaJQoipd3+kyyMTc3Vy+DUIvW7lPqT8JP4kZ9VoIrvknaqVSoEl+RoIxS ePHb6uexcB3sOHpPEq6htdOa2jr8dW8QcmNTcv1nyMrOtgsvvszWrFtvaf5bzYW+9lx809iaGuqs 8sAea2/pX59Q5UijkqRa21DXuEpoSsipDKXYD9Z0jahEpY6ptfs0D5PRptv9MhmMOScEIDD1CZxV XmQrivLHtQ7V1KfECCGQmgQyKursU//luv5fxRv9GFaVzLTvnDLfls756t8tR3809oAABJKRQIb+ vZzdv057MvaPPkEglQkg5lJ59ug7BCAAAQhMCAEJmUjGqFzlYOImOrEkV3z6LPoskc8SYZIc41mP SxJKfY2kVnz/JBqVNFOTkIkWg1f5xvr6+vC+xOBw41W6bDBJFnYexR8ab3Fx8aB9VR/10DYSiXpE /Y49hd6LSm1qLNF49F60n7aPyi5KxmrutT6dHnpfQnLHjh3hsNH+sefQ67FyjT+OEnFNbf0puZYO F6MJSieof/kux/RQqztca19u3WzVVZVhXTqtTVdbW2MNniqsqaqwPbt3he1ixysW0VqKJ7oGdI2O 5zoNJx/nH9PtfhknLnaHAAQgMCSB4qxM04MGAQhMPQIz9ff+MVZkEI2S3CxbNDPPFvuDBgEIQAAC EIDA6Agg5kbHi60hAAEIQGAaEFDJQ63LpSY5FFsiMX74knYnIxGklJf6ku3pp7E2iTeNJb78YHQ8 yQw94ptKWIqHRJeE1nB9kPQTj8FEWfxxh/tZfdR5IrE21LZKbank5GBtsLHEbqeSpVof8B1fN23f vn1BxmruVbJSz0p8ibmeh2tj5Rp/TK0lV93YalpXbqxlK+OPGfvzvj277Z03XrNPP/7AKg8dtGYf Z6vPbasn5FpbW4KMHWq80TWg42mboeRu7Pkm8/V0u18mkzXnhgAEIAABCEAgNQl0+y+BjecXwTIz 0i3DS2HSIAABCPz/7L1XtFzlma77SSvnKGkp55yFRM4IbMBg4wA0Tbdpu7v3GO7ufW7O2KfH2L1v 9m3vi3Oze/fBbrdtMjZgMBlMBpGFQDlnLWnlHCWd7/2lEqVSrVRVKz8fo6iqWfP/5/8/c86lqvnO 9/sgAAEIDJxA/CtZA++HFhCAAAQgAIExQyBa0Il2DcWboEShZEUobaM/25EAFD22eOPpbZlErr6E rnjtJX5p20oFqfSWctP11I/mISGrr/nE2070smi3W/TyyOtk+1e9tIcffthefvllO378eJiXBCc5 IFVXTik0lQpR837iiSfs448/jmz6kudEuUZ3JCGu1WvJtXZ0RS++8PrsGU9mmUQ+y907ttkfnnjE Pnj7z8Ep1y3R0VOCqgbf6lXnUob2Nt++9seFgQ7BC+37vva/zsvxdL4MAXY2AQEIQAACEIDAGCPQ 2X3auv17faKRiTCXKDraQQACEIAABAxhjoMAAhCAAAQgEENAbiA5bhRK39fS0tKjSyzaXRfTTRDR JKRFp4WMXUfvI4JXvM8iy5IR5CJ9JPpcXl4enHJykinFZ2tra4+pCrWO3FWR2mSJbrM/7foSZ3rq Q6k5H3nkEXvqqaestrbWNmzYYHfccYctWbIkpOFUqk45ITXvAwcO2GuvvRa66o8g1NM24y0PF0PO p6s87c+nz/Z8YaQr1PyLL9rF6zt6WdWpk/an535vr734gjXU19nadZfZ9+6802vFLe33fKOdodrH OgZ6C4mzOmZ7EnDjtdX6nC/xyLAMAhCAAAQgAAEIpJ5Au9c17uru+ftnX1tEmOuLEJ9DAAIQgAAE eiaAMNczGz6BAAQgAIFxSiBSV051xiL15nqqq1ZdXR1SH8ZDJVFCQoNcZnr0FBK7JP6N1Jg8eXJI X6gabKq5pjn3VEMs8vlInYvGtW3bNvvoo4+sxmuqrV271n7xi1/YnS5UaR/HCkkSGSMiVF8Ca3/n LIFPNeTqm9utreucgBWciC5m9RRNjQ3W1ocY1lPbfbt32ZYvPrf6utow33/8x38IwpxqAfZ3vjoG itxhp+jtmNfnEjsfe+wx27p1q61cuTKw1fK+gvOlL0J8DgEIQAACEIAABFJDwL+OWnNbp0mcSzQk zGWQyjJRfLSDAAQgAIFxToBk0OP8AGD6EIAABCBwKYFly5bZzJkzwwefffaZqRZZT+6sL7/80vbt 23dpJ74kUv9M9dnkMup011NsqF/1r3SKIzVWrVplc+fODSKj6rFt3749riNOwtUHH3xgO3bsGKlT CeOK5r1+/Xq77rrrgjsuVqTSvtFcJEgqNL9knYBKWVnnteRO1rdYfWu72cQ0S/O0i50d7dbsde26 ui51xWkchw7sNznfEonDB79tq/necP31NmnSpEtEud7mqxSfchBKaP7666/DMd8TC/F9/vnn7Te/ +Y198sknQdiMiG69jZ/zpTc6fAYBCEAAAhCAAARSR6Cts8ua2pSmvucbw/raWl6214TO4H7/vjjx OQQgAAEIQCAeAYS5eFRYBgEIQAAC45rAokWLgtOnoKDAdu7caa+++qodPnz4EiYSIN58883gIrvk Q18g8UMuI6X1e//99+MKVhK6/vSnP41oYW7+/Pl27bXX2tSpU2337t0hBeQ333wT5hWZtxxf77zz jv3xj38c0XPReCUoSYRSaN/oERv6/N1337VnnnnGjh49Gj4OrjZvm0x0+cWPptYOryfX6eM4a6Vl 5ZZfUBjG8OVnn9iBvXsu6f7rLz+39/78ulWdrLzks94WTPAPc7MyLD8709Im6l3i8502bZpdfvnl 4Rg4ePCgvfHGGyHNZ+g06n9yfuqckCtRXOfNmxfaqOabHgoJ1UrfGhucL7FEeA8BCEAAAhCAAAQG h0CD3yjW4t9HEy1hLLdcYU6WC3NpgzNAeoUABCAAAQiMcQLc2jLGdzDTgwAEIACBgRPIz8+3u+++ 2z7/3AWR996zZ599NriLfvzjH9uKFSuC4CDX0OOPP25vvfWWtbe78ylOKE2ihAm54SRaTZkyxe65 5x5bsGCBqTad+pDwo+1ICJIbaSSG6u2pBtunn35qL774or3yyish9eaNN95oCxcuDC4vuegk1nzx xRe9pu0cCfObPXu2KTWjxFYJptof2t/aV3J2SYjTPtH+lQNQQpKiJ0GprzmddgFOIpxCr/WIXARZ snyFzZw1O4hun3/8kZW6K+2W2+6wWXPmOuNm27Nzh735you27ZstAzpGMsLFkkwrys22pYsW2BSf 75Ek5qtj4K677rKPP/44CMkSk9PS0uzee+81OSr1ubjp+FDtvlOnTtmVV14Z3IjFxcUh/WVWVlZg oONe55Rq/c2ZM8ck/KquI+dLwMP/IAABCEAAAhCAwKATUAaH5o5LMzX0d8OFuVmWn5NpE0fo75f+ zoP1IAABCEAAAsNFAGFuuMizXQhAAAIQGNEElPLv7/7u70IKyi1bttijjz4ahCml9JPjSukN5R5b smRJqL8mZ11srFmzxiRe7dq1y6qqquz3v/99EHzkDJJjSH2ovtx3v/vd4D6SSDRSY/HixfZP//RP QTyUACdxTmk8ld5QPFSPTw6p6z1N4qFDh4LoKIeUxJuRFhs2bAiCkVKQ7t+/3375y1/a22+/bTNm zAjil+oKSrTTvrn11luDqKSUphKb6urqwnxj0172NMe2zm6raWozPceLxUtX2PorrrYD+/ZaXW2N vfnyn2z711uspLQspD6tOnnCj8EGu+aGm+yY1/f78rOP43Xz7TK/OJLvdy9XFOdZnjvlMpz/lVdc npL5SoT96U9/GmrIKUXlk08+GY4BpX3VvhabSOpPiZ0PPfSQ6TwSK4nS4isBT8f9I488EpyoOvZ/ /vOfB3GU82Vkni/fHly8ggAEIAABCEBgrBCoP++YS3Q+xXnZ4btmou1pBwEIQAACEBjvBBDmxvsR wPwhAAEIQCAugdzc3OASk8tHAoTSGso9JVeb3G1Kc3nLLbfYAw88YE8//XRIeRnbkZxCf/VXf2Xq I7KOXGeKjIwMk8h3//33B7Hj//yf/xPcW7F9jJT3qv919dVXW2FhoS1fvjzUDjtw4ECoNaZlS5cu tY0bN9q6devs3//934MwJxFG7UZaSCSSaKR9IMei5qGH3mvf6nnlypX24IMPBtFUrkgJdXKESXiq qakJaUp7m5f6aWrrtLrmdlOqoO446TLVvsDZfe+HP7aMrEx77cUX7OD+vVa7ZXPoWmLX5ClT7fa7 7rG7fnSvPf3ob/oU5rLcKVeSnx2cchPPp69M1XzF5eabbw7pWZ944okgrOl4lotOoTnrWJDYdt99 94XjQeeAQueL3HUScMVTLlIJdBJ25VaUkMf5MjLPl7AD+R8EIAABCEAAAmOKwDlhLnHHnIS5fP/+ SkAAAhCAAAQgkBiBCX4RJZJNKbEeaAUBCEAAAhAYwwRUM0vOKqXfk7uqsbHRSktLbdasWSGt5dy5 c0M9rb1795rqcMn1I7EhOiRGbN26NbQ/4q4nOczkHpLTSKkx9VruMznrKioqQh9y1SmUGlLLJQiq xpfS/vUUX331VRCO1L/WlcNJsXnz5iAc6p98LZcIEi9aW1uDo081xDQHpRZUXbnoUN9ylElUqa6u tubm5uCC0niVCrKhocH+23/7b/bcc88FEed//s//addcc010F72+7u9Y5diSYzEnJye4suZ4SsTY kCtRTjftN+0ziYbaRwq5+yS0yQ2p/Rtx/GkemrP6W7ZsmZWVlZl4qKaeHHSqP6h9pnSnPY21+/QZ 08UOPdrdKdfa1mrb3AV3/OgRKy4ptaXLV1q5p5aMjuqqU7Z390476gLgyRPHwjEypWKaVUydZgvc rThl6nTbsfVrF+72WfmkybZ42fLgqlMfne1tdnjvDmusOWUVUyp8v60JDrXo/lMx30h/6ktM5RIV Qx0LSucqVjqmJdyKk9JTRofWkbCp/aY0lupHx7NSXuq4jwTnS//PlwgzniEAAQhAAAIQgMBACDz+ 7jf2r899aLuP1wyk2YV1N66eZ/9y7/W2YeH0C8t4AQEIQAACEIBA/wkgzPWfFWtCAAIQgMA4JtDZ 2RnqwklckJtOzqCBpmlUHxJ3JJAVFRUFQWs0IJVDTIJKd3e3SYiUcNWTE27Tpk323//7fw+pIVWT 73/8j/8RapCN1HlKHFLtONX8k+goZ5cEpYHu28j8lLKyrrnNGls7rKv79IVacpHP+3ruCsdZYzhG 8gsKg9uytzbZmemmO5ZV50Nuub7qFKZ6vjofJFZ3dXUFbhIs5fTrLcRZzPUsV6WcePGC8yUeFZZB AAIQgAAEIACB5An82yuf2f/7wiY7VtOUUGc/vnqZ/T8/utaWzTx3M2FCndAIAhCAAAQgMI4J9H7l ZByDYeoQgAAEIACBaAISouQISibUx+QYp1Qy/Q1VW7nilPJRKQtXr14dau9ddtlll2xe7kKlKZSI p5CDTmkUR3JIgJOYpEcyIbH1XOrKNmtu77LTLjolEhl+jJSWXey4jNdPmqepzM/JdFEux/KyMiw9 bWK81S5Zlqr5RjqWsKbHQEI152LddPHac77Eo8IyCEAAAhCAAAQgkDyBek+33uLfWRONYk+drnrG BAQgAAEIQAACiRFAmEuMG60gAAEIQAAC44aAan8pRaXqiSl9ocRFpXxUjbyIs0zOqddee81eeOEF O3XqVEgZqZSPSiE51iM2deWZQc4SnpUhl1yWu+SyLSsjzSZ6mlNi5BDgfBk5+4KRQAACEIAABCBw KQF9VQ015joSF+ZKQo25+FkPLt0iSyAAAQhAAAIQiCWAMBdLhPcQgAAEIAABCFxEQOkdb7nlliDM bdu2zR577LFQm0017FRrT24x1Rz76KOPbPv27SH94j333GNXX311j2kKL9rAKH6TbOrKgUxdAlxB cMmdu0O5vy65gWyDdZMnwPmSPEN6gAAEIAABCEBg8Ai0dXZ5pocOT1N/OuGNFClrA465hPnREAIQ gAAEIIAwxzEAAQhAAAIQgECvBJR68LbbbjPVmvuP//iPkKrywIEDoR6b3EES5urq6kypLKdNm2aq Lfezn/3MZs+e3Wu/o/lDueIiqSuVBijR1JX9ZSBnXJE75IrcKSfHHC65/pIb+vU4X4aeOVuEAAQg AAEIQKD/BIJbrr1zwLWQI1vI9LrGqm+c6d9PCQhAAAIQgAAEEiOAMJcYN1pBAAIQgAAExhUBpa68 7777bMmSJfbhhx8GZ9zJkyetqanJVAts5cqVtnTpUlu/fr1deeWVNnPmzAtpLscaqK7Tp62hpSOk AGrv7LbBTF0pAS4/O8OK88/dlZzRz1pyY435aJsP58to22OMFwIQgAAEIDB+CEiYa04ijaVEOX0/ 5Uax8XPMMFMIQAACEEg9AYS51DOlRwhAAAIQgMCYJDBlyhTbuHGjrVmzxiKinGrLpaenW15enlVU VITacxLqxmq0dXRbXUubNbZ2WJen//ESHYMWuhtZDjk55bIzcckNGuhB6pjzZZDA0i0EIAABCEAA AkkRiDjmEu2kWPXlSGOZKD7aQQACEIAABAIBhDkOBAhAAAIQgAAE+k1AafomT54cHv1uNAZWDKkr XYyr8zuMBzt15QR3yeVlySWXbQV+0SPDBTpidBIYr+fL6NxbjBoCEIAABCAwPgicE+a6Ep6shLm8 rLF7I17CYGgIAQhAAAIQGAABhLkBwGJVCEAAAhCAAATGH4Hu02dC2sq65jYb7NSV51xyXkvOXXI5 cslNnDD+gDNjCEAAAhCAAAQgAIFBI1DfrBvNOhPuPwhznsqSgAAEIAABCEAgcQIIc4mzoyUEIAAB CEAAAmOcgIS46qZWkyjX2TV4qSvdJOcpgbKsrCDHVLdDLjkkuTF+cDE9CEAAAhCAAAQgMAwE6j0t e/LCHI65Ydh1bBICEIAABMYQAYS5MbQzmQoEIAABCEAAAqkjoDQ/x2qarNaFuc7uM6nrOKanzHRP D1qcbxUl+S7OZViapwslIAABCEAAAhCAAAQgMBgE6ls6rKUj8VSWJfk51JgbjB1DnxCAAAQgMK4I IMyNq93NZCEAAQhAAAIQ6IvA6TNn7Uh1g+08Wm1VDS3W5aksBytK/cLGoullNr2swHK9rtxEWecI CEAAAhCAAAQgAAEIDAKBs2ctpGhPRpg7V2OOVJaDsHvoEgIQgAAExhEBhLlxtLOZKgQgAAEIQAAC vRNo9buHP91zzD7accRO1DVb9+nTvTdI8NO0tIm2YtZkmz+1xOZMLg6iXIJd0QwCEIAABCAAAQhA AAL9IqDvuk1tHdbdnfh33KK8bMvLJpVlv4CzEgQgAAEIQKAHAghzPYBhMQQgAAEIQAAC44vAKXfH vfT5Hnv1yz121FNYdg+SU640P9tuWT3Prl02yxZUlFp2Jl/HxteRxmwhAAEIQAACEIDA8BBoaG23 5vZOc+NcQpHpdZCLvB5yZkZaQu1pBAEIQAACEIDAOQJcCeJIgAAEIAABCEBg3BPYdazannx/q738 xR47UdtsZ5TnZxBisaetvOvyxXb7ugU2s7zI0t05R0AAAhCAAAQgAAEIQGAoCKiGckt74vXlCl2U k1uO9OtDsbfYBgQgAAEIjGUCCHNjee8yNwhAAAIQgAAEeiWgenIf7zpiv31ri/356/1W09ia8B3E vW0oy+8uvm75bHvg+pV2/fI5Vl6Ya5ST640Yn0EAAhCAAAQgAAEIpJpAEOY6OhPuVvXl8rOpL5cw QBpCAAIQgAAEzhNAmONQgAAEIAABCEBgXBJo7+y217/aZ//5580uzh21xtaOQeEwyUW4u90ld/91 K2313CnU5BgUynQKAQhAAAIQgAAEINAXgWQdcxLmqC/XF2U+hwAEIAABCPRNAGGub0asAQEIQAAC EIDAGCNQ29xmf/x4p/3u7S32zaGTJpFuMGLZzEl2v7vkvu/C3OzJxZZB6srBwEyfEIAABCAAAQhA AAL9IFDfrFSWyTnm8rJwzPUDNatAAAIQgAAEeiWAMNcrHj6EAAQgAAEIQGCsEThU1WBPvPeNPfXB VttfWWfdp8+kfIpZGWkhZeWDN6yyG1bMtvKiPJuQ8q3QIQQgAAEIQAACEIAABPpPoL6lLSlhriQf x1z/abMmBCAAAQhAoGcCCHM9s+ETCEAAAhCAAATGGIFth0/Zb976yp7/ZKedqG22M2fPpnyGk4py 3SG3xJ1yK2zV7ApP98NdxSmHTIcQgAAEIAABCEAAAgMmUN/SYS0dXQNuF2lQnJfjNeYyI295hgAE IAABCEAgQQIIcwmCoxkEIAABCEAAAqOHgOS3L/Yet1+9/qW98uUeq25sHZTBL/XUlQ9Epa5MJ3Xl oHCmUwhAAAIQgAAEIACBgRHQ/WihxlxSwpw75khlOTDwrA0BCEAAAhCIQwBhLg4UFkEAAhCAAAQg MHYIyBX34Y7D9vBrX9hbXx8IFyRSPbu0iRPs6iWz7Kc3r7GNq+eSujLVgOkPAhCAAAQgAAEIQCAp Aq0uyDW1dVh39+mE+ynKI5VlwvBoCAEIQAACEIgigDAXBYOXEIAABCAAAQiMLQKqH/fWNwfs/3v1 8yDONbUlXuy+JzI5mRn2nXXz7W9uWWtXLJpuBTlZPa3KcghAAAIQgAAEIAABCAwLgYbWdmtu77RE E7lnpqdZUW6WZXotZQICEIAABCAAgeQIIMwlx4/WEIAABCAAAQiMUAIdXd326pd7g1Pu0z3HTHcJ pzrKCnLtniuX2l/ftMqWz55s2Rl8tUo1Y/qDAAQgAAEIQAACEEieQF1zu7W0J/59uNBFuTyvLzdx woTkB0MPEIAABCAAgXFOgKtH4/wAYPoQgAAEIACBsUhARe1f+HSn/dJrym05UGntnd0pn+acycX2 F15P7r5rV9jcKcVGPbmUI6ZDCEAAAhCAAAQgAIEUEQj15dwxl2gUexrL/OyMRJvTDgIQgAAEIACB KAIIc1EweAkBCEAAAhCAwOgn0NDaYc98tN3+440vbfuRKutMoo5GPBq6R3jNvKnukltt39uwyKaW 5NsE7hyOh4plEIAABCAAAQhAAAIjhEB1Y4s1eo25RKMkn/pyibKjHQQgAAEIQCCWAMJcLBHeQwAC EIAABCAwaglUNbbaU+9vtd+89ZXtOV5jqjGXyshIS7MbVsy2h25Z489zrDQ/J5Xd0xcEIAABCEAA AhCAAAQGhcDJ+har93SWiUZxXk5IZZloe9pBAAIQgAAEIPAtAYS5b1nwCgIQgAAEIACBUUzgWG2T PfbO1/aoPw6eqrPTZxItbR8fQkFOpt25fpH99OY1dtn8qVyYiI+JpRCAAAQgAAEIQAACI5BAZV2T 1bW0JTyysoIcK/TvwwQEIAABCEAAAskTQJhLniE9QAACEIAABCAwzAQOnKyz37pL7qkPttnR6kY7 cza1olxFcb79+Jrl9uANK23xjHLLTE8b5hmzeQhAAAIQgAAEIAABCPSPQJvXW1ZmCdVhTjSm+Pdh 1ZkjIAABCEAAAhBIngDCXPIM6QECEIAABCAAgWEksONolf36zc323KYdVlnXbKmV5MwWTS9zQW61 /eiqpTZzUpGlTVSVOQICEIAABCAAAQhAAAKjg4Dqy9U2tdmZBDNKTPR6ylOK86wIYW507HBGCQEI QAACI54AwtyI30UMEAIQgAAEIACBngh8uf+E/er1L+3lz3eHu4B7Wi+R5boAcfnC6aGe3HfWLrBJ fjECSS4RkrSBAAQgAAEIQAACEBhOAif85rW6lsTryxXmZll5Ya5lpXMZcTj3I9uGAAQgAIGxQ4B/ UcfOvmQmEIAABCAAgXFF4Iu9J+zfX/3MXvlyr9U1J14vIx60DE9VuXH1PPvZxrV2zdKZVpRL2p54 nFgGAQhAAAIQgAAEIDDyCSirRDLflycX5VlJfo75fWsEBCAAAQhAAAIpIIAwlwKIdAEBCEAAAhCA wNAS2OxOOYlyL3+xx+qTuPs33qhzMtPtjvWL7O9vu8wuWzDVcjIz4q3GMghAAAIQgAAEIAABCIwK AhLmkvnOXFGSbyWksRwV+5pBQgACEIDA6CCAMDc69hOjhAAEIAABCEDgPIEtBypdlPs8OOWSucAQ D2hBTqb94Mql9re3rrOVs6dYVkZavNVYBgEIQAACEIAABCAAgVFDoLJejrnEU1kGYc4dcwQEIAAB CEAAAqkhgDCXGo70AgEIQAACEIDAEBD4+uDJIMq9/PmepNLxxBtqqV9s+Mm1y+1nt6y1xTPKLSNt YrzVWAYBCEAAAhCAAAQgAIFRQ6Cts9uqGlqstaMz4TFLmCvGMZcwPxpCAAIQgAAEYgkgzMUS4T0E IAABCEAAAiOSwNbDp+zh176wlz7fbbUprik3pTjfHrh+pf31zattfkWJpU1ElBuRBwGDggAEIAAB CEAAAhAYEIHqxharbWqz02fODqhdZOUJXliuwr8rI8xFiPAMAQhAAAIQSJ4AwlzyDOkBAhCAAAQg AIFBJrD9SFUQ5V74dJfV+IWFVMasSUX2VzeutgduWGl6PZGq9qnES18QgAAEIAABCEAAAsNIINn6 coW5WVZemOsp3rmEOIy7kU1DAAIQgMAYI8C/qmNshzIdCEAAAhCAwFgjsPNodRDlnv9kp4tyrSmd 3sJpZfbQLWvsJ1cvt2mlBYYml1K8dAYBCEAAAhCAAAQgMMwEJMzVtSReX25KUZ6VeMp3vicP845k 8xCAAAQgMKYIIMyNqd3JZCAAAQhAAAJji8CuYzX2y9e/sD9+ssOqG1Mryq2cPdl+fus6u/vyJTal OG9sgWM2EIAABCAAAQhAAAIQcAKV9S7MJZEGXvXlSqgvx7EEAQhAAAIQSCkBhLmU4qQzCEAAAhCA AARSRWDP8Rr7lYtyz27a4QXrUyfKTfABrl843f7utnX23XULrawgJ1VDph8IQAACEIAABCAAAQiM KALBMdecuGMu1JdzxxwBAQhAAAIQgEDqCCDMpY4lPUEAAhCAAAQgkCIC+07U2q/e+NKe2bTdTjW0 pKhXC/Xjrl02y/7+O5fZTSvnUsQ+ZWTpCAIQgAAEIAABCEBgpBFo7eiyk/Ut1trRmfDQcMwljI6G EIAABCAAgR4JIMz1iIYPIAABCEAAAhAYDgL7K+uCKPeHD7eHCwmpGkN62kS7ZdU8+y8uyl29dJYV 5GSmqmv6gQAEIAABCEAAAhCAwIgjcKKuyaoaW+z0mbMJjW2CF5aTMFdMKsuE+NEIAhCAAAQg0BMB hLmeyLAcAhCAAAQgAIEhJ3DwVL39+s3N9vsPt4V6GKkaQGZ6mt1+2cIgym3wNJa5WRmp6pp+IAAB CEAAAhCAAAQgMCIJHK5qtOokUsIX5mR52vdcy8rg8uGI3MEMCgIQgAAERi0B/mUdtbuOgUMAAhCA AATGFoGTXpj+0Xe+tqc+2Gon6ppTNrmMtDSvJbfAfnHHBlu/YJplc2EhZWzpCAIQgAAEIAABCEBg 5BI4Ut3gjrnEazXLLad6zG6cIyAAAQhAAAIQSCGBiSnsi64gAAEIQAACEIBAQgQaWjvs6Q+22ZPv S5RrSqiPeI2UvvI7EVFuPqJcPEYsgwAEIAABCEAAAhAYmwQOVzVYtaeyTDRmlhdaeWFuos1pBwEI QAACEIBADwQQ5noAw2IIQAACEIAABIaGQHtntz3/yQ575O0tdqiq3s4mVgLjksEGUW7tOafchgXT LTuTRAGXQGIBBCAAAQhAAAIQgMCYJNDU1mnHa5usub0z4fnNmlRk5UV5CbenIQQgAAEIQAAC8Qkg zMXnwlIIQAACEIAABIaAQPfpM/ba5r32n29+ZbuP19iZBAvTxw5Votyta+bbL27fYJd7TTlEuVhC vIcABCAAAQhAAAIQGMsEJMpVNbTY6QS/Xyt75czyIpvkNeYICEAAAhCAAARSSwBhLrU86Q0CEIAA BCAAgX4SkDHu/e2H7D/e2GxfHzxpXS7SpSLSJk6wW1bNC6LcFYunWw5OuVRgpQ8IQAACEIAABCAA gVFEINn6coW52Ta1pMByszNG0awZKgQgAAEIQGB0EECYGx37iVFCAAIQgAAExhyBL/YeD6LcJ7uP WntXd0rmJ1Hu5lVz7Rd3bLArF89wUY4LCSkBSycQgAAEIAABCEAAAqOKQLL15aaXFdikolybOEHe OQICEIAABCAAgVQSQJhLJU36ggAEIAABCECgXwR2Hau23/x5s739zYGk6l5Eb0wXDW5cKVHucrt6 yUzLzUKUi+bDawhAAAIQgAAEIACB8UFAmSmOVDdadWNrwhOe6fXlJMwREIAABCAAAQikngDCXOqZ 0iMEIAABCEAAAr0QOFrTaL97e4u99Pkeq29p72XN/n8kUe6GFXNC+sprEOX6D441IQABCEAAAhCA AATGHIHG1g47UddkLe1dCc9tlteXKy/MS7g9DSEAAQhAAAIQ6JkAwlzPbPgEAhCAAAQgAIEUE6hp arMn3vvGnvlou53yYvSpiAkuyl23fHZIX3ntslmWl52Zim7pAwIQgAAEIAABCEAAAqOSwHG/Ea7K v2ufOSvv3MBD369nlhdaeUHOwBvTAgIQgAAEIACBPgkgzPWJiBUgAAEIQAACEEgFgZb2TnvWBbnH 3/3GjtU0paJL82sGJjHuF7dvsOtdnMtHlEsJVzqBAAQgAAEIQAACEBi9BA57GsuqJNJYFudlW0VJ vuWQGn70HgSMHAIQgAAERjQBhLkRvXsYHAQgAAEIQGBsEOjsPm0veurK37z1le2rrEv47t1YGqol J1FOaSwR5WLp8B4CEIAABCAAAQhAYDwSOFLVYNVJZKeYUVZok4vyTOniCQhAAAIQgAAEUk8AYS71 TOkRAhCAAAQgAIEoAkqh89bXB+zXb35p249U2ekzZ6I+TfzlmrkV9vNb19mNK+dYQQ7pKxMnSUsI QAACEIAABCAAgbFC4Kx/9z5S7cKcp5BPNGZNor5couxoBwEIQAACEOgPAYS5/lBiHQhAAAIQgAAE Eiawef8J+93bX9mX+06YnHOpiPlTS+2hW9bYrWvmW2FOViq6pA8IQAACEIAABCAAAQiMegKq6XzM a8y1dXQlPBfVl5tUlJtwexpCAAIQgAAEINA7AYS53vnwKQQgAAEIQAACSRA46hcFnnjvG3tv2yFr TeLiQPQQppYW2F/duMruunyxleZTkD6aDa8hAAEIQAACEIAABMY3gQMn6+xEXXPCqeOVvnJmeZGV 8T17fB9IzB4CEIAABAaVAMLcoOKlcwhAAAIQgMD4JdDc3mnPbtphL3ltubrm9pSAUCH6+65dbvde s9ymFOenpE86gQAEIAABCEAAAhCAwFghoHrOEuYSjdKCHKsoybfszIxEu6AdBCAAAQhAAAJ9EECY 6wMQH0MAAhCAAAQgMHACqiv35lf77ekPtplcc6mIHL84cM+VS+3BG1fbTK97QSn6VFClDwhAAAIQ gAAEIACBsULAv4Lb3hO1VlmfuDAnt9zkojxz4xwBAQhAAAIQgMAgEUCYGySwdAsBCEAAAhAYzwS+ 2HvCHvcUljuOVNmZM36FIMlIT5tot1+2wP7G68ot9PpySrFDQAACEIAABCAAAQhAAALfEqhrbrPD VQ3W1Nbx7cIBvppXUUJmigEyY3UIQAACEIDAQAkgzA2UGOtDAAIQgAAEINArgSPVDfbk+9/YhzsO W3tXd6/r9udDaXA3rphjP9+4zlbMnmwS6QgIQAACEIAABCAAAQhA4GICB0/V2/HapqRujJvvwtxU T2VJQAACEIAABCAweAS4sjV4bOkZAhCAAAQgMO4INLedryv3xR6rb0lNXbkNC6bbz1yU27BwumVl pI87pkwYAhCAAAQgAAEIQAAC/SEQ0lgmUV+uMDfLZk8utqK8rP5sjnUgAAEIQAACEEiQAMJcguBo BgEIQAACEIDAxQROe8rK17/aZ09/uM2Opaiu3NKZk+xvNq51x9xsy8umAP3FxHkHAQhAAAIQgAAE IACBbwnsq6y1E/VN3y4Y4KvZXsd5emmBpU3kcuEA0bE6BCAAAQhAYEAE+Jd2QLhYGQIQgAAEIACB ngh8sfe4PeF15XYeqU4qfU6k/1l+YeCvb1odassV5WVHFvMMAQhAAAIQgAAEIAABCMQQULaKQ6ov 15p4fbkFXst5aklBTM+8hQAEIAABCEAg1QQQ5lJNlP4gAAEIQAAC45CAisw/4XXlPtp5JCV15coL c+0vrl9pP7xqqU0qzBuHRJkyBCAAAQhAAAIQgAAE+k8gUl9OWSwSjfkVpVZBfblE8dEOAhCAAAQg 0G8CCHP9RsWKEIAABCAAAQjEI9DkdeWe2bTdXk5RXbnszHT7/hVL7C+uWxFS6cTbJssgAAEIQAAC EIAABCAAgW8J7DtRa5V1iaexLMjJDPXlislU8S1UXkEAAhCAAAQGiQDC3CCBpVsIQAACEIDAeCAQ 6spt3mu//3C7Ha9N/EJAhNUEf3Hjijn2gLvl5k4psQkTtISAAAQgAAEIQAACEIAABHojsNeFuRO1 zb2t0utnM8u9vlxZgaWncamwV1B8CAEIQAACEEgBAf61TQFEuoAABCAAAQiMVwKb95+wpz7YajuP pqau3Mo5U4Iot8qfuSgwXo8q5g0BCEAAAhCAAAQgMBACjV5XTvXlGiwWLc4AAEAASURBVKgvNxBs rAsBCEAAAhAYNgIIc8OGng1DAAIQgAAERjeBmqZWe+7jHV5X7qh1dHUnPZmK4ny779oVduPKOZab lZF0f3QAAQhAAAIQgAAEIACB8UDg0Kn6kL3i9JkzCU93/lTqyyUMj4YQgAAEIACBARJAmBsgMFaH AAQgAAEIQMDszNmz9uaW/fba5n1W19yWNJIcryt39xWL7e7LF1tZQW7S/dEBBCAAAQhAAAIQgAAE xguBXcdq7FhNY8LTzfOb4uZMLraS/JyE+6AhBCAAAQhAAAL9J4Aw139WrAkBCEAAAhCAwHkC2w5X 2fOf7LL9lbVJM1EZuZtWzrX7r1vhBeeLku6PDiAAAQhAAAIQgAAEIDBeCKjm846jVUkJczNUX660 wDKoLzdeDhvmCQEIQAACw0wAYW6YdwCbhwAEIAABCIw2Ao1tHfbCJzs9heURT2F5Ounhq57cX1y/ 0lbNnmJpE/lqkjRQOoAABCAAAQhAAAIQGDcETtY3277KOmtq60x4zgs8jeVUF+YICEAAAhCAAASG hgBXv4aGM1uBAAQgAAEIjBkC7249aK98uceqG1uTnlNFierKrbQbVsyxHOrKJc2TDiAAAQhAAAIQ gAAExheBXceq7XBVQ0g1n+jM508tMX0vJyAAAQhAAAIQGBoCCHNDw5mtQAACEIAABMYEgT3Ha+2P H++0nUdr7KzXmUsmcjIz7AdXLPG6cou8rhz1LJJhSVsIQAACEIAABCAAgfFJYLunmD9S3ZDw5PNz Mm1+RamVUV8uYYY0hAAEIAABCAyUAMLcQImxPgQgAAEIQGCcEmjr7LI/fb7L3tt2yPQ6mVBduZtX zbX7vK7crEnUlUuGJW0hAAEIQAACEIAABMYnAaWv3HW8JqlMFvOmlNhs/z6ekZ42PiEyawhAAAIQ gMAwEECYGwbobBICEIAABCAwGgl8uOOIvfzZbqv0OhbJxuo5FfaA15VbOXsydeWShUl7CEAAAhCA AAQgAIFxSWBfZa0dPFVvnd2J131eNnMSN8qNy6OHSUMAAhCAwHASSB/OjbPtngk0d3VbXUeXdZ4+ 0/NKfAIBCEAAAhAYIgIn65rt8Q+22TeHTtmZM8mlsCwtzLXr1y2w6TPL7biK1CdRqH6Ips9mRimB 0uxMK8pMt4myaBIQgAAEIAABCEBgjBHYfiS5NJbpaRNt6YxJNq20cIyRYToQgAAEIACBkU0AYW6E 7p9dfgH09SOnrLK1Y4SOkGFBAAIQgMB4IXDWhbgju47a5q/3W3O7C2lJxAQXSHKmFNsBF0se3X8i iZ5oCoG+Cdzlzszrp5VZZhrCXN+0WAMCEIAABCAAgdFEoNtv5N5xtMqO1zQlPOyppQU2r6LE8rMz Eu6DhhCAAAQgAAEIDJwAwtzAmQ1Ji9qOTttW22QHG1uHZHtsBAIQgAAEINATgRYvJn9i62Frrm/p aZV+L88tybdsLy5/xNPtHPW0OwQEBpPA+snFdjo5g+dgDo++IQABCEAAAhCAQMIEjrkgt7+yzlr8 +lGisXR6eUhjqZvnCAhAAAIQgAAEho4ANeaGjjVbggAEIAABCIw6At3ukKs7Um2tfrPI2bPJKRzp 7pIr8vSVueWFNmEiP/5H3cHAgCEAAQhAAAIQgAAERgyBne6WO1LV6N/REx/SUq8vN9O/mxMQgAAE IAABCAwtAYS5oeXN1iAAAQhAAAKjikDTyXpr8jtxT3vt02SjwJ1yhVNLTQIdAQEIQAACEIAABCAA AQgkTiDZ+nLFedm2yFN+lxbkJj4IWkIAAhCAAAQgkBABhLmEsNEIAhCAAAQgMPYJdLa0W6OLcnpO NnKK8qx4Rrll5eck2xXtIQABCEAAAhCAAAQgMK4J1DW32e7jtVbrz4nGfL9hbran/c5I49Jgogxp BwEIQAACEEiUAP/6JkqOdhCAAAQgAIExTqDxpNesqG60M15YPplIS0+zIhfl8icV2UR++CeDkrYQ gAAEIAABCEAAAhCwHUerbf/JWutO4nv6MtJYciRBAAIQgAAEho0AwtywoWfDEIAABCAAgZFLoKOp zZo9jWVna/JuuXy/E7domqewzM4YuRNmZBCAAAQgAAEIQAACEBglBL7aX2n7PbNFopHpN84t9Rvn ppUWJNoF7SAAAQhAAAIQSIIAwlwS8GgKAQhAAAIQGIsEznoFeaWwbKlpsrNnkqgm73CUurJ4Zrll eypLAgIQgAAEIAABCEAAAhBIjkBNU6ttPXzSqhpaE+5oRnmhzZ1SYjlZ3DiXMEQaQgACEIAABJIg kJ5EW5pCAAIQgAAEIDAGCbQ3tlqTp7HsautIanYTPG1l0fQyK3DHHCksk0JJYwhAAAIQgAAEIAAB CAQC2w9X2R6vL9d95rRNmJAYFKWxnOVp5hNsnthGaQUBCEAAAhCAwAUCCHMXUPACAhCAAAQgAAE5 5JpO1FlrbfJuufzyoiDMZeRkAhYCEIAABCAAAQhAAAIQSJKAcll8dbDSDlc1WHqCtZslxq2YNdlm umuOgAAEIAABCEBgeAggzA0Pd7YKAQhAAAIQGJEE2upbrOlUvXW3dyU1vszcrJDCMqck3xK+lTep EdAYAhCAAAQgAAEIQAACY4tAjWe2OOh1oLvPnLGi3OyEJjfZU8xLmCvOS6x9QhulEQQgAAEIQAAC FxFAmLsIB28gAAEIQAAC45fA2dNnvLZcrbXWuVvO68wlHH4bbkFFiRVMKbY0LyxPQAACEIAABCAA AQhAAALJEzhUVW+tnV02rbQg4c4uXzjdFk0vt7SJExPug4YQgAAEIAABCCRHAGEuOX60hgAEIAAB CIwZAq31zdYst1xHcm657PxcK3RhLjPBu3jHDFAmAgEIQAACEIAABCAAgRQR0G1zja2dJsfb+gXT E+pVNeluWjk31JdLqAMaQQACEIAABCCQEgIIcynBSCcQgAAEIACB0U3gTPdpazxRa0placmY5fzX vtxyuWWFNmEi5eRH91HB6CEAAQhAAAIQgAAERgqBjs5uy8pIs0XTyuxMgtktcjIzbPmsSZafnTFS psU4IAABCEAAAuOSAMLcuNztTBoCEIAABCBwMYHW2iZ3yzUk75Yryg0pLDNyMi/eAO8gAAEIQAAC EIAABCAAgYQJtHpWi2wX5qYnkcaytCDXygtzvQQ0N9AlvCNoCAEIQAACEEgBAYS5FECkCwhAAAIQ gMBoJnC6S265unNuuSQmIodcYUWp5frFAn7sJwGSphCAAAQgAAEIQAACEIgh0OEZLlQXriAnK+aT fr51MU6inFxzBAQgAAEIQAACw0sAYW54+bN1CEAAAhCAQFIEuto6rb2h1dNGmmXl51h6duaAU0i2 eW25lppGO93VndRYcorzLX9ysWWQGicpjjSGAAQgAAEIQAACEIBANIFOF+X08LvfLD09Lfqjfr/O TJ9oeVkZlp7mPxwICEAAAhCAAASGlQDC3LDiZ+MQgAAEIACB5Aic9foSDcdrTKko0/2HdkZuZhDo JNJlFeRYZm6WTezjx3tbXbN1NLcnNZAJ/gO/cKrccvnhgkFSndEYAhCAAAQgAAEIQAACELhAQGks O/wmuugElO1tbVZTXWUN9XWWlp5uhYVFVlJWZtnZORfaRb/IdadcZgaXAaOZ8BoCEIAABCAwXAT4 F3m4yLNdCEAAAhCAQAoISIyTONda12Rnz5y1iS6QpfmPbi1Pd+dahjvoMvOyXazLtmwJdS7YpWWm X0g1ecbvvG1vavPacp1JjSa3RG65IksnNU5SHGkMAQhAAAIQgAAEIJA4gffee89eeuklO3XqlC1c uNB+9KMf2eLFiwfUYXNzsz3xxBO2adMmy8zMtPvvv9+uv/56m+hpJIcinnvuOXvjjTesu7vbHnzw Qbv2uutMwlynp5+PxNYtm+2NV160/Xt2WWtraxhbgQtz9z34kLU0N9mmD94L7b93z4/tssuvlNHO cvz3QWYfN+xF+h/s59OnT1tTU1Pgm5ube9HmYucv9gQEIAABCEBgrBFAmBtre5T5QAACEIDAuCIg IU6imwSxrvZOO3P6jJ1p67AufyhU621iZpplZGVeEOsyc7NdoHOhzkW6s2fOWEdTaxD1EgUnR16R 3HKeyvKi23gT7ZB2EIAABCAAAQhAAAIQSICAblj7+OOP7f3337cZM2bYvHnzgkA3EFFt+/bt9vTT T9tbb71ly5cvt7vuuuvCTW0JDGnATTZv3myPP/64dXR02BVXXGGXXXGVtXV22xmfm2L/3t32zBOP 2puvvmSNDfUX+p88pcK+873v275dO+3l55+1rs5OW7VmXRDmJMhluVsuzWtCD3ccPXrUXnzxxSAc 3n777TZ//vyLhhQ7f4S5i/DwBgIQgAAExggBhLkxsiOZBgQgAAEIjF8CSluZkZMZhLlYCro4cbqj Ozwin0lIC446v2tW0dmSXBrLvLKCUFtOTjwCAhCAAAQgAAEIQAACw0Vg9erVtmzZMvv000/t+PHj 9vXXX9vNN99skydP7veQPvnkE9u1a5ed8RvYJIwtWbJkSIU5fX/XQ9vXc6vffKc0lgote/fN1+3d t14Poty0GTNt+crVNmXadCsrn2TzFy6yvbt2eDu/Wc8f3lNol+M38WVlJFabLnSQov8dOnTIHn74 YXvyyScD23iiW+z8U7RpuoEABCAAAQiMKAJcQRtRu4PBQAACEIAABAZOICLMWV3/2ip9ZSggn6Qg p61J5CuoKLHsootT0PRvJKwFAQhAAAIQgAAEIACB1BEoLi62DRs22J///Gfbs2ePffbZZ7Zv375+ C3NKgSnHVmVlpZV5vTb1JefdUMZ1nrpSDj+lslyybLm1ulvutGfFULR4mk055mqrq624pNTu/tG9 tvH274X6chkZmZZXkG/rNlzhQuJEz6TRbYuWLA+iooS5zLThF+aqqqqCaLp//35bt25dXKzR85fQ SkAAAhCAAATGIgGEubG4V5kTBCAAAQiMKwKZeVnumMsKP7p1h+lQRk5RnuWWFFgaheSHEjvbggAE IAABCEAAAhDogcDVV18dXG4S5r766qvgfpPAlp7e9yUwiXJKZdnV1WVr1qyxFStWWFZWVg9bGpzF V111lUmQCq65tExrcmEu8g2/tbXF2tvbw2dKXblq7WW2cPHSiwayet0GW7R0eVgnv6DAskIayzQX +4Y/jaVqy8n111tEz7+wsLC3VfkMAhCAAAQgMGoJ9P2tZNROjYFDYGQRKPGUcZP9wnm73+l2srXD n78t3DyyRjr6R6PfGzn+46PI7wrMd7Gg+8xZq/f8+o3+g0avCQiMNQJyrWXmZVtalh/v7V1DOj3V uJMD77SfXxLnpnnturLsTKv0v3M1qnk3xELhkE6ejUEAAhCAAAQgAAEIjDgCc+fODaLahx9+aLW1 tUGc27hxY5/ON4lGSmO5d+/eIOJJ4Fu8ePGQz6/AxTQ9Tvtv18r6Juvq/jbt/JkoYSs3L99Fw+xL xpeb5zfO+SMSudkZlj2KUs5H5h8ZP88QgAAEIACBsUgAYW4s7lWf09zCXLt+WrlN9wukicb7x2vs s5N1QUhKtI/+tps4YYLl+oXlLr9zquN8iobottdP8xQSU0os3dd77fAp+6q6Ifrj8LqvPi5pMIQL sj1lxMaZk+yKilL785EqO9XWMYRbHz+bkvi5xJ07q8oKbZqLFLmeQz/L2UsYaHXhoKmzy3bXt9hn p+rsWHO7ne5DMLhherltmFxsEvpeO1xlW+Icd/2l259juL99DeV6i4rz7dpppVaRG/9viWTOM/6D scsfrZ5qpdqFmB21TbavoXVUi8+jcX9lFXidORfEhlqYa2tosZM7j1id/23O9OOkaHqZrV843eb5 ufhpXZOd4O/dUJ6ybAsCEIAABCAAAQiMewJyuMl19dprr4W0iao3J/dcXykpDx48GGrS1dXV2YIF C2zt2rVWUlJyCU+lY5QTb8eOHXbkyBFraWkJaS9nz55tl112WXDr5eTkXNLu448/tm+++cbKy8vt 8ssvt6amJnvnnXdCP3LzaXs33nhjqI2n9do7Om3+irU2bdZc27d7p+3cvtWOHztqRw8fCn3XVFfZ O15v7sC+PZaVnWNrLttgs+bMta1bNtserzMnEe/yK6+yGRvWWYbfTBcbJ06cCEKktqXXSp2pVKBz 5syxa6+9NswjMzMztllwvO3cudO2bt1qR48eDW0bGxstNzfXpkyZYtOnTw/zmz9//gWX4rFjx0Ja 0U2bNpleK5TO8umnn7aPPvooOBPlUMzPzw/rqTaghFKltVy69GJHYGRAGrNSlWo/qJ5gp9+MO2nS JJs5c2ZIk6l2GlNs6HjQnDVX1RBUytJt27aFfS9RVnPRMgm8Emc1j7QRkAY0dh68hwAEIACB0U0A YW50778eR1+e7V9EvebPchcoEo3K1nbbXOUCWByhLNE+47WTi+zqqaWW5qLbx5W1dixOzSOJA7e6 sJXpeda3+UX/WGGuP33E2/ZQLVs7qciFucnm+o7VdXRZ5yAzHap5jZTtZLhytm5SsUlIW1ySb9Nc HJBTzg+pi0JC3GWTO13kLTYJz5v8eKvtxV202I+722ZNNv2E0XGXjDDX1zF80UBH0BudW9dUlNki 5xovpG2qoLjY6rhu6TptJ/wc3uq8xHd3fbO1uSg62mI07q9zdeayrM3F56GMbv+bpkeLn29pfkHh a7+ho/7gScvxY6faj4t2Pxcz/CYRCYeZuVmhJt1Qjo9tQQACEIAABCAAAQiMPwISyJYtWxbqxUl0 kXgjsS47O/4NhyIkkUeCk1ItXnnllaG9ar1FQsuV6vKJJ56wDz74IAhSEvEkCOW5Q00inkScH/zg B/b973/fpk2bFmkaniXC/e53vwtCU0Tce/XVV+3kyZOhptyiRYuCWLRr1y777W9/a22esvK//F// dxDmJMr9/vFH7MTRI9ZQXx/6O1l53F7903OW6UJkSWmZFbnQJGFu8+ef2PO/f8rTcXba1MnldvM1 l4eU95HBaLyqwfeHP/zBvvjiiyBqSYzS/CQolpaW2gsvvGD33HOP3X333TZ16tRI0+BAfPnll+3Z Z58NYme9j6WhoSGk15SIJ7ebBC+JYvfee6/ddtttob/Dhw/bY489FkQ4MVNonpq72v30pz8N7CTM vf/++/ab3/wmcC0qKrpEmGttbbX33nsvjEH7TH1oDBIW1V77YY6Li9/73vfshz/8YRDqJkRdHFBb 9a99JeFOAt/vf//7UItQ+0WpQrU/Jc5JLPzrv/5ru+GGG0LfF0DwAgIQgAAEIJAkAYS5JAGO5Ob6 3iFdQikT61x8UArFgUS9X2gd7BRkFX6R9u65U4ObLJ7gFhmv5jHRZxOZU2S5nvvbR3SboXwt59aN M8qDg+vZfcdtpztI+nJqDeX4Rvu2Cjwlxw3uqLx99hSTmKIUlhI/N1fV2wlPpdfc1W3pLtyVu5No oX8+xY+5STmlNis/x3L8rrc3j1aZjvV4ETneor/Ex1uvP8t6O4b7035Y1zn/t0QCm9jGulrFN8t/ sGpfTHa+YjzP646tLi8MDtd3j1WHdsM6hwFufDTuL6WyzMjJDD+6h7rOXMDrIu1pP99q65rDQ8vS /HxM8+MizdPKpnsKHTn6snycEumCUOev9XkqzrEB7mJWhwAEIAABCEAAAhAYwwTkSlu/fr29/fbb dujQoSCoyaklMSZeSOyRk0quOYlBcrTNmjXrolVff/11e/jhh4MoJCFLQprEPok7EnS2bNkSticn mBxcDz300EXbU1pN9a84deqU7d69O7ST+Kfv7/pOLJFKYpfGLGGuubk5rF9QWGQzZ80Jzq2u7r3W 1tbqImOOVUybboUuhBUVFbtwVBDWbXSR6vixI0HYOtvdYZlRtfXkQnv++eftf//v/22ff/55qKWn edx0001BVNO4Jda98cYbwdGm9e+///4grmmO//mf/xlEw3379gV32sqVK4MAqbHX1NQEBnKdiYHc dBLpJM6JkRyF2gcdHR0+/rawPbnSJObJaZeRkRHGL+FO85dAJldhdEg8lDD4b//2b0FIVS3AhQsX BoefRNfKysrgfNN+1xjF++///u+DyBrpJ9K/BMpf/epXIXWpxDmNb8mSJYG/REPNQ4JidXV1EOUk zhEQgAAEIACBVBFAmEsVyRHcj1L2vXzopO331HIDiWMtbZdcgB9I+/6sW5yVactKC4Jotcsv5vYU W2r87i3/MM2vlu/1tGnR0d8+otsM1Ws5ua510Wi9u7kONbUGp19DDyLQUI1pLG1HqU2vm1pmP14w 3eYU5FqHf0mXCPThidrAWzXlJEjruMlz1850FwGud1fdlZ4WdZavf8/8qSHFpdq0DLKrq7djeLTs k4N+DL966JQdbmr7dsjOVveQSpwT45kueF7lKVvnF+XaSnfsFrroIiH67aPVQST9tuHIfjUa91ea p24NdeacuRxsIyFO+3mlh7lIrtAPdglx6Z52NsMF3PJ5U63QU6VO0ElKQAACEIAABCAAAQhAIEUE JHZJNFONOIk8kXSWPQlzcsrJWae0lEqfKMEpOh2lRJ4nn3wypMfUcrmo5IqbN29eENMkICk94iOP PGKqbSdHloQeuc1i0ykq/aXGpHSZEfFOri857OTyk2MsNlauXmdTp89wx9xRe+TX/5/VVJ2yaf7+ nnsfsKUrVlq6i1oVUy926OkbdrpzSPPfapFQCs5HH33UlFJSgphEN81DApmELTnP3nFn369//evg MtQ8JNypRp8YPvPMMxfch2IgZ6LEN4XYSZBTWznytC31tXr16sDpb//2bwNXiYIS8ZYvX25aJmFt 8uTJVljYd8YniZ+PP/74hfH/5V/+ZXDGzZkzJ6TNlGAqYVFzlPAol55SW2o/xKYllQgpQW7FihX2 z//8zyH9pURZiYZK0ykRUnMWK+0THRNyExIQgAAEIACBVBBAmEsFxRHeR5OLE3JpbaluHHEj1ffD b78i9jy8rS7MRQS5FndkREd/+4huM1Sv5xbm2XqvUVbsF6H/dLAyzMFNJUSKCKxw4edWTzUpUU7O 0De8ft9LnkLvQGNLHFG5ww42ttqR5jbrcrHuJncxSpy7ecYkk+C03VMvDmb0dgwP5nZT2XdDR7dt 978lqiEXL1TnUULcN36+/sAFl8s9ZagYy814zLkrNe5oOf5H6/6SCy1ddeZGiDAXe5zoTuCQ+tLr PWqsEYdf7Hq8hwAEIAABCEAAAhCAQLIE5H5atWpVEFbkfpLwptppSncYG6r/JpeUBD3VFZOgFwml SHzllVeCyCSX1U9+8hP7p3/6pyCiRVxeWlfbU/pDue/U3x//+McgSm3YsCHSVXiWC0717pS+UcKY 3H0S9nQTm8Qy/WaKzYBR4v3qIVdcoYtHilxPtzhn3nxbtnJ1eB/vf+ozEnK/KXWmhCY5zW6//Xb7 x3/8xyCQRc9DgqJcYnL1qdab0kVKRHv33XdDqk+NVww0dglZ0aH1JGzJqSZxS4KnxK9169YFPhL+ NEeFhDIJkdpH/Qk5CZV+UyKZ9olSbf7X//pfg3CoGn2R0H6QyPe//tf/CuKg0lRKHLz55pvD/o2s JyFRot0DDzxgEviiRTeNSftaLkGJshIE5QCMXifSD88QgAAEIACBRAh8+y9XIq1pA4EhItDqjgs9 RlNIMFznteUWFeVbpbtF9nrdp2YXSYnUEFDaxOvcjbispCC4tT45Xmd/OlBp+9xR2VOqUC2XOCcH 6XSveaW6dMvLCmyp9yFHqcS9wYrReAwPlIVS3yot6Ben6q1T9Qk8jaHOAdXqu2xyiQugbV7Tr3Og 3Q7L+qN1f52rM5dp7THO4mGB2MtG81xUL5tXYTleu3BC1B28vTThIwhAAAIQgAAEIAABCAyIgJxq qhWntIwSVuSkklNN4lF0SIRS7bhIOkOJSBKfIqE2EoOUhlEutzvvvPMSUU7rans33nhjWHf79u3B Oaftrl27Nri5Iv3pWakyb7nllgt16CToRUKi3GDc0ChhSePRfOWQu+OOO+LOQ3OXaCcRTek358yZ c6HunsQ9iXEae6wop/FLIFN9Obn/JMzJwSahLhUhN572odx2EtruuuuuIKCmpaVd1L1EOY1f66qN 5iz3nATS2DFLqJVgFyu4SbzVsSNHpIQ5iZQSBgkIQAACEIBAqgggzKWK5DjqR6knVT9KIpNcRg3u fJhbmOup6/JthqcKzMtI82XddqKlPThnjvlzbK26SV4HSWLIcu9LrxUSSm52F5PS3+13x9MeF7JU 00qx1Neb79uQI0fOP6WF7G8f2WkTQ7rMSTlZpjSSqmV3qu1cWrXQecz/sv1L3UoXa6Z7Sj6JDFq/ qpf1Y5pfeDs9L8fk6CrxukqbjzbYUU8N2p8v13LXLXS+s32+U3zM2S5uNPo4Kn0MSvepucfW+Lqw 0QRepDnT2e5qWuX1wGb4PlDdtUZ3JSoF6tbaRjvqTicJK9rnrV2nw7KT59PSJbC5lDWZ527ExX5R X8ebhM+PPH3lARfdehLlIhvWPthd3xzSipZnZ4X0il0uImV6Kr32PnQ5pSZd4CwWF+fZVN+/OrZq vH6jGKnPytZ26z4Tfy/HO4YjY9Jz5LySI1TnlY591cRb4Nyn5nodLt+2RC0dAzomdd6N1NA+0Bw2 VdaGWn6qObfGj6/PTtb1Kcwlc/xP9vNlaakX+/YUuTpG5RRWTbyeQts69zcoK5zjO1Qb7bxw2Nf+ iu6zzB1q2n/zfV/ptc4p1TbU8aC/V0r9qWOst0hm3tH9qn5b5nDWmYseTA+vs/1vm0S5fBdtJ/o5 REAAAhCAAAQgAAEIQGCwCFxxxRVBKFKaSTm/9uzZE8SoaCeZhBsJaXJISTCTiyta7JEwJ1FOLi2J Tkq9GO0wix67BB05tpSaUduSGCY3XGwaRQl8Sq8YG13+O7Cr+8wljrnY9RJ5r5p2Go+EP81R81BN u3ixZs2aMAcJcZMmTQqC1q233hr4yFUYOx/1oXWVklMuuYiIpWV6pCJU700CmcavFJraF9H7KXob EtoksMohuGPHjiDIqrZcrDCnNJ3Tp0+PbnrhtcTSiLtPx4b2PwEBCEAAAhBIFQGEuVSRHEf9rC4v sjvOp6ZT/a4yF56UDlD1u3RxOdO/pGm5hAOJa68ePhlS2EVENqGakpNtt86cbCv9Yn2B16VSzPK0 ZiVZU4Kw8Yq3kTAUabPaBS5tU/nRW7oOBXGqv31IKJEzSrXedLH8dzuPWPXxzkvEwjAI/9/swhy7 c05FuGD/kQsLEgkTCXGSqCKdZo+LNn2JWX4t3xa5ECMuq+Qm8Qv8coVJDGrzL+ZKSXrcxb33jtfY +/6oToHzKN/Z3+g1166fXhbSQX67/04HUXL/eXfZEh+X1jvp4mBtR2efc0mE10DbLHVRTvXMFOIr Ua4v8SOyDQmbSnu5taYpiJwnXUAR496iKDPDvjNrSkiBqe3qveqqyVkl8We/O5Re8HSlX1c3xBXn 4h3D0duLnFcScyRAV7iYda3Xz5OopW3p+GhzYVQC7dcu9rzirj+ld40VvaP7HM7Xnc54i7O4qqIk zEFpXSv8b8QET3MZm5ZF40zF8S9uV0wptQ2ePlYpSx/dddTqqnq+q3GJH0P3eMpNCdNvHq26kC5X 4+lrf2kdnZuX+bZumj7JFnlfk/ycVZ0931XhuGr09DDXTm2zd/18/cAfNXHO2VTMW2OJRJpvX3Xm Jrpgfdr/Zoy0UOrK0jlTrGhqqWmsBAQgAAEIQAACEIAABAaTgMQviThKwyhhRwLdDTfccEFYOuM3 0H3yySdBRIu4pOQmiw6JQXKPKSTy/Ou//uuFumrR60Vey2Elp5ki0jZayJIoKLErXk21Zr/xs32Q vsdHxqJxiUusS0zLI6GxxY4vKyvrglClvpTmUoKlxLjKysrw0HLV0FPqUEW8336RbQz0WduQuKZQ KtBol2G8vqLX0RgjYmFkXQmMYpDnKUHjhcTXiPCn4ySVc4m3PZZBAAIQgMD4IsBVsfG1v1MyW9WQ kmggUeIuF7DkspKIdMIFBaWqk9AmkU1CnRxfRVnpwWn1lV+kj4RSBp5sa7dJLZmW4RfFs9w10eKi g/qQ0FHrX0ajnU/qs8JdQxnuasp1B5miv31IjJPzTWn1NG4JOt/4WGp7cNLI+SKnW7nPSRfSNZaB huaz0F1VElXkHDzsIkG7z6u3uHxKid09d2pwFuV5+gcJC3KstbtgVOKC5wLvb60LjNPcqVXuF7df 9lpqciMmGuJ4m9dn+6ELEzN9f0kElbgl95cEBwkpSkMosUGuPTkI/auou8QuThOR6PaTaacxSByT kKjQcSPBcCBxxI9VPfoTOtY3zpwUjlM5L+WglOgkUUXOvTnnj3cdY93+hV2CX6xgFu8Yjt525LyS A1Bikc4dCU1yyOkY0vLlpYXuHM3zYyDbxbp0e3LPseDUi+5nJL0+5HwlsK8tP2sSgaf6+ZDnjHRO xkYqjv86PwYa/YYAsZS4LWFczr14KUrlalvhPJf7enpd3dYZ/k5ExtXX/tK+USrVH86fZhKuddOA ztkvXQhs8XNJ581idwWv9xSeU31/+Z8ue9PF4MaYH9mpmHdkzOHZtxPSWfr2R5owl+Pna4nfYFEy a1Kog3fRuHkDAQhAAAIQgAAEIACBQSAgYeWqq64KKQ/feeedkNLwwIEDF4Q5iXVyzElIW79+va1c ufISoUZ1xiLCnFxwSo8Y7biLHbZEnIhLTG2VzjE6srP9pubiYpPQFR1dfp2k2a9BdPZx7SC6TbzX E/xWQf0XG6ptF0krqe33JEjFtot+r/krNajq1ImdxC45AjVHPWve6jsy/+i2yb6OCItiL6Gzr/FL dIvUE1T6ztj9IOFN6Ud7cj9qO73t52TnQ3sIQAACEBjfBBDmxsH+l0gkMWHGeXdRf6asdHpKZ3i6 h7R86kOpJCVeyVX16K4jtstdS80urim9n1Jb3umuCKWr1MXv1e6Mk/MsclH6uAsNL4R6YK1+YXuq iwwFQRR60R1HEobkQIp38T567P3tQwKfUv9d5f2W+kV4jUkiUzxhTmKHXGtyAWocqlcmFgMNiYhB SPSL9cfc5aaL/vETHJ7rWSLmRncdXuHinJxGchnKFac5dvk+kIimNHnfcSFNgsPtfnG7sqXDhcNT wZ040PFpfTm0bnOxSSKq3HyvHzlln3ttMAmREhGm+Bxu8tSiV1WUBqFDQsRIifzMtOAmlKCikIA6 mPX7tB2lF5XA+uSeo0F4k9irzUsglEAtnpdNLgpCmQS/3lIo9sZRImypp2I84OeLauFJ0G7o6PZU mxNDOle5Odf5dq52x5GO0ep2dzEmIB73NoZUfSYxWpzkUJSwqBST+f4ce26n6vjXdiTE6TxSGlCl Op1yMis4bGPnJHFT6VklGG5zF594DyRFrIR3CdtKhSm35ZtHz52zElFVX0/OuXV+TGh/KS2tzlml tNQ5FolUzTvSX+T5Qp05/9s8UiLDL4jcvGa+pc2ZbEf8bzIBAQhAAAIQgAAEIACBoSIgsW3FihXB Gae6Y7t27TKlapRjSrXHlHpRYtrVV18d0iPGjksikz5XrFq1KqSB7CkFZGxb1UKLdZ6pDpvEoFjR p8V/17X676dkK8xN8Gzx8X6+S6TUnBMNCZgPP/ywvfzyy3b8+PGQ2lEinFJBKq3krFmzQg0+ze2J J56wjz/+ONFNxW0nx1rkEXeFmIXRLrd47cQiGR4xm+MtBCAAAQhAYEAEEOYGhGt0riwR6t4F00Mq xP7O4ENP4fi2p3brTVyQa0m12t5wQef1w6cuiG7ahlLsZfiXnGLPV67acarLJXEwIszJFaeL1Loo rrplCqVqlGNLYlh/YiB97Gk4l+pQbjmNRWLUDq8/FVsPbL5/NscdfBq7xDw5fhK5hKz+I7XzxLA3 cU+iz5UussgNJ6fa20dr7A97j9tBZ9EddQH7sNeWU3rQ7PSJwTml9JPirHkMNOQoutJTDErskxjx 56PV9vz+yuAEi8xXc5dgl+v7+ZppnnYu3jf7gW44RevruIk493QcRMSfFHUft5sqF/9ecqHsVX9E C2H7G1qDcDrZ3WAS6eapfpYL1r2dO3E3cH6hjj0Jja/5OfX6Yb8z0/d5JLQ/dEzIKShn59We6vIb F5Vq278VeyLrjpRnucc6/IeshLlcf+hGgehI9fGv80HOXR3bEuFn+t8f1WWMDX02y/eXQue6/h71 NzRmiX+66UBOuU2V1fbMvuPh71f03xSJ50W+r4pd6I+MR3Xs9Pcg1fOOHnumz1kpI8NNspETOnqF IX6tPx03rJhtf3/rOvvCj+dKdw72N+3sEA+VzUEAAhCAAAQgAAEIjEECEsZUO+7NN98MKSuVgvHm m28O9cY+/fRTk4NO4pJSXqo2XGzInRVxXkmY+/nPf24VFRWxq8V9L1dXbMrIWEFODbv8d3mz39Cr GnPJRJb/5sr03/DxlLnoecg91tp66e+k6G1LkNRYJV6dOHHCHnnkEXvqqaeCu3DDhg12xx13hHp6 SimpOar/8vLywPO1114LXcUTxKK3MZDX2oZqvsmlp4fGH1szLro/rdPScu76kvafnIoEBCAAAQhA YKQQQJgbKXtiEMchEUYX8QcScmp9FHMBPV571br6wh0gEcEtso7SIm7zNIzHW8uCMFfqF6clpgxX SPTb5Rfs13s9KDll5IqTcyW67psuHi/3i/VyFsrRs7O+KQiPiYxZbrNImkVtO1IrL15fSq+5usxT RvqF9KOe9k917Q66kBAtyqmd6vZtrmrwVJdFNtfFw5VK1eeund0uOvbmbIy3TdXUUgpGpV5Un5t8 m0rPGH0NX07Dg00t9v6JGpvjYpMeIyUkyslBphBfpUGNHvtgjFOpKzedqL1IlNN2JDDILaracKH2 nB/rckslE3LJferHZ7QoF9mWPlvjYpz2oZyp2i9f+/uBuL2SGdtA20qUk+tTofqTErKiI9XHf43f Zbrb98daT8M6NS8rHOdf+d+paJeeXL1y08nVKhFU6w9ESNVNBguL8oPoJofcxzpnJaTHOIy1/zZV 1oW/faoXGeoHnp98qucdzTTdt6U6c2l+J+7pBBy/0X2l4vUir5t5/42r7KpFM6zyUGUQaes7eq/p mIrt0gcEIAABCEAAAhCAAAQiBJTOUq4uueW+/PLLIB5J5Nm+fbspxePGjRtt+fLlJjdbbEisiwhA SgUpl9jChQtjV7vwXmkxVQtNQpDEqtiUlRdWjHrR4r9L5JaLLYkQtUq/Xub7dYVs/z1wLrfMxU2i 5xEvtWP02prDY489Zlu3bg3pPeUQ/Oijj6ympsbWrl1rv/jFL+zOO+8Mglys60w8I6JftGstuv9E XkfGrxp2kXpzkf0Sr7/IOvosIurFW49lEIAABCAAgeEgcOk3juEYBdscVAJyE+3zNG0N/tzfkCil 9Gx9hWoqKU1jvGhwwaT1/EVhXYxPl/I1jKG6X3LFKH2c3DIS4KKFucl+sV01qZTOcqs7aHShXWkl EwmJoZFaeE3OoK2XfiTiSZSTg+aQb1PiXOwF/sgYJPBpXErDKRFIY9Z2JE4NJCTmyOGl2OOihNJt xhO2pDPsdIePatmNJGFOomF0DcKBzD3Rdfe5M+6EO9bihc4xpXFVyBEm52OiIUF2hx9/x/zcihcS Ife7U1I19XQM6CEROPpYjtduuJZJRI3wOCfSXXxOpfr41w/ZrS5UXu0pWMtdnJMAJ4FuT/2350hE 1JT79IsqOexaB3Q8yYWnc1Z7WS5f/R2MiI+xnOXWrfd9pVSwOk4iIn2q533Rdn1bSmeZ7k694Rbm NI71a+bZ2oXTLc/HI4FSNwSIBQEBCEAAAhCAAAQgAIGhIqA0ixKU3n//fZNjbt++fSEVo54loF15 5ZU2b968uMNR20mTJoXPJOop9aVEvnginoSo559/3v70pz+FOmv33nuv3XXXXZeks4zekFxycssl W1tObrk8Lx+gNPLxQq5AOdrkgoswUJrPWGFNbVVLTvMQL81BrkOlr1SoFt91110X+goLov4nh9yO HTvs2LFjYal46BEJbSueYzDyeW/P0ftBTkeJrLNnz47bnxyBSlMqEU8pPBctWmRTp07trXs+gwAE IAABCAwpAYS5IcU9PBuTS+MVT7+3ywWW/oYccC3d317IjtfOv2+5U84vNLsjJl5IXDp9Xu3RBWz/ 7jesIfFpn18kX1VWcM4B5o4jpQGMiG+Lz6e41JdE1akaSGq72InpwrMcXRK2JJqp1lZPUeIXqyNu QtWiemDR9IvcPbHtpuXleM23jLBYgkye39E3UGFOqRYLzru6alw06K29aphpP4+kkOAbcYjluLgS mx4x1WOVCCjHVUcP+7HTD/SIa1ECazL1+JTmUMJrZH7x5lLrd1NG9tm5um3pdtLii4bx2g/lMgnd ueePNf1diaSujYxhMI5/1bNUzTjVf1sS0lnmhLSv+pulWOrLZ3q6Wf2NUhrLYy6GDyRK/PyJnLNy 3MU6hqP70nwPdV0qsg7GvKO3e67OXJZ1DCBFZ3T7VLxO979PJbMnW7Gn3dVrhW4kGOzzNRVjpw8I QAACEIAABCAAgbFFQI4viW+vvPKKSdTZvHmzVVVVBeFmyZIloXacHHTxYs6cOXbFFVcEoefQoUP2 xz/+0RYvXhycZLEik2rY/eEPf7DXX389uOXkKuutHp1+ojS5KNfsvyuSdcvl+e+UXP/e3dO1l2nT poWUnqr9dvDgQXvjjTdMNfDmz59/0bSV/lFpP7dt2xbERQmWEiEluimU4lKP2NDn7777rj3zzDN2 9OjR8HG3X1eKFubUT0TQlPuwo6P/v2MlhkoU/Oqrr4L499JLLwXBbe7cuRcNRdt866237J133jEJ dJqfagz25q67qAPeQAACEIAABIaAAMLcEEAe7k20u/NN6dbk7EhldJ89E9Ir9uTusuDBOvfFbZg1 uTBtCR0S3FQbaqGLcEpnKcfZUXe7yNGji/VKcykHoFLbJerokCijVHmqFSZ3jGqg9ebuKnaRTfW3 FHLiTHN3z3n9ICyL/Z/fX2Zp5x1ZQZg73zZ2vd7eSzjUxXF98Zdw0Bl1B1tsOzkn9Uj2R0Jsv8m8 Dy7E8yJZjn+xV+rIdGfS87GYzNb8h4cLOOq75/3S22cD23YQr3oQACM9qW5b+/kfQpF9GflsJD3r GCvw4zvrfPpKnVMae3QMxvEvV6FquW2Y3GHT/Jya72knv/SUrdq+3KyLPAVsuf9o1bmvmpa91YCM HmvkdRCXXBBWSLCN7IvI5/15Hox5R2/3nDDndeaGKSb6XanFMydZqQtz7X4cRJyC4aaF88fDMA2N zUIAAhCAAAQgAAEIjFMC69atC+kqJZ69/PLLIYWlRKirr77ali1bFtd5JVSqE/f973/fPvvss9BO optEqPvvvz8IdkpXqX4++eQT++1vf2ubNm0Kn990001BDOyttlm737zY6GUluuIIXQPZTZn+Gz/f f+P05JZTXxqH3HsS5uTo00NuMjniVDtPn0tQe/HFF0MtuVOnToXxyx2n1JRKJXn48OHgoluwYIHd fffdwWUoF5zayaH2+OOP2wcffGAS3RSx4ptYRlJ7yrX37LPPhvp1Ej8loOnznkIpRO+55x7T/nv7 7bftueeeCwLhj370I1uzZo3l5OSEFJcSFZWGU87G3NzcsO9UEy+eM7CnbbEcAhCAAAQgMNgEEOYG m/AY7l9usJEk1vQH9Q6vM3fIHSTzPWWl6u4pDaAuziutpWquydmzubrG1xlYarvobV+QaM7zufA+ eqWo13JYRYTLvS4SKFVlT2nxopqFl3vdASjhb6DR7UKcxMJMmxhSaErs66lKm8YmHTD2TsCBbjOV 60vcOeU/XjR3iSRKVVjkApDcS/0N1fi6empZEEWVGlJCjpxo8UKCXF/7MV67RJbpB17kTsSe2ksS 0j5TaFx9rR9WHIb/ydkpZ6bu2NQxLUE11gk4WMe/alweam4Nzrilns5SKWwlzOncVypLCedyy+nv Qc+Ca3xoOnf09+/bOLcvvn3f96vBmndky2lZXmfOj/GJLtyfcaFyKEN/KwqnlljZ3CmW6cKoUEX+ rXB0BAQgAAEIQAACEIAABIaFgOqMSaCRm0qpGvU7qqKiIriw9NxbyFX3s5/9zJqami4IWxJ+lEox Pz8/OL8OHDhgu3fvDuvcfPPN9jd/8ze91qLTd+RGL5eg2nLJfk+WKNebWy4yN9XG++lPf2qqISch 8cknnww192bOnBmcbKqNF0lFKfHtoYceCnzkbJNAp9Sf+/fvt1/+8pdBHJsxY0bgePLkySDa1dfX 26233mqqYSchU+Ke+pRrTsLYlClTTG0kAird5SOPPGKvvvqqffe737Wf//znpm32FhLgtB9Ux06u x8j41WdGRkZwyCnFpQREbeMHP/iB/eVf/qUpjScBAQhAAAIQGEkEEOZG0t5gLINOoKa9y3a5G26t 156SO051076qbgh1qORWkzNKrrqBpraLHri+UMsdIheaHEMSAHqLc+6vcznX5d558WClC0T9Sx2p NKK9pdHrabv1HZ6q1C/WS9TKdweRam3pfbyQm08ul4FLD/F6S80y7Sc5QCXOzXGRZb6LqhLaBiLM KcXhHbOneK29TNt8qiEw70mYS82o+9eLxGHVZestlEZR+0whcTJW7Oqt7VB+tkSCmJ9XCqXUlRs1 ItBExjFYx/+Jlg6vK9fiqWuLgjt2ph8nqpe47HxqSznddrpQr2NooKE0ohEHmM6PvlIzRlKbRs99 sOYdmYvEsSxP15nhNSY64qTSjKw3GM95kwqtbH6FZbsIGsbhfwMjfwdH8vE6GCzoEwIQgAAEIAAB CEBg5BDQd1O54ySySVxSRFx0vaWb1Hr6XGKbxL2nn346pMTcunVrEIfUbySUVvGBBx6wn/zkJyFt pFxcPYXSVzb575HuXmrS99Q2enlwy3kN7Ay//tBXSLzSPJTW8YknngiimFJ7ykWnkFipenISyu67 7z7buHGjyammkEin9kpVKRFSD71XGz2rXt2DDz4Y2kr8lDgmJ52EvpqamlCnT+lC5dCrrKwMAqnq 1kmgU+07OfD6EubE84477gjrP/XUUyEdpwRAiYyRG1blklOKTvWnh9KOyhlIQAACEIAABEYSAYS5 kbQ3GMugE9CF8W1eV+5IRamtcXFO7hkJdHqe7MLOUa9Dt7+hdcCp7WIHLpFLYkmBi166aC93TE/p LOv8y7hEAoXWbfK2R9zF11MoFZ/SA6p/iXJdCXyJr/O6ctrmJP/yrnSecpv1JMzpc6XMHGmxxwXW 414bTO6nxS4AKRWpxLr+OAglNC4vLQxuqjx/HQTOrv6JoYPNQQ4ziaUSc6KFnOjtlvrdkJEaZxK7 EhFno/sbjNeqY6i0sXKlKrZUN9pBd6LGxmAd/10ujEtkv7KizZYUF7gjNtfmFemRZ0V+PG+taQrH S6TGZOy4entfp5Sc589ZnTs6hnoK/Q24bdbkIB5LeN9UWWvHPbXwYM07ehyRdJYdvfw9iV4/Fa9z nG/Z3ArLc0F04vkLA9HpVvV3JpHUn6kYG31AAAIQgAAEIAABCEBAws8///M/B9FJNPRewk1/QoLV NddcExxfEockKukhl5gEI6V6lDCnemZycMWKfRK65PiSkLd23WXW6DcTKpVlbGz87p02b8Gi4DJb uWbdRR8Xl5TaX/z0b+3Gjd+1Uhez5sxfEFJY5vjvkohAqNSOSs0pl9rll19+UXu90Tyuv/76MEal tpR4JnGsvb3dysrKTO655cuXh/pt0akltewXv/hFYCDnnMQ11ZqbNGmSTZ061ebMmRO2qz4k/Imt 2CxatCjw0bblmlO9vn/5l38JAt2JEydCH0pjGakV19f4lTpU4qK2J0dcRNxTOlG5FzV+bVM16ST4 xaaw/PGPfxz2kYS8eHw0ToW28w//8A+mOoHqR0wJCEAAAhCAQKoIIMyliiT9JETAvwddSCM3wW8y +/Y+s/53N9A+9jW2hAvySmW5wC8ir3OBbkZeTnAp6UK+0lgmm20tUneq0Lz+mddAk+DWk2B00u+Q a+g8JwotcoFptrtcDrnAFE/IU0rJa6eV2bWeglH3wr11rNo+PFF7QSToL7V9Lj6q7qAcgyvLCm2u P59wR5NYRoe2t6q8KIhf0ctHwmuJG3I7ql6gBMYbp5cH4ecrryXWW605iaTXTPUUJlOKg2NQ6Q2V 0rCqNX4ay6Gea6YfKzoup7ggqn0SGxJ6FniNtDKfs44pibgNcX7MxbYbyveZ/mPrKhe/100qDm5L udK2+L466WlaYmMwj3855JQaVvUkxbStuyykrZXoqVSXhxMUrKp8PnKd6nRRv9NdfNzv24knpEqY vN7P19V+Hv35aJXXuqsPCAZz3hHGEWEu8n6wn5U6s9TTVxb6+ZUWVfsyN8pVeO5v4zmH8GCPh/4h AAEIQAACEIAABCAQS0DpDZWSUY9EQs6refPmhUeX39zZ2NgY6qjJMSY3mPqPFYIi27nssstMD/2O qPOU+qf8xr14vyEWL1thesSLHHeDrb/iqgsfyS2X5zdFZp7PqKIPJP7p0VtoHkprqYcEOc1D85EQ J3Er3a9jxIbaKHWnREfVjlNaT4l/mrfaRbvSJLJFhLbYfsRo7dq1wdWmftSHlomhoj/j17oSVPVQ ms2Ghgbr7OwM9eskPEbq2MVuW++1bT36CjnvJGDqQUAAAhCAAARSTeDSf2lTvQX6g0AvBLpdCYp8 EZV4FUl31kuTSz4aaB9ybKjW3HoXZmZ4mr3rp5Wb3D2qW6YL+YmktosdVJW74Br8wr3cZuUuoMjl 1pMwV+lihYShxe7qqcg5N57D/iVddc9idLKwzk0uQF3uTiSl0/vI3TdyBkWHxE05gpSmUqH1mn1u kbQOWnbMnYFb3DkoIVAMbp4xyU75OPZFiQsSsOQqvN6FwHLn01v0Z5sSQ4qcg9wzColJre46ip1j b9uJ/kyOQYmSElglVCpt4l8s9Fz1E9OC+BGPt9IObphcYt+fOzUIoDr2Pj1Z9/+z997fcV3X+fcm eu+9N4IEwd57L6IkqliWZct2HNtJ3mU79vfHN/+CV7JW4tfL8Yrjb5zYjixLliiZkiix917AAhJE JXrvvfLdz6EGGgwGIDAYAAPw2fZo2r3nnvM5Z4aY+9xnb3VPtZnUo9btz9ZjsFwbFSL3tE+NlX1i 7ejCnEDsWq5iqq/+KIIwCZeg7RpwNuuJskD/klRYxnzsSogwtf8gkl6vbTFCmG0/0a6z1791X1v0 hxlS14IZXLGh+rmI0M9kva51OC5bVZR1JBr08/2guU2yw/Uz6+ejaypECrW9ShWLrQMpSTGXEMAh ckNMtqRbnY5xeyj/IB2jj36XIlr0vg515vQzN6TfAdMZ7vrZDkmOkpDESPHQPlhHpI+3fgd6mrWM 8eNzzyABEiABEiABEiABEiCBuU4A4hDcYZONbv0d0qq/SfrVbTbV8PfR3/5aX9rilnOkPYhiuE00 IMBBvMNtKgEB09qR52hbEOHgVmSQAAmQAAmQwFwiQGFuLs2Wg31FisY9CVFaWyloUi00q4sLLhc4 q6YrevRkMWqxIZBibnt8uHEC4Zg4yY33nxWOtAEhrFTFL7hZIOhAUMjXE+uP1U3njHpdaAcC30J1 NiFVJlIP4kS8vUCtqgtVjZKl/YDLaL0KhhBnjpfXGwGxTecBIgwEKNREW6opGPE+nDcYh7Vwg/bh uDqgqfMgCCA+L6sz7fcOfiWBYZ8rKuot0WNuVnfLxphQI5ihzQpND4kT/BAT4CpbpG4j8BkvJnJM CIUHtf+o74c4UlJjhDV7zsDxjmWoib5CAABAAElEQVT9XoU6no6W1hq+2cpnlbqSIL6saQgx7KpU gOwaGDIiJRxoEFJw/MQAP/HQHwHXVZT7TPefSk1B6/4463Gcij2vp8UapyVELaQehbABAQgMkzR9 J4RNCJPFutZsYzpY4xixupb3J0bJSk1TOBy6NLBeUPMuROuZoe9wYIbpD0TV5OSS9vGz0hr9HpmZ 9T/cL30AByhSVpbHdhtnLNyGWMvg9lg//46uPXx+MC58FvH52aJCJETeUxUNUqiCOt6P1O/dLfp5 3qOiN9Yk3Lj4Pu3QCwMQzv7co80QZf5ySoymaQ00YztcVC1l+h0HoaxvAt+laMORWKDfOcF6wUCY rk0v/ZxZB9ZitLKAKI7PK2oN9mNhMEiABEiABEiABEiABEjgOSSAenIteq6jS8U5/F6ZSsAtF6h/ f+OeQQIkQAIkQAIkMLcIUJibW/PlUG+R5m+3ulcmezIU9aBq9STqdApzTfrHKAQscyJbXRUvqKC0 Ud1gV1UwOfIYgsnYtdYsMBxpA84V1HtaEREkqOmFv4fv64lzONWcERDhcBK6R//ojlcxA4688QLp Mz/V8fppX7JDA02qRTiP0A5O4CM1IEQRCIlIC3ezrsVsj2PYBtxScAdB5ENgXO6w69honBjrX4qq zNjhIgN3pPyDiwibQ0xEW6gNFqMn1tHmoJ5QtzgcrY87kWN6aqNIO2np1w0dA/ZzVBzB8bHvbU1d ifh6RrysUCcZxhCvqUkhcCJNJdY9+EGUwWcBtdkgvkKU+0DHb8RNG9ehaXCW/oMxwZGVoHP9dmaC bFPHIlyevip8JamgGOPvrWtiSI59KbjCEWkb08Eax4jVY+9TR5T1dwkkW6wXuF0hzllcr006BnyO sa4fqhPVnlvO0m9nrn9Lm5Z7tI3POsQquDXxXfNA01hCtJ1KIIUoRGGsK4jme5QL1h6+z6CB43sl OUjrTOj3GoTfT3VbOHKtPz/OHjcEfFxogM8Y5ggCpLd+j3jquu/T77xpCZ37IP3uiEiLER89lm0+ YohycA1DEMU8VI9xgcK09I2NkgAJkAAJkAAJkAAJkIALEcBvAYhybfo38eAUf4Pqn9cShAvg9CK8 qbjlXAgPu0ICJEACJEACzxUBCnPPwXTjRHmI99PUZpMZLuqeQdCYzugaGDAuk3B12qxRN1CEnsSO 1Cu+WlRsuKAnlScizDnSBkQCnJzfoCeUcSIb6dWQ2q5ZhRxnBE7+l6gg0NjTa9JZIt0dXGV43V7g JPoNdau16biRAhAn1tOC/M2JfoiGED9wD5H0RHmdYfZA03FOxd0HBkiX2KWiD9IhQlyAuy9eU1tC CIIwC/HskYoJcG9BmIO70VqUsTeWmX4NKSvRTzjI4BLEbWEwavX56W1kb56KMu0qWDSafTBuCJ+u FBA/T1XWmzp5SFuKNWpxLIJ/sdYHPKO1Bc9VNZjUiDPZd3wfeNn5LkG/sGYgeEMMhWsMgifWDurk jbXuLX2fzvWP+UXqWqR/hZMPghoEIqz7qQRSdN7UzywccHtVlIOwjc9Q9oKnjla0jfS4V1ScPKnu 1xt1zbrtSBF1OsdtGdt015nzVzE8XEU5X/0eXQCF1ibwOcR3Ok5CYO0iZS6DBEiABEiABEiABEiA BJ5HAu2oVa2/mfqd8BvUTwW5IP0724NuuedxKXHMJEACJEAC84AAhbl5MIn2hoD0dr97WCYhmv7O 0WjXk8hFdtLkndZ0bah/BrkIJ7zHCjh5PtRUakj5BtEEIoht6Llak+Ltf/rLnwp06tJS/cqkU8RJ fkucURECQhccVkgJZx0TbcN6Hzxu7OkfPlH+SMcBIWoq7i3b9h9oCj2ky4xT91amprSM0T+ay+w4 3Cz7QSi4q0IZHDdXapqNywS13SwOL6QzRDpAzG29bjOWQAaRBGkib6lYhSjQuRpLGIG4kN/aYRxa cNcEa256P3XdoA0ILEgniuNDFERACLTnfJrIMSFSfFRcrW0MGrEJfXIWb/QrV9nBQQiRzqQPVbEX tf2QQg/HgrMSwivETTiV4Ay0jOvp6Eb/d6Jr3TK2q5oetE0/N08/HyPbG28NW2+JPpW2dct1FXKQ +hDOObiuhrS3tTrveK9E10CLCudY+/bC0h9nsEaK1/+bW2pY2jsWXsM8Yg7gEIUQhvWJz5e9tTJW G85a//bah6uyo7/YfB9iHUCEHwPd8O4TmS+IkZgjjPeSir0QoFDDzksFKqwDiFD43oMYOJYA7Mxx N+l3xHsFlXJGv6NxCQC+Kz01vaWXXhjgpl+sQzo/zgxvFd3CU2MkICrYtG/bNpybcBHCcWsEUV23 nXoxBoMESIAESIAESIAESIAEnjcCSF3ZrJk0evTcyLN+izyLDTLiwC3ni9pyz9qY75MACZAACZAA CbgkAQpzLjktU+8UHGCNNX1Tb8hOCzhRj9uzAifpc/Sk9bMCognaw8lyb73aCx49CD0QjSxR0NKp 74+upWV5fyJtWLa13D8VbzyNwAV3j7PrjFVoqrz7KhYt1hPTS9VVkvylW+erUVl68tU9XCUQJHHz 0D+2/Tw8xEdPqA88GTIOH3CxwvLVjlaP4LiCEw63sSJYBSs4WdzVAQWhyqwXXTP2AsIQxDkEHH32 BIaJHBNzBBFjmdZ5MykzVViyTutn79iTeQ1cISbi9lDnEw5FpPbzcl9g1hKcdViTkznmRNe6ZWx3 xunws9aw9a5PIMKpqIObj3uriotPxdFOFXtwrPHWENqx9McZrCEU4zYT4Yz1b6+fjnwfTnS+IEpC dMINjkIIwfih3KPpRvFZmYj47KxxQyi89WVqVwuHBdonb3XBeqhQ3afuRWeFh140EJYSLUFxYeL+ 5feDbduo5ZihTlvUmTtW1/pUEH3W4rVthM9JgARIgARIgARIgARIYI4TQL1niHKd+pt7Mr9Hxxp2 gF4MGKgXb+L3PIMESIAESIAESGBuEqAwNzfnbV72Gudre/QP1qnERNvAieKlmnYOddvK1D1VqKIf RA9nBsQR1NhaFRksKyOCtb6av9xVYQruwYkEhMk2Fa/Gltcm0or9bVBra6emzMwOC9K0gx3yV3XY Ie2gbfiosLU6MkRFPK0dpQEHHUQORwM18iDKwU3ZpI6q6QqIIRBF7ImI03XM6WoXYmLP4OSZzxTr 6Rr3dK7/6eozhPO+3qm50qZj3JZ0ls4S5tz1+yM0KdLcPFWgGyuWqgifohck4EIDXKSB2okMEiAB EiABEiABEiABEnieCAzo7zmIck/ryk39KjVczByMLB16QSCDBEiABEiABEhg7hLg5TVzd+7Y80kQ gPsMriMIUkg390JytKk5BTcaThgjZefU/0Qe3aHHmsYup6FN2tXJAoELJ6ldIVDrCi64JVoXak9C pGyLDZdoTYVhqWWGPsJxtiEmVLbGhkmoum1wUr1E02LCNedIQAzdo7W4ojSt3iVN+Yh0kozpIUDW 08N1rrbqpYK4p+/YAtpkxoXC8kHx4ZrCMlq8/L3H3DVSjwencLgKd0gvm6fpgq1d0GPuyDdIgARI gARIgARIgARIYJ4QgCjXpJk1mvXWryUdphr4WzxQf7f7a7p6lPlgkAAJkAAJkAAJzF0CdMzN3blj zydBIEQLI7+QFG1ca97qAktRB1iMCkSov3ZNXW2N3dPj5EDdrQtVjbIoOEBWRgYZ59xjrRHWqk64 2QykdcTJ8qzQQElVsXB/UpRkqKOvor1Harp7NE/9AlOnbZmeWIeYiFph57TO372mtgml5rM3NpyU hzsRqTNv1beYlJP2tuNrUydA1lNnOJ9agCjnqT/gnVFnLiA6xNSV89HvBZwYsBd4dW1UiLqSg0zt zstaM3Om0qHa6w9fIwESIAESIAESIAESeP4IXLhwQT755BOpra2VTZs2yaFDhyQ2NnZcEE8088rZ s2fl6NGjUldXZ/7eXb9+vbz88suSkJAw7r62b/brb+4mdcpBlEMqS2eEn57XQG05D73olUECJEAC JEACJDC3CVCYm9vzx95PkID+fW1EObjDLIG0jJ8+rjW12AawwTQFnGEnK+olTus8bVFnGurZ3VRR bPqO+OyBoE4dBMkgrTV3KCXG1JtDWs/uyEGTZhLn2wPVUeejf/A3qGh5prJBWdVITafjtcaQ5g+p PVGPDukZGdNHgKynj+1cbBmCnLd+vt31h/yQ1i10NPzUYRueFiP+mqIStevGinh16K2PDjO15T4t rTW1NumWG4sWXycBEiABEiABEiABEpgOAgUFBXL48GHB/cDAgGzbtm1cYQ6i3JkzZ+QXv/iFnD59 Wjo6Ooygd+DAAQkICJhUFyHENbWrU07POUCgc0Z46N/0wSrK+Xp56mW0DBIgARIgARIggblOgMLc XJ9B9n9CBNo1deNdTSmJtGqISr1y7XZDi9yobXE4NeOEDqwb4YT0dRXi4lWY2xAdKqj9hXpu6NNs Rktvv5yqaFAXW7dYnHFheuIeaRD7tc9F6iaEuw8p6B6omAjHC2q3TSU6NaUnwz6Bh8r4qEetuSqz XK+qnGqQ9VQJzq/9vdUljHpw/Q4Kc176/RWWGiNB+h3m9owrdNOC/I3oD5ftxerGWXcIz6+Z5GhI gARIgARIgARIgAQmQgBCm/VtvH2sRblTp04ZUW7r1q3y05/+VPbv3y/BwcHj7T78Hn4ud+nvbLjk 2vX3c7+TLkg1F85qSY5AvblrmQ4GCZAACZAACZDA3CdAYW7uzyFHMAECffoH8XlNKfmopcNsDVGq UWum9Tjp6rVndaFNU1ceK6sz7jwcG44mV4gmZXCjt08KlEuonrSHKOelTpgh/UXRjav89L1m7S/d LtM/W6h1WKhiKGK2U51O/2h5hJkm4D2FOnMeKtiHaV3OkIRwcVeX7bOiqLVD3smvMGJ+jV4lzCAB EiABEiABEiABEiABVyVgEeX+7d/+bdgpt2PHDvnZz34me/bskaCgoAl1vVcvQm3Ti+AgyHXr739k inFWBOhv9VC9UM7rGRfIOet4bIcESIAESIAESGD6CTz7DNv094FHIIEZIQDH12zWOarRP9Jxc7XA 7wWIb7gxZo9AW9/AtLs3Z290PPJsE0CNOdyQgvLJJC4MQBrMkIQICU2OFE+9QncigTTBuDFIgARI gARIgARIgARIwJUJ2IpynZ2dRoyDKLdz504JDAy0231IboN68S/SVPbqrVt/y/WoGNej4tyAPnee JCfioxfGhepFdn5IYUmznN354IskQAIkQAIkMBcJUJibi7PGPpMACZAACZDAJAhY6sx5eHtIv9aN nEgs0F/+QbFhpq4cHHcMEiABEiABEiABEiABEpgvBGxFua6uLtm3b59xym3fvn24rhzSUw5AhBsc FNSOww2CHF6DKw73ffrekBMdchbGqCsX6u8rcMy5MYWlBQvvSYAESIAESGBeEKAwNy+mkYMgARIg ARIggfEJDNeZm6Aw5x8ZZEQ5n2B/U/tw/Nb5LgmQAAmQAAmQAAmQAAnMDQK2olx3d7e88MILRpTb smWL+Pr5SaeWfehEGQorEQ4uuQHNPtHQ0CB5ufekuLBAaqoqBfuHhIRKbHyCLFm2XFLSF4qPj88w jKbGBrmXc0vqaqolJDRMlq1aIzGxccPv2z5Ae3duXpf66nJJT0qQrVs2S0JCgtlsUEXAwsJCuXz5 srlHXzw8PCQ6Olri4uJkxYoVkpWVJf7+/rbN8jkJkAAJkAAJkIALEaAw50KTwa6QAAmQAAmQwHQR eFpnTtNRNj+ttTnecXxVjAtPjRH/iGCB245BAiRAAiRAAiRAAiRAAvOBAES506dPyy9+8Qtz39PT Iy+99JL89Kc/lY2bNombh5fUa+3vDhXmUDduUIU4uOYQT54MqSB3Xz77+EO5feOaNNTVSmtrq/T3 94mfr58EhYRIQlKy7N5/UHbtOyiRKpYh3Ba4ybVLF+TMiS8kMChY/u4n/0eiomPUBWf/7+ySogL5 6P0/yYM7t+XQoZdl1coVph0IdocPH5b3339fHjx4IPX19YL0m2gHaTeDg4MlOTlZXn75ZXnjjTck MTHR7Mf/kAAJkAAJkAAJuB4BCnOuNyfsEQmQAAmQAAk4nYCXn4/WifPSOnMLtM7c2JUvvLQWXVhq tElj6e7p7vR+sEESIAESIAESIAESIAESmA0CtqJcb2+vCl+HjFNu5eo10j0g0t7eoTXj+k2KSts+ Xjp3Rj740x/l5rUr0tHRLimpabJ89VrxVVGuqalBHj3IleuXL0pFWanU1dbKq2++JYlJKSrGBUlY eIR0d3VKdWWF5N7NkVVr10t4RKTtIczz3Du35M6t6yr81UlsbKzExMRoqswhOXr0qPzyl7+Umzdv SmRkpGzcuNGIb0jDmZ+fL48ePZLi4mJz6+vrk+9+97tmf7sH4YskQAIkQAIkQAKzSoDC3Kzi58FJ gARIgARIYGYIuHm4iVeAj7hr4fgBvQLYXrh7ekhIUpSEJESKh7envU34GgmQAAmQAAmQAAmQAAnM OQIQtqydcu3t7bJ69Wr55rfelkVLV0hrz6B09faYWnIWh5z1ICvKHsvnRz6Si+dOi7e3jxz62pvq intBEhKTxVP/voZzrSDvoXxy+H3JuXFd/vqXP0tcQqIKaNHi4+sryzV95fnTadLYcE1y7+RIeelj u8JcV3urFDzMNaJcRkaGLFu2TIJU2KtTkQ7CXE5OjixcuFC+//3vy65duzSFZog69vrN++fPn5c/ /vGPkpeXJx9//LGsX7+ewpz1JPIxCZAACZAACbgQAQpzLjQZ7AoJkAAJkAAJTCcBk85Si8fbE+bg pAtOCJewlCiBa45BAiRAAiRAAiRAAiRAAvOBgKWm3LFjx4w4B1EOgfpsjyuqZGFTm3h4+ciQPUVO txscGFBR7ZTcuHpZ+tWJtv+lQ/Kt7/1Q0hcuMvXdTGP6n9S0dK0hF2pqzt27fVNOffGZLMpaItnL V8qiJdlm+/vqlnv08L48LiqUpStWjdjfx8tD8ksKpLS4UOB427BhgyxevNjUe4YTrqioSJB6c926 dcbpt2jRIsuhzXZ4XlFRIc3NzUYobGpqEtSkc3dnFoxhUHxAAiRAAiRAAi5CgMKci0wEu0ECJEAC JEAC003AJ9DXpLPsbhl9pMDoUFNXzifQT2TB6Pf5CgmQAAmQAAmQAAmQAAnMRQK3b9+W+/fvS0lJ iUkJidprbW1tRsR690/vSEhkrKzbuFlrK9sXsJB+8tb1K1JbXS1JKamyfdc+ScvIHCGqgYuPprRc q+0g1WVxwSPJuXlNRbhcFeWWqustWAW6FXL14nmpKC+VvAf3ZePW7RITF2+Q+qooF6rZLfLu3ZFi FeBQL27t2rXDdeIgLuKGqNZ+oL4cHHXWoltUVJT86Ec/kgMHDoiXl5dkZ2cbUc/sxP+QAAmQAAmQ AAm4FAEKcy41HewMCZAACZAACUwfAU//L+vMLdA6c1ZXBPuHB0lEWqz4hQWaGnTT1wO2TAIkQAIk QAIkQAIkQAIzS6CwsNAIcr6aUvIb33hLVq3bIB9+8Bc5f/a0qfeG9JMRKmrBAWcvqqsqpL62Rt1n A5KqghzEOU9P+2nf/fz8JTV9odaUi5Syx8Uq5lVJl9aWgzC3fNVaSVZXXbmmxbx/57aU6vsQ5vw0 hXxEkJ8019dI7v170tjYaOrHLVmyRHx8fEyXUlJSTK25Bfp3/PXr1+XnP/+57NmzR9asWSNZWVkS FhYmbm5usnz5cnOzNw6+RgIkQAIkQAIk4DoEKMy5zlywJyRAAiRAAiQwrQTcPdzFW8U5d70id6C3 3xzLW1104anREhAVrFcJu03r8dk4CZAACZAACZAACZAACcw0AdRgQ522b3zjG/Ltv/2hhMXES/fA E6mqrJT8vAeapvKkJCanar02zSARGTWqe42a8rJdHXaI4sJ8+e/f/LsEantjBerHtbU2m7ebdN8O 3RfCXGJyimRqaks46dBOSWGBbNmyRSKD/SVA082fVmcf6sOhHt7GjRvFOlUl3HAvvvii3Lt3Tx48 eCBIy3n37l1JSEgwt8zMTCPIoW5eUlLSmMLhWH3m6yRAAiRAAiRAAjNLgMLczPLm0UiABEiABEhg VglAiPNEnTkV5jz0PiwlWoLiw41YN6sd48FJgARIgARIgARIgARIYBoIIC3kW299U97+3g8kKiFZ VJPTNJI7jDjW2NggjfV18tnHH0pCUrLsPnBQXWq+I3rR3NQoHV/WpSt7XCKVZWWaInLEJiOeoFYd 6tIhmpt1346nNe281f22bOVquXTutOTl3peivFzpa2uSwMQYGRjoN0441JKLi4uTlStXSmRk5HC7 Hh4e8sILL5isF7///e/l6tWrUqb9wA1OuZCQEImPjzeiHGrTvfHGG6buHN5jkAAJkAAJkAAJuB4B CnOuNyfsEQmQAAmQAAlMGwHvgKd15no7eyQ0MVJCkyKNUDdtB2TDJEACJEACJEACJEACJDCLBFav XiMHXn5VIr8U5ZDRPSQ0VF449LqUlhTLqWNHzf3Hf3nXpJZctXb9iNpsg4NDMvRkyIwgc3GWSXnp 6ek1oRHBIRcQEDi87dLlK02qy/yHD0w6ywpNa7lyWbYUFBSYOnjtKgDu2LHDpKeEGGcdEOpeffVV 46RD3bw7d+4Y1xxcds3NzdLU1GTauHHjhjx8+FB+8pOfCEQ623as2+RjEiABEiABEiCB2SEw8l/5 2ekDj0oCJEACJEACJDBDBLy0qLyXprMM1loWYZrCEo8ZJEACJEACJEACJEACJDBfCQSHRYhXQLAM PNXWhoeZnJomL7/+plRVlMu9nFty59YN+fSjDyQ8IkKSU9OHtwtSx52fn595nrl4ibz+1rclwsrN NryhnQc+vn4mRSbeQn245KQEWb9ureRcvyIlJSWSpwLaThXibt26ZcQ51K6DmJaRkWGnNRG4//D+ smXLpLa2Vio1HWdFRYXk5+fLzZs35dq1a+b1I0eOSHJysqRobTo46RgkQAIkQAIkQAKuRYDCnGvN B3tDAiQwTwh4uS2QCG83ifTxEG/3cfKczJPxchhzicAT6fRMMvXkfLSexQKmt5lLkzev+zqol683 9w5Jbc+gdOmZM72YnUECJEACJEACJEACUybQPzioqSIHR7Xj7u4uq9dtkH0vviwNdbVac65Czhz/ 3NSCe+3Nb6qrLszsA6EuMPBpTbmenh5TXy4pJW1Ue5YXWluatcZcqyB1ZXBwiHh5e4uP1ngO9vOW AF9v2bV9m5w5cUzOnj1rHG9IX4l6ceXl5ZKenm5EN9TEsw7UyYMjrrGxUaKjoyU8PFxSU1PNbVDH 19LSYvb/4osv5He/+508evTICHVIdUlhzpokH5MACZAACZCAaxCgMOca88BekAAJzBMCqsfJwkBP 2R7tK+l6H+jpJvp/Bgm4FIEn6Uins0BFOZfqFjvznBMYUiWuS4u+1HQPyoW6bslp7jMC3XOOhcMn ARIgARIgARKYIgFc7DPWBT/+AQGy9+DL8ri4SI7+9SNp0Hpznx5+XxISk2T7nv3i5eVl0luGhIWb XuTl3pOSwgJJS18o7japJrHB0NCQintfqPD2hXn80iuvyaFDhyQmNET8vDzFw91NVq5YLtnZ2aZO HNJRnjlzxrjlurq6jBtu8eLFI1Jpot2PP/5YDh8+bIS5v//7vzcpLS0pKiEwQqjDzd/fXy5fvmyE uaqqKiPmYX8GCZAACZAACZCAaxGgMOda88HekAAJzHECy0K85dVEf1kb4S3BVOTm+Gyy+yRAArNB oFcVuvRAD/Er7ZRL9d1GrJuNfvCYJEACJEACJEACc5dAd9+A9PYPTGgAsXEJJqVleeljuXHlkhSp 8PbR++9KdEysLF25WuLiE2XZqtXy4N4dTXtZIafVVZeSniELF2WNEtAe3r8rx48ekcvnz5oUll9/ /VWJiwiRAB9v3fZpd5COct26dXLixAkpKioyglt1dbW68gJl7dq1kpiYOKrfqD13/fp1KSwsNI45 CHsQ8Gyjra1NIPAhAlR09PX1td2Ez0mABEiABEiABFyAAK+Vd4FJYBdIgATmB4Ewb3fZGeMrGyMp ys2PGeUoSIAEZoOAt1qPFwV7yUvxfpIe4DkbXeAxSYAESIAESIAE5jCB+tYuKW9ola7e/gmNArXf spetkIOvvC5JWnducGBAbl27Ip+pg66yvEx8tb7crn0vqEi3Sp48GZJL58/I//33/0/OnTomrc2N TzOk9Knb/+oFeee/fqO16m7qdk9k9+5dsm3rFgkM0PTxNtUNNm7cKIsWLZLOzk65ceOGlJaWytKl S42Tzp6YhrpyeB/uuGPHjsmvfvUruXTpkkCIQyrLjo4O48D77W9/a9JiYrv169ePWatuQmC4EQmQ AAmQAAmQwLQRoGNu2tCyYRIggeeNQIY6PLKCPcXfg9c8PG9zz/GSAAk4lwDOXWWFeElmkJfkt/dL 7+BYCaice1y2RgIkQAIkQAIkMLcJQIw7cadIcoprZAB5sicYqAe3Q1NXlhQVSrPWcUOduJOff2Lq zb38+tclVVNXvvbmt6RLBbC7Obfk3MnjJv1lgrrbAgMDZFBrwJVrPTe47eBu2717t3z/+9+XhQsX 2u0B6sOtWLFCLly4IM3NzcZ5B7EuMzPT7vZpaWnyrW99ywh4t2/flj//+c+Sk5MjcXFx4qN97+vr E6SufPDggaAO3htvvCHf/OY3JTY21m57fJEESIAESIAESGB2CVCYm13+PDoJkMA8IhDj6yEhXu7z aEQcCgmQAAnMHgFf9wUS4eMufnpPYW725oFHJgESIAESIIG5QmBQhbgz9x/Lkev5UtPSMeluh0dE ykuvvSFlJcVy4cwpqa2pliMfvifxKr7t3rtPXj54QLLTk+Tjwx/K0aNHpSg/T1BzDo47S0Bwe/vt t+XNN980jjV77jds6+3tberJoZ2bN28aAW3VqlUSFRVlaWrEPcS3ffv2mdfee+89OXfunBH18ILl +GgTaTBfeeUVI+Ih3aWnJ7MPjADJJyRAAiRAAiTgIgQozLnIRLAbJEACc5+Ap6Zf8/jqN9ncHxBH QAIkQAKzTAClOt2tTnbNcnd4eBIgARIgARIgARcmcKOwUv58/r48qmyQuIVLZd2SdAnxdpPMhekS GR09oZ5nLFwkf/eT/yMHXn7VpIj09vaSFUuXSFxYkAT4+UhqXJSkp6bIiy++aBxqcKm1tLSYWm4Q 1SDMIeVkQkKCeHl5jXvMmJgYCQ0NNdusWbNGsrKyxMNj7NN0ISEh5rioLQdnXIXWu2toaJDe3l4J Dw+X+Ph4QZtoB8dHOksGCZAACZAACZCAaxIY+1981+wve0UCJEACJEACJEACJEACJEACJEACJEAC JEACwwSqm9rl/YsP5PKjCvHS0gIh8XGyKitJ0mJCJTTAV3w8JyZSeajDbNnK1ebm4e4mof4+Zn9v 3d/iTENaSdz6NX0larx1d3cbZ1pgYKBJK+nmNrHSBsXFxVJbW2vcc0hjmZGRMTyesR74+/vLsmXL ZMmSJdLV1WVq1A1oTTy8juOPJ+yN1SZfJwESIAESIAESmHkCFOZmnjmPSAIkQAIkQAIkQAIkQAIk QAIkQAIkQAIk4AQCSGF5PKdYb0XS2tkjkcF+U27V08NdwgKeinJe+theIE0knGqOBAS9y5cvS0lJ iakrh3pzQUFBE24KbjgIcbgxSIAESIAESIAE5h4BCnNzb87YYxIgARIgARIgARIgARIgARIgARIg ARIgASWQW1Ynn90skLL6VnXL2RfRJgMKbYQF+hq3HAQ6Z0RfX59x1kFQa21tlY8++kiOHTtmXG87 duwwLjiLI88Zx2MbJEACJEACJEACrk2Awpxrzw97RwIkQAIkQAIkQAIkQAIkQAIkQAIkQAIkYIdA R0+ffHojX67mV0jfwOCUhTmIcuGBfhKibjlPTWXprEAtuD/84Q9y+/ZtI9ChRlxpaamsXLlS9u/f L7Gxsc46FNshARIgARIgARKYAwQozM2BSWIXSYAESIAESIAESIAESIAESIAESIAESIAERhK4lFcu xzSFZUNb18g3HHjm7rbACHIhAd5OFeXQFdSdy8nJkT//+c/DPUOduh/84AeyefNmU6Nu+A0+IAES IAESIAESmPcEKMzN+ynmAEmABEiABEiABEiABEiABEiABEiABEhgfhGobGyXI9ceaSrLehl68mRK g1uwQCTYz0dC/OGUc076SusOhYSEGAGuqqrKvJyeni47d+6UvXv3Olynzrp9PiYBEiABEiABEphb BCjMza35Ym9JgARIgARIgARIgARIgARIgARIgARI4LkmMDj0RI6rU+7s/VLp1HSWo+OJ4H+WMI/G Ee8CfLwlVNNXentMz2kyb29vef3112XNmjWCWnIREREmfaW/v7+li7wnARIgARIgARJ4jghMz18c zxFADpUESIAESIAESIAESIAESIAESIAESIAESGDmCNwvrZXPbhZIWX2r3YNCg8MNTronesO9muLs hq+XpxHlcA/n3HQExLiEhARzm4722SYJkAAJkAAJkMDcIkBhbm7NF3tLAiRAAiRAAiRAAiRAAiRA AiRAAiRAAs8tgfbuPjlyPV+u5VdI/+DgCA5wxg2pm65/YEi6evulQ910Hu5u4t3vbpxqIzbWJ96e 7hIVHCCBvt5aB26aVDnbg/I5CZAACZAACZDAc0+AwtxzvwQIgARIgARIgARIgARIgARIgARIgARI gATmBoHrBZVy+l6JNLR3j+owRLmBQRXl+vqluaNb/H08pbdvQDw93MXNxg6H5+mxocYtB/GOQQIk QAIkQAIkQAIzRYDC3EyR5nFIgARIgARIgARIgARIgARIgARIgARIgAQcJtDe3Ssn7hTLg/J6k6LS tqGhoSHp7h+QhrYuKa5pltauHvHz9hQPNxXebIS5tOhQWe0XKz5ePDVmy5HPSYAESIAESIAEppcA //qYXr5snQRIgARIgARIgARIgARIgARIgARIgARIwAkEbhRWyVVNYdnW1Wu3tQF1zHX3Dkhda6f0 DQyKX6OHeLqPdssF+XnLmvRYiQ7xH+Wks9swXyQBEiABEiABEiABJxKgMOdEmGyKBEiABEiABEiA BEiABEiABEiABEiABEjA+QQ6tLbcybsl8lDdcmPF0JMnRpDrUGcdhDmkqHS3ccrh6cE1C2VpcpSm uvQaqym+TgIkQAIkQAIkQALTRoDC3LShZcMkQAIkQAIkQAIkQAIkQAIkQAIkQAIkQALOIHCruFqu PhrbLYdjPFFhbkhUnOt/Iv1aaw515FSH03j6XzxKiwmVHdkpkhoViqcMEiABEiABEiABEphxAhTm Zhw5D0gCJEACJEACJEACJEACJEACJEACJEACJDBRAp29/cYtZ2rLPWMn1eZkUMU5GXxiJcc93cnT w132rEiVzYsTWVvuGRz5NgmQAAmQAAmQwPQRoDA3fWzZMgmQAAmQAAmQAAmQAAmQAAmQAAmQAAmQ wBQJ3C6qliuPyqW1q2dSLak8NyJWa125A6syJDYsYMTrfEICJEACJEACJEACM0mAwtxM0uaxSIAE SGAcAkNDQ9LS2i5ddn5sog6Cm5ubeHt5SUCAn3h5eY7T0rPf6u3rk7a2DhnS4ujBQQHi4+P97J3m 0RbzbfwDg4PS1NQi1TX10tfXLxHhYRIbEzHn5tXV5sXV+jOPPoIcCgmQAAmQAAmQAAlMmECXccsV S25ZnaaqnPBuozYMCfCRQ+sWCcQ5d/1txSABEiABEiABEiCB2SJAYW62yPO4JEACJGBDoFsLlB87 dUnu3M2zeUefqjC3QNU5Dw8PCQkOlIXpSbJqeZaKL1HirgXNJxvV1fXmWJ1d3XJw3zZZnJk62Sac uj1EyaKSChWSvCQuJlLH5O7U9m0bc7Xx2/ZvMs97envlzPnrcuXaXWlsbpFBLXK/Ye1yObB3i8TM McHV1ebF1fozmXXBbUmABEiABEiABEhgvhDIKalRt1yFtHROzi1nO/5NmQmyLTtZQvx9bN/icxIg ARIgARIgARKYUQIU5mYUNw9GAiRAAmMT6B8YkOKScrl+675xxfn5+qpL7ssi5Xpl6NCTIenu6ZWB /gG5lfNAHuU/llde2qUiXbIR7cZuefQ7HZ1dkpdfIq1t7bJ5/crRG8zgKyjQfuHyLfnixEXZvnWt REeFT7sw50rjnyrq+w8Kld0FKSwul/i4KImJilDHXIh4e3tNtekZ39/V5sXV+jPjE8IDkgAJkAAJ kAAJkMAsE+juG5BTd4vl/hTdcqEBvrJ7eZosig+f5RHx8CRAAiRAAiRAAiQgQmGOq4AESIAEXJAA HE+bN6wUH++vUkwOqYDVpykoH+QVGSHr/OWbEhTor6koA42YNZlhREWGywv7tkpvb58kxEdPZlen bwth7l5ugdzMyZUVyxYL6rQzJk6g+HGFVFbVSUZaorx0YIekpSRISEiQBOramGvhSusS7FytP3Nt PtlfEiABEiABEiABEpgqgfuldXI1v1KaO6bmllu/MF42ZMZLgGboYJAACZAACZAACZDAbBOgMDfb M8DjkwAJkIAdAonxMbJ29VLx9/Md8S5ErKxFaaY23Ikzl+Vubr6sW7Ns0sJceFiwbN24ytRocAVn VV9/vwxoCkbG5Al0dnQZJ2VaSqIsX5ppxKTJt+Iae7jaunS1/rjGLLEXJEACJEACJEACJDAzBHBh 4oWHZVpbrl5/tzh+9V6wpq7cvTxVMuMjZqbjPAoJkAAJkAAJkAAJPIMAhblnAOLbJEACJOBKBFBn Di4eCDB37z+Sqpp6aWpuHdHF1rYOKa+oNvXokNKwWrepqKw1LirUpgsLDZaurh4p0236NS1mclKc hKrDqr6xWSp1O9R3S0qMVSdewIh28aS5pVXbrjWvYxvUu7MOpOOsUvdWRVWt6Ve/Cm7+/n4SrX1O TY6XYJvtGxtbTD9q6xpNM6VllXLl+l1J0T7Faq05T8+v/pnCNqXlVVKn90NDT3QcQZKammja9vBw Xk068AQvpDFEasg4reNn3Q/LeCfTH0ubg4ODhjfmwDbaVWAr0/FBpExJ1Dmxs431PpXVdVKtN8zj gHLHMe7cz9dUluE6f3HD84eTGFgDj0srzRyjDRwfzjqkDUXdQtuYyBpycxu/tiGOW1PbIHD01dU3 apnEBboGA9WhGSPxsVHi6zu6toe9dWndtz5dr6U6juLSCuns7DZjTNc1EBEeqp+FOulQhim6zqz5 trV3KNca8dBajDh2V3e3PC6rktq6Bk0V62bmNy01wThPrY+Fx2P1ZyptWo7hyFgs+/KeBEiABEiA BEiABJ4HAqV1rXK7qEoa2rqmNNx1C+OMWy7Ql265KYHkziRAAiRAAiRAAk4jMPpsnNOaZkMkQAIk QALTRQBOOjjd4DIbHBwacZia2no5euy8+Ph4i5+fjzx8VCz19U362Fdef2WvbN+yRmpVKPlc65JB yPjaK/uMMNeugt6pc1eltrZR3nx9v3HsjWhYn+TcfSTHTl5UkS3BiB/Wwlx9Q7NcuHJLbmqNPDzu VPEPQhT6GRjgL4sWpsiBvVtNykUIjIgSFeI+++Kc5Bc+Ns9v3M6VguIyOahpNvfu2mQEMaTbvH03 T85euC6lKqi0d3SaK2b9VNiJU+Fs++a1sk7dhc5I3Qih8Ojx83JDxwBx68UD2414Yzr35X8c6Q9q A567eF0Kisrk66/t1zSlq1QAHSls5ek8fXbsnOEaejDomcJc7sNCOXHqkpSoUIV1cP9BgQqKNco3 SV57eY8RrTC/127elYtXbg+LjaICmb+uCwifWzatlvXquLSeRwxzImvIOs2qNR88xpq8duOuWU9l 5dVmnelhxdfHR8cVJGtXZcvObetHOT3trUtL293dvXJa1+fZCzd0/TZoWtd+s8ZjoyNl9YosKVWB srGpxfC1FuYgoH5+Qj8PmhY2JTlO11qpFBaVSlt7p6nhiFSwy7IzZf+eLUYQthwP92P1Zyptol1H x4J9GSRAAiRAAiRAAiTwvBC4VlApueX1Mjg08vfOZMYf5Octu5dpbbkEuuUmw43bkgAJkAAJkAAJ TC8BCnPTy5etkwAJkIDTCcCJVFVdr+61NiO+2Ka7xEn/CnWtNTQ2CQQwiCExKl4MDg2KlzrQPNw9 pEeFItQla21rV1dQt+kjXEdP1ImWm1coywoyZXFmmgQE+A33v6u7x4g/91UQylqcru63rxx1EKtO n78qRz47Y9JvLtH34+OijXgCl9s9Tbl54nS1aS9M02iGf+kGi4oMUwEw2ziq2lQYTNc6admLMyRN XVBenp7m2NdVJDt85IS6vhpkyeI0vW0Udzd345rKUcEODj0Uptu8cbWKL45fBQtRB6Lc0eMXBCkM VyxbZBxztgKaI/2BIxGOsaKScsMQ6UjB2xIWYQ3jObh/mwTZcStatrXcJyXE6JhXGREMYiWExGXZ CyVBuaPG3JCewLiq7sMP/3pcGtVNt2zJQlmsx4UmWqgC4R11XJarM3BQRb3tW9eOSJs6kTVk6Ye9 +4Kix4ZloYqsK7VuIMYLsa60okpuqvj68aenjFi7e8cGI65Z2rC3LvEeBN4r1+/IkaOnVZjtUiFu iXH8YU3euvNAPtN5a21tN23BSWcdPfp5wBqByIZ1GBoSLCuXZ5m1CCHz9p08+UJF6qDAAAlTbtbs x+rPVNqcylisx8XHJEACJEACJEACJDCfCbR29cq1/AoprR+ZHWSyY16bEScbF8VLkO9Xtbsn2wa3 JwESIAESIAESIAFnE6Aw52yibI8ESIAEnEAAV4UiPSFuCJRU6O3rkxYVH+CAO33+mnEHbdu8RhIS ou0eEa615XAC7d0iyQmxghoNT1MX2k/7CMdZprrabt99KPkFJVKtzruFAcnDbcOtVqruJ4hWSIMY oCkqLVGi6Qpv3Mw1T+E82rRhhbqwgozogxSLH31yUk6dvWL6DoeWRZiL05SGeAz3V15+iSxZlG5c ahAbkT6yUlNinrt406Qe3KMizgv7tklcbKS4LXAz44czCg6+k2evGiFw0cJUS5cmdY8+fq6CHFyE kRGh6jjbbRyD1mNEg472B+6+zMwUuZGTa8YJUdRamEOqSTjfkN4xIzXJblpF2wGl63YQ46o0nWVe frEgTekBZQ8R0FNFTbjzTl+4ZgSpfbs3qyNss8BdBrG2rqFJIiLC5Lg67o6duqhMo0x6VIuT0XKs ya4hy36YSxx/cWaqHHpxl3HxDT0ZkubmNvH28tI5vWFSa2I9x6iz81kBl9vJM1eMy+0FdV3u3rnR 8OtX11yWirV//uCoVFTUjBD5bNvEWDBOuCCzs9KNk7NFxW3M8QltG6LdqhWLRwhztm3YPnekTWeM xbYffE4CJEACJEACJEAC843Avce1cq+0Vrp7+x0eGlJX7l6WKosTIh1ugzuSAAmQAAmQAAmQwHQQ oDA3HVTZJgmQAAlMkcDFy7dMvTHUe7MEXFXd6hBCGj0IK0gnCWEOYou9gMiyeuUS2aquKqSxfFZg ewhjiVqHC+IB6qwhLaJFrEGqRTiMVi5frIJQ7PDraDdARb1tm1fLAq3ZtWbVkhF9gusOqQLvav0z uJpQt8sSHjo+NxWjLHXOvFS0gSjn5fXULQfBDmkuk1WA2qKOONSps/QHqRiREvJBXpHkPihUN1qF 6a81M8txxrtv0rp5FlEO9fsgyq1Zma218UYzm0p/ssBWBdI79x7p3Far8y99uHZdngqh5coW4hrY 2rr07PUfwuXTm7LSucNjpC5FClMEuBSpY21herKm+1yjaRq/Yoc53rd7k6nZdyvngWGcmZE8qu7b ZNeQpZ9Yq3DswUkJhxhquXmqUzMmOkJeemGHcdHBcYkUpxOJfHXglWhdOQivW3Q9o0YdwlvXCcTn cuWJ9TpeoA7h2lVLjUMTQikCotwSdWjevvNQHabNRvgbrw3b9xxp0xljse0Hn5MACZAACZAACZDA fCIwoJkWLuaVy6PKp3WoHR3b6jStLbcoQZDOkkECJEACJEACJEACrkSAwpwrzQb7QgIkQAJfEihW BxocVNYBwSVIBTA4ol7QGmxwnmVpukmLiGW9LR5DWIJDbiKinGXfhPhoSVU33EN1YBU/LjciHI4H Z1OhpmGEaw+14qJVwLKOmKgI2bl9vRHNUMsL6THhQkMKRdS3Q4rG9o4O4wSDc2qiATdYU3OLCn0R pu5ZX//IK2aRahDiEVIa1qtYiRSM1uk3n3UcpD2EEwtiJ8Z4UB15q7RemT1RDm1NpT+YiwxN0Xk/ t0Dr6JXK2sZsU+cN9ecgPjYrq/0qlsWqI3CqgXSntXUNKoQ+TQ8aq0KWRdC0tB2nwmaizjeEuTpN 89jR2TVKmHNkDaF9iIuR6siDc+737/xVFqroh3UFp+XT48ZYuvHMezMWrXuI+YEwG61rzTogxKJt pEWt07U2VkCEi44KE4soZ9kuJCRQ59tPRbkOIyJaXp/I/WTbdNZYJtI3bkMCJEACJEACJEACc5VA SW2z5BRXS1PHyBTlkxmPt6e7bF+aLFmJmjFiMjtyWxIgARIgARIgARKYAQIU5mYAMg9BAiRAApMl ACfc2lXZ4vVlzTT8mISrDOIchAWIPOFhIfraV44622MEa80sOKgmE956PKQfvKF1wB6pqAIhCsIc nFdweaF+WYqKI9jOOtCPIb2y9f7DAk1LWWREsg6tBdapAl2nCj4QzjpUBAsOCrTebdzHSOPZqmJJ T0+foFYZhD5744UYA8EDbjwcbzLCHGrsQZCBuAPGFVU15jj2nFxT7Y+nzh9qvMXdvGfYwuEF1x+4 Ik0oUltCYLIVjsaFNMabcCW2tXdKvzJESlHbOoTYDWPGezgeRC+ws5UEHVlDaBtr6CVNGfnpF2fN moDwiLSjEeEhT9Nmav2+VVrnDWvrWYF1g3qK/f0DJs2kr536IMHBgc8UoCEyeqtobBuYFzgUkS4W t8nEZNt01lgm00duSwIkQAIkQAIkQAJzjcCV/Ep5UF6vGRgm+ceZ1UAz4yNkVVqshNAtZ0WFD0mA BEiABEiABFyFAIU5V5kJ9oMESIAErAikq7MKDjR7gorVZuM+hJPOkiJy3A1t3lysLrwkTbmYo7Xm kF4xMyPFOJ+qqmtl765N6rKKtdlDjJiFdJCoHdbY1GJSBEJ0wjhiNNVme0enXLxya9R+470AkWRQ xT6kRERduYy05OHUj/b2Q5pDHxvB0N521q8h5SIcckgreVPFyOs376urK9GISLbinDP6k6lpJVEX 7oKmKi0tq5Sl2QtNfTikCEXaUbC1dbZZ93eijyFUghvu0d6z2sS29k58OLqGglQU3rpptRHhCopK pVjdlnCBwkEH4fbegwIVfetln64niMzjxRN1WFrGgj5iHmzDvGbndevtIES6uY2+XtrwcfA66sm2 6ayxWI+Lj0mABEiABEiABEhgPhFoau+W6yrMVTS0TWlYmzSFZVZixDP/Dp7SQbgzCZAACZAACZAA CThIgMKcg+C4GwmQAAm4PIHRGsSEugwnHmrL3b3/SAWVCkmIf1rfCyJNhgpLoZr6zzYgap04c1kg dL24f7tkL8lQN1agSb0ZqCLNjVsQve4ZgUWeIaBY2oY7zlJvLlnrox3Yu0VC1XU1VkCUm6zbDA6u 7VvWaq26leKrbsSPPjklp85eNcLkmtXZ4q610SzhjP7A2YVabhA9i1SseqxiFUSr3r5+I4BGRoRa Djelex91lYEF+g8nXE+vpvj08BvVJlJ5Ih0onJh2U6I6uIZwoEBNu7p8aaapm4eUpo2NLVKrKTMh fiJ95qmzV3SdJT5TmPPz9TVuOAhoHSrwor+2qUbxenfPV7ULRw10vBcmuB7Ha2LUe2O0Oe1jGdUR vkACJEACJEACJEACc4tATkmN3CurlR7NluBoxIYGyNqMOIkNCXC0Ce5HAiRAAiRAAiRAAtNKgMLc tOJl4yRAAiQw9wggrR8cZFdv3DUpJPG8sqpO3W9Jkqy1w+ASsg6keMwvLJXqmnrZtW39U1ddwsga Yk3qokPKSNS7g4vLNiz6j/qhhnU7CDEQCeFcQ506uKYiNd2jdSAF47kLN4yzb+P6FbJsycJR/bPe 3vYx+oM2kWZxq6YPhavr8rU7cvr8NYmODtfxxg3v4oz+oI2sRekqdsYYttdUpIJzLFGfJyfF2RfH hnsw8QceOkcYk5+mb4QzD+k+UQ/NOhoam6Wqps7UDYzSmoHBQc45cdHb26cMc+Se1tJbt3rpl07A GDNGrJVYdVAiNeXDR0XSoGId5tXNSgC17iMeQxCF+xJCL8TM6tp6IxxbtsN6wus1tQ0uf0X0fBqL hT/vSYAESIAESIAESMBZBPr1Ir/LeeVSUDV23eCJHGuNinJLk6LEc5y0/xNph9uQAAmQAAmQAAmQ wHQR+MoKMF1HYLskQAIkQAJzjkBaaoKkqFCEGnMQWSDiZKE+WmzUqLFAbBocHDRpJwf0HkKLddzX tIWoWdfS2vE0NaWmJrSOBQvcjDCDdrrUwdWr7i5LLM3KMOIYapRdvXHPpMm0vIc0l9dUPPz401Oa JvO2EXvcVER0NGKjI2TntnWmjh7cfdf0eO1ap806nNEfiJupWqcP4tSlq7e1rl2tYQtxzpmxTNNk Qli8/6BQ03Q+kLa2juHmu7t75fLVHFPrDqlG07S23VTSpg43rA8g3JaUVhrn4bFTl6S8omb4baRW hfQ6NDRohEK4+jDvz4qVWpMOfcx9WCjnL900QiP2wbqDs/OSzj9SqM6FmOpYauoaVfTMlwIVwzu0 fiODBEiABEiABEiABOYLgcd1LXKvtE5aOx3MhKAgfDXLx8ZFiZIWM/KCvvnCiOMgARIgARIgARKY HwTomJsf88hRkAAJkIBTCcBdlak1227fzVMnXJ0kas25VBXr7Ik3EGLwPtxtcEl9eOSELM/OFHe9 QrWmpsGkbaxraDL137q7e1R46x/RV+gyOB5SUUIEhAtuw9plslzFmFQVYzZvXGlcUidOXza17BZp zTs4rCBo3bh1X+q1baSjRIpIOMUcDbSJfm9S592Ro2fk1DlNaaki2tpVS1Vseir4OaM/SBuJenhI /1lWUW24IXVocNDoFKGOjgX7LVROcBH+VYXLo8fOKadGSdfjQAh7rMIZ2OHxwQPbJFsF0PFca5Pp B1xh2YszjBh4R0Wzvv5+8xwOvubWNiOkQaxbsWyxcQlORJhL0VSmO9WN2aDi28kzV6SsvFqddxEm BSjcci0qcvp4e09I5JvMWKZj26mO5c69PDmt6VZjdPwvH9w5wj04Hf1lmyRAAiRAAiRAAiQwUwRu axrLwmrNlGEnw8ZE+7AkMVJWpERLgKZ2Z5AACZAACZAACZCAqxKgMOeqM8N+kQAJkMAsE1iyOE3d Y1FSUVljhKQkFd/GElEgpDU1txiX1LkL142jxyL0QHTatX29XFSHFsSo2roGgUDnq24pS6xeuUQK ikrNfnDpiYp1EMWQ8nHrptUmxeOJ01eMw+z2nYemH61t7RLo7y97d2+S/bu3SJymO5xq+KtACJGv RFNaXte6eGfOXZeYqAgjIKFtbxUPndEfuA8hZpaqwASxD2O1iH9THYNlf7jRkFrU28vL1HM7c/66 XFMnIOYQbsNwFcow1m16g2jmzMjOSpdXX9olX5y4qI69AnlU8FhFXR9THw6Tu37NMq0ZuFXi46In dFjUv4PI6Onpru7IHHXkVWibJVoX0EfrHiYJ3IHXVWjsU9F3KuLshDozxY2mOpZGda/m62cFKUO7 tH4ggwRIgARIgARIgATmA4FerSl3R4W5soZWh4eDv3M3L06QxQkR+DnBIAESIAESIAESIAGXJUBh afbnMwAAQABJREFUzmWnhh0jARJ43gj4qXBx6OAuU5cLziYIKo4ERJ7vvPWyDGq6QKT/sxcJKoi8 /eZLxs2UnpZobxNT1+utN16UHVvXSYqmXoyKCLO7HV5EDbCXDuwwAh5qgCFVItx1EeEhJp0i3k9W 19N2reOGtuCqso7FmanyN2+/ahxk2DcxIdrUFMM2EVoDbscW7YPuD9EOKQv7+vrFX+unQTSDsBUZ EaptTvyftPHGnxAfLW99/aBs2bxaggICJChwZO01Z/QnJCRIAgL8VGjykKxMTREaMzpFqDWf8R4j /Wa6uhmTEuJGiJ3YJzoqXPbs3KiuqkStJ1dvHIcQrjAGMEP6zGCt3WYbE1lDtvtYP4fAuWnDSiO8 QdhtbG6VAT3ZEhjobxyCSJOKFJoYv3WMNy+oMbdpwypd04lSr+JUT0+v+YzExESoo7LBuDVxAsbD tk2td/j2N16Sfq1vl546eq3Hqfj8zTdf1DXVN8p9NlZ/EqbQJsbr6Fiw76b1KzWlbLRZ/xB3GSRA AiRAAiRAAiQwHwgU1TRLXkWDdPX0OTycxPAgWZ0eJ1HB/g63wR1JgARIgARIgARIYCYILHiiMRMH 4jEmR+B4eZ38jxY9ftzG+jGTI8etSWD2CLyRHCDfSgmQSJ+RotPs9Wjmj4z6cnDy9KsIA2cQHGZj uezs9c5Sqw7pMe05yNA+BBnUsvNS4dLL01NTMM7e9bCO9geOvN/+zweCFJ8//JuvaerO5ZPiZI/d s14DW7BboCk7kTbU4mh81n5TfX9gYNCsCQjFWA+Ys8msCRwfNdUe5peY+n9Ll2SMEEvxZ8zRY+fl 3Q+OGiHweyrwQuh11ZhPY5kJxu+Xdsi7JR3S0Dvo0OH+n6Up8vX0ePH1cLz+pEMH5k4kQAIkQAIk QAKTIvDO2bvyz4cvSX5V46T2s974jU1L5P99Y6tkJ009k4Z1u3xMAiRAAiRAAiRAAs4mMPJSdWe3 zvZIgARIgASeKwIQe5Ci0tfXsWE/FeTGFjbRvp868VwlJtMfuPye6P/a2zvl3MWbgtpocJXBQThZ ocqR8YMtnGwzHXBHenhMbc7guLtw6eZTV6QKcWtXLzXCL0S/ouIyk6KzVWsTblNHJpyArhzzaSyu zJl9IwESIAESIAESmDsEujQd+Z3HtVLR2OZwp/19vGR9ZrykRIc43AZ3JAESIAESIAESIIGZIkBh bqZI8zgkQAIkQALPNQHUWrt8/Y7UaNpFOOZCNZ3l2lXZEhHm2kKSK0zawvRkTd8YJVev35V33v9U rmqtvJCgQGnv6NQ6fVVSXlEjqFO4ZeMqu6k5XWEMlj7Mp7FYxsR7EiABEiABEiABEpgKgcLqJnlU 2SgQ6ByNzLhwyUqMEH9vT0eb4H4kQAIkQAIkQAIkMGMEKMzNGGoeiARIgARI4Hkm0NXdI/dzC6Si qlZr6MXIS/u3y9IlC0fV23ueGY01dtQSPHRwp0lhefvuQzmvjkOkMPX18ZFwrWOIOnvbt6w1NeJQ Q8+VYz6NxZU5s28kQAIkQAIkQAJzh8Dt4mopqmmaUodXpcVIeszYNbGn1Dh3JgESIAESIAESIAEn E6Aw52SgbI4ESIAESIAE7BHIWpQm3//O69LZ1S1hocGSkhQnwUEB9jblazYEUG8QdeMiVITbuH65 tLZ1yKCmsYQwFxwcaNJXgqmnp+v/WTOfxmIzTXxKAiRAAiRAAiRAApMm0NHdJ3c1jWVVU/uk97Xs EOTnLctToiU2lH9bW5jwngRIgARIgARIwLUJuP4ZLNfmx96RAAmQAAmQwIQIhIeFqCAXovXkJrQ5 N7IhgBp50eqcww3xRGvNzURtPptuOOXpfBqLU4CwERIgARIgARIggeeWQH5Vo+RrGsuevgGHGSyO jxCksvSeAxdpOTxI7kgCJEACJEACJDCvCLjNq9FwMCRAAiRAAiTgwgQoyjlvcuaqKGePwHwai73x 8TUSIAESIAESIAESGIvALSeksVydHss0lmMB5uskQAIkQAIkQAIuSYDCnEtOCztFAiRAAiRAAiRA AiRAAiRAAiRAAiRAAvOXQGtXr9zTNJY1LR0ODzI0wFeWJkVJVIi/w21wRxIgARIgARIgARKYaQJM ZTnTxHk8EiABEiABEiABEiABEnCAwODgoDQ1NUl1dbXgcWBgoERFRZl7V3FednV1SW1tremnh4eH hISESGRkpPj5+TkwYu5CAiRAAiQwnwk8qmyQguom6e0fdHiYWQkRslDTWHp5uDvcBnckARIgARIg ARIggZkmQGFuponzeCRAAiRAAiRAAiRAAiQwQQKNjY1y9epVuXPnjpSVlUldXZ20trbK0NCQ+Pj4 SFhYmCxcuFC2b98ua9askaCgoAm2PPnN3n33XTl58qQ57ttvvy2bNm0a0ci1a9fkgw8+kNzcXOns 7BQ3NzcjzP34xz+WPXv2jNiWT+YeAQjC7733nuTk5MjSpUvltddek/T09EkPBKJye3u7eHl5OV2w PXz4sBw/flwGBgbkO9/5jvlcTLqD3IEESGDGCNwvrZPSupYpHQ9pLNNiQqfUBncmARIgARIgARIg gZkmQGFuponzeCRAAiRAAiRAAiRAAiQwAQI3btyQP/3pT3L27FmpqKiQlpYW6e3tHbGnu7u7hIaG yhdffCF79+6Vb3/725KZmSnT4aCD8PaHP/zBOPQ2btw4Qph7+PCh/Od//qcR5pqbm4f7GBcXJ2+9 9dbwcz6YuwQgCEOY/eSTT2T//v2ydevWSQtzWMfYH8LZwYMHJ73/s+jdvn1b3nnnHfM52bBhA4W5 ZwHj+yQwiwR6+gYkr6JhSmksI4L8TBrLyGCmsZzFqeShSYAESIAESIAEHCBAYc4BaNyFBEiABEiA BEiABEiABKaTwN27d+XXv/61fPTRRyYtJJxwK1askNTUVAkODjapLJHWMi8vT0pKSuTy5ctSXFws bW1tAocaxDlnx5MnT4xTD249PLYEHFBHjhwxggtEuZSUFFm7dq0kJiZKdHS0LFmyxLIp7+cwAcy5 7W0ywyktLZXf/OY3AufldIlmlv7ZrtHJ9JPbkgAJzAyB0voWKaltFgh0jka21pbL0DSWnu5ujjbB /UiABEiABEiABEhgVghQmJsV7DwoCZAACZAACZAACZAACdgn0N3dLR9//LERuiC+QcT4xje+YVJV RkREmFSSECCQLhLpBU+fPi1/+ctfjDAH0QPpBWNiYqY1raV1z5GW8MGDB6a2XHh4uHzve9+TN954 wzj5kK5wOtNrWveDj12bQH19vcB1CQF59erVrt1Z9o4ESGDaCTwsr5fyhlaHj7NA91ydFiNp0SEO t8EdSYAESIAESIAESGC2CFCYmy3yPC4JkAAJkAAJkAAJkAAJ2CHw6NEjuXTpkkDIQP24H/zgB/Lm m28aoct28+XLl5t6X0hp+bvf/U5qampMWkvUf4NrbSYCAmFXV5dxU8XHxwvSXC5btmwmDs1jzCEC cFbCycYgARIgAVxc8qC8QYW5NodhIH1lVmKkhAf6OdwGdyQBEiABEiABEiCB2SJAYW62yPO4JEAC JPAMAr29fdLU3Cp19U1ai2VQQkICJTIiTAL8fcXN7flL1wIerW0dSu2Jui8Cxcfb6xkE+bazCJD9 s0m6EqPevj5NZ9ihJ8CfSHBQgLqrvJ89AG7hUgSKioqMEw4nLletWmVquaGOnL1ALbmEhAR57bXX jBsJwty9e/fk8ePHMybMoV6YRXAJDNTvZx8fe13layRAAiRAAiRgCNS2dkphTZO0dY+smzoZPIvi IyQ1KlQ8mMZyMti4LQmQAAmQAAmQgIsQoDDnIhPBbpAACZCAhUBPb69cv3lfbt7OlfqGZmnv6NRa QkPi5+sjAQF+kpIUJ9s2r5GU5PgxBTqcIC0qqdCTo14SFxMpcFLM9SivrJHjpy6Zk78H9m6VjLSk uT6kOdP/8opqOX76sgzqunqB7O3Omyutz+rqejmmn5XOrm45uG+bLM5Mtdtnvui6BJDKsk8FVgRE LqSDfFZkZ2fLjh07pFf/DYGIhzp0YwWceDk5OfLw4UMpLy83KTGRgjI5Odmky1y8eLH4+vqOtfvw 67m5uXL79m1B7TCkJ0TU1taaenOofYc2tmzZIhkZGcP7TOQBnFWFhYWmbh7uGxoaxMPDw9Sri4uL M7X2srKyxN/ff9zmnDFOpAq9evWqETvxGCJkSEiIqaO3detWASvr+YHT8f79++Lp6WnGPlatv5aW FjM+sIPLcN26dSb9KAZ05coVczykLV2/fr0gVeiZM2fMfIEDxNqdO3ea/SDMWmKq48XYsCYuXrwo +fn5gnUYFRUlixYtMuKwRXy1HG+i95WVlXL9+nUzXjxGYL289957xhm6dOlSWblypf6NEzDcJFhj H/SnqqrKfB4iIyNN3UKkwcT8+/k55pLBusX6B1fMHRyeGKPt30qO8kS6TojjWCdIQ4vPFo6JupFY z6gDmaJ1GDG/mzdvNqlnbY89DIIPSGCeEsivbJSy+lZzEZGjQ1yibrnEyLH/rXO0Xe5HAiRAAiRA AiRAAjNBgMLcTFDmMUiABEhgggRaWvXk2/lrcuzkRanSk+thYcHGJYcTNp2dXXIvN1/u6q20vFoO Hdwp2UsyxEtP/lkHHBYXLt+SL05clO1b10p0VPiok03W28+Vx3DLPXxUrCLloGxav3KudHte9LO1 vdOwH1D2m8ne7py60vrs0O+KvPwSdZi2c77szpbrvxgWpu7oL0UKCF+o35aWlmbEnrF6D5HqW9/6 luzevduIDTjxbxsQVtDen/70J7lw4YJx5TU3NxvRA/tD0EN9OrjvXn31VYEINl6grf/4j/8wwhxq 4SEqKipM+xAUIaRgLJMR5iAGHT58WN5//30zbogjSJUJpzjceBAcISC+/PLLpo5dYmLiqC46Y5wQ Rk+ePGlq9928edOIQxBU0DYER4zrr3/9q7z++uvyyiuvSGxsrOnHqVOn5A9/+IMRDcFzLGGusbFR PvzwQ3MMiJcQ51AXEAER7ve//70Rnyzi0Oeff25ET3BAmxB9sA/CGeOFUPjBBx8Y9lhvdXV10t/f b5hHR0cbgQkiEl6bbJSVlcn//u//GhEO6w2BdK0QcSGMoSYh1h3WPFKinjt3zrCBMIdtWltbjSCK 98EUaxvz/7Wvfc0Iddbi5LP6BkHu17/+tZw/f95sinW+bds2sW5jqjzR///+7/82Y4J4CJER6xlO WMxnT0+PWT8YDwTJv/mbvzGiuuUz/6wx8H0SmA8EHqC+nApzjoaft6csig+XKE1nySABEiABEiAB EiCBuUiAwtxcnDX2mQRIYN4SgPB27OQl6ejslpde2CErli0yqejcFrgJ0tNV19TLiTNXJOfuQyPI BQcHSlpKwggeEObu5RbIzZxc3X8xMj8ySIAEniMCUZHh8sK+reqc6pOE+OjnaOTzZ6hwEEHMunXr lnEu/eu//qs5qQ+XFBxaY53Axz7jiWDHjh2T3/zmN0b4gMgEgQe16CAeQDC4c+eOnD592riZ4FL6 27/9WyMujEXWIuTBxQXBBgIaRKukpCQjPOD9oKCgsXYf9ToEkaNHj8ovf/lLgRgGYQ9uJohvEGzg 4oKgA7cVbhDPvvvd7w6LYpYGpzpOXADy8ccfy69+9Su5ceOGGRtY7dq1ywhVYIP+HT9+3PQD23/z m980Y4bgVlJSYrbr6ED6ZfuBviPtKLaFKAWnoyUgciIVKQICGcaN+YEoh3/jISJB0LKISVMdL5xj f/zjH41ghWNhfaF2IfoFEQnuryNHjhiXGfox2cD6gpgKtxzGCfEVImtqauqw8AeHIeb/s88+k3// 9383bjmsKdRYhDMRQi94wXWGNQqRC4z+4R/+QZYsWTKhLmFfzCmEX6wniKoQ5rBerVOET5UnxEc4 ITHHv/3tb41LDuIcGODzCxEULkyMB6IlHKFgDscrgwSeBwKdPX3yqLJB6jSdpaOREqXO5egQ8fac +1lBHGXA/UiABEiABEiABOY2AQpzc3v+2HsSIIF5RAB15OAIQ9rAfXu2GEcc3G6WE28Y6qKFKXoC 1Vfeee8TuXM/TzZtWCGpmtLSehts16cns9AegwRI4PkjEK5O260bV+kJfBFv1mKckwsATqg33njD iFBwpSE9IgScTz/9dPjkPlJXIp0f6stNpKYbhIx3331XvvjiCyOewaUDUQJOPIg8EGcgwMDthVSG cPxASIATbKyUgUizCFEDIgTEQwgN2OeHP/yhIN0gxBb0b6IB0QfCHFxNEGS+//3vGzEM7jCINBCp 4HSCiIRUmRDP0AeLWw3HccY4cXwc4/Lly0Y4gugGVhCSwBoOrjPqavuv//ovk2oRrCDc7d27d6JD ndB2SDMKthBbLSIpHGRwMlrEKGeMF+5JuCjBFPP57W9/W/bt22dSh4I7RNB33nnHCJEY+2QDa+zv /u7vZNmyZUYYg3iJ9YvXMM9IlwkBF8IwjmPhjn7AGQeHHMRfiMkQRDE3EEzhwoNoi/mHCDxeYG1D lPvoo4+MMPj1r39d/vEf/9E41rD+LeEMnpa2IOBCkIPQ/k//9E/mMwHHJ4TJEydOmLWOtJcYL9Y1 +MCJySCB+U6gpLZFHuutbwq/VUwaywimsZzva4XjIwESIAESIIH5TIDC3HyeXY6NBEhgThHo0hM1 Tc2t0qMul4jwEOOUsxXccJJz+dJMefBwsdy+l6cnKgfMzcvraTrLxsYWKVNhr7au0Yy9tKxSrly/ a+rSxWqtOU/Pr772cdU9HHiPSyulvvFpaqmw0GDjwIMgiJNgtoF0fRAO8R76iP0rKms1pVaQLExX h4Tub7nqHH0oLa/SE6mNpn5EWGiQntRMlGh183h4jH11a5+OCX0qflyuJ696tc0gU09uYAo/3jEO jLemtkHbrZC6+kZZoP8LCQlUR1GMxMdG6YlqH9vhDj93dCw4Zmtru5RX1Wp6txrjegSrzPRkTTEa oSlG3YaPgQdIZVqu22G/pMRYCVFHpHWgrbIx3p/M3KBNR8dk6Q/WKuYeTpFkrXuIubeN9o4uKdM1 AKE4JTFOT5yO3sZ2H8tzR9ZnW3uHHq9GPJQr5hWfqcdlVTrWBrMu42KiJC01QT9bI7lajjmR+6mu z8lwx+eyUhkjlS3WQ3DQV/WXLH1tbmnVNVNrnlrWTFdXj/kewPcD5iZU15x1THZdWu87mf5b78fH kyOAOd+zZ49x3MDhBncNUkTihn8HULMKYgRSH0L4gsgBgQr39hxqqB0GwQtiElw8b775pvz0pz81 4g7aswTcPGgbbiLUOYOIsWLFClP/zLKN9T0cbbjhmBZhBE4o1Otas2aN9aYTegwBCMIIXFqouXbo 0CHTlmVn9A9tgwNcSXDowV2G7yEwc8Y40RbSRkIsgSh18OBBI+CArTUrCJBwOkEshBMLaRfRZ2cG HHeYX6R6hDiImmQQUPG3ATg7Y7xwb0GsxRggUEGwggsNgpflbxBwx1qDKAeX4GQDfUUb2B+PEVgv EBfhzEOgH3/5y1+MQIVxwc32s5/9zAie1n+PoB2st3/5l38xAi5SRGKNIoWr5e8P06DVf1DzD6Ic Uodibb311lvyk5/8xAhh1qKcM3haHdasT3B8++23jdhpLbpBkMRziNFY8xAlsa6tt7Fui49JYD4R MGksGyYv8lsYuLstkCytLxcfPvLvG8v7vCcBEiABEiABEiCBuUBg9FnXudBr9pEESIAE5iEBOFsC /H2NaJVf8NgINBkqdtmeaArw95P9e7fI2jVLJTY6coS4U6JC3GdfnJP8wseG0I3buVJQXCYHNa3d 3l2bhoW5DhVMrt28Kxev3DbiCmpSiQpV/n4+AgFvy6bVsn7NslHCUE2tuhmOnVfHgLc6KHyMw6++ vsm4+F5/Za9s37LGCF637+bJ2QvXpVRFkfaOTiM0+fn66FX+UbJ981pZt3qpnpwbXROiu6dXTp+9 avatqWs0oiOOk5QQa4RAiJae44h6Yy2LwcEhuXbjrpw6d1WFm2rB+LWj4qvOh1AV/tauypad29ab enzWbSAVoKNjGdSUXNdu3JMLl25KhQpzLS1txsXoq+OBEIj5WKPHBRdLQOj87Ng5GdL+vnZozyj+ Vfr+UX0fIuXrNu9PZG58vL1NekNHx2TpJ+4xV+cuXpeCojL5+mv7ZfOGVSPWIrbJUwcoxgPRLvQg TtxPTJhzdH1CNPr8hK5PHWdKcpx+DkqlsKhU2rRGnpuexIEgtyw7U/arIzVFBavJxlTWpyNrqV2F cKzZ2tpGefP1/bJWPze2kXP3kalJmZqcYDhDzK1V4fnzExfMOv/aK/tGCHOOrEsc05H+2/aVzydH AC4xuIXgYELNKjhq4J7DiXw403BDeOt6h+MIriKIc6i7BbeatYsOrivsj1SCcF+99NJLo0Q5tAVn HNJlYlvUGYNzDoLBqlWr7F6sgX2cGRCNcUPAaYSxor8Q3SyBsf7oRz+SAwcOGCEJgplFQHLGOMEI Y4boBofciy++aJcVRDKIdhCbIA6CP1IxOjswpxBpLfX+IJxaAoLOVOe1oKBAcnNz9fuiw9SRA1dr UQ7HgiCJNYX3sC0EJGcHRFm44eCmg9BmEWWt5x7HhCgH7tgW+2Cu4J6DKAo3mm2gv0iNCVEOaTQh cP74xz82LjZroRX7OWP9WIuIaBNpOCEa2gpuljStcBNiHiHwQpxkkMB8JzA49EQeVtRLZWO7w0ON CQ2Q9JgwCfT9yu3qcGPckQRIgARIgARIgARmiQCFuVkCz8OSAAmQgC0Bb71SffGiNLl156HcvZ9v RCmICBlpiep6iTfOMZygwgnIZHUf4WYbUZFhevI+2zjC2vSkfrrum704Q11CiaYmHbbHicOr6qL7 8K/HpVFdT8uWLDTH1WZVxCjTFJmPpBxOKBV/tm9dq2Kd7/Bh4GCrqKqThsYm0w8IWzEqDg4ODWr7 HupUcjcOvcNHTqibrkGWLE7T20Zxd3OX4tIKrY2XJ1W6Pwrfbd6oJ46t0uxBPEO/jhw9ozX2OmX1 iiWSqvXzINLc1pp6BSqywBHlSM2sgqLHcvT4eSlUkXKl1t3LUs44XmmF1glS8fLjT09JYIC/7N6x wYiOlgFfv3VfHBkLTixjrB9/ctI4tpYuyVDRcq1xX+TmFckDFayaVKiDGAtxzl3rBiG6unukUkW8 AXVsdOtj28D7EPnghMJj63j23Dz9J9/RMVkfC4/hwoLrsKikXO4/KDBMI8K/SiUG8RCvg8PB/dv0 ZOpot5dtm3g+lfXZo+sT6wvCFOo1hoYEy8rlWVq7x08F6Bq5fSdPvlDBKigwQMK0/xPtE/o11fXp CHfwfKInsHLzCmVZQaYszkwzY0F/EFgDYHz/YaFkLU7Xk9JPGfeoaFqpHFrb2tX51P10Y/2vo+sS DTjS/+ED84HDBOAu2rx5s3Eb7d+/3wgHOIkPseHhQ/1eVFEFJ/OR8hA3OIMgVEB4wPb+/k8vgIDg AMEJjiCkv4Rbx1aUsHQSta7gSoIAhvYhwsClZXHEWbabjnuIW3Bm4d85ONB+/vOfG1EK7jv0G+IG LlaBy8ritLLuhzPGiRprGDM+L3B0gZW1q8r6eCtXrjSc4LKD0DJW7T/rfSb7GMKkdapO6/2dMV7U 7MPaQIAphCKL0Gl9LKwXzAPenw5hDrXWIE6Bu2W+bUU5S3+wDiAUwtmIzwE4wEFpK8zhPaQlhRMP Qut4ohzadgZP288JUpwiNa29gMhqcRDCyYrPJ4ME5juB6qZ2Kapplg6tM+doLIqPkKRIzdKBHy8M EiABEiABEiABEpijBCjMzdGJY7dJgATmJwGIURCiPvn8rNzKeWDcbpGaMjIsLMS4ueAcy8xI1rR2 cSOcVhYacerECldXUq6eqM/LL5Eli9LlxQPbjbhmSWMJh9PpC9eMeLFv92Z1D202zjuciKtraNJU WWFy/NQlOXbqoqA9pM60PUlX39Asy+E8UudesvZpSE+kIf0lHEvnLt40YtQeFble2LdN24jUH85u 0tjUYhw9x05elJPqiouPi9aaeamWrqtoViqnzl4x6RwP7leH385N6pILNU6dhRkp8ucPPpMaTUno SIAFxr04M1UOvbjLpMYcejKkJ/JUHFNB9NzFGyZ9JlJJxqgbEAGBzNGxIMXjidOXdUzlsmv7OhWm tkucOhEh7qxcvlj+9P5nAjfjbRVh01ISjRvQkXHZ22esuUH60KmMyfZYcPplZqbIjZxcs9YgBFkL c3D/lWhKUl/dLiM1acLpI521PrF2sfazs9KNAArHItymJ85cMaLdqhVIhzYxsRBjn8r6dJQ7XKWZ C1OMMJ1fUCLV6lhdGJA8PBVwpJaqAxQ15dJUxMb4xgtH16Wj/R+vL3xv4gTw/YsT+LhBjECdLdQZ g6MMNwgrSDsJIQtuozNfpquESLFr1y7z/Q3Bw1IbDGLFP//zP2sq35AxOwHxDy4whGVfW8FhzJ3t vIH0h3D7QXSxFxAB4dSDUwsONdQDg2Pv2LFjJsUi0jniBpED4hE4wEloKy5a+opjODpO6zYgiNk6 naz7D/cWbtMVmHtLqlB7x7Duq6PjxVqyOLUgio43zxCYxuNhr48TfQ0OUIhrCMy1tTPQXhvW21iP wbItxNLDhw+bdJJwXiKw/iCy2q4byz7O4GnNDyIyeFkEcstxLPfoh0V8xEUpY30+LNvzngTmA4H8 qkapaGgzvx0cHc+SxCgV5v5/9t4zTKrrXvdcopvupgPQ0OTUZBAggkiSEBIo52BJliVZsq1jn3N8 wpx7z9xnzocz88y3ee7j8+XOzLFmbI9tWdGyohWRhFAkCJFEzpmGhgY60Bk07281G+0uqrqqq6rz /y8V1VW199prvWvtXbvWu97333bX3mTrZfsZAoaAIWAIGAKGgCHQGgSMmGsNWratIWAIGAJtjACW f0tkqYjyDdJm5y5ZWh4t8ZZ8qKuwqeOzmVJ9LVm8wI0aMaQZaYZirZeIkMBKiQkoFG9BDjqqv02K rb1Sjk1UnrPF114tS78Rl8oYpbxctyy9xueGgxjEEhMiEHIlHEwWzpl1pVu0cLa3sQw++1AKM/ZB zXedFHFjx3xfNhaZ2B1y/K3b9khpdcQTZMGkFGo2iJwJ40a7hfNmeVKQcqk7JMre/Ye87WZwrNY8 o95i0gs7PibrmCzrnZEptV+Ru+v2G7yKDrURqrkgIDeTbQuEyT4pyUbIuvNaYRTGAZIRK0WOjf1g ZJ654PjJPsfqG8pLpU3R6jNVxO8oEbObNu/0FqFXSrUVEMA7RCQdlkqN3IPkPku0nekYn5CQc2dP 9+rRwCoU0upKqUc5r04pdxv2lq2JVMZnsrjTl5DrnJfYckKscX7wPoFVKEpAyF4wDt6P1a5kx2Wy 9Y9VD3s/eQToYwg3HpBUXM8gM7CmXLlypfvTn/7kFULkpIMMQ2UGuQQxERBzqOCwAGxpvHC9pGyC fSEDU4kVK1a4Z599NibxgDKtWGo5rCNvv/12vx1toR0oqXhw3YZMhByClFuwYIH7wQ9+4NV9fEak o51YOtYoPyXB8WKRKn6DNv4HO1LqgF1ptEhHe1FDhtuLnWmsgHRqC1UgxwtIMcYlx4mHO4RXUBfU cJFjlPG7f/9+f66AIf0Kab1w4UI/hngvMtKBZ7hMiDfwjEUE0taWzsNwWfa3IdBdENhTctodk2ou 2ejbJ9tNHjHQFRXEvlYlW7btZwgYAoaAIWAIGAKGQHsiYMRce6JtxzIEDAFDIAEE+ol8m6f8buOl MiqVJd8pqdOOlpR6ZQxkD+ovrCaPnzjl7pX6a7IUNcGkZLziWY19Qqqz8vImm8thUhVFTgqh7ILw g5jj+OSfiyTm8pQLD4VcbsjmkmMfUz1PnzkrBV6R6nfS1Tc0NKsSFnscDwu+k1LnYb+IzSBRqlx1 5VKsjVHuL8jHcGRpcmusCMSBUg4mE5AWg6QEBLs/vfhXN1FkIzaZqIya2jv0smJTa0uZtxGcLIXe 0MFFzTDGthI7TYjRbJGOeXFUTpdVLM4bsfqG3VJpU7TDMgYmyCZ1y9bdUncedHPLpvkcheRig9Q8 I6vUW0X0DpNqMpFI1/iEhBsyeMBlqtL+/Qs83liiBqRDIvVim1TGZyq4Y93KWN2+a5/bd+CwJ+Gw EUXduUfXgzrZn3ENGDLo+7xTsdrE+Yy9ZWvHZSr1j1UXez82ApAD2CkeO3bMDRkyxM2YMSOmiomF DeQ644HlISQLyiOsCb/99ltvOQgxx3iHbCNQnEGExbJnjKwZ+b5SVYVBmlCvoA6Rx0AxR/4vAoXY fffd5yZPnuxVdlhz0pYdO3Z4EhIlH5ad5BVDJfYP//APnqRjQUo62gmmiX6nRrajNa+53sVTSNEm SJ3I7+ngOOlob7jsROoTLKYJ6pCu5wCPeHUIjsdYCrYN9g0+C54h7x5//HGvvnvllVe8CvOll17y ZO7NN998Sa0WbJ8OPIOyeGYctcdYCh/T/jYEOjMCDVoot+/4aXeyonWLo8JtGje00I0Z3C+pnNPh cuxvQ8AQMAQMAUPAEDAEOhoBI+Y6ugfs+IaAIWAIREGgtybjID14MPl07lyNCK9yTw5s3LzDfbFy nVu5eoMnwFBeMVGfSFRX13qlUIPymPTv17dZ/rhgfybd+AylEZP/56prXCSt0k85unJzm6voyI1S LsKjVjkjUBdRX5RLkQHBwSQaJBxlQ8zVakL2jKwGee4ne8G8iLIpo7/aCOFSfVHJEFluS6+xsLxL tobvLvtM+bh2e9IIdWKRbEK9XeeMyW62cpEFOKbSFtp28qIiC4VjJHlJPSHPeLRFROsbjpNKm2LV k3FKXsTh6zZL3bnfK7pQRh6SvSLqLKwtIZUC1VqscoL30zU+wTaawoT6otxTF/lHcNx4z6mMz1Rx RynL+MX6FIwhyRinqF7BeaQsYYulTGW7liLZcZlq/Vuqk30WHQHUYb///e/d119/7aZNm+b+5V/+ xat8om/9/bsogBYtWuSWLVvmibmwvV9Y6QQx9/TTT/tcbt/vHfsvlEup2hc+9NBDnmhjHEYLiEXU fUGgCEQRBylJOyAayWsGYblu3TqPDe+//fbbbsyYMa5YajuUdOloZ7gMCMXq6uqgWlGfIXMgtwIC hr95hImjaDtCRHJ+tRRh0izaduG6Jtuv9C/KPAJV5TnleI12/eTzsLqO1+kMxhj51rDV5AHujINY wTbUlUA5F7Qh2J57GRSV5FukHLaH7IbohaRj3JBLMRzpwDNcnv1tCBgCzREoOVvljpTpfr++5Wtf 872av5o2WgsIi2JfG5pvba8MAUPAEDAEDAFDwBDovAgYMdd5+8ZqZggYAj0Mgb3KRwahNaioUPaR xZeUZEz2kWuKB8ovJuEJcrXt3H3ALZAKJiCU4kHGpGgwWRhMHra0D9teuHD5RCr2koFdZrA/863k UGMf8spNGDfmkq1hsE34mfxyORfJBE1juu90HMrQfKbC/xPe3JN8vUSqJBN9RSQuumaOJ+F27z3o bSb3HTjiFXRbt+91m7ftFuFx0t2y5BpPhqbSFure0NCoCdemydqm9rSy1sLhctS/x7el0qL1Ddun 1qbYR5wk5R85D79ctV5k3FE3fdpE4dpksYjd6agR8S0Wg9LTNT6bFC+XjyE/5qOMreD4sZ5TGZ/p wH3KpHGO/JIbv93u7UG5PqD+PFZywt2sMQvG8SO5cZmO+sevm20RRoBrKwQCqjBUZlg7zp0797Jr bnif4O9wzqrw3yjSApID20JIvIkTJwa7XfaMKg2LTMgOyIpYRM1lO8Z447rrrvNEWyxiju856tsg lTXHJlceakHyjGFvyQMCDHLl8OHDnnz8wx/+4PPrQdRBZkLMpaOd4TKiWSSGm0hdX3jhBd9XkIhY itIWrjWQbi0Rb2FiKVxma/4O1zXZfg3yyjHWAjI3FhEbD4/W1D1y26At9C91YfwFYzZyW14H2/B3 QOrxdxB8D5CLEMtX+uSHP/yh27p1q1u+fLl77733POnLGGN8BxHUgdfJ4hmU1VOfuXepbjjv6nQ/ aGEIRCKw6dBJd7gseRvLjF5XuFFDCl2fvBx3ura5K0fksey1IWAIGAKGgCFgCBgCiSKQrbnGnMxe LiOpCbxEj3L5dkbMXY6JvWMIGAKGQIcgsFPWf+9J0YXiCHtD7Okig8k+iDtIrbXK53bmbLm3mozc LtbrHOVlQL2EnSJqNZRA+ZmX52hAoYftZE5OdrP8dJfKvZzz8MRZkM9ujGwnb7v5Ok14xV7RCikX KKmYkMXCk/eCegW5yoJj1sj+sl62fckGxOZV0yf5nGdlUvOVlZ11J0Rqrl23xdt2fvLZapGJozwx h9Iv2bbwPY5ii7agAKur08RBQfNaVyq/2aEjxz3/OFr5w6gbwb48AvK0+V5O6oBqr0iMxKbZdlH6 hs9TaVOz8iNe0G/kIYQ02itrxQMiPLFcratv8AQz4zXRSNv4jHXAaGxnrG1D76cyPtOBOxau5Jb7 dstOYXvEjRxxQPkYj/hzc4KI0UJZdMaLZMdlOuofr272eXMEiouL3bhx42Qh3MeTVOTFuuaaa7zi rPmWzV9BekE8HBaxQYwcOdJbXPI3OdmwiCTWr1/vbSFRqEUusOBzrj9vvfWWV6NBhj3yyCPunnvu ScnOknOIR7x44403HA+IuZ///Ofe0jKoI0QLRB0PVF6rVq3yxBwkJgQZkY52QvCh4OP7FgvNvXv3 ehIHcicyyNcHVl988YXHacmSJd4ilDpD7KC443sr0jaUvmJf6p5KpKO92JqOGjXK24KuXbvW1wsi lPZHBmMHPJKNgLSMtn+4LahFd+7c6VVt0eoBrliZMtYZF5BvWLZGBv0Q9NusWbO8gu7AgQO+jVha cg6ELS3DdeiI8ySy/l3xNaTcOweOu02nyrti9a3ObYzAji1aHHcy+bGRkZPlvqmodtVbD/r75Tau rhVvCBgChoAhYAgYAj0EgVmD+rklI4rcIM2ZtmcYMdeeaNuxDAFDwBBoAQFIqrq6erdp8043/cqJ btTIoZeIq8jdKpQnqlrEWrEIsIL8JlInvE0wnSYNWjPlVaYmsLBwzBVxhLoJW0nsIcNxSjaMx46X +txVg5W3CmvJRILJMwgE6nNS5TK5O0hWhuHAGvPzLzWZdvS4Wzh/ppuhdgbqpiGDBmjiN1/1KlH+ uTOXtevIsROu7PTZy94Plx/tbzBd9fVGt1l50ObNme6aVFxDpTIa6tUMw4YM8jaa23fudadE1lFv JvKSbQt18PuKbDt6sc6R5BS5wt794HPXR5ad5AkMiDly6WVkaEK3tioqCUn7K6vO+T6M1taW3kul f+KVO3XyeJFFQ73i82sRnagPwZd8gSj4Eo22HJ+J1iHadr20QjvZ8ZkO3LHfvHLKeLfmm289xrw+ eqzU56EcIxUt51Aikcy4TEf9E6mbbfM9AuRzW7x4sSd7Nm/e7NVhEFE/+clPfH64aOo1LAY/+OAD r97C9pHtUdlh10cUi+zDGhIy4+DBg+7NN9/0RB8qL/o4HCjQXn31Vffhhx96NREqsEhiKbx9Ov+m HZBDe/bs8Yo5rDwj7QY5XthiEhtDSEwiHe0cPny4mz9/vlu9erUWGhxwH330kSPP3vjx4/0xgn+w Ufz44489GQqBCZkKOQQBitKLzyHsbrzxRr9/sB/PkIrYcKZKzKWjvZBajAPqRB4/xhGYB2MnqDdE Iu0NiN/g/dY8Q5QFRCvEZZBXkDIgyRizGzdu9CThu+++6wk3SMJwoEL85JNPHIQ144B+mT59eovq OvZH/Xn33Xd7K0vUdlha/vnPf25maZkOPMN17Yl/1+seaseZKvf5sbKe2HxrcwsIsCDh2OFSd7ay ZXvgFopwWVLKHdTCr7ISG18t4WSfGQKGgCFgCBgChkDrEOijxfkLpMpv7zBirr0R7+THaz4108kr a9XrUASSFJ50aJ07+8GnKlfXRKlfPlf+uPc//MKTRgvmXiUFV9ElS0jUZOs3bneffrnW538bP1YK L5Fn4bjiil6XrLSqpXxj4is7RI7MkNUg+aq2bNvj1m3Y5opEpkGIETU1dW7Vmo0+l9VQEVbjlB8M 5ViiMX3qBPf1N5t9Drc1eh5UNMCTVOyPzeXXIhbeevcTEU91brLyZoWtKVH+jFC+rG0iyFBfQWYF pCO5tDZs2u6Js+C9ROsEabH/4FH3yWdrPAFHncZLGUcwQQh1eeHCeU9QQo4Gk9SptIW+xHpwl2wz N0nlhLUndppEeUWVg7xat3Gru3bhbNdHqsQg6Ady9+3ac1YEzGGRMROU769JDUV+sU3KL1ihPH6Q q8lEKm1q6XiQQ2NlsYpSbuWaDT6P4Y3Xz/PkXEv7RfusLcdntOMl+l4q4zMduI8bO1JE/HCRzJuU v5HcSjWX7FkTbUOy4zId9U+0jrYdqtkrHMor1G9YB5aUlHgCYdu2bQ51E+QBpAn2fRBZEHEQKl99 9ZV/xg4S+0uUQJB8BETdfffd50kvbPwg3ZgkffTRRz1hh50fRNKaNWvcs88+60kaPqceCxcuvCx/ V1v1E+QhJMv+/ft9Han/j370I/8ebYDMAZc//vGPXs3G9R0SbcKECWltJwpBiDnIMx4cB+Ugedwg eMh398477/h+KS0t9Rhdf/313iJ09uzZnqSDdIM8wi7xgQce8HWkv1Dhvfbaa54kBePgOycZTNPV r/fee6+vz+eff+5ef/11fw9BXkD6AtKROr/44oueEKutrU2mqpf6JyCWKZNjMb4Z0xBs4AQxvGLF Cq+c5NjkiUPtBvkKoQY5iH0oYz43N9eP63nz5l1SxrVUOUhXLC05l2hrpKVluvBsqQ72mSHQUxFo rKl3Defq3IUUbE6zC/q43n2yeiqE1m5DwBAwBAwBQ8AQ6GYIGDHXzTq0tc2BiGNCwD+zM39YGAKJ ICBmDnLOPzSxZERdIqC1vA1E1F233+AaNRGFTeUbby9336zfKtuu/lKtFbhG5S07fbbCK91OSTkF abdwwUyXf9EGMShdp7QnmbBSRCmGSm3B3BnuqhmT/fsTJxR7tdpfRZC9/+HnUqeViaga7a8FB0Rg faNjc12447br3TQRbYENVFB+S89jReRdu3CWKzlx0n28YpUIhHI3WcejDBRvlH3y1Gm3+Lq53v4Q hVQQkA433bDAvfrmh7L0pF5nRAyO8nabWPjt3nuoVXUJysWKb5oILkhISLJ6TVrzGnLrTHmFtwc8 LFvJmTOkEFAdgknSVNoyRjnXFkgRSJuXffSlbNbOunEiUVE50g7aU6T+RsFXFFIVDhZpOEaE3uYt uzyReFb9jXKyShaW5MKrFCnXWmIywIHnVNoULifybyxPsVddJ8L30JEST8Zivci4bW205fhsbV3C 26cyPtOBO8rWScJ4w7c7XIkUraM0TsaKrGsNcZ7suExH/cNY2t/xESDX1ZNPPukXaEBCoFKC5IE4 g0SDlIOUgCQpL8eat0zXl2qfCw5S7u///u89iRdczzgiKqif/exnnswLSCfIDUg+VGcs4oAQ27Vr l99m6dKl7qc//WmLuejit6R1W6A6g4hD1bdhwwZPfKGgglCBEMMWEsILYoW2Q9pALoZtDNPRTvLv PfXUU94iE8xffvllbwGK5SMLOsh/tn37dk+KQgr+RGpG1F5810EioZLDivHkyZPuL3/5iye9UNKB MUQq+eXoJ/BGVZdKpKO91B3rUBRoKMmef/55h50ktp6oyKkz44JjkZ+QcZNMQFJisUpfUuZzzz3n FXpg8fTTT3vsGKNVVVW+/wPc2QcrVOoHruQUpIz777/fPf74476eidSH8wESj/0YYygiA0vLW265 xROw6cAzkbrYNoZAT0OgrqrGNYicSzr0+yY7X8Sc7CwtDAFDwBAwBAwBQ8AQ6A4IGDHXHXoxyTaQ KYMEyr2lrsnUs/6/NCGdZJG2Ww9CgFXeF8TGNeq5QZM25yHn9NoIuuQHARN6U6Qiy8m5w2EhuX7T Nrdz935Xu7neK+ZYOd5LRBb2kLctvc4tuWG+K5ZKiXxxkYFd426ptTZv3SVbwVJPuo+WqonJfVRh S66fLxVdlsif1e7TL9ZKwbXZn/+o2gaKsII4u16P1iqzskUGLrpmjrcv/HjFaq+eQunGZFh5RaUr kOLh5qXXuFtV/+HKpReOPqrXwvmzvJoOxeDyT1e71XmbNCn4nbfTnDNzqtshPJKJaVPHu/vuWuKW ffyVlIK7hesBERo5Po8e4My/eoZy4i3yir2g/FTagn3jIqnhIB4/+mSlxxgFIZPK55R3DqXjHbcs 8mRg2OoRgmuJyEm2QXm2XP0D8QJ+2JYuvm6eSNvNXi0V1LM1z6m0Kd5xUGNBFh2UuhEih/GG5WJr oy3HZ2vrEt4+lfGZLtyvnDLOjRw+2B2RFSxEKKrMMPESrm+0v5Mdl+mqf7Q62XuxEUBB9Itf/MKT IcuWLfMKLpRaEFORFogFBQWeGLrtttsc1pMonQJ7x+AI2FFCtkHqvfLKK+799993W7Zs8QRIeByN lXXgY4895h5++GGvRossJyivLZ4hWyBICOqIqunLL7/0r4M6oriCIEPlBYmH3WU4f1062kl5YIUl JcQN9o4QVRCaBPdAqPkglFBgoU6EsCJ4/vGPf+xJUtoAicW+BOVCdkEmQvw988wzKRNz6WgvJO+d d97p6wwZ9tlnn3ncwZy2Mr5uuukmPy6CNvkGtfIfykF5iPINO0rGMQQdOf3oT0hO6sFrbCaxEcXa FHKUehDUFWtRtucxefLkhO18g/0h5lDscYzgGYIaO8104Okrav8YAoZAMwTqKmtdgxwzko3e+o2R lZvtemnBnYUhYAgYAoaAIWAIGALdAYEr9CPH5tE7YU9+JP/1Z3ccdgeU3LgtQhycJ+NyNGlaoJW/ ubrBzcq4SM6ZbK4tIO92ZULENYgwOack75XK91ErQgeSridfUX4wJt/9qDjfDcpJ7Qcjl2XUYqjO KmR7iOKtXA8m1ckRhbUh+bsGiqCLRXzU6ocv9o2ol7CnHDVyiFeu5Yfy0VVUnvPqu2PHT3plGyQS 6i2Ue5Tf76KFYnjwooDbK4vF87J+xHaT+kQLbPYOHtbksUhB8qLVKx9EnvLaDZUtJ6QNxwjyzETu f0YqsX37j/i6n5MCBIUY9Rk8eKDPiYdN28Rx2Li1zs4R1RmWmJAaZWoHCkRyu9EG1FBYd/buffl6 lVTaUlVV7Q4cOurzgWE/yPlRWNjXoVzC/jEvIr8fWHh1gnBDvXj8xCn/urB/P6n5hvn+OXL0hCcU J4wf3Qz/RPuGY7S2TfThXtlUMjZRwkXrd+xJf/3blzyh+sQP7xERutT3OcdLJpIZn4ydvfsOuQZd kxifYTUideBc2qPPIUgnji/247C1dUtlfLYW98i6ofbcueuAxsVJT8ozjsLEbrA9SkusUNl+0oTL cUhmXFJ2qvUP6tea578crHIv769yp+rOt2a3S9v+7fRi99D4Ea5PZutJ4kuFdPAfKOFQ9qCuQil0 4sQJrxxCMQZJhYJu9OjRUlCO9SQFaruWlM4s8kAtBGEUkHwouCDg2JdyIPZQKUFShIMcdewHwYTy CIUbgQ1mkL8OVRSqMZ6TDcrbt2+fV8ZBRmLpidps4MCBntgaOnSoJ1GoY6wci6m0M6g3ZVAP2kw9 IJHAnXpADkIKTlKONiwQIwPyCeKT/VE8cm2nvuwX4Lt+/XqvAKM9YIaqjsDOEWUYxBhWnZH57SKP xet0tBfc9+7d68kq6o1CDSKX8UWdGRtYiZIDEBUjdYZEa02AH2pDFHjYWFJv2odlKjgQfM9zfDAI yDvqhrIT/MAcEo1jR471IEcdeIMd6sfI4DMIOfqV74NoYzYVPFF7UjbfmWGr1ch6cG5z3nB+0xZs UMPqz8jtu8LrM3UN7v/ctM/xW9bCEAgQ4Fwo+faAO7nnmLvQmNz3eV5RXzd8xliXP7h19/9BHezZ EDAEDAFDwBAwBAyBWAjcNlqONVNGuTEFubE2aZP3jZhrE1hTL7StibkM/dCHlOuflemG9ckWkdDb 5ffOcL1Rzhkxl3oHdvMSYPNJ7l7deMGV1spWqrrOna1vIucg7HpqpIuYi8SvQQQSpAeWjNhTRk5C RW4ffs3EEio4Ji5jkXhsA5F3hZR3rS0/fKxofzP5RdnYczLBm6XJ3F7Ic+MEP+Dr6pSLQm3PYoWs 9tNlKy3RqAkByoZcRAnUVHb8wpNtC5UGY/oQSWmOLHhikZLhBoIB2F3QM/0Sa/I5vE9r/06lTZHH 2n/giPvds6+5UlmVPv3kg95qNVC4RG7bmtdtOT5bU4/wtqmOz3TiHq5Xa/9OZlxyjPasvxFzzXuV HGsQFJAbkBdcS1AQoUSKJNGa7xn9FWVAvlAuZBvloFprzfdM9JLT8y5jFPKCNjeKcIcAo46JXEPD NUhHO8EcrCiLekASJVIPiB+IT64bKPDAt60j1fZSZ/Lh0WbGF+rAdH8HcR1h3PEMJoy/aAEhi10r dYKIpi5Bnrpo27fFe6ni2RZ16qxlGjHXWXumY+uFheXRjXvdmUMnk67IgLFD3NCpox155iwMAUPA EDAEDAFDwBBIJwIdRcxdLg1IZ6usrE6LABPckHAFIuOGKYHymPwcNyC7tyfrIObiT1F32qZZxdoY AWg3MsrViOyBjMvUYKoUeXJOZEf9BU3YaoOeS821DfiouKIpuRI5WhMh17KCj22iKbcSKT/eNkzu 5sqKsbUBoYOtI490BwRnZmbr65RsW6g/GGMj2poAA+wT2zJSaRP1QgnJ9aBS6svPv1rnVXXXLJjl 1VzpIOU4RluOT8pPJlIdn6ninkydo+2TzLiknM5S/2ht6u7voWpLp7UkZAjqr84ajFGIOB6pRDra CXmUDKkGYYoSsT0j1fZS57YeF1xHoikNI3GChGtv/CLrkCqekeXZa0OgpyGQjvxyOZZfrqcNG2uv IWAIGAKGgCHQ7REwYq7bd3H0BkK89dKkb7Z+FPeVaq5IpNwgqTiwekJNd8V3Rs1FR87e/e6KJrvK ahFxvTVWWBmbLfVlkKfQEDIEDIGegwD5+lat3eQtN1HMFfbv6+bOnuaKBhT2HBCspYaAIWAIGAKG gCFgCBgCMRGoq6xxqOaSjUzNVfTOs/xyyeJn+xkChoAhYAgYAoZA50TAiLnO2S/tUivc5DL0Tw6K FilI8i4+IOw8LWfcXLv0Q1c7iJyYvEJGw8Sr5rBERTXXNGoYNKaX62p9avU1BJJFoLqm1m3Zutsd OXZCeQyHurtuXeymXzlRisSWVZrJHs/2MwQMAUPAEDAEDAFDwBDoQgjop6FXzCn9QbKRrTzVWUq/ YbY+ySJo+xkChoAhYAgYAoZAZ0TAiLnO2CvtWKdeOhZEHCo5yBUenpgzUq4de6FrHQoxJeRcs/HS tZpgtTUEDIE0ITB18jj30ycecOeqa9yAwn6uePRw169vfppKt2IMAUPAEDAEDAFDwBAwBLoyAo2y PUctd0FuK8kGeeUy5e5jYQgYAoaAIWAIGAKGQHdCwIi57tSbKbTF650g4/QQN2dhCCSAgA2UBECy TQyBbo3AwAH9Rcj1t++Nbt3L1jhDwBAwBAwBQ8AQMASSQ6C+us41pKCW46jZ+Tmudx8j5pLrAdvL EDAEDAFDwBAwBDorAkbMddaesXoZAoaAIWAIGAJdAAFbzNEFOsmqaAh0AgTeeOMN99FHH7nGxkb3 xBNPuMWLF3dIrUpKStwrr7ziNm7c6KZPn+7uv/9+N378+ITr0lnakXCFO9GG58+fd5WVlS4rK8vl 5uZ2opqlpyovv/yyW758ucvJyXGPPfaYu+aaa9JTsJViCHRhBJ2ddyoAAEAASURBVOqra12jcpIn G+SXy8rLcRlmk54shLafIWAIGAKGgCFgCHRSBHAytDAEDAFDwBAwBAwBQ8AQMAQMAUOgzRDYsGGD e/HFF91zzz3ndu/e3WbHiVdweXm5J0+effZZTxSeOnUq3i7NPu8s7WhWqS7w4siRI+63v/2te/75 5x3kaHeMr7/+2o9vCLp9+/Z1xyZamwyBViPQcK7ONdYmT8xl5Uoth42lrQRrNfa2gyFgCBgChoAh YAh0bgSMmOvc/WO1MwQMAUPAEDAEDAFDwBAwBLo8At8pQS2PCxcu+OeOalBQj/Bza+oS7NfR7WhN nTt624MHD7pnnnnG/epXv3IrV650586d6+gqtcnxg/FtY6NN4LVCuyACnBNYWZ5XnrlkIys/2/LL JQue7WcIGAKGgCFgCBgCnRoBs7Ls1N1jlTMEDAFDwBAwBAwBQ8AQMAS6PgLXX3+969Wrl7eynDlz ZpdtUHdpR3t2wMmTJx1qMlRkc+bMac9D27EMAUOgAxHAwpL8chfOX0i6FijmMnN6J72/7WgIGAKG gCFgCBgChkBnRcCIuc7aM1YvQ8AQ6HIInEcJ8F2Xq7ZV2BAwBAyBTovAeV1Tk5/O67TN6pEVI98W hBwKir59+3ZZDLpLO9qzA8gth4rMwhAwBHoWAg1Sy6ViY3mF7CuzcqWYy7Jpq541cqy1hoAhYAgY AoZAz0DA7nB6Rj9bKw0BQ6AdEDhTd8FVNV5wQ1xGOxzNDmEIGAKGQPdGAFLubP15V63rqkXXR6Cg oMDx6OrRXdrR1fvB6m8IGAKdH4F68svV1SddUZRymcovd4XU1haGgCFgCBgChoAhYAh0NwSMmOtu PWrtMQQMgQ5DYFdFg9tf1ejG5GW6zF5XdFg97MCGgCFgCHQHBPZX6Zpa2ejqYOh6cJSUlLg1a9a4 zZs3O/5ubGx0/fv3d8XFxW7RokVuypQpLisrKypCqJR27NjhtmzZ4o4cOeL3r6iocLm5uW7IkCFu xIgRbv78+W78+PEuM7P5z4LVq1f7YxYVFfltKisr3aeffuq2b9/ut509e7a78cYb3eHDh3358bY7 duyYLw/1FHaQU6dOjVpnbA83btzoj0PZ5CMbOHCgGzNmjLv66qt9e/v06RN1X94EH+r41VdfuV27 drmamho3ePBgN3nyZIfaLVXl1tq1a923337rorUDu0b6if5ZsGCBr/fWrVv99nv27HFgT1vGjh3r rr32Wo97RkbrFvMEx0B1uHDhQpeXl+fx2rRpkztw4IBvP+2dO3eu/5zjRUaifcv4QLESBOOP9oMv /VlfX+8GDRrkRo0a5S0q6VPGVhBHjx71269atcrxN4Gd5SuvvOJzzU2fPt3NmjXL5efnB7v459Ye p9nOF1+kct6k4/jR6mTvGQI9DYH66loRcynklzMby542ZKy9hoAhYAgYAoZAj0Kg+S/wHtV0a6wh YAgYAulFoLS20a04Xu2G98lwU/plOePm0ouvlZY4AnKK8xGaT018Z9vSEOgECJTVnXcfl9S4HRX1 rqfScpAey5cvd6+++qpbt26dJ0IgdiCWIKYGDBjg/vrXv7oHHnjA3XvvvW7YsGHNeu706dPuvffe c6+//rrbvXu3O3v2rCsvL3e1tbWeyEP5BYEEmfLII4+4W2+91ZcZFAIJ96c//cl/HpBlH3zwgTtx 4oTPFTdp0iS/P0TUc889F3e7nTt3umeffdaTOf369buMmKNdGzZscC+99JL78ssvPYl45swZvz3k U2FhoSey7r//fnffffe54cOHB1W99EwbX3vtNffGG2+4bdu2udLSUtfQ0OCVehCRkGUQYryXbHzx xRfuj3/8Y9R2fP755/4ziE4IKgiev/zlL27v3r0ODMGetkCWQUg9+eST7oYbbriMmGqpbsExICoh Bw8ePOjHwaFDh1xZWZkfH/Tt6NGjPQHKMTgW+f2CSLRvIeaI6upqx3EZSxBzjAHGEiQopBp9A1F8 9913uwcffNATdRB61OmFF17wJBx9STAO2B8y+amnnvJ9GhBzyR7HF3zxn1TOm3QcP1wX+9sQ6MkI YFvsrSzrG5OGISsv2/XOtvxySQNoOxoChoAhYAgYAoZAp0bAiLlO3T1WOUPAEOhKCCDq2HBaCc6/ q3SLh/QROdfbDcrJcDli6Iwg6Uo92XF1raxpdHtOVLhBfXPcyAHfqw5aW6OPN5e4r3aWugyNvaKC bDewIEePbFeU3/T3gPwsl9M7w8Zla4G17dsUARwrz9RfcAeklFt9qtatPFnryvW6JwaEy1tvveX+ 8z//033zzTeeSIIIW7JkiSeZUCtB1n300UdegcT2jz766CViDRLoD3/4gyfCIIVQNc2YMcOTWRAm EDgorFBxoWBCTQdJBzkXEDgQeyiwCAgu1GeUy+dMuPrcPyJXIFwS2Q7SDBIJcgr1XWR8+OGH7je/ +Y0ngCAgaS8KNwgujkt9V6xY4etL+3/yk594UicohzKff/5598wzz/i6QvZcddVVfhuOCYH49ttv e3UZ5SUbtDdWO4LPIId+97vfeXwh5yDRUDaCAcQUuENanTp1yhNbkHOJRnAMiDHaSjn0P2pClHhg Fyji6FuO8a//+q8OhWMQifYtfQxhCsH761//2pNykJoTJ070as2cnBx3/PhxrwikbxhrjIVf/OIX 7sorr/R9R9tRy9XV1Xn1IqQh9eQZsrR376ZJ91SOE7QrlfMmHccP6mHPhoAhIPVybYNrqNXimvPJ f49noZgzYs6GkyFgCBgChoAhYAh0UwSMmOumHWvNMgQMgY5B4Jxmlr8pq3OHqxvdEJFy+Zm9XG+T znVMZ3TBo5YdK3N7d5a4wcML3ajxylYYYS2XaJNWrznqNn172Gn23OVnZ7q8HD0uPff2r7P1mlXI GXrwnJmd5Sc/mADJyMq0fB6Jgm3bpQ2BCxqv1VrhgFqupOa8q2xIfjIvbZXqoIKwcoRkwgIQAgPS DZUYhAZkCKQMqqff//733lYQBRdE1s033+xrjN0hyjEsByG3UE1B3EC+EdhDQtqwP6o8jkd5M2fO vEx5h50kRNSECRMukWEonlCsQb58/PHHvsx426E0ixUQOi+//LJbtmyZVwNSX9o7btw4r6yCdAuU eVhU0l4IH1SCgXUiKjvUdlh3ohZ7/PHH3S233OLJH8gk2vviiy96MhP82jIgDiHksGr8t3/7N2/z iEoQW01sRSFN6SP6F1wgTVFAtiYgS3lMmzbNK88g91DiQUJyDPr2k08+ce+8844n0ugviLBwxOsz toUQBbdgLIIryrhiKeSwP4UIhCRmvEIio5DD2pK+of/+5m/+xrcPkhlCmPryHuQelptYcqZ6HBR7 RCrnTSrtDI7vK2H/GAKGgEfA21iKnEs2rtDvp9652bonNcVcshjafoaAIWAIGAKGgCHQuREwYq5z 94/VzhAwBLogAvUXvnOHzzX6RxesvlW5gxA4L6ufkq3H3On9x13O0Qo3rMa5/MH9m+X3SaRqKFmO nqp2FdVapay/y/UcLXpl9HK9MjMuPTJEIgevB4zRZOmwAf51tH3tPUPAEGg7BFD9YBkJEQKhdMcd d7h//Md/9IRGoC7i6BBTqKEgZ8h5hsXgvHnzvALps88+8wQVed8efvhhT+xBDIUDggSiCIUTRA6E FmRSpCVmVVWVGzlypCd/IAgpE6IMNRWkYRCJbhdsHzxjh/j+++97YhClGfX9p3/6J0/6hduL4gzi CbtBFGFvvvmmJxJpM0o0SD1wwCLxoYce8qotCCLqSbD/0KFDPamJ0rAtA+KTYz/22GOeIAyTbqj4 aCeqPQhJCCEUi+FtEqkbZdBXEGVPPPGExybYD2IS7DgG+Qkh57DwhKgMR7w+A1esVCEP6SdsU//5 n//Zk8DhnIRgC8H2H//xH54cw74Tknfp0qUed4jQYKxAYkHogkMQ6TgO33fJnjeQhKm2M1CaBm2y Z0OgpyNQf67ONaSQX653TpbjAUFnYQgYAoaAIWAIGAKGQHdEwIi57tir1iZDwBAwBAyBLodA1cly d06P8w3nXc2ZKnf6QKkmJLJdTr/WWVo21NTLOqjBk3ItgXBB1kI8XJRJk7wiTeBfnMxuqQz7zBAw BNKPACQNZA2kGwq5O++88zKSiqNCkEHaQXpgTVgsBRN2fMTChQu9vSFk3E033eQiSTm2gVghvxxK Kog5lE8QddFi/vz5vpwgrxsEWbRIdLvwvqjxIH6wO0SVd9ddd0VtL8q4G2+80W9L/jiUc+CERSM5 9LZu3eogmsgjd9ttt13KcxYcC6Jqzpw5/jO2Bee2jEWLFnliKpJww2KT/kFNBjEHsQoxlUwsXrzY tyeyP7Kzs31+OeoA4Up7wYzX5CcMR0t9hsoQNRxKN4i2e+65x02ePNllZGSEi/CkHGORbdmHfkE9 B2kabew121kv0nEcMEz2vMFatD3aGdlue20IdGcE6qvrXGOUe8xE29zbbCwThSql7QrllDG4T7ar 1W+CE+qzWi0Oskg/Ar30u6qvHEkGimzO0N/Vjefdmbp6/6x1JRadEIFcLWAdlpfjsrWY9di5Wnc2 hetZuHk2FsJodI2/h2sccO4e1zWyTBbNuLxYGALpQsCIuXQhaeUYAoaAIWAIGAJJItCoH2YVx0+7 2sqmSXEIs4qS0y67oI8ryh7mMnMSt/Gpq6h2DbppTDZQ0mXqhyPPFoaAIdD+CJDLDdIIBRDKItQ8 qMCixaxZs7wdICo78shB+kCaoIyCcEHFE81mj+2xo4S0CUgh3uMRLSDMIpV0qWwX3hdiDlIORRZE Ie0NK+XC29I+1FlYIELGgRPqPfK2UQaBEgvSK1DKhfenXCw9+bytiTmsRUeMGBE+/KW/IdICBRnK N9re2qAt9PH48eOj7gohhpUm9pWMKfBCQYeaLhwt9S356yAOGYvgRv9EknJBWRCQEJ+o1rBQpV/J h5cIMZeO4wTjIZnz5vPPP2+XdgZY2XNsBMZpMdLi4UWOSbB4cV4OFXW6X6rWdeuUFiXtKz/n9lac c5VyIGjPuHnUIHe1HA7qVZePDpW6Lacvz6GZan0WDx/o5g0pdJma0F+mY2w81bZ2vKnW9zv1TUN1 rTtfn7yV5QK5Nzwwb5IbOqifYwr0gsqs1+KTqoZGd1D3y9uE83Edo1Hvd+ZgEp4J/gbVnfHamSJH 9wuM3wVDB7jlh0+60prkfz90pnZ1lrpAxE0b0NdN6J/nhoj8hATN7610ARKB1su6vULnx5GqWrfh 1Fm362yVO6fFmRadB4HJhfnuzjFDHOfwG/tKUiLmbCw079eu9p02WnMyt48e4gna9w6e0HkbfSFj 81baK0MgMQSMmEsMJ9sqDgJYLZUon8bRY0f9BAkrdZkgwsanoKApd0S0Impqqv0qb35EM0nRp0/r lCHRyqytrdHK3tO6eT/vy8zNzYu2mb1nCBgChkCnQaCqVGq5UxXuglZPBsEq4zMHS112fh/Xb8TA hIgyrqXnNFFRl8LNIrk8Mno3V0MEdbJnQ8AQaHsEIEKCHGiQYZGKq3ANsA8McnSF34f0CYifwOoS 4goy7vjx4/7B++QYQy1EcP2IFhBc3NNFO054+0S3C+/D3+H2Quj86le/upQLL3JbXqMyQyFIBPvS roBgxK4yGhnpd9A/kGUtYRpsl8ozhCjHyMuLfg8KqRYQXKgcY2HfUh3oD0i3SAVceJ8wFgFGYWIu Xp8xViDXCOxMI5V54WNFbhMcL3KbaK/TcZxgLFB+a88b1Knt0c5obbf3miNQJKeAa0QSXDnge5vc 5ltcfKXLlc4cT8pAeFSKrCkTObdV90AQV3tE0rXXivaphQWasBvslS8cvy2IuUn9890tIlCydG3h GJ2dmOMethH3hhRIszlq7z2TRrqivrn+Gsk3VEDGntaCNhQsm8sq3Iojp9zhFO57o46vNL2JEu1a WcOjkFqtBXhHVefOFLNFet48arDDLPSM+gxy2SI9CEwRqQO2s+RCwjgoyMpQ3vnmix65RlVoIcH8 oYXumxNn3EeHS90hkc7R78bSUy8rJXEEJvcvcPO1IGKnnGwa9T2TbNhYuBy5rvaddlQEOtfxW/Vd zwKG01LNoXq1MATSgYARc+lAsQeXQYL5b75Zq+Tyy91OrbpmoqSurtbbI+XnF/gVyUuW3uTzWhQW Xp7UntWtf/7zy36F9mOPPa5VzjNTRpNcKS+99KKrlCXTEz9+Uqt3r065TCvAEDAEDIG2QqBBN3cV x8+4uotqufBxeO/0gRMuKy/b5Q2Mvcgh2Kf27DlP8DWmsFo8M1tqOa3stTAEDIGOQQA7xsBSsn// /jHJnXi14x6LXGrkqkORBHGFugzLSp5Rx1F+LJVcUH5OTo7fjkVXLUWi20WWgYorICKpM7aG0dRu wX4QWUGd2TdoTxgzbC9jBaQdyru2DIg36sBztKB9LbUx2j6R70H8xWsHarUAC8YV9+3hiNdnAdlF XcEtFtEYlBmuE2QXfZNIpOM4qZw36Th+Iu20beIjAEEQPJiwZlU6CqlowSR3gRQpg/pkeTXKMFkf jinI9YqUV/YcdXtFzrVH6PRQnYP/2uaIYNKLY/hjtc0x0lkq97ap3ItmaYFYtlSTZ0UUVckJgkC1 gqUcypPR+blutPqayV1UX3/dX+ItxtLZhlTLGpqb7e4dO8wr0jojmYoq9caRTerU1/ceczvO6L4g xgKdVLHoafuP75fnHhg3zF0v9S/jlQn83fqNViKFJ6q4JivDDH+94ro1XQsRhus5T+MeZRbknEXH IoDKdZRUUv20YHV/ZbW3eU2mRjYWoqPW1b7TWAjC4gr6E5XxAX0vbZJy3Uj06P1r77YOASPmWoeX bR1C4NSpk+6vb73l3njjdVnWbNPkQIErLi52g7V6t04//Pfs2e02btro1q5d6yDdHnjgQf9ZqAhP 5EHsNeoH1+233xH+KOm/mXhav36dO618GLffcWfS5diOhoAhYAi0BwKVJ842qeWirFL1CjjlnTt7 6KTyzWWJoItt7YTarvxomavWSmotLU666r01wZWpHyEWhoAh0DEIoKRCcZVKkGvrN7/5jXvvvffc MTkaYJUICYdaDDtCVFNYGEIcvfTSS2716tUxD0cuOraLRyQlul3kgSDZgtx42FBi3xnLujNyX/Ke oRwL1y2e+ox6Bmq1yPLS9Zr+S7UP49UlkWOEsaXNYZwoP16fgWXwiFcfPg+r/1qzX7Atz4lEtOOk ct6k4/iJ1Nu2aR0Cx87ViHA5LvVbVdQdM3WeQdSQ92WurCQXSNnA34uGD3D7ZGlJvqxYpF7UAjvx m5ukDEOvkaHZTNSAnT3IdXw+hUViGdlZbtXpCndyy4FLTYWUxMqzSPep18vac6aUSPT3bVIwnBQR +JGsGDtTf/dXG1B+QoChuOlM0bvXFTpPBrq5g/rLFrTaKzDLpZizSB0BrknY9F07bKAn5SBlVxw5 KeKzypXLuhI7U4i5HG1XpPE7W32w5CJBetPIQQ5lDjmszNYy9b5IpYQRcqyBXCfn4hERpSwUaW3Y WIiNWFf7TmPRwtrSs2724H5ukc7txXIzwkqZnHMWhkCqCBgxlyqCPXR/ViW/+eYb7ne//a1PCH/r bbcr+fztfsIHO8rGxgZ3vKREeSbe94/f/e43fsXufQ884Pq2YG2ZDjhHjhzlHn/8x66mutpNGD8h HUVaGYaAIWAItAkC9Vp9BTFX14K1zXkRbmdl00O+uULl28hQboJoUSnVXfmxMod9UCrRp1++6y2F noUhYAh0DAJhRReKo2rdz7QUkC8QLgERVKL7r+eee06OBH/2C6DmzZvn7rzzTp+bDStCVE0co6io yO3fv98tW7bMFx+QE5HHiiRzIj8PXie6XbB98BxuL8Tc008/7bBgTCRQcAWWkai/CNR3586dc7EU fqgFA3VdIsforNskMjYCLGgD6rpI28t4fQa2WKKy6I0HY7GlnHFsA/bB8YI+8W+08E86jhMeR4lg Ez5v0nH8FppnHyWJACqTQyINmNBuKTJFMrBNg2wTb9IENwoHLPo2amHTTuVt6g6xRcRcQMidi6Eg 7EztRDF3Xqkuko0MkW+HdT97prTJSjdcDpPdu9Wvj0wc4a7TBOkQTZ7PUn8z0VtV3vrJ83DZ6fxb w9KrP9NZZrrKGts3z5PZ/ZXz7O0DkN/nTPmRJnBRck6TywnYYrH6rvDFbhW73chA1btXyhssLe8s HuKJZqwTt4iUjnfdiyzLXqcXgWJZ6HJtgSiFfElGTWpjIXafdLXvNFpyqrbObdB9BXkjsdxGMVcq C+32ss2OjaZ90tURiD6719VbZfVvcwRWrvzKvf7aqw7byHvvvc/94hd/56ZNm9bMsmfGjKuUkH6C X6X99tt/de+887a2me7mKHl8WwaTOXfddbdf4Rs5AdGWx7WyDQFDwBBoLQIVyidAbrnvoqjlwmXV 6wfB6QOlXjFXoDwEkZOplFG2/4SrvWj3E963NX9n6QdIHyUoz9SPSQtDwBDoGAQGDx58ifyIZweI hfgLL7zgtmzZ4mbMmKH7n7t8DraVK1f6hVOzZ892v/zlL/37kA8BeRe0DPu/gPgLq5CCz9vjOdxe CDOUfRMnTox5aNpMPjBIH8gYCLgglxq5yoLcZrQ3WsTDNNo+nfG9gCyDYIqlAAywoP7Dhw9vdW69 oG/IRRjkgWuJmAu24XgB2cXf8SIdxwnK4Fjx+jjyvOE8oF1t3c54ONjnySHQKEIOAm+NbKamKq8T 9oajpHZAWbXzbHJldra9ICm7Uj6bRil+UrGyxCUiQxaA0QLFEaTFai1Im6i+LhYRMpr+1j77uoCa MFqb2vM9CMM5IjInaSEehMMeWSxWJaEGas86d6VjjZBCkrEomD2BjGIuGilHm9CIo/b8XAsrp0pd iQIUq7yhsrU0Yg6EOiZQNHJdGaTcgF+ob06oj5IJGwuxUetq32m0hJSpW8oqvdXsQhHoVw3s57ad rvLncOyW2ieGQHwEot/txN/PtujBCDCB8+mnK/wkEBM+Dz/yiLcdisyjweTPeNkk3XX3Pe7gwQOu sqrSnS0/621uIieGYsFZX1/vc43s27fXndBkS51e99cPZxLQT5XV0cCBRZftykroXbt2ugZZBUye MtkNGjTYb8OP8N27dnnycPyE8a6ivMJt277NWzxhg4R1UnFxsVYT5/rV1my7c+cOVyNbzlGjRrnZ s+c4fvTHClaaHzx40G3dusUdPXrEZxooGjTIYzB+3Pi4eTlilWvvGwKGQPdEgPxxVVLL1csGIZGo 1iTE6YOlrjfkmX60BcH7p/aWuCqt4LoQh+AL9on1nKsfhTn9ci8j/mJtb+8bAoZA+hHAbhI1GwT8 t99+64k2SLdo907kZHtLtuJffPGFe0T3Y0uWLHG8h30lMXfuXHf99df78iJryn3L9u3bdc9y1H8E McejvQNbzUG6XyLWr1/vdihnMXab2CxGBvWjvW+//bbPM0eb77nnHn8Px70a7cFCHQzGjh0b9VrG Mfbu3RtZdJd7Tb44LEshk7h/jQzIy40bNzoUlKjeIDtRTLYmwn3z9ddf6754pxszZkxUXFGpffPN N74+EIWTJk1yw4YN84dj7EYuKAnXIx3HgahN9rxZvHjxpTGYSjvDbbK/2x8BVq4HdmN5un5kaxzG C1QtE3VPNQZ1hCZhc5RXqEJKreOaiMV+EJs/iKDWRqHKxcaQiV0sApmcL21hcpc8aTMGFjjs085e 3J4J+yCYtB+vOjJhvEmLsahXEBxnnNoAubJNx8Eub6y2HS/iZaRIAvJWleuzErkzbJaq7KieE1nh n6FjkbPvqqK+bmR+juujOlZI9YOCBEUP+f8mixjj2NXKm8V72Id+p9lLrCwv6L1kI9Pbql/+HRCU B6GB2ojjMYEOkQHmLQWEFAqWcVKLDVb5kCB5cqHAqu606gve29XnR9WuWOqYafSD2ntWGG8X1rka Z6gzwYl9UPKhkoKYYVvyHxIjhN9SqTlnSEmFzSr5xrAyTOcYaant4c9G5PVx01WPwpzebsORcndE lrGJmAi31bkSrlvwd7JjL9i/I5+z1K9YhRJcOxoSuK8iX9VGqW/Yt1JjKxFVbKr9kchYRh2ky4Cb ogUPhbJm5XwjF+EZXaNiBfVqGvvZl86p0yLqI6O96s95ncj4DtdvgM4NSLVs3bscVN+cCl2Lw9vF +7s7jQW+NwYKl3SNg5a+0yJx5VrNtZJrL39zfcC2GCtJvg/JyRjvPEt1vAV1Ik8kC4FY3HC1LLTX StXN+GjtGAvKs2dDAARi3+0YPoZADATIHbdDEx+sar5RE0Dz5s2PmQuEH+ELFizwq1Dr6upkozS1 xR/m4UMeO3ZUKrt33IpPPtEE01FXWVnh1Xeo4Pr3LxRRNlu5655wM2R7FP6xf+TIYfeiVo+XiwT8 u7/75SVijomLF1543uXm6YeKlHzfbtroyUVsfvgxP2r0KPfjHz+lyZ1pyp33pvvkk+V+MqNBNhys yL7hhhtlkfmEm6iJhshgtfKHHy7zKkJIwbNnm25i8vLyPZm3dOlN7v77H9AxRkfuaq8NAUOgByLA hHiFVvqe06orJjASie/0ww67yhxZWqJo44FSDlKuouSMLIMut0hJpNxgmyv0YzBXN71Z+sFuYQgY Ah2HAMqm+fPn+7xvOBN89NFHjlxq48ePb1YpLAM//vhjLQja6kmqcePGeSIkrHzj/oRHZHAN+uyz z9xrr73mjhw54j8mD11HEHPFIpW4V4TUYYHTm2++6SZPnuwVgOH7Oyq5bt069+qrr+qe60N/b4ZC kHx0kECQl6tWrfLE3gcffOCtOyGRwgFhB2bcE3b1oA+XL1/urrvuOjdE+Z3DLhH05Se6f/7yyy+9 tSTEE84Wsew9Y2EBQQq5C8EH6fnuu+96rCE9wxEc79NPP3UQdIzV6dOnX1J+QrIGRCu/H/hNEI50 HIf2J3ve3HTTTZ7MTbWd4TbZ3+2PAJOp+RftvlmNX98CocZkM8q6W0YN1qr3vn6yr0AKLSbUaxp1 vyUiixx3KFlQTJyKMrHcUgu5tZuj3FHk8WIC8U87DrtTx2JbXo3p28fdVTzUT2ivlPIP8iYcM1XH O8cMceTVO9dwsBkxR641PoNQqlWbmTxdqlxVTCwzGZmlfXgfwg5C6INDJ7wdV40wihXgeOOIIp9H B+Lr+3Jkr65J+X2arH7v4Ak3RRiyHYqS03X1fuIeS/XzOhbXqGTDK+Yu9mWsMmr03RaQpvAgF7mQ qJv3Vd9iPbZYdUVNWSCyElIObBpVz2r1UaWIRAjPT5QP7Gs5WgQkb7hA8oHdIVt5iJT+skxFsRfk NoTsPKQ+WKN79dG6V4f8KrjYBl4XZg9xqDvfF/6Qm/ydzjESrmdLfzNeJmiCmzEKkQjZ0lK09bkS eexUxl5kWR3xmmtHoG7lGsP5c0ykBv0dKxjLHytH4jrlsGI7Jv9jRbr6I5GxzLWLc33BkAFunkgI SOfndx5xZ07GliJD4j0wbpgnqz/WuRRY8Abtae/6hxc4BHWI9wzRjo0l1zQIqZaulS2V1Z3GwnsH TnhiLF3joKXvtABTvo8hv5aMGOQmaVwNuriYQpd7f+2v0DztomE17jN9R3+pB7kZIyNd4y0ol/uK 3VoUwkIblNpXFhZokUZT/shgG3s2BFqLgBFzrUXMtpd95X7ZBB13qMyKxxRf+tEdC5rCwgHummuu jfVx1Pf50f7666+53//+/1NOugI3V/lR+JFfJ1/fHVKxrVq10u1+ZZe3OxoydIgmJL7PRcJE1b79 e93psjJXITIvCP++lHeHRdzl5ea5IbK8XHzDDd5D4Ouv17g1q1e76nPVfrUtkwqTJk12S0So7dc+ TDS8/PKLnlgbrpXs5DQJx8aNG9wLzz/nV7azMv1qTWKQF2qnSLpPV3zifvvb37h+/fu5H/zg4cv2 DZdjfxsChkDPQADLSXLLkYOjNcFkx+mDJ0XKySJFN6tn9SMOci9VUo46QPhhY5mhyQoLQ8AQ6DgE WCyECmy17ktQhvFAgYQ6jBxsfA6ZxuIl8siVlpa6hQsXemUcNpCQUSj8Dx065JV0EyZMkO34vQ7i DuUS+0KCvfjii5644Z6LiEaYtAcK3FPdd999Xun23nvvedKNCd1HH33UE3YsjuIebs2aNe7ZZ5/1 5Bufow6k3eBB0Eba9fnnn+se8nXf1oceesgTRJCTqA9pM4QVarPuEOQI/PWvf+377pZbbvGqLxwi IHP/9Kc/eYUbKjnGE8Rla4Px9IDyQ0OIrlixwr3xxhue6P3BD37gZs2a5clA7CshO7FURe2Ym5vr +5PchoHKkz4OSEH6gf5ByVdcXOzv79NxnFTOG+qRjna2Fl/bPn0IQKpNV96XoZpMJSCKIJBiBXmc 7h07zM2SGgx1HRPOKL5qRcqhvJqg+yEmrodrsRKWmExKMkGbaDChzfH7SIFHnbDY3CxFzOkYdUIN AJGD0orJRRRc4YDgQRXWO+MKqbSa36dBOnEMcu3dI3IPdRuqAib3D0hJwL4QQxB1qAL7ZWd6hRsK nWhB+beOHuwe1OT6KO3HpPR+3beikGOilPxkqAWYJEVhiMrvgvQCqP6IBv1eT8XGspfKZPFZr4vl Rasj7w3UvXBAfJ2taxRhGZ1ohFS8S8TlHXoMFzb0y95yqWBUT6gSchJCVIEbGKFyo//WiJzTV02z aMI6x++HcgR8KJ/vpCv0Hx+wL0oO+rK3JvjJiUfd6A8IG/oWdV26x0izisZ4QV0mamxDOqCghEis bYGgpZi2PlfCVU117IXL6qi/sVOFeIWU47x7dOJIf45sEJl1UOdjLJKH84tHvEhXfyQylsnbidqt QkQ727OIgXMFZS5K08hAycR1mBx7/H1KKubI63B71z/iFI6sctTXYy8ScwcrajxxnUwZFNydxgLf qVwb0zUOWvpOAzvU4ddrYcuD44f7BSAsSuF7er3Oo3O6ZvH9M1mk2NzBhW6Yrtv6avTkduSCinSN N+oUxC4taOAch8BlcQbXUxa+WBgCySJgxFyyyPXg/U6XnZZ6rcpP+qBci1zNnA5otm3b6j7RKmBd X92PHnvc3X77HSLMBnnFHKTgb3/zG62Y/oufxLn55lubEXPxjn9Mlk0LF17jnnryKbfwmmv8DTer ep955teaePjG22Q+9dRP3d2axKB9ZWWn/IQYROH2bdt8zpZIYm79+nWa8Nnk5sy52v30Z0/7iTNW nZeeKHV9cvrIdulNv9KYnBeR+8arr31uCBgC3QsBfryjfKvWj5pE1XJhBOp0U3py91E/CVB/TpMK CVikhPeP9jfX8XxNQOVossXCEDAEOh4BbAefeuopB8kCIfXyyy97m0fsGlEeYVMY2FBCvP3kJz/x yiaIEAgRFglh17hv3z4tDvqtJ1WwAef6Q94xSDtylEHmcG+C/SMEH+Vy/xIQKu2FxJQpU9zPfvYz 3V9WXiIkIXkgGfPz873CChJql2zG2Wbp0qXupz/9abNcdCi7fv7zn3vFFhaPzz//vMOWEGtQ2oRl J/tzLIggyu/KwTggt96ePXvcr371K680ZNEcJCaWk6gtwe7xxx/3pCUEZzIBAUffkIdtw4YNl8Yi 4wkbexazcTzGFOTY/fff748J7kGg6GN7PqcfnnvuOYeq8fbbb3dPP/20Ywyn4zipnDfpOH7QXntu PwRQPI0UMbRENoFLpIZi0hDyY6Mm75jEixaQLzdLUYbSidXvKMhQxaFqYSIacgDLrNtETjERDaFz XPdbZbWlXnkWrczI9yBesK+8RnUYoDKmagIRAisaMddPdWYSH6UbE/NYNCZiZRd5TCZNIYNQuDy/ 87Dy61WJ/DnvLROxtryreIivBxPnM0VIosqLnMSkTBRVt44a5EkF1FQfHi5130jJA6HE5OcQEYTg jQINvJlADUdDDYq55F0ceguHTJGHfiIgXHDob1RV89R/xWoXcVTqxmhqCT5D0XCj6otd6RZZeX5w qFQ2pZUeGz7HUnK4+gbybq7UGRNlATq7qL9XF8YqE4JzmHCgv1AOMkmLYrNMRMRmEbyo5yD/Hhw/ TMRfgSc23zlw3G+PDSCkXEeMEchdT/DqvAEziJOWSIf2OFfogyBSHXtBOR35jLr206On/PnDpP10 WdQOzct21+p8gbDFdo9zFHUmqpuWlL2R7WiL/mhpLKMMRZUKEcf1kvZM1iKDISeym6l2g3oO17UV a1vOz6061/brGhOoWtmmI+of1C3RZ64HTQrX3u7TyrIWLYjjldmdxsIu2fz2UoPTMQ7i4cbnLCBg gQi2qKjYPz7S9D3NgoJ63dOjeJ6j7yqU5lzb+Z7m3OK7Koi2GG+UTR3oW67zkHOD9X0AWWdhCCSL gBFzySLXg/er1srq+vo6T8xhC9kWwYTJ3ffc6zJ003jjkqV+YiY4DsnZr7n2Wrdy5Vd+wooJmtYE E9BYcC696Wav+mPfRZrA+uCD95WrY6NWFF/llXJjpAYkON6VsrdcvvxjTV6d1ATE5asLsbtkNTar zVHK9eqVIWulbDdaE0pPabKM8lmxnOykiK+I/WMIGALdAoEa2QihlmvUDV1SoZtAFHfpjD76kVUw tND11qSOhSFgCHQ8AhAekE/cg7z00kuexIBkQkVHQLBBwkBs/PCHP3Q333yzJ5v4DBIEoo4ysKqE 0OLBa/bjGfXUE0884fdHQQapgpIOsq9MjgNBzjfKa4/AjpL2DhgwwL3yyivu/fff93bjEEHhBWBY KD722GPu4Ycf9raFYftGlFp33nmnV2ZBZGLViZUj+9Nu8qxhWcj+HKM7EHOoKOlP7D2XLVvm70Vp K+o0+hhlG0ow1JLJBhiDK/nbUGiixoPIhTDmWATYY7eKapEHVqSoPIMAe+qKuo7xRg5ECDrKZHuI uXQcByySPW/ScfygvfacHgRQq90n1da1wwZcViBkUG/9TsyXyp88bhBPA0RKMcn9Vclpt0oLoFB5 RAYqjoUqDzUc6q8VR8rcq3uOeWtCLA2DIIcMK+BzMntpYrCvt3TEkm27CJ1EY3d5lSdkUMtN0IQ2 k73sH2lpN16fYXdHeyDzUNV8X5NEjwbBlOEnkT8SkfahyKcw6UbdKb+/rrXkO6M+4BbehiNBtC3U /SDEJBPqy4+ccm/tO+5zRQV1on4Qdrk63nXDB3hlTLiWuEFgZZlsZEt90Ed9iborCHWbbx8T/lhR Ym+2SP2IWg2Sa71yYUUjYsFkltR95JYj198KtQfLwEjic7/6m+MNE4FCDjr6CtVhLGIOJSQWee+L lKM8cvjxHpI58u0xlqgrfxNY2qE6hHQNR3uPEdoV5L2DIIzEIVy39jxXOG46xl64/h31N4QrlpQo WO+TKhc1LBP3PBov9PXXJcZVmYhuiDnIK6zweEYJFCvaqj/ijWXqw3UL9S3XBRYZjNI1JJznMqgz n2HvR3AtgygJoiPrH9QhkWfUV0P14Dp9WNeFs7KzTDa621hIxzhIBEvGCgQgi0hQyq06fsq9tveY v4aGvz9ZMNNP3wH9tSgiGJvkCeW61lbjjfrz3cj9BfcbqOUG68H3a7w8d4m03bbpmQgYMdcz+z2l VmfJ7oFVutXVWgEjC4i2iNGjx7gHH/yBJlP4sZ/nKrUa94RWcqOWO3r0iPvyiy+00vuMJ7vOX4h9 AxOtbgUFfd2okaMukXJsgxqvrya/iDHFxZ509C8u/sPkV58+uX7FNiRcZGB7ycpglHP//b//H26m VhdfeeWVyucx3RUXj9WEw8TIXey1IWAI9EAEvtMNXKUmjGr0AyeY0OxoGDI0CdNfK4nztKITe0wL Q8AQ6BwIcO9BbjCURlgRQpxBZmDDyGIf1HPkDSO/WqQan/d/+ctf+vxjKOcgRFhABOE2bNgw3ZsU +/sUyoH8gxhBQUdZAdkF4YeKCGKL3F2xItHtIIm4N0K9Fq082ku+NNoLEQR5w4N6USfsOSHmcDlg G8i8yGAB1B133OHbgWUiikEUXRB+o5Xnl30pg3s2MCWfH21vTbTUjsA6k+t7tDYGx6Ge//AP/+DI kQc5BS6tDfqF3GyoHhknKOcYI6gdGRsoA2kv5UcqIBPts6BO1BfCi3GDIi4g1lDnocrjeIwd6hPt eByfPIL//u//7gk6bCwZj9jU0x9BpHocyknlvEn1+KgTr776ak+Woly1SA0BCITFsrJicjMyGP+Z ekCuQdKxDeqlz6RUWaHHAU2oXr6X85aPMwfKhlFlH5HKiXxubBsm5TgWOdk2iOyZpRX52JrNwMJN K/h3iWw7rwnbRAIyBmUWKiyUJKjiWM0fzumlqrtpmsxG9QfBtONsZUoKjW+VexhSIJJwwz5vq5Rc x6oHemJugCYzIY4ig9X/EFNM1tP+VcIHAircYrA+UHnOfVFS5hVrgWotKIuFZ6lYWc5RPqGH50x0 IzUxGwQ40d9YZ0LGDZfyK1/3r0zSYjnJA7wvD5SLFX6MYCf5DTZowjky6NODIs5QkNH+PBG+KGda ClRE9GeQf7Ch/kJLm0f9rL3HCGpH8CM4dixbRT7HHrW9zhWOl46xRzmdISo1xlbq9x7nOtcQlICT dP0AexYQ8GB2iIl8lKjHtd02jVNyZaG8iaaia8v+iDeWIRGp12yR3AF5vVHXGq5ZQXC+oKZDkQnx yPaQv0F0ZP2DOiTyzCIJVIQl6hP6BRV1KtGdxkI6xkEiWLJoBOUypBvqtNV8T+v6HCblKIfFMyzC 4bsMO2sUqcFVuy3HG8fmOxZ1PufyYN1P8J1xtq713wGUZWEIXH43ZpgYAnEQ6Nu3n18ZixUS5Fhb BCte+cG+ZvUqt+brNe7okaOuvOKsCLpKr1irrFSCzfJyTbQMbPXhCwv7+0mE8I4cL/Piyl5W/bLS OBwZ+hGQoZuN75r9LPl+Cywsf/zkT5TP41mtIF7tyDnHivWhmvwaWzzOXbdokWylFl9G+H1fgv1l CBgCPQGBav1IqdSP+IbQD5WObnfBkP6u77BCn8+jo+tixzcEDIHmCKA6wp6PB4QcJBMLhCDiIERY KBUt2A8bSAgs1Py4C0CIoVxi37CaCWIkTI4E5UEw8IgXiW4HycejpaBeqLt40E7aS/25T6PuWCFG kkyR5dE+cvFBTNFucOPeDsImaPe1cl7gkUy01I7Zs2c7HvGC+kCm8UglICcgHHlUV0vho3tj3qOt kJn8HS0S7bPwvvQBSjgedXV1/lj19fX+npnjRd47h/flb/oObFDW0aeMR96j3HCkehzKop+TOW/Y N5XjY6fKwyI9CECWMPEVTFJDwGXp9xgqOVanEyhM1uu+ChKJfFkokpgUxmIqWkBMQMqxmh4iBnIu crIv2A/SgslA7CdRaaF4weYyOgEU7NX8eYvyAKMawVILNQkEXJiYo0xyNmFnuUVED8cL2tu8pMRe oRqDXIoWqLqqL06ko0KA6IoMSDZW/xO7dc+K3WE0JJmr3iFlAnn3wsQcFu0NmsS/cFEpFll+Iq+v 1D3pLVIajdCCsVhBnVA1fnnstLcN5O9o9cTybK1cKrZJkcSCCSbJI4NxVSjFBWqygKxkfPB+S8HY iaWoa2m/yM/ac4ygSmMME2BRIwI6VrT3uZLq2IvVjo56n2sX1qkoy74uPeOJzhFSAdNOFL4j9Tfj DcUNj3F6D6vIN6QMWqMxG5nDrS37I95Y5npKW7DjLBI5BwEHQbf77PfnE8Qq7UJlvO4kCrvqZosq OrL+iY4Bzng/DnVdps/C1+pEy4i2XXcZC+kYB9HwiXwPRSbf0/QHSmO+12IRpKiOUTVyvSafYbDY oC3HG/UNXz8hBVnMEplPMbJd9toQiIVA9F/zsba29w0BIcCqWBRmrEIuO10mW8v6qKuWA7D4/K03 33D79u/TSuhF+lE+57KV3cG2wTOk34svPO/e+uub7rhW1fbr198VFxf7lb9jxhS7MyIE33v33WDz Vj1nZzMJcPkq66CQXlf0ijmREWwT+cxK7LvvvsdPJG3auNFt3brFkSdv/bp17mtZ/awWwXhg/373 yA8f9fhF7m+vDQFDoPsjcEE/0CpQy8nKMursQQdAkK0fUKjlsvVjysIQMAQ6NwKQGDxaExAUEHg8 ulpAkKDoSzZQ1KWyf7LH7aj9IPt4tEdAwqFgTCYgViMVnrHKSeU4QZnJnDfBvuk4flCWPbceASbj lsmSkYk5Ap4EMolJ7IWaIJ4uFVtvvWZCDLUceeVQurUUEDAB+UJemscmjWim+ojcFzvNvnKLIVC7 5GkxRGuIOYitvZo4vEokExO+qDE2a4I7IN8mayIeQggSHdVK2Potsi7xXsNFYq9Vo8Wt0QIC8vxF 9ooJT/CMDOwbCy4q6co02dlSW0/JOSfSLrRRE6PYWCbrCuGrJLxLVEa58Ajigm6csYVEpXBWn50W +bpPOdzIo9cSEQuByKQ4D6JQfYjlGZO+A7KblEu0mfchJCFQEwlgZBIWFV6q0Z5jhHMFchtc6Nva i7hEa0N7nyupjr1obejo9xgnjNmK+ipHjq5cLSpg3NHWIo1BbB+v9DkopQ7SuJ8tZR0qYHJDrj91 VufR9y1oq/5IdCyTkxK7TXJ+TfF2ln0cFrlBHafq/VG6lnGdwcaSvIvh6Oj6h+sS62+u8SyeoJ9Y JIHVaLqiu4yFVMdBIngW6vwIvqe5vkcqwMNl8L1wsOF7y9Tgs7Yab0H51CkgAVnsELZeDraxZ0Mg UQSMmEsUKdvuEgJY1YwaNdqTTbt37fL2SKzUjRX7Rcj99e2/urVfr3EDCuXpL2IuXnz66Qrl//iz VkvXux//+Cm3YOFCb41TqP0HDChUforlbvnHH0lVpx9fwd1AvEIvfs4Pn2g/RBLcPeZm5MW79trr tEp7prfchFA8fPiwz0332WefKv/HX9x05fuA2LQwBAyBnodAtVbrVpWWOyYtOkNkaOKlUKRcvvKs 9NKPdAtDwBAwBAwBQ8AQMAQ6CwLYVKHS+FaPcEAukOvmwXHD3XXDBvocTg9NGO5t4dafKm/RarK/ Jr+xnCJYlT9cqo/Q3Hf4MP5vLddUzvMmBssTcxf3vWzDGG+QiwbCjXw5qGGws0QlB5HIBDyT2dhc onLD+i2VFfeN313wxGQsBWDTqrCm1kbh5HwLwJYJRpQRTHiiOIsVNY0XNDF5oZk6sUFkXSo2ltma GP9WE+Lndh72ZOX3x/5OZOZ3nnRkMpS6QbZFszn9fp/v/2KyfZ4sRbEkhYBj0jdPbc3TM23OECDY 8qGUSyQgVqsaG/2YS2T7lrZprzGCogS7QdSmHsM4+LX3uZLq2GsJ487wGWceRO45kQgsOqA/IMGx 02Vc3j5miOz78vz1bJ7cTFCchRWZbdUfiY5l6k7+rnmD69xwXTvHy2qQ3I5cs1BiYtVZJEKFaxvK 5UjL2I6ufyJjgFyULPwgHyVq4Gqd420RXXkspDoOEsHTE11SXhJclyPVo4mU0VbjLTh2VYiY49qV dVHFH3xuz4ZAaxAwYq41aNm2HgHIsXnz54mYW+k+//xz5YxY6HOWBDlJwjCRe2LZsg/cxg0bvAXR kKFD4672RmGHFeSBA/t9nrlHlONkwoSJl27OWYFHrpTTp097q55YViXherTl39jxfPD+e27VqlVu 6U03uxtvvNHXlzpDLJKz7uTJk27t2q+9+g/rnng2TG1ZXyvbEDAE2h+B8/ox49VyEUnf278mTUfs JRVN/1FFrnD0INdbq8ctDAFDwBAwBAwBQ8AQ6AoIQCpgTdh44ajPObZwaKHP48T7lbrfIq9bLLIN 4iWgXlB7oIqIZZEVicUeKd8C5VXkZy29hkQ8KDtLlFpXoioRScTkNWQR+cxyNTm/4VSZt7xLlGiK djxUUKn+Lm7U71TqkKVMPd7OUWidj4EmOMJZhi1zG2pQzCU/mV0gkvKM6hBJxkZrb6LvYRV637hh UlkWeuIgU+442JCdFIkI+YFd3VH1B3kGbx412CuC4pUNRhCgscZZvP0jP2+PMXKpthfHyaXXkZW5 +Lq9z5VUx16MZrTr25D3qOBQw5E7DoIqmn0qleJcZfEBD6wk+0iNi5oONSfXCgj8MDHXVv3RmrFM vsaDVdVeGTdVdpYoTCHmqC9WlpC+qOW43kWeG52h/vEGA4pmcMcW+YTylXFNTTa681hIZRwkgidj sjn2wbd2Ins3bdNW4y2oASru4PtW1bUwBFJCwIi5lODrmTtDKt0kAmrt2rXuHSnhfv/737k6kWm3 3HKrt7UJbs5J7P7uu++411591ecIuffeH7vZs2Zfyu8RCz3KJ69II6vQ9IDICspkH6whV3zyiSsr K5NlT567EMeyJNZx0vU++V22bd/uXnvtVRFwpW7EiOGy3Jzh64xlJkQibUFRh5VUuC3pqoOVYwgY Ap0bgWqt9q7SqsJUJivS1cIrNIvSb8RAVzR+WJOFZYKrg9N1fCvHEDAEDAFDwBAwBAyBVBBgQmy3 rMHf2X/cky0QXnMHF/p8cKgcYllC+rwwUnkRTJq/c0CLPTWBnkhgEdmSpVasMspUPpaLs5WbCXUc lpYbpewjTxOqPXLpoaqLtH6LVV5bvn+2rtGrelAs5EsFQ76oWHaNKA9RCoSnTBuk/MPKMtnoKyu8 XBETyVN7zY+MZeDtYwa7pXKIwJJ0h0jSVbKVhziAEMHOkTEBuTBMfTNfykbie/q2eXnBq3ikVrBd os/tMUaYPIa8RgWJKjLI0xirju19rqQ69mK1oz3fR211V/EQr4TdL6vVV/Yc9URVvDqgCvpW14QF UsoFNquBlV+wb1v1R2vGcsm5On/dvWpgP6/+HSUii1yTV160tqQdnGPRLCA7Q/0DLKM9o3gao+sP 14yvT6SeX647j4VUxkE07CPf47rMtYrgeyaeTWSQDzQgytivrcYbZRPZGi/BNZQFOyifLQyBZBEw Yi5Z5Hr4fiNHjpLF5JOuQknmv/rqS/d//1//w30m+8mxY8e5/IICV1VZ6fbu3eM2bdroSktL3W23 3e4eevgRN2z48LjIkQ9l0qTJbtiwYW71qpXu//1/nnHXyCKyt1YTHjxw0H3xxRfuyJHDSmqf66qq Kl1t7eWewnEPksYNyIEyf/58tf8TYfGVSMo6vV4gknKIJ+pW6r09e3a7RYuud5OnTDViLo3YW1GG QFdAADKuXJMAtfLl7+hgYUDfYUrcPWGY6yPLEUg6C0PAEDAEDIGug8DcuXPdU0895ReuYS9vYQj0 VARYVQ/B9dmxMq9QQelww/CBXo12pu5E1PxoZ5Svhsljgsk+FHbYysUKLNoKROgw6QYp15DE5BuT hVu1QOuw8uLNEjmHugSCzqtiNJF/RHnoyJcWaf0Wq05t+f4Z5ZUDH8gB8CTvVSxijs9RhYTjvPbH JSLZ6KeJ8TwduzzZAiL2GycSdPqAvr4dWIW+vrfErdQ9eaUWATdXZDgHGZmjeQiCNWvtuW6tvcYI fclYLtC4ZvyjKuE8ihbtfa6kOvaitaG934NkL9J5gRIWgmeNCB6Iq1gYh+sXVgmh3gyTDGzX3v0R rlvwd4NIXRYRLBxa46b0L1A7c924fjzyXD9dC7aUVfqcoEEOzWA/njtD/cP1ifwbIg1ynjgoJe1p kfWpRHceC6mMg0QwPSPsg+9DvoOwHY4VXMtuHT3Yjdc5x2KbVbKGPSYb0rYeb4H1LvXiupqM3Was Ntn7PQ8BI+Z6Xp+npcWo2q6+eq77n/7lv7qJmhRY/vHH7sMPl7lMkVQkSq+rrRVhVitLxwnub//2 793d99zjpoiUQl0WL5g4vuWWW3yetteUl+2tt96UTeRKKe0yJRj+zs2YcZV78AcPuvfefdeRi448 blVVVV6NFq/stvocIu7pv/kl3c2VAABAAElEQVS5e/GFF9ya1avdhvVN1p3V1UzEX+FuvvkW99jj T7hx48a1VRWsXEPAEOikCFRp0uicHqlMVKSrafmsxFQellytLL9C13ELQ8AQMAQMga6FwA033OBm zpzpK11UVNS1Km+1NQTSjAAr1T89ctJPEC8ZUeQGaDL85lGD/OTwN6VnL5vcPlFT55VSVGOSFGso JA7KzjLaxDlrlxaJ6FukPHbcMX1y9JT7SqROMGHYmqbs1eKs/ToOyj6sFeeIoBuZ18cTQUx0MxEc nR5pzVFS33avCMISTWqi6iPv1Vg9l8jSLZK7AZurivp5+7rwUckvd+Gi0iH8fqJ/95MNYJ8c5XiS OjEdgV0oRAkBQbJJ9+Mo5SKDZWqMBQhJgtyC8VRzfsMW/gGzoE890dfCtnzUHmME0pUJ5L6OHHtN 5Fwse9b2PldSHXtx4G2Xj0u8LWqtqy+64BWaqGS3yP4xloI3qBTjj3OO/IfEydB1yr+hf9q7P4Lj Rj5zHmEBTL5MrmU1jQO9LS+qJSwOsYGMFp2l/tHqxnvgDzmHtS2KsGjkYqx9o73f3cdCsuMgGlaR 7zH+UdBy/WSMjdB1fJ/GXCRZzX5YQy/Wd/RMfR8t173A+pNnfXFtPd5yQ0q+puuqKeY88PZPUgjE Z0mSKtZ26gkIZGVluTlz5njrxhtvXOJVbGXyx4cky83NdUWDBrnRo0e7yZOnOCYOUMJFBmTdf/tv /4v7Tqtvpk6deunjMWOK3ZNP/sTNmT3HHTh40J07V+X6FvR1Q6Wimzx5suNz9r33vvvdVD2jWgti /PgJ7r/8l391dXV13lIyeH/ixInuv/7r/+zIYTdt+vTg7UvPj/7oMTd33nwRfzMuy4M3b94C97/+ b/+7y8uTf7aOHRn9+vVzt99+hxs/brzbvWePKz1xwh+nsLDQDRkyxE1R29gPzCwMAUOg5yDQqJXD 5JarrYj+I6W9kOilVbEFsucpEimXV9TX8drCEDAEDAFDoOshMGDAAMfDwhAwBJoQgDhiQm60iJWp slRDiXaDSDoIpkg13HFNupIDabLUHkP75LjFw4v8pPk+rbQPSJQAV7aB7MPeEGutlVqJj1IgmWBF PXnE5mqB1EjZV3JcFDXnRGIxwRnN+i2Z46S6z1Gp9zZJ3QdpST2XjhzkSoXZ3tCkKCorlH+LRVoW qQ1BfCe1EKRcKmkmyDHncx+fSw8xx4JfSA+CegeWZ03vNP3L57TnRvX1oIskXoaYR7ZPJcKqp0Ss I9tjjJyUYrRcE96oHcmDhiI0FjGX7nMFNFFVoUwkOKeqNF5I+0GkMvZ8AVH+iXdMdmFM9BMOKGCI ctWrWgRm5PXAfxjnH0h7VLyz9FsLFRnXjlopFN+VZS7EY7TrB3gs0Ha3Kr/hIJ1PEKfYQYJ/ONLd H+GyW/P3Wc2lYc07Z1B/f60tVJ9Cfp9UfXfr/fIYSrPOUv9YbQ3yy5HfElIn1ejuYyHZcZAIrqd0 ndp2psJNG6jv6dwcN29wf7dHY+uovtPDgcJ5rj6DVGWxCEq5IC9jW4+3QVpAgj0yBC7H5JphYQgk i4ARc8kiZ/t5BCDbhg8f4R/khaupqfGEFEQZJFY8hdzQoUMdj8hAkTdmzBg3cuTIS2Xm5OR4wozP iDlzrvaPyH0HiRBcuvSmyLddrPeDDVEA8ogW1IVHS9GvX39P7M1UHr2aGq281I1mnz59XLbqbXnl WkLOPjMEui8CVaWo5SpSWj2cKjq99cO7UKvHC2XzkCP7SiPlUkXU9jcEDAFDwBAwBAyBzoIAloTf 6l5rpRZCDdEEMaq562QbySSxnzDTb7IgyFvzpawvp4p4ukbbzBdRxuT9R4dPeuKsQmqqPvp9i7Lt zjFDvA0in7MKH0IvFRUF+5PbjBX+U3R8iB/sFQ9ITddZ8tPQvtUiIK9U/a6V9fnCoYWesKD9R6pq XabqzCToPOE2WYqZMHnFb99USDnIsFz13xVKX5GuOC7SFls0lDBXiSxZUlXkviwp8xO4EC8o5LDk u2X0IK8ADHIZ8ZzJTG8KUSs8yOdGQNIsVn7ngToehDETzHweGW09RhhrkMAT9XsAO1XOlUgCKKhT us+VLGF6m36LMJFOfHCo1J+LdeebKLBUxl5Q58jneMdke4ixO3Suo24j3lbeSpSx0VS0foM4/2zQ uYLFIyQk5Dv5DSF9DkgVS9+DN7a4KG4Yf2N0PUCdOkbbMOa+KjnjUPtGKnPT3R9xmhHzY3hULCsP D6vxyl+sBLkOgNkBXd9i4dZZ6h+tYRDUqGtpC2pAFiOkI7rzWEh2HCSCK9cCvs+xIeZ76Dop4lDL fXLklNujRTR8PkjXdL7nb9LiEchhlOcooqu0CIZoy/HGNYPvFPLfHZFClO+Zhkhv5EQaatsYAhcR SN9dj0Ha4xGAjAsr19IBCMRffn5+OopqtzKacGi6sWu3g9qBDAFDoNMh0KAfvhXHz7g6/UjpqMjV xMoAJSHvp8mA3rqBtEUCHdUTdlxDwBAwBAwBQ8AQaCsEsJL6VFaTE0Q4XDdUSi5NeDNhh33kt5qs a5r6bzo6tpHvHjihifFMN00Ku+s08YfajglzJvOytAiUXEMQaEyer9MkOdszAZdKsJqfHDgzRRAV 6NjUaYsmE+PZ3KVyzGT2pT6v7j3m6zdvcKFbKDUPtnUoYeCqIHNQGW0SGTpU95YoFMmnxCLdVGws czW52kePOpWdrkB5RP+PkPpvhPr03rFD3RwRQ6h7YGSZ0EWRka9+Xqt8YJApV2pM8D6T9VTloqCr 1VUiRxUkmJ9ElrridpFSYEnesbc1no5GGU9tPUYY44xjVFzgAXHUUqTzXGHMMFYgxAnGPmSsC/GT yY69aBZ3HCORY/ZWHSZqfAf1ghRjv1gEE+W2FBDBkI60DRUc9pSQfpD9lbpOQcpBykIa5us6gFoP 5Q8k7mqNjTf2lfjrVviaFRwvnf0RlJnMM/XgWjZNbUJpyBjfJhvLY1LcthSdpf6RdYSU41qGapXz g++TdER3HwvJjoNEsEXt/v7BE54s5dy5SYuM+R7imgqXz3fomL593GBdW49q0ci72hb1efha0Fbj DVKOewwIac4DbEstDIFUEDBiLhX0bF9DwBAwBAwBQyAGApUntNoRtZx+rHRUYFvZTys1s3QDaWEI GAKGgCFgCBgChkB3RYDcRiu0op7cbRAAUwfku+tlt8hqdvIGBcHK9m+kamGCfInukZiQH9c3z0/6 MRkOLcQz6paPD5f6VfrbRPCkqmrDxo7Ja2zrUMyh5kPVx+RtZwrquVl2btWapA7y4qGugtxi4hrl D+TFTk2CPjBumMcaUqFOFomp3PMWSC2XK2uwOjogTXG6tsG9pwlb+hyrymF52Z50bdRrSDeeye22 7NAJT5hdLXs+JuixtETB1F/1SbZ/qhsb/dgZmJ3lrhYZWKQJZMo9q3H3pdQg0Yi5th4jECj71X9l tXXezhJSEoKI96NFe58ryY69zqZWoW/f2nfc569cINXpNCl/UMdh/Rq2fwVzrER3nK10a7SYE7tc zrlY15r27o9oY4L3WMCANS9WneShhESBoOCa0VJ0lvpH1pE2QLbQDmwskyVlI8vldXceC8mOg2g4 Rb7HtXmdvqdRwJE3lkUNEHTTruh7yZ4YK2jI7OVSvH9TeuYyQrWtxhvfDVzLIQH3yaI2XQrLSAzs dc9BwIi5ntPX1lJDwBAwBAyBdkKgXpM5EHN1eu7IqDkruwf9yMDO0tRyHdkTdmxDwBAwBAwBQ8AQ iIcAk7u/335IhEimQ3EUmSOupf1Rba3VvRc5tAbmNOUfZ5I1Wg4tJpDJJcTq+9WaEGf1OxPmKFiY FD+jHMEl5+rcPpE2J7VNSxP/Hx466Vfqc3wmq1uKMhFFgRpjp7aF5EpkEvjTY6c8oYKSB8uucEBG kiMPSrGl45PT6/W9Jd4ijDxaEACxgknRXeVVjlw/WNT1y850uRdVPWfVL1gxglWg6gGzWr2fimIO rc0WERRXZKY3D/I+tfONfcc82Qi56BV/woocSZCjx9XP9AOKQCaBsexEQcfYQ1kWDiaA9+je+oJa vj2iH8Lb8TdKO/rq2YbDTQSdxpc4MF8+yrhYkewYiVVe5PvbZEOIpepwEdiTpDAdqglmSO1Yka5z BfIWm8j1InWJ3Rqz0QjBZMYehF60SOSYTO6/KZVanXK7QZpTp0TOyWjHC97jvGBBwKdH60W6Vblh IkAhfAs1BvKkMIMMbdBxUNCxaIDxQB9wboUVP0F54ed09UdrxnL4+MHfG05iG7jPk9dcq1lkEFwP gm2iPXeW+ofrBu4QPCisDqfZ6aa7j4Vkx0FL32lB37AQBHtKvoNXyoIYMox8hllSo1bo3IEQ43uM azUkYbRI13gLykZhi3KP85njsrDjnBZhWBgCqSBgxFwq6Nm+hoAhYAgYAoZAFAQqdHOPWu67iB/0 UTZt07eqNSFw+uBJl6mb2BzZNFkYAoaAIWAIGAKGgCHQWRGACDol1UiyUa4ccWu1cj6RYAKcCXEe 5HbKzcRSrpdr/O6CV34wqS9+Km5gl8gjkfB5vWSTCNFHPjEsuBKJ3SKDeEQL8tTxiBeQTBs1ydlS YKuHGiBDdp4oBiGueEQL7N8g5wjUh1WaPE1FMVcvBdvRmnpXoD5MZ9DPWDiWqmxyx5EfSN3tCdua Rvr4+06mzTxixU7hzCPRgOShbyAtsjmudmRcQT7FimTHSKzyIt8/IrvBLSKlp2hyeTq5zS4qnmLX yHmMUj1XIK5RYvKIFqmMvViT8vGOST3oIyb/Zwws8BPuXEPCYyJaXRN9j3OOnGU8GHs5kHI6t7je UDc+r9GkfkvEf7RjpePa1dqxHFkPf204Hv3aELlt5OvOUP9wnYLcjuT1gyxti+iuYyHZcdDSd1oY f0hyCDAenDvkdcMmtlbXbs77REj0dIy3oE6j8nPdBCny+R75sLS8iZBu6eIZ7GjPhkALCBgx1wI4 9pEhYAgYAoaAIdBaBMgpV6UV2/VaKdnRwQRJxbEyT8pljh3iMjUZZGEIGAKGgCFgCBgChsD/z957 fsdxnem+LxEajQbQiERgzpliEClKJEUFKtmykhVs68iW7VleM55Z/nC/3Dt/wL13rVnz5d4z58yZ O14eZ9lKtixbOVCiSIpizqSYMwmQyDnyPs9uFNhoACTQ3UA3gGfbzaqurr1r169ajar97Pd5ReAm AQoldRiQ718yuLlfLGscyFsCKy7mrzuPyAxGXnEgOJkK80XdD3tPWu+dRMTc24hwomVlZGFOrJWw fZzePemLEXTXcP8bS8RcKkS+lDhHy4X3m4OzHMgdSMQJ3zfe6xy3ZV6x25WR+I5QiGKeO+Y9W16U i/xqWS4PH6MoB1OG67+VWL57A4nHgzkf7sN8koyCYVQp7U+HozCqdCCLyliON1zXI5Y+DaVuMvSf EXN8jVTRdyE60pzU0Nbaf3TsYFuM9fu2BAL+DExm4EQFTnThZCIVEYiVgIS5WAmqvgiIgAiIgAh0 E7iBh/46WCI1wibmxi1mw44ksHbcMFYhv4Yvx2+5ZQU2AbPNVERABERABERABERABIaPAKNiMiBg URBiZBnz3TEnE6PyOKBHC6xkm2hPm032dRFy4FF0q4ZIwQHr64g28yITaMPHvFnrcU+Zj/xpHJg8 A1vCagxUxhIxl0JhDrzGU0nUd4QRXPvg7DE7N9sJrLthL7kf7xNZYvnuMWIz2kIxdCNyWBXDbnLT xWvOzjDatlRPBERg7BJgnkhGGRfCkvY9jK0wUp5Cn4oIxEpAwlysBFVfBERABERABLoJtOBBl7nl 2mHnk0yF/ao6A3EOlpYBzNZWEQEREAEREAEREAERGD4CeXApeGxaiYtIokA3A0JXKQb/mVtrByKW KiF2JVthPr5dEGkW5ufYTEQFPDKt2OYgoupifYtdbW5BZrYJyE3mh+1f0EUNMLfXZuS/O1hVh0gG WAAiT1e0JRUWZcMZMRdtv4azXqK+I4zY2QJHjfkQ5pZPDLrIubN1zUYbx0SVWL57nmgcTd85sM4I VlqY7rlWM6KRU9H0V3VEQARGngDcj21VcR6i3oMuJ+mXmIjNHLUqIhAPAhLm4kFRbYiACIiACIx7 AoyWq8dNGvO6JUu0nHdR2J8G+KDX5Fy3NMzy8iFhsYoIiIAIiIAIiIAIiMDwEMBtoRPlNk6Z2HMA Wj6+c7bc5dnq4A5JVjj5n6JhELnmnphR6vLN0XqzeWKns/mbgNHJHES2MVcWo+g+u3Qd53PVrjYi vxxEvS7k/Ym2OCvLcRYxl8jvyDmIUZ8gQmxStt/WlRW6nIeMnEvUtzKW71603znWoz0erT29nG+x tKW6IiACY5PAZNjd3lVS4HLLvYNoOebpVLTc2LzWiTgrCXOJoK5jioAIiIAIjDkCzcgVwmi5jiT1 Gu+EPVH1hWuWgRnb+dMmYlby+LILGnNfOJ2QCIiACIiACIhA0hKox33XAdgD0vaK5VJDi+29XmO7 cK8Yi/XecJ8wrSs/vXgdUUTNPZFxBYj+o+VfO9STU4j4Y3QVbbyOYDIaowYoavA+8wYisaItKeMw Yi6R3xEOKu+EEDcZwtwaWKwyzxrzCbJPiSpRfffiIHA3tkcf6ZkoVjquCIjAyBGYFcxyE1YYIb71 SmVCo4tH7qx1pJEiIGFupEjrOCIgAiIgAmOWAAci6q9UWTMGKRg5l6ylDTO1qzBT24eH8GwkfZ/A qc8qIiACIiACIiACIiACcSXQhnvDL2AX+HVNg2uXokMlJm+1ILIs2UsV+rmrtc1OoO/5EBYpyvmQ o5j58prR/yp8Vo3z8SIGaGHJiLlY7oFT08ZfjrlEf0fqYF354fkKF8HJ7yejxxJdhvrdS3R/dXwR EIGxT+BUbYO9cvyim4hyFeMpKiIQTwIS5uJJU22JgAiIgAiMSwJNGLiox6zTdjzUJnuh1Wb12QpL x0CLH/lDVERABERABERABERABOJPgNFkozUPDa0FKb7xdbvSiYijrhii5SakphhzzE1IGX8TxhL9 Hbna1Gp8JVMZyncvmfqtvoiACIxNArSh5ktFBIaDgIS54aA6zttsbm6yqqoqN2OusLDQMjM18DvO vxI6fREY0wQ4S7iO0XKwskxYYoYhEObASS0sGGhpmQZrIr5UREAEREAEREAEREAERCAaArSxjCm/ HCLyUiDOqYiACIiACIiACIjAeCIgYW48Xe0ROtcTJ07Ya6/+0ToxWP3iiy/Z0jvuiNuR2ebhw4cs EAjYjBkzLQ2WFyoiIAIikEgCTVUN1lBRax2DmFGcyH6GH7ujBTOgz1VYBvJJ5E4qMM5UVhEBERAB ERABERABERCBoRKgjSUnqkVbUtNhY6ncx9HiUz0REAEREAEREIFRSkAjcaP0wiVztxktt2vXLtu5 c6eLnItXX+lZ/87f/mr/9//1f9qOHTuc8BevttWOCIiACERDgNY9LlquFtFyo6y01CG6GfnmXKTf KOu7uisCIiACIiACIiACIpAcBGKOmIONpSLmkuNaqhciIAIiIAIiIAIjR0DhRiPHWkeKkUAXkhF/ uf1L++yzTbZ+/b0xJZeOsSuqLgIiIAKOQFNlnYuW62zrGBVEUlJTLc2fbumZPvfy5wQQLYd8Hpj4 YBPGX16PUXHR1MlxSYATkA4ePGj5+fl21113WV5enh09etT2799vX3/9tfGeaObMmbZkyRK7A84E BQUFjlNtba0dOnTI7UcHg46ODispKbF169bZqlWrLCcnZ0Ce165ds3379rnjXLhwwRobG42W5NOn T7c777zTFixYAHvyzH7r09Hg5MmT9uWXX7rl9evXnasBjz1p0iRbtmyZLVy40LKysvrUj6Wu1xh5 HDt2zJ37xYsX7cqVK1ZXV+ccFtiHyZMnO46zZ88e0G2BrNjGli1b3Dk0NDQ4rqxzzz332Ny5c23P nj3uupAjt02bNs3rQs8yURx7OqAVERABERgigabqBmutb3a1KJClpOGFe0ZvSWeF0PZQHrgJEfeM oRxz0UfMpShibohXTLuLgAiIgAiIgAiMBQIS5sbCVRwn58CIudaWFmtvv30C6nGCRKcpAiKQQAIU 42qRW66lLvmi5WgJFBLgMszXLcKlZWaEcsrhs1QfLIMwO9nth3WJcgn8IunQItAPgc2bN9uvfvUr Jwb5fD47f/68/fnPf7YzZ85YRUVFTx5fil4vvfSSPf/8866V3/3ud/b222/b2bNnjQIRRS+KSO++ +65973vfs+eee87Kysp6HZGi1t69e+0Pf/iDE6UoalVXV1tbW5sT0igOUpx6+umn7amnnnJCW3gD zc3Nrm+vv/66HTlyxB2Xol5KSoo7dm5urhP3vvWtb9mzzz5rU6dO7akeS12vETo18Pz+9Kc/GcXI mpoao0DZgntGsuP5U9ikMPjCCy/YI4880iNkem2wzptvvunOwzuH1tZWd/5FRUW2dOlSe/nll233 7t1uP54DBb9wYS6RHL3z0FIEREAEoiHQ0dLmLM5bG1tsQsoE/H5PcMsJE1JCS/yec3vo1S3SObEO Qh1EvKaqemtrbI3m0K5OKu5JZaseNT5VFAEREAEREAERGKUEJMyN0guXDN3mgMUxzN5mzrcGDMAU Fxe7WduDEc442HP69Gm8Tln51avWivd5GLiZMmWKLVy0CDO0i3qdIgeJThw/bpzBzXLs62P24Qfv Y/b2QpuBGeMceGEZaruukv4RAREQgSgINFyvtUa8OEs4EYWzlSmwpftD0W9pToALCXGpvnT3GQc6 KL6FXrQJSoUIl4je6pgiIAJDIUBh7Ny5c+6+5j//8z+d4HQV90uMkqPARNGN0V3cp76+3k1aYp1X XnnF1WF0F/ejkEeRbvv27U6wopD35JNPWnp6ek93PvzwQ+MxKAYyymzevHkuGoz5fHkcRult2rTJ 3bddvnzZfvjDHzqhjg1QjHrvvffs3/7t35xoNXHiRLv77rud+NbU1GTHce/GCL/QPd9p17fvf//7 ThyMpa7Xefbvl7/8pf3617+2U6dOGY9PEY3nyd/IyspK139G87EPjKajSEdxjsIhC/n9/ve/t3// 9393/WVUHyMR58yZ4/p7+PBh+/TTT+3SpUsuipBtsS7PL7wkimN4H7QuAiIgAtEQ8AfpoJBirbA5 52TY2xVPoOPvLJ0XunAv3NXZdbtqA37eXN1oVWfKIfA1dEfphYl/yD3XE63nRe7hfpZ9UBEBERAB ERABERCB0UxAwtxovnoJ7DtnQr/55hv2l7f+DLHsvLW2tmFGcjYGc+ZbaWmZG6zwxLLIbl6+fMn+ 9re/2SYMcnC9vr7OWS3RHikvL99WrFhhL774ki2FNRNv9lmOHTuKQZdfwWJpr3vPugcwUPTSS9+3 F0qKnTAXTbuuMf0jAiIgAkMk0NHajtxy1YiWC9n+DLH6kHbnwEMahLZ0RLx5FpRcpkGQS8uAABcm vnlRcMrTMSTE2lkEkpYAxSCKYfPnz7d//ud/dnaMjECjzeKrr75qb7zxhrOe/B//4384cY62loye 4/6pGLikmMfIO4pnjCajTSOtMb2oNYpZf/zjH+2DDz5wNpU/+MEPXFTcrFmz3L0VRStaav72t7+1 rVu3urZobcmoO0+4Y9u0wKQY+KMf/cgeeOABJ35xohaj+7744gtjJB+FxL/85S/u+KxPUS3aut4F o+UnI91o80lrSfaftpsU31h4v0pB7r/+67/sk08+cf387LPPnLWmFznI/lGYo4DICLgXX3zRHnro IdzPlrr7U0YrMhqQUXkU+igoRpZEcozsi96LgAiIwFAJ8B4zqzAHE87qrL359pFvN7pu2I2u7olp cTCzaWtqsapzFbjfTQuLzIPoN0DEHu+NOUGC0XrpuBfOnVxkmXl9rZKHykH7i4AIiIAIiIAIiMBI EpAwN5K0x8ixaIv04Ycf2K9++QvMvq61++6/3xYhyo22QZxtzcGZ6uoqzKae0+eMaVn0pz+9iQGS X1gQ1kKrVq92s65bWxB9hyi4L7/cZideO+4GVEpKS2ATVOramDx5im18cCNmK180WhYtWboEAztr bDFmNGdkZFi07fbpoDaIgAiIwCAINFTUuGi5ro74RctRTKPY5kXAeUKcE+AwUNET9eYi4BgJx9nC oYiPQXRZu4iACIxCAozKoojGKDO+mPPNK2lpaU6QYjQbo7gouFEYe/TRR51oxv14z8YXo+Z27drl RCoKYmyTOdUojFGoouMABb2f/exn7p4uPKKOueV4XPaFkXdvvfWWE7ZW4x6OohdFKdpG8v0TTzzh REGvj6xLkZCRaozoo1DG+zj2KZa6FB3Zn88//9wJfrSbZP+/+93vGoXL8LJ48WJ3n0gGzL9HgZBO DBTm2Jf333/fiY9+v99ZXf793/+9y0nnRdQx8pC8KIbSJpR9Dy+J5kgWKiIgAiIQCwEKXdkTc92k s8EIc7Eca6C6nW3txtegC6P10O/csgILlt382zjo+tpRBERABERABERABBJMQMJcgi/AaDz8gQP7 7c03Xrfr168jYu0H9vwL33GDGxTHli1bbv/9//1/kAvlXL+nduQI7IAwY5lxcN978b/ZY499w4qK JrrBofLyq/ZzWCm9gbZ37tyJ2cqP9AhztG5iLo+vdnxle5DfY/XquzAr+ocWDAbdjO49e3ZH1W6/ ndRGERABEbgFAQ5Y1F2tttb66KLlKKg5Aa4791u6PxQJ56LfaEGJz3vsJ32w74GFjxc9fItu6SMR EIExSmDdunX28MMP9xLleKoUvSZPntxz1vdjohT3ZSSbVyjaUJiiVTiFOUZ8MQqOhTaYjBZjVB5t Gx9//PE+ohz3Y3tsm/sy/xoj52hvSYcDWp55tmcUuyj6sa1wsYhW5z/96U+dYEg3BfaHv2mx1GW/ WGibSaGMYtzGjRv7iHLchwImxTXaW1KYo10n71lZGGnHiECKbjzHb37zm45V+G+ux5D59Xj+fIWX RHMM74vWRUAERCBaArSzDBRku3xxne0d0TYzcvXw9ycVv+/ZxbmWkZM5csfVkURABERABERABEQg TgQkzMUJ5Hhq5uCBAxjIOIIcHndgkOUxl++E58+Zxhs23IdBj4Nu5nZ/TGgt9K0nnrTUlBS7/4EH jXZIXuGgyj1r19q2bVvdDGZv4Iifc+Y2c374sGTxZ/hhnZnjouX4Ptp2WVdFBERABIZCoL6c0XJ1 t86lgUFnims91pPdeeCcBaWzn0QEXFgUHPd19pPd9r1D6Y/2FQERGNsEmO+MFouRhfdNvDdioeDF SUzhEXXe/tnZ2c6mku8pSDFHMAsFJYpyjPiicEUryvBIObdT9z9sg0IgRTZaYjICjvdpM2bMcJaP FLI4qepf/uVfnEBGO0m2WVBQ4OzGaLHJV3iJpS7b4X0nBUtGCjK6LT8/P7x5t07Rrry83EXJ1dTU 9Gzzot4ozHn5i5cvX+5cHMJFOa9Btr9q1SqjxWd/wlwiOXp91FIEREAEYiHAiWCMmuN9blNVaAJH LO2NRN2ckjzLKc5zk9pG4ng6hgiIgAiIgAiIgAjEk4CEuXjSHCdtcTCG0XLzOVMbM7DDC20lFy5Y 5CLowrd769OmTbdvf/tZzJTmDOwsq8es5XLkH2G0HG0qt2A2dk1NtRtY6vR8673Kt1gOV7u3OKQ+ EgERGIcE2hpb3IAFlywcwE2F0OYEOCe+ZZiP+d/4YvQbIt56W1B2C3DjkJ1OWQREYOgE+BvDyUee ABfeAiO5+OI+nKzEV3ikmrcvt3m2jOFRasz/RhtyFgpU//qv/9qTm82rG76kZSWtH1m8uozEY5QZ o84oWH344Yd2ABO4uJ2vefPmOUFu5cqVTlwMF/4o8kVbl33gOXnn7fWJx6ZIRjGO+fX4Yl8pvtHu k8WL8OM6o/xosclCa0sKiQMVRtz1J3x6LFgvERwH6q+2i4AIiMBQCQQKciwzP9uaaxvtRmfffJpD bW8492eUXO6kQvNlK1puODmrbREQAREQAREQgeEjIGFu+NiOyZaZz6PiWoXL68HBCQ6IRJaJxROd lVB4xJu3DwdkOEv5q+1fOlvKSxcvWW1dDQS6elgL1WL2dYMbJCooGJpP/HC16/VbSxEYDIHOlmbr bGlCMvTkfpAdzLlon/4JNNXA/qyz1YITAxDeMCiOVxqj3Tz7SRcFh+20n0y5AeWOVkB4IWVGF1/9 N6utSUKAOfvSAtmW4stIkh6pG+OdAO9vOOnJE9YG4sGIOVo29lf6iwDjfrSd9IQ5RsEx59tA+3L/ Lvxt8yLNWJeWkDzmY4895sSu3/zmN/bVV1/Bzvy8e7HPFBVpt8mIvzVr1tizzz7rIu/4WSx12R+v sO8fffQR8hR/6Y7LyDjeg7J/XLLP7IfXd68el7SwZBQhxUve05L1QIXiKCMHI8XPRHMcqL/aLgIi IAJDJUBb9azCoDGXcrSW7UM9ZjT7829VELnlshDh5xwnomlEdURABERABERABEQgwQT6f4JPcKd0 +OQlwJvgG12hfCJIt+xyxUX2lgMtkYMW3j6cwfzK739nf3n7LbuKWcq5uXk2AzZItGmaPn2GVSNa 7t133vF2H/RyuNoddAe0owiAQOv1cms6fxq6TSiaSlDGHoGOti5LwQziVCSbT21LsQmp+E1EBHAn TpUvldFNIIU2yXMWmr+4bHSfiHo/ZgiER7v1d1Lh0V/9fX6rbRSqKLax0GZy0aJFzhLzVnW8z5Yt W+by/PL9xIkTjfnX5s+fb3v37nX55xi5duzYMReNxig75nZjjjtGlP3TP/2TE+l4vxhLXR6bue7+ E/mJ3333Xbt8+bKz5fTEQFppUhBkzjsKnH/4wx9s+/btrNZTKGjyM9p70tKTPAYSQcmazCKZJwPH nhPSigiIgAjESIB2lnWXs6ytoaXP712MTcetOqP6gqX5zrEibo2qIREQAREQAREQAREYYQIS5kYY +Gg/HGcSFxUVwYYyYHX1ddaEWca+iNnFbvYxIof6K599tslee+1Va29vs+9//2Vbc/fdrr38/ALY B+Xbp59+Yp98/BEGPjBQhAGQwZbhanewx9d+IkACnc1N1lp5zS1FZGwT4K+Tot/G3jVOzcy0rqkz x96J6YzGNIFIoWiwJ8ucbIwAY6Ew93d/93cuX9xg6jN6LNz2kfnuGBG3dOlSZyNJO0lanx8/ftx2 795tO3bscNv/+te/uvzCnJTFSDqWaOvShvK3v/2tvfrqq85ic/Xq1c4ak7nw6OrA/vEced965swZ ++CDD9zxyMtjxs8YKcfoOkba0RkiGAy6/SL/4T68x/XETO/zZOHo9UdLERABEYiFgC+Q4aLmGivr rL25LZamhqUuXSlyJxcabTdvFeU9LAdXoyIgAiIgAiIgAiIQRwIS5uIIczw0xVnEzCtXgAGPr7/+ 2uXx4Mzk8HIaOUiY0yM/Lz98s7W1tdm+fXvt7NkzLs/cC9/5DmYxz+25oeYgCetxZjUHRboihDl3 442IPZbQgEpIuIu13V6d1BsREAEREAEREAERGAcEmOONohgL7Rx5Pzd37twBz5z3Z8zH5vf7neDF yVrt7e3uvq2ystJKSkqcIDZz5kzji5FkFLuY342i2C9/+Ut370ihjnaXPD7bjKYuRb3Dhw/btm3b XP0VK1bYP/7jP9rjjz/uBLnIqDcKahTdWCisecIc+8DzppDIfjKH8kDCnPd5JKBEc/QEzsh+6b0I iIAIRENgAlwhsosRNXe1KimFOdpXBkvyjbabKiIgAiIgAiIgAiIwmglImBvNVy9Bfees6tmzZsOS aKdt+WKzm/HsiXOcGb158+fOpjJSmOMgCQdwaBXU3m0XFD7LbQfykmz69FM3wBIIZFlXRMJp1qel E+u4aL2mZgwOZTrLoVjaTRBGHVYEREAEREAEREAEEkaANo+0kmTZs2ePs56k/SMtJiMLxay//OUv xog3Cm4vvPCCPfHEE/bhhx/an//8Z3fv9pOf/MRZWnr1ec/GyDW+GGHHHHCc1EXLSQpybC/auuwf c8uxLZZVq1bZvffe66Lj3IawfyjC0UKT4hsLz8WLeuM9LUXEI0eOuP5xyWi+SGGP+2/ZssW1E9a0 W000x8j+6L0IiIAIxErAHwy4iLSmqgbrbGe+5OQo6Zk+y51UaP7cQHJ0SL0QAREQAREQAREQgRgI 9H3yjqExVR0fBDho8+xzz9v/+vf/ab/5za8xKHLJFi1e7GYib9261Q4e2N9vjjkO0MybN9/Kysps +5fb7P/7j/9l96xdh9weaXbu7Dn74osvYHt0wTIzA7AKqreWCDtMCnKc2U0bzfffe8/Nan744Uds LdqIpd3xcdV0liIgAiIgAiIgAiJwkwAFKNpPMvfbuXPn7K233nJ54mhHGT5xijUY5fbGG284IY7W jYxMY362+vp627lzp508edJFzC3G/SCtJCMLbSC9iDXaZ2bCNraioiLqumyfYpkX+UaxkK/Iws8/ //xze/PNN521Jj/3cslxffbs2bZ+/XonTHJyGW0xp06d6nIf876Vhftv3rzZ8fGEQPdB9z+J5hje F62LgAiIQDwIpMAuMqso1+rLYfFbVR+PJuPSRg4i5XIQzcf+qYiACIiACIiACIjAaCcgYW60X8EE 9D8rK9seffQxa2xstN/99jf2+uuvWc4HsJ5EhBtnRd933/1uACeyaxzkefjhh5Fj5Kq9+cbrmCn9 FmYnb4OIl2bI9oG8JHfYt5/9tr37zjvGnHG0DKL1kJf/hO2x7QP797t6zBdCY8v5EPtibTeyr3ov AiIgAiIgAiIgAmOZAKPYnnrqKSeOvfvuu050o5D13e9+1wl2FOB4r/cVHA1+/etfu4gyfv7AAw/Y 3cgRTEtLCntLlixxOdwYPUcbyO9973tuG9unRSYtJ3/1q1/ZgQMH3MStu+66C1bmc1w+u2jr8rpM nz7d2WHSFpOTu9jmk08+abNmzXIRb8xxR9HxlVdecdFu7AsLl62trW6d5/DNb37T5cD729/+Zu9h 4hfP+f7773e2nnRkYBTdRx995O5tKdJFlkRzjOyP3ouACIhAPAhkFeZYZh5+x2sa7QYmQiS6MIov d1KB+bL9ie6Kji8CIiACIiACIiACcSEgYS4uGMdfIxTgnn76GZuLHHHHTxy3utpay8MADnOTTEEO uksYDGlFTrkFC3vPmp4+fYb94Ac/tJUrVtpZzM5ubGywYE7QShFFN3/+fAyyzMBM64X25FNP20Is 09N7e8ffufJO+9//j3+2E5jVzIGTOTheYVGRGwiKpd3xdwV1xiIgAiIgAiIgAuOdAKPbfvzjH7vI t+3btzurymPHjjnRixOjKGBxIhSjyRgd9+CDD9qPfvSjnlx0FMEoxDHibu/evS7ibN++fTZp0iQn 3DEPMKPMKG61tLTYs88+64Q/uicwwi3aurxuq1evdvaVp5Db+PTp0/bzn//cNm3a5O5DKSCWl5e7 XHbMc8cJXMwfx+g+RuoxVx4j7mhZyfvPn/3sZy5KkAIcxTlaexbh/pL7MP8x+7phwwZ3nhQYadfp RdSxL4nkyOOriIAIiEC8CTCHG6PmGq7VWmt9aGJDvI8x2PaY9y4IUS6rKGgT8LutIgIiIAIiIAIi IAJjgYCEubFwFRN0DsxLct9999ldmC3NgRvaEmVkZLiBjdmz5/TbKw6AcIYzxTvOWOaADWcr8+Xl 81gJ8Y2v/koAs69XrVpty5evcNZCHBjxcpnE0m5/x9I2ERABERABERABERjLBGhHSbGtoKDAXnvt NSdKHTp0yIls4XaWzMP24osv2vPPP2+MeOM9Hwvv3yh6sbA+LR+Zi43Fq897Q9pDMpqNQhztLjnx iq9o67L9kpIS++EPf+jaoVUlBUS+2C6FOS5py/nSSy/ZY489Zp8ijzGj6xhJx5xzlZWVLsceGaxd u9ZN8mLfGCHIdij4MQKQFu4PPfQQ7k1X2n/8x3+4yD+eN+t5JZEcvT5oKQIiIALxJpA9MWh1l7Os taHF8MMa7+YH3V6gIMeCpfmW5r/5uzvoytpRBERABERABERABJKUgIS5JL0wo6VbnLHGnG98DaVw lnG4ReVQ6nLfcEEuvG6s7Ya3pXUREAEREAEREAERSASB5557ztlBUmCiEDZQefnll+2ee+5xQtmq Vav63Y33W//wD/9gjzzyiBPgKFaFF4pP69atc5OmaOvICDe+GGlGAa64uNgozNF2khOrwgUptpOX l+fsIBk1xsg4Cl+MTuOkLTosTJ482dlWUuBi/fBIs1jq8tgU0v7xH//R9Z9CmhfdxsljjMpj/rdF ixa5fjBPMe0ueV7z5s3rERfZDs9p+fLlrs4TTzzh+k87dQpwbIuRgbVwh/DERt73RnJIJEeeg4oI iIAIxJuAL+C3QGHQGivrrL25Ld7ND6q9VOSjz51caIH8nJ7f4EFV1E4iIAIiIAIiIAIikOQEJMwl +QVS90RABERABERABERABMYXgRUrVhhftyvM8cbXrQoj1tavX+9eA+1HsYziE1/Mq1ZXV+ecDRh1 lpOT08vZoL82mGeNgh9FsKamJmc3znxs3M76nrtBvOuy3+GOCbTbpP0kj8ljh4uAFBf5Ci+MmmP0 HPvKzyjm8dVfOXnypBP1+BkjDHmMyJJIjpF90XsREAERiJUALSRzJuZa/dWqhAlz2cW5llOSb6k+ DV3Fej1VXwREQAREQAREILkI6O4mua6HeiMCIiACIiACIiACIiACCSNAMY6RbtEUClMUrPoTrW7X Xqx1GRk4VDcGRsXRBpP59ZYtW2Y/+clP7M47+9qpM68xrTAp4rFQwKSV5q1Kojjeqk/6TAREQASG SsCfC3ccRKs1VTVYZ3vHUKvHtL8vkGG5kwrNnxOyT46pMVUWAREQAREQAREQgSQjIGEuyS6IuiMC IiACIiACIiACIiACIjD8BGilSYvKHTt22LFjx5xtJ60rab/pRdu1tLTYBx98YG+//bZVVFTYpEmT nK0no+ZUREAERGCsE0hJS7Us5JqrL6+2puqGkTvdCWY5yCuXjYg99kFFBERABERABERABMYaAQlz Y+2K6nxEQAREQAREQAREQAREQARuS4CRfRs3bnTC3OHDh+33v/+97d+/3+bOnWvTpk0z5vg7ffq0 bdu2zeXPoy3oM888Y2vXrjVGxKmIgAiIwHggkIU8c5n52dZc22Q3YBc8EsUfzLJgWYH5svwjcTgd QwREQAREQAREQARGnICEuRFHrgOKgAiIgAiIgAiIgAiIgAgkmkBKSoo98sgjxlxzv/jFL5xV5Zkz Z5wVJ6PpKMxVV1e7nHmMlHvuuefsxz/+sctrl+i+6/giIAIiMFIE0jLSLasoaA3Xaq21vnnYDzsh NQUWlgXumMxzpyICIiACIiACIiACY5GAhLmxeFV1TiIgAiIgAiIgAiIgAiIgArclQOvK73znO7Zg wQLbunWri4wrLy+3+vp68/l8tnTpUlu4cKGtWrXK7r77bps6dWqPzeVtG9cOIiACIjBGCNBSsu5y lbU2QJi7MbwnlVWYY0HYWKZDEFQRAREQAREQAREQgbFKQMLcWL2yQzqvG7i3xv9wg+1erKuJaUMi OD535rdmGAob1fdvGMCqSREQAREQAREQgf4IlJSU2EMPPWTLly83T5Rjbrm0tDTLysqy0tJSo4BH oU5FBERABMYjAV/Ab4GCHGu8XmftLW3DhiDNl4ZouUJnnWkT9FA4bKDVsAiIgAiIgAiIQMIJSJhL +CVIYAcggNAhvgPLjq4b1u5eXdbFG2DdBCfwwiT3oT0Rl98Xfm868YpXpoGujk6rvVJltJbirMxU PJipiIAIiIAIiIAIiMBwE+C9R3FxsXsN97HUvgiIgAiMNgK0lMwpzrX68uphFeayi/MspyTfUtP1 HDjaviPqrwiIgAiIgAiIwNAI6G5naLzG1N5OlIOo0tLZZQ0QRDI7OiDSpViqhLkxdZ3jfjIIq+R3 pwnfGX5vmvH9oUDXhe2xxtB1dXRZ/dVqa6pqcMJc7uRCC8DKJDUtNe6noQZFQAREQAREQAREQARE QAREQAQGR8Cfm2WB/Gw8q9VbZ3vn4CoNYS9flt/4/JeRkzmEWtpVBERABERABERABEYnAQlzo/O6 xdxrWlZ24h+KKjVt7VbekmqtXV3mR6LlFAhzMo24PeIbFKPAj7MHU8BtvBQ6TVKAo6Bb29ph1W0d 1gxBrYPCHD+Mody4gYhNPOQ11zRYW2OLNVbVYWZmnntAy8zLHlecY8CoqiIgAiIgAiIgAiIgAiIg AiIQVwIpmCyZBVeT+vIaa6puiGvbEzAGESzLd5Mzx9OzdVwhqjEREAEREAEREIFRRUDC3Ki6XPHr LCOe2iCs1EFUudjY6oSVQHqKpVFk6pHlJM/dingnBM2Ga7XW3tzmPPAzMYOQDytjv4Ti4toh5FKQ q2xtt7r2DmvvZNRcbLnAKXbe6Fb3OtFmU2W9tdVDoKv0BLoi8wcDTgwd+5x1hiIgAiIgAiIgAiIg AiIgAiKQPASyCoPGCZPNtU12A8+D8Sr+vCwIcwWWnpkRrybVjgiIgAiIgAiIgAgkNQEJc0l9eYav cxQ/2nEfTSvCLghLtRBB0pFbA7pcjyw3fEcfvS0zIKwDvGjf0YgXI7s6IW7yAcIfzHQPKZl4qPAF MiAejd0oOnLoQtQcLSwpzjXie9TGaDdsi6Xwe+kJc147HRRAK2qtta7ZJRvPKc13CcF92X6kQpR4 7HHSUgREQAREQAREQAREQAREQASGk0BaRrplFQXdBNXWhua4HIqTW3MnFVpWQVATMONCVI2IgAiI gAiIgAiMBgIS5kbDVRqGPlI+oZVlK6LmuGzqnBDKLcdjSevoQ5yRXK31TU4goiDXWtfkIuW6wmYJ 0nIjLcMHUc5nGdkQ6eC/70Q6eOWPxUg6fG2ciEYLSwp0/B7FJsuhPbQzkB9me0ubtZe3WwvYN1yv syAEOs6q9HFW5Sj/zmb6fJafk21+X3qf796tNtQ0NlltQ6N1hn0Pb7X/QJ/5u4+fCjG5qq7emlpb B9p1VG5PS021ssJ8vAosJ9NvrZiIcL22zi5dq7T65vgMKCQTmLF+PZOJtfoiAiIgAiIgAiIgAuON QDbsLGsvV1lrI+6jY30ABLws5BQPluThWXpoz0LjjbvOVwREQAREQAREYGwRkDA3tq7nkM6G99AU U7oghnhZ5RSA1BthFyLBmmsare5qtYuSc4JcS/vAth31oUF+CnHpmT4XScfouYycgPlzA5YJG0Zu nzAWctJRQwMu94qDKEfyISvL3teg1zscp62p1SjSteC6MJIudxLElpJ8S/OP3ge5mWUl9ux9a23u lMm9Tvd2b97dvtPe+2q31UKgi6VMK5loz923DqJVpr26abPtO3kmluaSpm4GhM6Vc2fbfcuWgO2k kPiZnm4dnZ3W0NxiZ69W2Of7D9mOo8etuiG+eTJGAgKF1IXTp1ozhNRz5dfcefG4Y/V6jgRTHUME REAEREAEREAERODWBHyYeEoxrQnpBvhcFkuhGJc7udD8sMcc7ZMtY+GguiIgAtET6KiHw1J1pXW1 ja0JxtETUU0RSCyB9GCe+fKLLAXjbyq3JiBh7tZ8xvynIVGFp8k13AuHFm59PP9D+8TG6/VWX4HE 1t0Rch2wrBwomqsPK0QitiH3mkE8oqVlakaapfsh1OHly8owHyLqMmDFyMg6XwARdempo/I5JN5f lxuww4y0suzDFhtcBCOsU9qbkR8RdqK8TrQ/4ezNVN/o+1nLRKTl5MJCm1NW2ut0swOZloNXe0eH 1UF8a0OkV3gpDAYtFdFgsZbcrIAtnzPTChC199HuvbE2lxT1C4M59vjdq+2Jtatt/tQpTog7X3HN rlXXGgW72WC9dNYMCHez7PXPt9rb23bYtZrapOj7YDpBG9fH7lppz9+/3t7ZvssuIvqPgiPLWLye g2GifURABERABERABERABIafwATkv8guznWTV2MV5nIQKZdTnGepeB5WEQEREIFoCLTX1VrjmRPW 0VAXTXXVEQERiDOBwLRZlpYdlDA3CK6jbwR7ECelXaInEG+hJfqeJKYmo7EYhdUAoYeCT2tDi3VG iCFD7RmTYjOPXzteLLS8pHjE2YHeK51RdZh56IQ6LBlVNxbtL2/H7lZWlv3V7YIASmtLXrem6gYn zOVhxmWgIGdU8Tt9pdx+/s6Hlpsd6HWaj61eCfHlTogu1+3PX3xpp65c7fX5eURJNYxBK8ZeJxnF G1qDfuue1fbyoxuNAt0ne/bbx7v32+XKKmtBdBmtLUsK8u3hO5fbQ3cuw34PWlNLq/0NEYj1TaPD 2jIFwtzqBfPs3jsW25eHj/WidOl6pb226QtYo2bYmcvlvT7TGxEQAREQAREQAREQARGIlUBmbhae ubKtuboez8uhyWFDbTMjJ9OCmFzJSasqIiACIhAtga6OdutsbrKOxtHnghPtOaueCCQzga7WFkZU JHMXk6ZvEuaS5lKoI4kkQGGn7kqVNZRDkKtttLbGFqPoMxyF7YYLdQyVS4X1ZSqieJxQB9EuFaKd i7CDQEcrTAp3zKVGu0ZG4I3V4qwsmWduiMVZjkKYa4OQyghHRs7lTS6CJUqWE0KH2NyI715d32C7 60/2Oe7ssjJ7YEW7VSLv267jJ23vidN99tGGvgTWLJpvT62726bDovNdWH3+13sf27FzF6y9O6KM NQ6fO2+nIXSmQij/5ppV9o01d9rR8xdh4zl6GGfAFiC9n4jJCkQFvr9jr2EyszW3xWYv1JeutoiA CIiACIiACIiACIx3ApxEml2U656fOUFyqIXuD8HSAvfcxomrKiIgAiIgAiIgAiIw3ghImBtvV1zn 2y+BLkTF1SOPXO3lSmeT2O9Ow7UROhRnGfJFQdAVDKinYMA9NR2RdRTq+OI6BTuIdWndtpih9ZCI x/1HpR9mGFfaWOL/URdGNzZer7NW5PprrKx3ScSDzFmAHH+0XBkPhQ+504onwr5xspUV5jue12pr 7RhEJ9od0hZzKGViXq7NnlRqwUDAzlwtt3PIy9YW0caUIthwIofblImFlgLhmHaRR89fsEs8XpgY 5h03H5aZcyaVOetFRgEyt908V7/IOhFheq68wo6eu2hV9fVelUEvAxkZdu/SRS732v7TZ12k4dcX LvbpB3NrnkGk4gc79th08Mry+50FJPl5dqq09pwzucxZiF6trnG522YhH+D12no7fPacUQBjf70y VA5ePV9amk0vLTbmGizOy7MM/LdO61JGvh27cMmqIMyGl9KCPPAL8eZ2smPk3/GLl931Cfgz0O9J xnaPX7yE/va29IjmOzKc1yz83LQuAiIgAiIgAiIgAiIwOggwz1wmcsM11zbhGfrmPfFgep+Zn23B snz3bDuY/bWPCIiACIiACIiACIw1AhLmxtoV1flERYARaRS5GI12oys6K46oDjxQJYhTjALji3nU vEJxibMT6cGfikF35qajYMf3aYy4o2BH4Y42mVgPWWViP9ThYHzSF0bLxaLMdZ9gB/L70Y60tb7J GiDU5ZTmIwddAfL7+UcHhygvFHOLPbDiDnt09QqbWVpiwawstHTD6ptbjLaXH+zcY5v2HnAReIM5 BAWg7zywwe5btsROQPT5w6efW2dYOLoflpHrlix0tpFzIQ7l4Xj8jtJe8+yVCkSr7bLP9x+ymobG XoebDCHvhQfWW3Nrmx2H8MRcb0tmTrO87GzrQvtViCDccfS4vf7ZVhz3UncGzF5NDPiGwtk8iJLM 2/fFgcO2G5GGkbn5vMoU4HZ+fcLqmpogYqU7Ecv7jMupEOx4/k0Iw28AwxVzZtkk9J3nxyg8yNUG GgAAQABJREFU5nZrhjVmtBx4DIqnj62+0zYsW4z1AoiUfpc3sAWRbuR24NRZe+2zLRACz/cIhvOm TLYXH7rP7gA3lg24PktmTrdXYV/JPHmOL3LP8fvwi3c/6iXMRfsdGc5r5k5C/4iACIiACIiACIiA CIwqAnzezCoKWsO1WqSAGLwdPN1icrvTD4yKZ9RRdVXUWREQAREQAREQgdFCQMLcaLlS6uewEqC4 lT0xzz1UNNf0FhGG9cBDbJxWj51tHe5ldlOwYzO0AAmJdt2CHR54+N4T8pxwF5bXjqIdLTMZkUeB LxkeikIRczGEzEXwZF6/jpZqa8EszkY8MAbLIHxgZiZtQcdaSYWovHHlMvvxNx6y4vw823nshO2F LWMXxCeKNncvnI/ItxLkV0txgtLtcqmxDYpS34GAxsiw7UeOIcKswjrDLF7vX77UHW9qcZHtgc3m n49/iSi4LlswbYqtXbzARYDxe0VBkCKcV7IQ0TUDwiHFnrsWzoNwVGtbDx11AtmsslIn9j0PYYkC HaP9aPU52MLIM0ad8fwoRjLy7FaF4tdXEAH7K1kQyWaUFVtZQQHEwRvW2NJiFyquOeGstb3dOroj B6PlwFx4T65dY99/5AHX3z3HT7moRFpUMgrurgXzbM6GMqttbLQKCG4ViNpjYa68z/cdskmFhcZI tiMQ7Xah7hHYdbJfjJhjvxnxlx3w95xaLN+R4bxmPR3UigiIgAiIgAiIgAiIwKgiwBQCdJ1pbYQw N8jHuCzUCZbku0mko+pk1VkREAEREAEREAERiCMBCXNxhKmmRjeBrIlBy8EDghNzEHE12orLXQdR hNFikcVF2sHq0ol0aSEBzxPtUrrf97LNRPRd+PuQeAcBj/nthjHwjsJjPCLmws+fYl9bU4u1t7S6 /IH1iKTLRZLxnJK8MfUwSPHtW/fcBbGryN7cvM1e37zVLkCYoqA0CZFYVyDmPLthrT133zpnd7gd YpRn2RjOi+vFsK+kIPcCxLErVdX26/c/sc8Q+RYucjEi75vIy0YB6a0t2+1VRHWdhc0lI95KIOpd q6kximtPr7/bWUbuP3Um8jDoV76zrXzlk822++uTxiixwmDQHeeZe++xNRDttkGwG4owR6EqG4Ia I8coaA1yfKBP38I3MKrNRfB9jgi+S5ctdUIKbEGvO3vMWDhQwGQ0Ijv5Ovh9vHs/ohnrIJ6m2kSI iz96bKM9tX6NrZw72zbtO9gjzJEzxdJV8+fa8jkzERV4yv7wyedO3Iu0GQ0/j3h8R4bjmoX3Uesi IAIiIAIiIAIiIAKjhwAdSbIKg9aENALtLTcn4g10BnR34bOYPzcw0C7aLgIiIAIiIAIiIALjgoCE uXFxmXWSgyGQDuu7wlmlzhay6mzFkOw4BtN+IvdxkXZdiLRDDra+sh16hqimlG6bTC/yLnw5gaKe i8jrjspjJF63nSatSELroWUoQi9kn0nRbyiRePGOmAtnTgbMPdfeBIGupsFZXdJChfYrFCFHe1k5 b7YtnjHNDp055ywkaRHpCW+nLl91Yh1FtPXIv0bryAOnz7kIsMjznpibC5vJe+0799/rcpz9+oNP nCVkHSLQwsud8+c4K0UKVR/s3Gtfn7/oovO4DyPVPty1z1bOmwPxaI4tmj7VWTF2ROSba4dVK60u N+NFq0iWWkS4UWhat2SRlRbkW14O7TgHX2hh6cP1ZKRd0yAGBwbTMjl+cfCIvY98dLSxDC+xcKiB cPjejt3WhZwcmw8ccdF4XtvkwEg+ipP5wRyIjZneRy43H6P3PBGOUXKMEOTyViUe35HhuGa36rM+ EwEREAEREAEREAERSF4CnADKqLk65GsfjDDHibDZxbluwmjynpV6JgIiIAIiIAIiIALDT2D0j0YP PyMdYbwQQCSYPxiAOFdmPuScqzx91RqrGoacyHpU4oLw0NXJ162TdlNkmwCBLhSBxyWEOvfeW0Lg 637P/TxxL1K8c+8h6DE3Xgpz5VHAQ1ttEM2YV284C8+R1pZtja3WVFXvHiRzpxRaID9n1D4g8rpM gS1kYTDbDp8776LQPFHOY0mxjAIdhbnJEwuRfy7QR5gLBgL2bUSq8fNCiEF/RM6ykMVkbzGKbc6g ZSQi485XXEcutiInhnnH4pJ2iuxDtt/vcqfRCpFiU3jh+0vXK3tEOe8zRo0x7xuj39JSUr3Ng1q2 tXc6u00eP8MXnz9xFL0uIUIuUpRjh2LhcBHs3t62w3FirrqcQCYi5XJdxCKjHO9B/j7m3ausr0OU XmyhqvH6jgzHNRvUhdVOIiACIiACIiACIiACSUkgMy8Lz1LZ1oxnq85bPMvxWTuIvN8Z2Tet1pPy hNQpERABERABERABERgBAvEZtRyBjuoQIjBSBJy9xpSJlt4tznH2H/O6qdBlEsaI3Q9bg5XPbop3 3aIdBTuIcBNSGaXHZUiUo3BAYa695dZRP/G6DhQAm6obkA+hJSTQFee5JOT+3CwnKMbrOCPRTg6i qShipUPkvF5LUauvkMZotcq6eieCUXSjCHSlsnfvCnJynBDkIttgrzirrMQJRczDFl54HB6P0WmL Z06DQJeLfGt9vxFlRfkuYrIwl8cL9BHm6hF9Fp57zjtGKyI72QdKUfxeDKXUQ9BrgsjFPHO5WUOL thvoOMx150X0he8TK4d2nCNtMVcvnOsiCynGUTDl9eT1YZRcTlYmcu3Vhx82qvV4fUeG45pFdUKq JAIiIAIiIAIiIAIikBQE6JjCqLkGpAzg81V/hRM7Kcplw62Ez4cqIiACIiACIiACIjDeCUiYG+/f AJ1/vwQYyZU9ETnI/D5YHdKao8oar9dJoOuX1q033oBNXydeyVooujbg2rbA5rKxss7lGaTFZUZ2 Jh4ahyYKJeocqV2l4B+KWE48hYDaX/Gi6FLxMMz9I0saHqqZ02338ZN27x2L7b7lS+0oLCqZry1c nGPNVESyUVg9X14B+8zzPbaKkW3yPfPLMSIsslB8o41jPMvFa5UuTxtzv1FopHjW3jGwsO7D54/f s9q4/5eHj8Hi82yfSEJaRNLCMbLEyoG5/F5ALr/H717t8vIxhx8jG48g6pGRiHnZWfbo6hWRh43q fby+I8NxzaI6oeGqhP90+Fvf0lmOI/C/qe4DcYk37i2XoRXuEtrPLfAm9H+3b2jd28BNEevddbDV 7d+7zfD9u48X2rHXsV2P3Pab+4eOg0/w+zVUYZtdUREBERABERABERCBoRLIKswxRs411yLHM/OG R5RAQY4FS/Pd83XER3orAiIgAiIgAiIgAuOSgIS5cXnZddKDIcBBzUxET/kCSGiNmX205qgvr7GG a7WD8s8fzDG0T/IQ6GhFni7M8mypa4JQV4sHR0QvlRWYLysj6Qe3G1tarQE5xyiAMjItkJHhrCAj 6dKqkp81Yf+2fvKRlVdV2zvbd9pHyA/HNn/42EZ7at0aO4k8cpv3H+4RWCnONCAqr62t3Y5fuGyv fbbFrkO8G6g0t7X1G3E20P6xbD91+YpRnFs9f67NnlzqBK+LsKEcqEyHJec316yyVciHV43IuAOn z/TdFWMLiBXtsz1WDhQ/aR1K8fAPn262XcdOuKjGakQo1qAv9y1bYvdDHE2lQBxSbfr0YbAb4vUd GezxRvN+dVeqrO1KW2/mnvjVo7zxDHld3P+7TzfsTc9qzwp2vbnO1VBxW8MaCe1z8+PutdBmVLn5 vqd+z8782GsvVIHCnHt1f4c8sc5NOgj7zNvHCXncTlGPr4h9oOh3f9Yd+ezt6yKf+RkjoEP7pCAa lJHRXpuh/upfERABERABERCBsUggNKE1iGfluj652pnPO3dSKHWAuy8YiwB0TiIgAiIgAiIgAiIw RAIS5oYITLuPPwKMnqNnvj8nMyTQ1TS6yKpGCHWtyFV2Kx/98UdrlJ8xtJf25jbraKl2eegowgbL 8t3szvTMjKQ9OQpEjGpjLrT5UyfZpKICqzvfO59baUG+y4fm9/mQ160K9oh9bWZoU3gF4lwF2np/ x25bNH2KbVy53J645y4ndp24eNkx6EJEXnl1NawpG412lWkYjGe98EK7TEaCzZpUap/s3mc7IDqx n8NdqhsabA8i/u5aMNfWIUfbrq9POnvPFoiDkYV56B7C+d0xa4bx3MtrIMxCbBxsiYUDxbilOO60 kmJ7e+tX9qfN2+w0cgB68h+1Fubwy0eOOfYN+kc/JbR3SDzp5+OwTfH6joQ1OSZXSbQdIn1LW187 2NF6wiFhjL2nSMaFJ5ZxNfTF8vYJLbGN/+d+bqV7v7C64e24Oj0i3s32b25HfU+wo1jnhLvQMoXr YaLezfehHKU9VsgR1sdeLlO3ZGfYNxUREAEREAEREIGEEqCdZe3lKqQKwH2Ud1OLHmUX51oOouVS 45T/OaEnqYOLgAiIgAiIgAiIQJwISJiLE0g1M/YJ0Duf+ccyKNDhoaMNuclaYX/YXNMAoa7eRVox b5nK6CdAy0deX4p0vL4NFbWY5YmcCMhDl5aRnpQnSOFrwx1LkKtsLpaLIZzVuAgwdjYLAtTDdy63 ZbNn2oWKa3b03AUn4t3qRGil+NdtOyGsldkDiNo6FmFpScHrgRWXIWrNxHKpXa6scsdkm6kYaH9w xR328qMPGsWv/SfP9ETb3eqY8fisC9Y5n+0/ZCsRAffYXSvtB488YBmYpfvJngNOoPPsPClUPrp6 pT21fo3L5/bupl124NTZIfczWg7sR3pqqhM10/HbQlvQsPGL0HVcttgKg9nW3NaKqLneuTi6boQs YtkO88dlIhLydqJivL8j8bheamP4CbjvvPty9Rf3OfzHd0egyOdeeOetQ5QLrXOBdYp0YZ+5dbcP RbzQPk7gC9/Xq4PfHIp6nmBHsc/LYbqtFVa2yBUbhDV1pi8d/62khZYYHOR7v1uG1n2YiNOfze8I UdJhREAEREAERGBUE/BlwWkGlpZNeDZubwlNivMhbzuj5TjJVUUEREAEREAEREAEROAmAQlzN1lo TQQGRYADg3zA4Ite+TkledbW1OosO2iD2IIoOi4p6jC/msroJcDrR/G1Hde3GYnMs2Blmju5CJGT OUZLlmQqzI328Z599vIjD9p3H9zgouYOI/cbh+LnT53ixDoO0DvLRESU3S7vH3O/fXX0uH2MaLfv P/xAt6XlFfscohfrUqj7aNdeRHxNtG9vWOuiuyjAMYpsZlmJs2EsKyywd77aZQfPnB2RaDnvely6 XunOk9addy+ab3//xDds/dJFdu5qBaLPWiBk+dHHUkSsTbeJubmO21tbvrSrEVF/Xnu3WkbLoRPR gydhu3kVAupdC+bZ333zYfvqyNfWju3Tiifa2sULcA0Lram1DcKq3/zpvl7dAGZnV9qMzx9etRwC Xo59uu+Aa6PXjmFv4v0dCWtaqyJwawL4wvL3J1x8vnWFoX3aY7vphLxugY9RehDx3j9bbtszfeaD AE4xPD0Nf8PdMrTubeMyA8KcH7/tIbGOIh5eYcId1/0Q8wIQ9wL4jK+sDOSi9YfWKfSlQRRUEQER EAEREIHxSIDPyczTXocJMU6Yw7wbRsoxko6TXFVEQAREQAREQAREQARuEkiukeWb/dKaCIwKApyd z5mB3uzADszM50MIRbm2JkTUeUJdfZMxh1l/ibBHxYmO8052dXa5ROaMomuCQMeHy9zJzJOQnTQP mY0QnP66bYc143v2DKLAaD/J/GQcDE9LSYVNY629uukLexdCGW0vB1Pqmprs3e27bMG0KU5oe2Jt yNLy+MVLiOJqs/d27HFRWs8gT9rDd66wdYsXOmGuACIRbS7/9MU2e+PzbXau/NpgDhe3fRg1t+/E afufb73j8uORw8aVy6wdEa3MrZeRnm4ZsPQ8feWqvb3tI2fb+fWFS1GJh9FyoEDxKaL4ivNyEbV3 N2w/VzmBjqInXfkOnz1vf8H1fHT1Crt36WKbPLHQCXSNyCXolS0HjtjSmTNcvemwxGTFkxeveB/3 WQ7Hd6TPQbRBBBJAgH9bnezXT9B6Bf4WVwyyT4yWo7CWzheFPCfmda/z7324uId1vmeUHZcZbp2R d2n4bxVinRPuQqKdW+/ZBjGv13pI3FO03iAvknYTAREQARFIagL+vCw8I+UgP3uDpeM5OZSz25/U fVbnREAEREAEREAERCARBCZg0Ha4JjAn4nzGzDE/ulBhvz52wc5C2FEZnQQo5nQgmqW9uR05y7hE VF1jq7U1NCO6rsVZJbr8dPpPcNRdYOZHyAwGLBvRkoygy8wNuBxK9SeOWN2xg9bZHJ//budOmWTz 8KptbLIjEGr6ywsXCS8vO8vmTZ1sFGomQvRhbjFGgl2B1eQp5DCrrqvvE7VSmBu0JTOmYYA5zQ6e PtcrciwNUSSL8Rmj4GoaGp1gFC7s5QQyXR+nl5RYSX4uBK90q0NeiYvXrtuxCxdxXMyY7YCVXFgp wvHYpg951g6e6X087sboL37OfHiMtmMb0RTaPxajT7TjnILoMwqGtPVklFklOFyAXecJiIzXsc4I wchCfuwH2zmEftIedKASDQeKABTceAxGydH2swF5AhlFx3x+52E7Oh/XktF9xyEcnrh0xQmLXh8C sK+kaDp7cikid/xOaKQdZxoEgoGuJ+tG8x0ZqWvmnVuilikZmdbQWWDN7RpAStQ1GM3Hpcsmc27y t/SmWNct4FG4815OzEvrFvNC22mxmQ3BLge/AzmI8MvGKwe5Td2S28PWs7HOqL1Ii9vRzE59FwER GBsEqjFB7L/vP218llUZvwRqL1VaOcYyOJlx4rzJlo6/YyoiIAIiMFwEGs+dsrqjB6y9buDn9eE6 ttoVARHoSyB71jwLLrzD0rJy+n6YpFsenVZsP1gw1abnBEa0hxLmRhT34A8mYW7wrEbLnhTqOts6 XORcRxvFunYn1rlcdcxnBrtEWmJ2tXe6KKfRcl7juZ9psC/LRN5BWrQwd0Lb1dNW//XhuAlzsbCl oEbhphO5yFogRN3OujKWY7EuB4h5PIpCLYima8V3nLaWyVLIIxOWcxQDGTnX1NoaVYTc7c4nGg6s QxGSg/nkRn5DYcdzYxsdXZ3Wid+ZwZaR/o4Mtl+J3E/CXCLpj+9j879hCnd+iHYZtMzE7wGtNZkj M3w99B6/Z5gEQQtNinROyOsW74IQ9IIBv+VmIacPlkHYbvPF6D9G47JwIkITIqIbGpBDFa9W/B5q nl6Ijf4Vgf4IpOLvrB+20llZWRYMBi0D9zsuN2Z/O4/zbaNRmOPv3412pCAYwj3UOL/Mtz19OsjU w86SudmZ+kH/vdwW2aB2cNbdcP6YADcUFREQgZsEJMzdZKE1EUgGAhLmBn8VZGU5eFbaUwRiIkDb yxQMmKXj5ZUuCAS0uOyAYEfRLiTc0QazNSTaNSHSjut4uOG+KslFgOJqfWsNcgoiChKvDItPpFw8 zpKRcrSiHKlC4a++uXmkDjfk45BHPaLRhrtEw4F1aFEJfT6qwnPja6hlpL8jQ+2f9heB8USAvwPN bXy1mzXe/swZcUuxzQl5TsSjgBcS9bxceC4/Hj5jrjxG3lGoKwtmYBbgBAsYJlDgd6cNEwE6ENUs Ye72zLXH+CWQAuE8HYPhPkyiyc7OtkmTJllpaakT6MYvlbFz5p0tTdZ45qS1VV0fOyeVBGfS2d5h zRUp1npWuVfjdTnSsoOWNWO2+fIK4tWk2hEBERABERABEUggAQlzCYSvQ4sAk2A7a6usmyxcZB0e ZJxQ5y27I+28/HVcOntMLLmfctfd5DfSa+m0F4NNS3ZxrsFz0nqbNo50b3Q8ERABERCB8UCAUbWt uEfgy6z1lqdMi810RPzMK86y+2fCcrjQZ/7UGz0RdLesrA9FQAQcgebuyUdVVVVWXV3tok6nT59u gcDI2t3ocsSfwA38jrZVXbPmyxfi37haFIE4EvDlF1pm2eQ4tqimREAEREAEREAEEklAwlwi6evY ItAPARdZl4rIunAvfjgCdiEihjnpaHXJGYidWHZhljuj7ZwtphPrEH3HCLzuVyftBGXL0g/lGDdh kDMjK9NykGOOglxmXrb5kNy8sb3Shj8mK8a+q7oIiMAtCCSP/eotOqmPRGBIBOgqnJU+wRYXpduc vBTLhCinIgIiEB0BWsHW1tbaiRMnXBQdxTlG06mIgAiIgAiIgAiIgAiIgAiIwFAISJgbCi3tKwKJ IgAhiNF1fJm/dydoP0Wby5BQ1y3cUcDrfjnhDkJdZ5hgxxx3zjYTop4T7jhqp3JbAsyP4M8NQJDL d1FyzC+XHvDB518WLbeFpx1EYNQQ0O/hqLlU6uigCDBibklJpi0rDVi2T3lpBgVNO4nAbQg0Njba 2bNnXc654uLi2+ytj0VABERABERABJKRAPM8FwZzYPseMdCGzvKpkHbzzAFf29jk8sEn4zmM9j75 YRWen5NtvBZVdfXWhPzXKrERuMl0Apg2iGlsOIe1toS5YcWrxkVg+AlQLEpFDhm++isU3jyRzgl4 Hd3vEYHX1b3OyDovz10Ho/FaGZHXbacJ8a6T+We6xu9gNaMYGRWXU5pvWUVBy4Q4l5ZBQQ6jnSoi IAIiIAIikMQECjLTbH5RphViqSICIhA/ArS0vH79uuXn5ytqLn5Y1ZIIiIAIiIAIjBiBgD/Dnr1v rd2zeGHfY2ICOyfCt2Ps7HptvR0+c862Hjpq5yoqrFPOVH15RbllWslEe+6+dZaTmWmvbtps+06e ibIlVfMITC8ttuc2rLUsvx9Mv7D9p8TUY5NsSz2hJ9sVUX9EIM4EQtaYiOjK6N9mh4IbxbsbFOqc iAfhzhPtvG2euEcbze5IvB5bTYh2zl7T2+4sNjvRHtoc5ZF4qempFijICQlyBUEXLZfmw88mww9U REAExh6B8Tv/YOxdS51RD4GS7HQrzkrHLFT97eqBohURiAOBDtwD09aS+edkZxkHoGpCBERABERA BEaYgC8tzRZOn2r3L1viouIa8De9Z1I6bp1TEMUVyMgw7nfv0kW2bPZM+82Hn9pBiHSjfbxrhFEP eLjcrIAtnzPTChA199HuvQPupw8GTyDPMZ1ledlZ9vHufYOvqD1HnICEuRFHrgOKQHIRYNRXagqs rSBC3arw5uQGwvidiOeWYe8p3GEbxbgu7selE/d6W2t6dpuMxuux36SAh5fbhmUylDSImIyMo2Ul hTl/TqalUpBTEQEREAEREIFRRiAnI9X8yDGnIgIiEH8CrbBbam9vj3/DalEEREAEREAERGBECXy6 Z799uGufNbeFrBR590yHqox0n62aP9seXb3SHluz0qobGqyqvt4uXqsc0f6N1YNdul5pryGqy+/L sDOXy8fqaeq8RKBfAhpp7heLNoqACEQSoIA3AQKey3MX+WE/7zl7yIl5FOm6RbuQsNdb0HP7YN8O 5MCrPHPVGq/X9dPayGxKD2S43HE5JXkWyM+2jOzMQZ/vyPRQRxEBERABERCBoRFI5WzfW0R6Z8I2 JhgMKuJnaFi19zghwGi4urq6AcU3d787yh0ixsml1GmKgAiIgAiIwC0JnL5Sbpv3H7J6/O0PLxTn 9p08DZEuxb597z22ZuE8+2zfQQlz4ZBiWK+orrX3d+zF84pBFG2LoSVVFYHRR0DC3Oi7ZuqxCIwK Arx5mcDRQORnu3UsXuh0Olrarb68xhpthIU5dDEjKxPRcXmWXZzrcsn5svxGC1AVERCBcUYAv1su StaX75J9w5+E/0fBP93L0CL0vvd6aJvbm5Xch1h4A7ZsK/RhRJvd+4Q+DH0Wvt59bFc7vM3wfXqt s8/dO/J4KiJwGwIU5oqLi41LFREQgd4EampqrKWlZUBhrvfeeicCIiACIiACIjDWCPDZilFdXx35 2u6GKDe9pNiK83J7nSZtGOdMLrM2uENdra4x5k2bVVYSyk139pxRfOrEhHUWjpVNK55o86dOtrJC PHfi0e0arLGPnb/oxL52WGUPVFi3MJjj2p41qQxRZuk4Rp0dPH0Oda/3HCOy/pSiQpszZZJNmVjo 7DmvoT9Hz1+wS4j6Yw69/gqPNXVikbP6nFRYgF1u2PW6ejt9+aqdvVphjbg/6q8MtV52ph/sJjm7 0OMXL7nzYbv5ZIpz7ED/Tl256nLQzXPnUOTO81x5hR09d9FFL/bXD27LSE+zeeC8YNpUywn4raqu AXUu2NWqancdg7B85DF5fQZbhnp+bJfXbDbOhXVPXrpsleAYXrzPOZnyRD+fc1/Wjebas+5kXP8F 06a4ZSucHs7h+n2N866ub+DHKgkkIGEugfB1aBEQgZsEbtzATcoIDibzj5o/N+DsKrMm5logN8vS Az5EBUqQu3lVtCYC44sAfhYsd1KhZZRM6RbRvPPH01Lo/90bwt70rPasYNeb66GGWM0T5gZo0/v9 66mKFZbuhavfs87toTdeNbejVwUbvWhkF80Bi2GjzTC3d7/ce28bP/c+C9sW2he/ze7nmW3Cepif Y+lsi7vXvW2hZdh+aFMl+Qmkpqa6aDnlyEr+a6UejjyBNOSUYX4ZFREQAREQAREQgfFNgJF0jOhK T0s13j+Hl6kQ2r7zwAZram2xhuYWWzFnlk2CGMKcdf/13sf2zvZd1gz7a+ZTe2DFHbDFXGEzS0ss mJWFZm4gSq/Fzpdfsw927rFNew/0EW54rFTcj7DuN9bc6eoW5cLxAn3h8c5eLbc/ffGlfXHgsHvv 9c3v89m6JQvtW/estrkQtfJwPLphsV9nr1TYu1/tss8RJVjT0OhVcctUTFR/EMd6at0aJ5qx33wu pRh3DUIg6/zty51ODAyvGE09ikYv3L/esfnFux/1CHNu+wPrwa3Njl+4ZEtnzbAlM6chb1o2HmW7 IMg12I6jx+31z7baCYhMkU+eWf4MexL9/9bdq20yBEaKmE0trXa+4pptOXjE5kIMLM7PtZ+/8+Gg hblozo98pkOo/d7GDe4a/vL9j/tcXwq5331wg7uev8T3JVK4i+ba87hp+M6sxfXnd2bxjGmWi5xz HR2djt2Wg4ftzc1fuu8O91VJDAEJc4nhrqOKgAhEEPAGkSM2x/0tI+Ey87ItpzTf5ZHLhDiXlkFB DiPyKiIgAuObAH4G0jN9EO35gDS6C0U1Pp2ElqHHlMhtId2MYh3OFf/0+txtCrUR+Rn389rlnArv 855t7nNs7hHywsS6HjGvr7jncpjeyv6YgmBnd1vYzx1vdF8m9V4EREAEREAEREAEREAERCDJCXBi NyPlJiJSrhJRV/VNve0usxD1NaOs2MoKCvAIdsMJWBcgAFHAY4RSB6LgKK5sXLnMfvyNhyAI5dnO YydsLywyu/DstGTmdETjzUdUVYmlYcyKQl74MXj8tYsX2A8f22iMGtv19UknqvkQEXbn3Dm2cu5s m5ib60QsinNedN79y5e6400tLrI9J07bn49/iQi0Lhc9xfZmIqqPbVMQpADmlTtmzoDQeK8tmTHd th0+6vqZhtQ2c6aU2YY7ltgPH91otY1N9pet253YFUu9AAQ0smPUYTai2rxCYW0GxEsKdHchUvE6 ogq3HjpqdU1NiBgsdYLj8xD0KNAx4jA8+isN3Mn6+w8/AMEvy7YcOmLHEF3H67R+6UKIYPci+iyI vrdYMDB415BoufC4ZM1+MUIwsmT7/S4KMh0TwiI/j/ba8xglBflOmLyAaModx45bXWOzzZpUamsW zLPvQQhsbmt3+f0YdamSGAIS5hLDXUcVARGIINAz0BuxPV5vU9NTnUWdE+QKgi5aLs2Hn0CGyKiI gAiIwBgjwBt4c/9P4G9ctzAYKdiFR+/1iHrdkXo9n3W/75m0QbEvfFu4wEeRjiIgRDvmNHUCX7eI NxPWxMUZ6c5WprmtAw8ffLW7ZQuWTXjPJR9QcQgVERABERABERABERABERCBcUiAwlk6hC5fe/dQ OR6jGHFG+8AVEL6eXHuXlUBQe++r3XYa1or9FVpTuiiuzxHFBUvCVOSlo8Uk7SKXzZ6JyLW7IDQV IVJpm72+eatdQJQchTxaRV6prLJnN6y15+5b56wGtyMazJuISFvMZzbcY4umT7W/btthf/z0C6OV IyO4th06Zv/09OMQzBY7sYqWmLRqZETeNxEpRSHvrS3b7dXPtjgLSkab8Tyuwa6bwtbT6++2M8iv t//UmZ5TWjZnphML9588Y7/96DM7fOaccxCYmBe0ltZ2e/zuVc6Kk2wYheaVaOt59ftbTgJTnusr n2y23RAkWxC1SFGtDsLgM905/7ZBsAsX5pZC6Hx6/T3ODvPVTV+4879aVWMUMvecOGU/ffIbzlqS wtxQynCc3+2OH82199qkyHcMlqWvfPyZfYXvE597GWlJYZLXnWIw2UmY84iN/FLC3Mgz1xFFQAT6 IcAB1+EYFU3DgGxWUdBZVrrcUTmZlkpBTuW2BDIRSUhfb2QLdL7d4TOobls5Ygfe0NKHfVJRAcLz 06yytt7deHK2kzebK6KKe8t67ANvkqvgw90E+4dElmTrTyJZ6NgicFsCFAYhEPJ/w1JcZF6EYNct 4DnBD39XHp9VZg9OLrIUbG+H+NYO64627iUfkNs7Qtta2zutGbNZm1tD4h0fWnpEPLft5vsmPIzy 1djSZo3d6y3IJ0F7TxUREAEREAEREAEREAEREIHRR+DRu1bC7rGsJ+can2DSUtOMkVtTYIVI8Yyi F+0fGQ3XX6GQ9gVsEt/fscfZRYbvs3LebGcneAgiF9ugPaMnvJ1C3jaKdRTR1i9d5GwbDyBvnJfH bd6UybZo2jQnrH2wa68du3Cxp+7B02ftjc+3QAC8Zl+jTeZkY7lz/hy7A/aPFAg/2LnXvkbfGZ3H QtvMD3fts5Xz5tgq7EfB7/DZ8z11nV0nxmD8GBOiHWInxLw2TGi8UHEdAtln9uWRoy5fW22EBWa0 9VynBviHz2+0ztyMF207WRitt/v4KQiRi6wUUWF5Ob0db5bOnoHceFNsH4RFnjtz4rFQ1KNwynyA jLobahmO87tdH6K59l6b/C58tu+QfbJnPyINQ1GeVfX1uH7HbM2i+RijCzoLUW9/LUeegEanR565 jigCItAPgVAkRD8fRLkpPZBh2cgdl1OSZ4H8bMvIzrQU+G+rDJ4Ak9N+GzOQOAvrtU1b3I3a4GuH 9gxkZNh9y5c4uwPOHqOnOdtrxA1VTWMjbkYv23s7drsbSEa6RBZ6bXPGWE5mpr26abO7sYrcZyTf J1t/RvLcdSwRSDoCFP34ukX6p0n4G7Bkeollpt1iJ5xYJ0Q1Pri0UajzBDu37Bbvwj5ro7gHIc8t u9cpzDUxAq8Fgl23aOfEO1jCNGKbE/O6hTwn5oWJejxe9zNy0iFWh0RABERABERABERABERgPBBY OG2KLZg6uedUKWE1IxqsGuITbRRf/ewL5H87iDGJ0y7yqGfHsBXaT15ChBxzuIUXPrNMgSVjYTDb Dp877yLAPFHO249iGQU6CnOTJxYi/1ygR5hjvroCRKft23vaReCF1+VE522Hj9mhM+ed8MRIMpYZ pcXOMvM8xDRaWTJaLLzQQpLt0EaxDKIjBUgKXiwnLl5xE6mXI8rvf3v+KTsIkZBi4NFzF5yox372 V6Kt119b3jb26dL1yh5RztteWVfnbC05kZs2m14JsS5ykY5fo8+8HuGFz3y0tbyMCEVG4w2lDMf5 3e740Vx7r01OhGdOPU+U87YzupDf0ZK8PPNh4rxK4giIfuLY68giIAJhBG5gBk74zUXYR4NfxZSm jKxMJ8ZlF+e6XHI+2Jgxr5zK0AnkIzEsvcrpi/4RZlMNtdDW4AnYPTwPYY1+7BU1te7mjjdCOYGA 3bVgvq1B6Dxnpf0O9gj0Saf/enhhkuHlsFGg3/hHu/eGf5SQ9WTrT0Ig6KAiMAYJpCLPaGpKmiHI OqrC2aeMvmtD/giKe20Q6ijctVK460fIa3X74XMIfBTtGiDUNTS3IvF7m9WHrTfwPbe7baF11vFm u0bVWVUSAREQAREQAREQAREQARHoRYAWlZsPHOoR3Tg+xWgtuvZQxLgIcaiiusZt61Ux7A3znXlR XWGb3URjCkh0D6JtYKRQwn05TlIJlyDW51hKDnKfXakMOZCUFebBSSjLRak1ROS3Y10KguE56Xgc Ho8uSItnToNAl4s8d6FIOu7vlbKifDfRsTCXxwv0CHO0taR15IsbN9jq+XNd5B3Hc2iRSQGREVe0 QLwWkZss2npef/pb1oN9f+5NrXjeIjNGNlKM80oQ50G7RgpONfWNEDf7ui6Rs+M1RGFuOM7P63d/ S57XUK99eDuh8+9r10luTP+QgmjIcHbhdbU+MgQkzI0MZx1FBETgNgRisbLkHxJ/bsDZVWYhSi6Q m2XpAR+iKCTI3Qb7sH7MBL2MduNMr99//Lm7eePMHHqa0xJyWvFE5wlO+wEOYlchifJR+F+HF86M eg2e4H5fhp25XB7+UULWk60/CYGgg4qACPQhkIK/QxnIZcrXUApn4jK/HX8DGXVH0S20xHobhbub 27112m1SyKvHQyaFvB7xDuu1jS1W28RXK9ZbEb13M4n7UPqlfUVABERABERABERABERgPBE4gmiw t7fuwP1172i3oTDgRGOKeZGFuhGfFzh2RcFvoEnp3nam8uD+oXIDIlM6bDVT3eQ8VL9tYc1URJFR eDmP/GyMpuMEwoEKBafmsLQhHLd5H85GZ6+WO1tNF004bSomTc9y1perF8x1k6/f/GIbItKgHnaX aOt59ftbOhGpH3el/vblNnLjpEuynoBlf1kV3Gce3oEa6mf7cJwfD8PJ8LxWfcvQr314G3Rm6cSz Zp8yiO9QnzraMCwEJMwNC1Y1KgIiMFQCt7o5GagtRsJl5mVbTmm+yyOXCXEuDTOC3B/fgSpp+4gQ oPf2irmzbA7sMN9A4uPffbwJlguVvW5A958662aD/eyZb9ndixYgIm5/L690drSiuhY3hHtxcwUb CfiBJ7okW38SzUPHFwERiI0AnwfT8bcsPdUH+xjfoBqjXQ2j8Fog4rUi10O4oHczNx62w1qTNprt 9ZWW3oQH5q7eEcmDOph2EgEREAEREAEREAEREAERGBwBCB6Q3frsy6ithpYW2Od3ucg0pvygzWBk YbQXP2vC/m3dbkIU4rgvo8ayM/2YtNzX4iMPbkdMRcJy6vIVo50lI+va8DzA9CGvfbbFriPibaDC sZbISD/mj/sK+dgOQ9SbiIi70vw8WGwW2f3Llji7zafX3+3SnYQLc2w/2noD9W2o2xtamh1rOozQ 8Yg8w6MJ2V5eNrbDujOaEs358RpyzDMFORgm9JOHgZPZAxjL5ETM8BLNta+JyPsX3p7Wk4+AhLnk uybqkQiMSwIIosIfqsGdeioiEgIFCLWnIFcQdNFyaT78nPXMKBpcO8m4F8Ptp8MLfGZZCRKx5iH6 Is3dVDFS6xgS+VYh5D6y0KKAAhhnEp26ctXZJDBpMBMU88bvHGZIHYWHNpO89ld4jHnwUl+IhL9Z GX7YEdS6my/aH0RbspETjv1nsuArsDtgNJw3+8trkzeaXx392u5EEuS1SxZgFliqsxsIt7Pkjeec yZPc9uMXLznbB68+l17fF2D2Vk7AH4q6w0w3WizQPpM3OKxHQc0rsfAaqD+xtOn1K5pz8epqKQIi MH4IcAZtpo8vPJT3znPeB0IXcuedOn3ajh1ttIYGCXN9AGmDCIiACIiACIiACIiACAwzAY7VXIMw RoFo/tRJNqmowOrO9xbmSgvyXV44ugtdul6F8ZuGnl5xPKO2sdFmYZyoBPtxjCW8LMR4yIsP3WeN sMH8zUebjOJMeXW1q0O7yjQ8P0TWoV3m43evtlmTSu2T3ftsx7ETbkwpE8d/aNVypB6ZZ5/vP2hb Dh6x08gpxxfHiGhlWZQXdGlP2GdGenVh3CnaeuHnEY91Riyyjxw7WzR9mnNqOnz2fE/TjJZbhLGv qRgvixyj6tmpn5VYzs9FUuI7UBDMMH96X2GVVqO5EFfDx628LkRz7b26WiY/gehHXZP/3NRDERCB 0UQAf8gRl3/LHqch+U9WUdBZVlKY8+dkWioFuTFSyuBv/djqO23DssUu+W4ORCmGtLdg9hJvrA4g wowznXhTEX4DMRmJgF94YL2bQXUc4t3SWTNsCXzE87KznW0kb+h2YKbT659tRRLfS73mb3GW0FNr 19i37lnthDwmBOZMqZOXrlh5VY3zJGdkxlALZ3NxVhd9zJfNnmmzJ5c6+wTesIUXJvJ9HRF1n+0/ ZBeQlJZCYnhx53b/ejfT6RfvftRLmGNy4ifXoe+4meTMLc4c48wyJrflzeNcCHq8wfn5Ox/2usGJ hddA/YmlTZ5vtOcSzkrrIiACIhBJIAXhxmmIyONSRQREQAREQAREQAREQAREIDEEKHxtuGMJrCDn YrkYwlmN0RqRheMBD9+53I2dcFzkKCYbh0d57Tlxyo3RLJk5HW5D8+zc1QqrbgjVLcBE7QdWLHVt frBzL8ZEQjnFdn19EtsvIz/cTPf55coqd0weLxXPBw+uuMNefvRBFzm2/+SZnrGYjq5OiIeT7SmM tUyEAHelstqOcAwK9dphh8n58LTJ5FgOo9O8salo67E/8S5fHj5m94LxnfPn2DfW3OlYXYbYSTtQ 2nA+snqllSACkBO6B1tiOT9e5wakG7hjVp4tnjHNdh8/6fIJ8tjL58y0tXCQysf4XX/CXDTXfrDn pP0ST2DsjGgnnqV6IAIiEAMB/jH3/qBHNpMeyLBs5I7LKcmzQH62ZWRnWgqiq8ZS4eybJyGQff+R B9wN2J7jp+wM/LwzMJuG0W+crTRnQ5mb8cSku0w67BXexM0oLTGKQ8zrdh0Rb1uRiJfC2KyyUlu3 ZKE9D3GLAh2j4bybP96MbVyxzF7CMRniTzHr2PmLLsqMdZbOmu5uDk5fGXpuN4qJe0+ctvXIH7cG ffKlPY0ZWLBBwA0dI9iu1dS52Vi85icuXnYv73zClxQOZ5QVG282sxER5xXeUG1cucy+/zD7nmVb DqHviArMgpi5fulC++6D9yJhctDdlAaRNDm8RMuLbQzUn1jajOVcws9L6yIgAiIgAiIgAiIgAiIg AiIgAiIgAslH4MDps/bxnn328iMPYrxig4uao00krS/nT53ihDWOj/zh0822C8JN+KTlk5cuI6pt vxv3eeH+ezEBOc+JdzlwKlrsxLr5ENCqXIQbhTQWju18tGuvTSuZaN/esNbVoQBHi0c6NN0HS8qy wgJ756tddvDMWTc+w3qMONuN8SiKh2sWzjffC+lOSOI4VFFuEMLgfNhmlhrFrxOwyfTG8aKtx2PG u3DM6a/bdjj7zWfW34NJ22WYwH0dk7l9LlqO50H7TqAYdInl/CiKnrx82dZAVKXgyeOfhOVoLqxL KR5SlKtBRGR/JZpr31872pacBCTMJed1Ua9EYNwRuMFoufC/ipiFk5GV6cS47OJcl0vOl+U35pUb i2XBtCnuxojTkF5HVNzHuOmqrKtzM3omwhLyR49ttKfWr3F2AZv2HewlzHk8JiHijraVr3yy2XZj dhTFMYpT9Bd/5t57nEC2DYKdJ8wtmTHdnkabtDB4ddMX9qfNXzq7A96sHDp9zn761DdceL/X/lCX WyH0UfB76eH7MVtpEW4YpyEKrxrHqLWL16+7GV8HcZwTuMmk5cJQylLcfD6NGyxaSLLvb23ZjtlO NcaIP84o+umT33Ae695ssf7aHiqv/tqI3BZNm/E4l8h+6L0IiIAIiIAIiIAIiMDIEuB9KW3UGVFQ DRv3weRHZu4b1qNNcSVstxq7Ix2Gu+e83/eOS7uvptbWXofkxLESOE9MgzU8JwoyqoCuFLRIvlW9 Xo0k6M3tzi1B3dJhRUAExjkBjnlQLGpubbdnMA7zxD132f3LlzphKw0RaOUQvji28S6EMtpehhfm jn5/5x5rhx3isxDZWJcRb/50n5vAfOTsBVeXYpmXGoR/g97bscflneZ40MN3rrB1ixc6Ya4AY0C0 xvzTF9vsjc+3YRzpWvjh3HjSrz/41F7ABG9GmC2bPcM5K3GiMoW4TXsPODcnTiYPLxyHiqZeeBvx WCevj2HP2Ya/x4+uWmHzp022ZXNmub+xhyCGMnrxPjhV8e8FbUYHW6I9Pzo7/WXrVy7tDK8D8/PV YyI9RdLjmKj+t+073XeBQmtkiebaR7ah98lLQMJc8l4b9UwExhUB/nHni37P/tyAs6vMQpRcIDfL 0gM+m4CH1bFcODvmvR27nTf35gNHnK2jd760CGDSXUae5eMGivnb+iucwfM5LCE34+Ul7mVdznZa h8g1+n/n5dxMSEShbD4EQUaxUQikqMfCP/yMuGPOOUbcRVs4o+pt3HhydhAj8JylJXLh0WqTN4mV tfXus22Hj9rbuElhZJ432+p2x1yKG8OF06fYPsz4ol3DWVg5sFCMpG3nHMyIul3fh8rrdn3i59G0 GY9zGUzftI8IiIAIxIvApUuXbPfu3VZREfrtjabdlStX2pIlS8yHB+KBytWrV23Xrl3GJQv3v+OO OyyA2aUDlVpEhu/4/9l7r+a4rjRL9INPeA8QHiAAgqADvfekKLVK1Sqr7qmIjqrunreZl/kTN27E fZiH7pqXiemY6emuapWqVKoqeYkUvbcACZJwhPfee9y1duJAiUQi4RJAJvB9UjIzj9lmnUTmPnvt tb7796Wmpma+Qxa1nfkyjh8/Ltu3b5/3+LWsa95GuNjBa/P8+XMzpmAfCgoKXBylmxQBzyDQOzgi D8obsBjLJmnJsZ4p1EdLocXYD48flhDk4Pn3y9fMmHShrjDPMnP8MBf072HvzrzQaxFUUPzszAkz Sfjhd9fNmNqql2Qhbe4vHCgyVl8k6a48tk/CclJ2vvOs89fqmWQm71eGQCpyUtmaXHXXt7Vqm9aj CCgCvoEA503+7eurcu3pc9g11pn5hOW0nC5A//Txp2aRBZVq80V9WwcWFd+R0ppaycLCh8SYaPPd xcUPVLxVIo9bFxZLuAoe8+md+8aBKHtLkiRhATfnz9ox71KOVCRsA12THMOcA9KHCrKsZOSnw4KL EKQA6R0Ykvq2dnlVV2+sKrmgxDFYDomtN5ijYQ46pggJxm8bU6zQvek16qLl5ujYys/jPNCv//iZ WWTNa2AFsfjnP35q6i2FtadzVIMU/PUnnxly7UX13HE/F7t8DcUgbUFTMBfG3y/OQ9W1tpu8c4cL 802Rzn1wrsfx/XJxYRl0eGKalevFL8wCeKatIQHL68brRDUj2/ga6WmcY6nXfiHsuNDmf/z5C+Hv /fM3c7Fzrl/frx4CSsytHrZasiKgCCwBAQ4omDcuOi3B5JELBTkXGEJCDtK5TRD1GByQxCIxxZvL SNgvcpCWhEcq7AWOgdhizriOvl4JoKm3iyAJ19DeMUPKWYdQeccBBFe3ciWWFWnx8bCIjDQDgUac 5xhcZcV8dRwArCS4Ave7JyVCiwZabTKPXhYGkcz/tjM7w/hpM4FxZlKi/OvXV0wePUfLBld187OS npBglH6vMZBswIDSMXhTzkEPCUEq2OaLpeI1XzmO25dapqf64tgGfa0IKAKKwGoj0N3dLc+ePZPK ysplV5WA73GSXu6IubKyMrlx44a0tNhX4/bi9ywpKUm2bt06b73DUJuUlpbKkydP5j1mMTt4s8x6 3BFza1nXYtpsHUNS8u7duzKG33L2QYk5Cxl9Xg0EBrHy/7NH5VJa24a8OelSExIokxOTG9blwh2G /YNDZrLtwLY8eYmJWS5+c+cKEYp7neNQLzD/DVfSDw6Puiveo/voasG8NrSL/+bR7O/LgwV5Jn/1 zqxMWOu3msnblq4uGcGEJsfy853n0QYuUBjH0O8c3m/s+j+7+xBt7Jgh5tz1bYFidbcioAhsMgQ4 78GUG3ysJEiwXIWz0WKC5BYXEzN9CYmRialJGR4ZnWVdOV85nG94ALUX04aQxOHM0CDOdSbWHM9n rjou1uaiZtYXiLQwXNA8ggXZVGzNF6yLbkQlsODk7xXHxkOoi5i5W1C91PM6enrNAnPndrTPs906 jsQbSS5XwRQv+6CQe9PUDLwqjK2ndRx/Pw4hzx/n2kgKOpOZ1nHzPS+1f1Y5nOeqAtlYjTpDcR2Y A5x4WotKmHPQXSzl2i+EHdPc3JgHO3dt0H2eR0CJOc9jqiUqAorAMhBg7jhaVQaFBktgML6a5iGf llG0T5xCS4IAP385hFU7vBkmGUcrHErZSdJRJRcJa0+upp0v+oaGzA+78/4RrGLijz0HbRyEMDgg o681n0me9bmwkmw3hN7QvAo9U9Ai/uEgkYQhH1zZapGO7ONxEI7vYjLi0qF9ZuUSVy9xEOEuoqCU YNvNiq2+AdgRzLbe4bkcpJlkyW6IuaXg5a49jvuWWqan+uLYBn2tCCgCisBqI2DdjPM5BL8jUbBN dkewuWpPJBaGUJU2XwxiQcmbN2+ko6NDgmCjNsmb2aoqqaurk8zMTEwquL6N4fZ4LDxJTU11WfQA FOr9/f0yjt8mKu/YDldlcfIhHDlM3cVa1uWuHc77eF2sh/M+fa8IeBoBTuq19QzIzZc18rK+TQIi w8Q/LkKiU+PFFhW64V0vHPGkHRWVEvvytwqtytOxKM3VynfrnDwsVNuWkWYmR7lSvmmFC+Kschfz zHH572CZZgsOkTeNs63IqELLQf7qF1B0/Obb6yAZ64zFfhcmk4PcnLeYej11jD8nVpGD+xRyING6 zTHc9c3xOH2tCCgCisB6IsA5mqWSQlZ7zbkgzpYSJIY4X7HU4FzVGMi9pcZyz1tqPa6OTwbp9s7h A3bCEr8XdJWiMxQV4DuzM41tJBepf46FHY3TOflcleNu23L7x3HTSmyrl3Pt3fVD960vAq7vaNe3 TVq7IqAIbEIEgsJCYFkZsgl7bu8yV+t8cO6ksbJJRiJf5oWrhSULLQ6YpDYmIlzeBnnlLvgDzYnL xQQTDFONSJ7OvkZq7koplreQem2+ujjY4YN2DExyzNU9DJbHFWJ8VMBugao8UoW0xNkDe0qq6hYi 5ngjHmDajvZTUWnnGk351j8kINk3d7EUvNyV47hvqWV6qi+ObdDXioAioAisJQJUsJ06dUrS09OX VG1iYqIh3OY7qba2Vurr6w2BRtVaHxam0EKTKr3CwkKjnHN1Lom206dPy759rn8zqfS7d++eUPVH NdnRo0clLi5uTlH8HUlJSZmz3XHDWtblWK++VgS8CQFOMOF/82jvxXgPj6COXulv65HIpBiJSo0T G8i6zeCCwYm2pxVVhiyihTtt1TnWnTvKtl9BEni5sAijso4E3ihUCGsVrcj5/OX9J8KhtHMuPC4c 4+I92n/de/naLK6z2uXuPOuYtXpm7rsgTLI6hze10bltvv6et1eRyOkdjYW0QfzwaGxoBPjdPoB0 Gd2j4zK6yHmGDQ2Ids5nECiBPWMNHDfO7yuS//qjH8i5vXvMgvRozKvlp6dKHn57b5aUmrQoXKiu oQisFwJKzK0X8lqvIqAIKAIOCHC150+QkDcIK/1/e+W6PIQ9AVVfXJnaDZn5maJdZlUPCakFGSeH cud7SfsB5nij7QEVbKFYLevsrR1us2EVbdB8Rbjdzjxyv7hwxiSJ74Hqobiyes7xXM3PlcG0VGD/ EqGCo0pwoegfHpJ+THxwIohWNZw4MOo4hxNjIrAd1g7eHhupL96OtbZPEVAEVgcBqspycnJk27Zt HquAvw8VFRUmtxzVeCTZqqurpbGxUcrLyw1BR0LQVVC5R0XdfNHW1jZDCMYgN0d+fr5s2bK8fKpr Wdd8/dHtisB6I2DUmU7U0xgsGcdaRmUYSjpD0CWDoEuJk9HU0FsAAEAASURBVJAIKug29mQ+bb8q Ghrl4oG9yOWcJndKX5kFac7XiSv1d2VnGVt55pargt3WfEHlXR4mEtMT443SuA2kGlVsDbBv5Ip9 56A9JfMtc2zfDGss5lyjdXw7xv7Mw0PiKiLUhmNSjQMFcw9xYRxzFjHnUV56Cr4nA03+oqM7CqQO tvEVUAPS+srVeY71c1FDPHJis76tyC3NewmWXVJVYywxXS36owsGre5zcA5zJoWgbi5SpPLtFQhL 50nTLXExmFS148G6twGbi8iHR8ViDaw3eQ/g3DfnNtJGvwBqRVpzknxoQ35Sqh1pienKEo4pAfLQ Hy7Cq8S1oqsJ601PTDALD5mrm/kB3bmbOLbB117zrzYNi2gPJERJPoj2qKAAkLob+2/Z167RarV3 BIRc89CoPMaCi1c9g4aoW626tFxFwFMI0Inp3765Kl1wWDoBl6YfHD2A72q7Uq2ls1v+gjQyn917 aBbG8HtdQxFYLwSUmFsv5LVeRUARUASmESAZRyIrEzfCf0Z+iY+v3zbe09bqWt7yJEFFF4scc7Qe 8MQ90CQGJY2wB+vCDTbzvTEXWw/svRyDN8dU73X3L80igWX0o522kCDhzfyDV2WmP0ys7BzsW1xU hLnJ5810D4jIhWIMq/aoJuRN+g7kvuCNNVcaW8EJgR2w4MnAjTIni7w5NlJfvBlnbZsioAj4FgK0 r6RijpaTJM6ysrKMIpy541pbWw1Jl5eXZ2wofatn2lpFYOMhYCnm5vQMQ7AxTOaODXfJEAm6Vijo pgm64AgbxrMbc1K/CZZYz7FS/zBsFqma4ziVThHOsQO5lvNBgDGf84vqOpdjYBsWGnBC8b1jh8wK /xgshCCxyXF2dVOrfI5JxWuw53IuPwN1/s2501iAN2xyTzPPTirIPZ73L198K8zJRpeKD86eNIvc /tfn3xjy7CBy7nCh4PbMdGP3dWh7Psg1KPrQn//91WVDzLk6z+obLevP7dtjcubRCpPW80HIZcR7 gOrmFvn4xh2T08bxnoDE2DuHDsjpop0gyeJAeNlMHiPmP2K/uLjvd1dvmrG+Na7flp4mv7h4Rvbg /olxGgv8dsE69ENYczLPk7s2clEf20gnErYxylgWTxlbf95ffPXgMfJjF5sFkqbw6X9MmXA3YT4g qiB577YrJ9PkAJ9EfiiSlswZ9dHVW8jfPb9K0rFMX3pdEB0ul6B+3Yuc8LFQy82X89yX+qRtXTwC Q8gbWhgVLl82dsjttm7pH1MiY/Ho6ZHrgQAXgXABeDNIuMuPn5l8qvbfoxHz/U5nJy7IcF6cvh5t 1To3NwJKzG3u66+9VwQUAS9AgDeZtGEJxM0sBwvMueNIJ/EmmTer8SCwhkZHTJ42TzSbN9lMPLs/ P9fkeqO3tkXOcZUtJwK2xMXipnjpxBxtfJ5jZey7Rw/K354/bZSAVx4Xm5Wyo8jrw6BS7+SuHfLe 0UPoW5SUVt+TeqyMXUwwlwRVhgcK8szNfxcmbxvbO2cmES4d2m9IRU52eHtspL54O9baPkVAEfAN BJhLjraVtGdOS0uThIQEM4mfnJxsLCjLyspk165dG56Yo90m8+xRKcjXzItH+0zm0CNZyTx6S83t Z30CiG9NTY0MQ4HOXHkkOqkcdMz7R/tQEqSsn2TpKCbKI7BIiPVnZ2cbq8/56rfyAVJRSctQnsc6 mSOQ5CpzCHIblY+sm8+OdVvt1GfvR4DuZhZh4rK1GOeODY5IL0i6oe4B6WvtBkEXCwVdrMkvvdEI Oq68f1RWaWyzSBaR2HqOBWSOdvP+INdoY8lFcN89KQGR02icIJzxO7t3t/zDX12UjKQEeVxeJX8s uwPF1qQhzo7v3G7OJ34kk0gYWREOcis7JUlSYNNL+3pabNa1Iv8f7jfommFybEJVxmOorosIs5lT aTP/1cMnZjx9AHZfbNd9uHi8AanWNp0Dmmo05/N4MtvBNv3qnQtGSfbwdYUhDoODAuVAfp6530iM jjbtvFH8wqjMQkE8/vXxI/J3l84Z94vHwI110aKSajSSm3mnU8z9SSsIt1ao/xiNmFC99vQ5FhbG C5VspcD3Ic4thfUm+zdfG0kcXthfZDDloscH6NsT3LOQXOa1OlpYAGvRZPTf35CXjo4c4ew3iDwS dIcLt4HI7JFbz1+a/FC0LOV9089BdJKg42QvFz9ulIjA/emxxGjzCMdrjc2HQCj+JvKQM/SSxEkL 8rs/69w4n+/NdzU3T4/5e1zf1m4e7LUZb+D73nGubfOgoT31VgSUmPPWK6PtUgQUgU2DwAQGDBWN TcZqhjeg//juW3Kv9LWxpuEqW97kcpUrbSeNvWRQsEeweV3XKJ/cuiv/+QeX5D+dP2NIOFq4hMIa kko3rgKdwM3/coKrhf/922uGkKNN5d+/c9HYVZIoo9ItGDfcXEXLm26Sf1ewMvWbR09drhZ2VT8t d2g/sAU31T8+eQyqvxSTi48ri6mWY9nMl4Fxl9fHRuqL14OtDVQEFAGvR2BkZMTkkaPlZCiswpi7 LhqTuWHIeUQiijnmSCiR4CE5FITfk40WxIDk48OHD4UEV29vryGyOLEfgt9okl3M0VdUVCQHDx40 RNlSMCDZdvnyZVMHz9u/f78UFBTMKJhIshDju3fvyuvXr6UHk8wDUNVzMt+qn0Qazztw4IDQEtQ5 eN6NGzeEZCrJOxKL9+/fN6QcCb8xTJ6zLJJztB49ceKEMJegDTbaGr6FAD8vixlv8bjRwWGo6EYM QddPgm4LCDo8mGd6IxF0JIqYM45kTyHGpSRwqOSyIg2LDbjd38/f5KSjZaNzUM317pEDZqz8yc27 8iFUY9WwaaQ6i44WbfibIhH0o5NH5Q0W2j2rfONchLFpNCouWGWWw14zAPVxktKV/SVPZm5r2nBm w8VjL1R2z2F7+dG1m0ZNR8LLXdC68senj5lxOMfo/3HlBvL7tIIM9Jfbz1/Jf0GOn9NYVEcCi/cb vCegMo/3CZwl/Qj9+/bRMygZeg0xmIjvlb8Hyff+ySOG1PvuackMMUccaMfJxYt783IMEfrby9cM uWctAHTVVl6P944dBrmWIH+AQ8lH129JHVRynKZNhVqPCoqfnj5ucl/TEvMuFHDOpDNdRtiv31y+ Lo9APlLZxwWGtN78MdSGR0Da3cb13kjEXHq4TXIjQ0VJOVefqs21LRtq5xxYEr+GpeXwMucJNhdi 2ltvQsD5+9yb2qZt2bwIKDG3ea+99lwRUAS8BAFyR1STJcVE4+bzKPyvD5oVopTf0+SHNo1/wg0u LVdO7d4pacgvQYKOq19XEjz/W5BhXFVKVRuta3oHh6DI8zPk2c2Sl+Zmdzl1sO2cIPgff/rc5Ic4 uXuH7IGdDwk/2gVwJSqPYY65jzBZQAtPTmBw22JieHTMtJ03328f3GdyeBRhAoF9ev6m1qzuPQOV IYk6b/cM30h9Wcy102MUAUVAEXCHANVZ9fX1QnKKNpYk40i+8UEi7sWLF4bcYQ66wsJCo9pyV56v 7eOkQXFxsSHOqJYjGUYlG3P4EQOSZCTWXr58KS1Iat/e3i5nz541ysLF9JWE5rfffiuPHj0yCjgS a8zhFwdljUWMPH/+XK5evSqvXr2SIVjfsX6q2kikkSS06qfyjYTbqVOnjOLNsX4SeWwbFx9du3bN tJXHUv3Ia8r9zc3N5lpSjUfbUpJyJOc0fAsBu5Xl4ldCGYJuwE7QDXb3S19LtyHnSNIFhyI/MAe/ Ph49IGk4Dj6xu1D2YvzL3G2OxFxRbrbJV0ZLRJJUJHecg64QtGokofbVgyfyGscRawYtF79++FT2 b8sDOZVnyDDeLziPeYn1jZJS+fL+Y2Nj6VyH83uO0fmw51gDkYrXtJ0chEJmoaC95A6Q7CTNqLp7 VVc/Q2qVVFXL70Hw1WPBBcf7Vju78T3wxf1HRk14vbjUqPqseojhPRBjJLpikbMuAgs1rOD5HPNb JBxJQ6rbFiIP92/LlZ3ZmcZqlDagxN+aqK1sbDZkHRcN8r6FVpXFcP9wvt+iDT3tQ6/jYVlysq1U SZ6AEwgXHMZEhltN3RDPMcGBQtWchiIQDNVpdFCg2HAvr8Scfh4UAUVAEVg5AkrMrRxDLUERUAQU gRUjQHuZ32ClJ2/iqZIjWdaPG0wmbKeNTC32M18Bc0LwJtJxpStvJP/5j5+a5O20cHEO5nT49Sef GZKKCd8dg3Yrn955ICyDCc2jwkNNPge+b8TqXSr1mJCd+d+WGrxp5mQD7TGvYpUrk9zH4caalpy8 cW7BStcO2OKwruauLpfqvCqsAP71Hz+Dwi4QNjWz+9YB5d3XuPF/iT6n4CaYmFElx0S/xPBwYb5p MicVHGMleM3XnpWUybYtty+O/dLXioAioAisBwK0N+zs7DTEy2LrpxKOqi/aqjkHFXFNTU1mc25u 7izijeRQSkqKIXPKy8uNNSJJI4tQci7LF9+T9Lpz546QeCRRdezYMdm7d68htIgXibLq6mq5deuW eeaxJNWoWiOm7oKEp0XKUbF26NAhuXjxolGs0c6SQbKNSjmSg1S6nTx50ijjqNDjMbS+JLnH+nkN bt68adrG+l3ZWnbh952EHC1J33vvPUOu8vrzc0Nry+vXrxtVIMuiyi4jI2PBfrjro+5bewRIbCzH GGoK+Y5H+0HQDdLicpqgg70l89AFkaDz8XhUViGVsIYkcZYLO8snsKLk2DgkOMjknqMlInOZcQzp Kkjm0W6xFuNaWllyLOwYHPcS+wh8TzA3G60WSRA5BsmqBijkmFtutYP3DBznP31SZVR5FuHFernw 7jZs6Ll4jiQk1WWMevTtz1h8yGOHsBiDNveJWKjIxYpUsB2Dui4GqtqOvt4V5zTj70Q62sj7kBdQ BlL15thGtoeEJ68HiTkuhIxCPjpnYo4YU+FokXI8j0GlXy8semmtGeg/97fNfpRv/hsAshzrNjUU AYMAF/FupHGXXlZFQBFQBNYTgdmju/VsidatCCgCisAmRoArYEkoMU8aVV68+R6BKow3r9bqWCav 5cM52kFuceXmfEHS5zpyOcwXPP8mVtPSjoX1sk7WzTW5JKJWErzhZZ/4YLD8MKy458QEc2EspJAj ceeqb8ztwET2b5qakR+iwhCAVjt5o3AI1ja8qWf7eZPsGCvBa772rKTMlfTFsV/6WhFQBBSB9UCA qq2vv/56SWQKiSaSQlGw/3IMqsGoEiORQ6KHFofMqWYFbRFpbUmbR6qsaPNIVR2tLjdCMO/agwcP TP9oW0k126VLl4wdpCOJSXKS5NYXX3xhLCd5DrHasWPHvJNlzqTc4cOHDSlHPC1Sjuq2Z8+eGaUc lXrWMSTVnOunBSXJNRKpVN+RUGMuOeeg8pHEIQnG48ePz/qc8BzWQ2tLEoIk/EjyLkQwOteh79cX AY5TwbEtO6bwWR/pG5LRgREZ7OqDgq4LCro4Q9AF2jxj377sxq3gRC6qo4qNxNzO7Cy5AUUYCZ1c LIQryEjDQrh+Q1S5sjwMAglOgic0JFh2wlo+KTYafysTc1qTkhBr/ubjoyNBaoXNIea4AM+ZQJpT iAc2cOydEh+DNofDdQN1ghB0DpKEjjnbuJ8LDWmveQiL6YgTyTiSYZH4fiNJR5VcJBYNduI7YqXB MokpseW4nS4hzsH7E943EbN4kIxsQ5OTy2gfSE7HfH5WGSNYCMjzyV8paWGhos+KgCKgCCgCioAi 4A4BJebcoaP7FAFFQBFYYwRIVHFlJhx+1jRIoA1i8oyP1QzLImeldSSDdHvn8AG71Q4mA2gnQ0vI QKgJaFFzdu9uo9D7HArDRuS78+bYSH3xZpy1bYqAIrA6CNCSkOTMUoLqK5JzzkElGK0sSRBlZ2cb y0NHQohWjiR/SkpKjJ0iVVZ79uzZMMQcySliQKIqKyvLWExSEegP6yjHICnHfpPE5DlU2fE8YsN9 zkFlGnPKMWcdlXJHjx6VCxcuGJLTEV+SnSQ9SY6RBGUOO2dSjmVTGUfLSSrcWDavA0k1ttmxPKsd tOEkaehMuFERSFUkPw/sh5VLzzpPn30DAQwh5yiPltNyi6AbG8R4tLNfei2CLilGAm2+l0uSY97H UMlxTFoEO8sc5GAjMceFZVTQcbEd8wy7WqRGcicAqiv+7ddC2UWlmWXb6ApbOm5QceYcdKig9eLq xxQcNoLMOJxELT8Tiwkuovvg3EnY+B8yefOopKNqjbnuqBSMiQg3Vv6LKWuhY3C7ANWXXenD+x5n tZx1vrU9ANjzeOcg+caFExqKgCKgCCgCioAioAisFAEl5laKoJ6vCCgCioAisOYIlLypgQVNi5zf VyT/Fcnkz+3dY/LiReMGPh+5IfIw4UEVIHNydGLlqzfHRuqLN+OsbVMEFIHVQYCKNqquHJVtC9VE 0s3Z9pBkHAk+5h0juUPChuSQc3A7c5SRCOKDpFROTo7Jf+Z8rK+9JyFGcopBjNhPZ1LO6hNJLh5D kpJkJvO5kSR1Jua4r6amxijxSPhRueaKlGO5JOZoPclJZ9ZNUtAV0cZjSarxGKoeqZpk26mOC4Nq xzlYTmxsrPNm857KO5bFoHqOnwMN30LAEDEebPLkxKQM9w5CQYfcZiDojIIuJU4iEqMlMMS3CLpi EGYk3y4hHzLJOFrD74ICjuo2WlvSLcNVkPyh6mwUi87K6hrld1dvSnt3j6tDzTZaubtUxpE0NR4Y 857qkR0k4uhQQSVZRKgN7h9zrxNJNqoFGZWNTcY6/9SenSbHNVVsv71yXR6+KjeKta7+AemG2u9M 0S5DbNI6DzK0FbV1AHny+rH4kUQo8aeDh7OrBiuImt7HvHqjIDY1FAFFQBFQBBQBRUARWC0ElJhb LWS1XEVAEVAEFIFVQ4ATGf/2zVXp6htAovVCrLQ9gBvtKaM2bOnslr8gX8VnSOpOCyFObnhzbKS+ eDPO2jZFQBFYHQQSEhLk1KlTRi212BpIxjgTOCR3SLIxhxpJJ5I8JOqcLcFIGnEbiT0ey1xsVGOR HPT1oIUnyTUGiSzi5C5oEWkdQxtQWmE6BrGizSSxJCnHoBqE1pWuCDeSgsSUQULv888/n3OdzM7p f6hys9prqd2cryuvFdsYgklwV+HYFncqFlfnesO2weFRaezskxG/YAmBXXdIUIDY8BwY4D/ns+sN 7V2NNtgVUouUSC2hAYag6xkweegGgXF4fJRETRN0AcG+MY1BK8niymo5vrNQCrMypA8WiSSnqmG1 /rK2bl6nCmLaApKceZppVxkI9VZT52wHCFotUmm2FYTf5UdP5T5IrfUc87YidzTbuxXKwGTkfnZu b2Fmhvzi4hkZAAb/+s13GLOPyO6t2ZKZnCR/vnVPPr5+W6qQ3836JJGGY469WHx/0D7SNS9nP5rf M673f/+BIzZtIDdpp1mQkYo82nHSWzv7O3ML2s3cfkwr0AAbfl4/DUVAEVAEFAFFQBFQBFYLAd8Y 0a5W77VcRUARUAQUAZ9EgKtdaQHUDBLu8uNnsK1kzogArBYeMSttmzo6pQ2TlLQR8vbYSH3xdqy1 fYqAIuB5BEi40IpwpcQYSbimpiZDHDF3GW0XX7xwnR+VJJClrKKNIvOnuVOXeb7Xq1OiIzFGcnI+ MsuqncdYarN+5KuySDVrP4m5trY2Q66RMBuGWuTly5dGjUjiz5lEI3lnkXskSnmuuyCRxjoYPNe5 fm4nAUgS1RURyP0MZ/LVvtU3/i1v6pRPXt6T7jF/Q8YFgZCjrXZQoP8MUWcn7AJB2AXMbAuDoojk HUm8EJBMFqEXjLFMMIjTYJzPcY39Pcvja3/zPgjl+1NB5CVhJ1RXrzGTIFSGugdkpB9W7yDoIkjQ pcZJeEKUBAA/bw5i86isQiobmozVekJ0lGQmJcrnWDzGbe7iIXI/n9vXKHu25uB5N6zZO0HWdZtT AvDZOb9vj/zy7fMSZguRZxgTu7LEdFe+p/c9Lq+UCvRpV06WHN2xTWqaW6UL30sMjtPZh9NQyNHN YhDfRcSGn2WSjvx8Ux1skXI85yDyRZ8u2olcbxEyNDoCa8/Zlr6TU5OmzyyH+eNC8VtEW3t3QfLy 9J5d9rLRFuJp5fgLB45vHdhrbEfrkB/wZU3dnJx47srWfYqAIqAIKAKKgDsE+DvGRTq0nq6BbfN6 LqZx107dt7YIePdIdm2x0NoUAUVAEVAEfAgBDmTq29rNg802E3u4OXe8qfeV7mykvvgK5tpORUAR 8B4ESAYxXxqtFBkk5mhpuZigyqyqqkoKCgrmtUtcTDnecgwnmRcbPNY63vG14/kk744fP25UiA8e PDA54e7evSspKSmyc+fOWVaZJDut8jIyMlzml3Ms2/F1ZmbmHBtN7rcrWbyHRHJssyded/YPyb2y LqnsnJ0cmLmpSJ6QfDPEg/V6+pmEG+35zH6SE9PH2d/7m32cwAnEMSyHr63j+ZoE4CziDu9Z5qxt jmQe97EO1OVYjlU+28jtps18zWOdtznsDwzAsdjP9o7BepIKr9WOSeRKG+rqh4JuSAY6ekHMRUs0 CLqw+EivJugqoQJ7WVsvPzp5VLKgDqN9Im3M2xewWn+Fc755+ASKskT5yenjRj1GAo5YM18dbR5T 4uOMQ0TJm+p1n+CraGiEcu8ZFGfJ8sHZU6a9JLdImu00ZF2BcOHctWcleO4yiysqYGnZDHLs8PZt 8o/vviX3Sl/j8zRhyMvjO7dD1RYPVeGohMPu1hYUPOsjxo+cZZ/51sG9IPAi5crTYlPGrAMd3hRX Vcu3j5/KLy+dl789f9qo5l4gfx/vHgoy0g1xyO9AY6sJQnW9yU6HputLRUARUAQUAR9GgOPhdw7v l5+fPSmf3X2IOayOdf/d9mE4N1TTlZjbUJdTO6MIKAKKwOZFwJpM3AgIbKS+bITroX1QBBSB1UWA ueKoehtDPp+0tDTZv3+/UeG5q5XnPHnyxORWKysrk6KiIp8n5iwFHIlKPubL2WbhYh3D91TXBQXN zuvESYBDhw6ZnHLMPUdFG3PI0TL0/v37QhtSEnRWOKr0SMydOXPG5JCz9rt7Zv2Wraa74zbLPpIn JJLG8FiNoGJuhrgzBBrJNBB9DmTarP0g0Ei8kTDkuebZ8bWrbQvtnz6nZ2BEXtS2rkY3XZY5MTYh gyDojIIOBF1EIhV08RIWB4IOBKS3BfOuMZ8c1WJcKX/v5WvkjWtYcEKOeeO+uP/YqMB+fOoY1Fz7 5AQsMfnZigMJRdvIj2/clt9fu21W3q93v6lW+/LBY0Os/RRE4g+PHTaqPhJqEWE2Ka2ukw+/uyF3 XrySkencbVceF0tSTLS8D9LyB0cPGoKOZBipfNrR/wnW9G8f2iendu+UtMR4Q9ANQG1nxc3iUtmd k23OI+nJEyvq51ci0kaTdvdDI2Py45NHTBvP7t1tFiQE+gdIC6wu2UYqGml76W1BMnK4d0jG/e1t w58oAv9MP9vfcxOsPa3Gc6N1yPcv7Mdwux9sdylG5DnWA3/b+JKYeW8Vpc+KgCKgCCgCy0OA465D WITC3Kr8HdRQBCwElJizkNBnRUARUAQUAUVAEVAEFAFFQBFYUwS4EIF54iyF3LZt2+T06dOGNHLX ENpe0mqxvb3d5EOrqamRrVu3ulRtuSvHm/ZFRUUZe8nOzk6xcsY52006ttcxJx1JMZJvjkFruKys LElOTjbKuCNHjhjFXGlpqTx79kxIvkVHR89YWlr1swyqFln3li1bHIuc9Zr2mcwxR6tK1s98cRpr g8Ak8upOToL4W5vqvLKWCdiVM/fcCBV07chBB4IumgRdbIT4exlBd/9Vmfw///6R0MryDfLLVcPm cTHRjLxyn959IGX1DVDbIXdbbDSsT4Okd2DIOEa8qqs36rOx8dnW7eX1jfJPH39qyFsq71xFFdrx 6z9+JsGwAyVp5hgkr0qhdqM1Jcksx3B3nmnvnfumvczVlhQTY8iddpBc5SiL7aLKzQpaRv7m8jV5 VvnGqORoy9mPHHBU0fHYWuwvR9+pLiCZSTWdY9DW/r9/9CfJTdsiYSE2qWpqNpb2Pahjvr5RpfDJ zTvoX61RMCaCGKRzBdtORR8Vjl0u1Izc/s9//BTKVOAFbJyjuhl4fvKZyU/3orrGebdH3k9M+ElX XYeM1dpzhrJQQ8GBR5sJ8/r7DeTl7DH9Ak/fbyL5hr3TB5GY42vnbQWFGTKWFCsSMfs3xipZnxUB RUARUAQWRiAEC+ho4ayhCDgioHdPjmjoa0VAEVAEFAFFQBFQBBQBRUARWDMEaF9JUo05yqjYys7O lri4uFkWi64ak5SUZEgn5pgjOcRnWjOSiPLViI+Pl8jISNN8K+cet5nJUqdOUf1WXV0tJPG4nwQa STbH4HbmdiNBx6Dd5MGDBw2hyRxyd+7cmWVp6Vg/r0ljY6PZ7yo/HAlVKhb5YJ65w4cPy759++aQ g47t0deKwGogMDE6bqwth/sGQdBRQUeLy3gJJUEHpaA3RHtPLywcny+rKX0gqh6VVZrcymFQpgaC dBwGcT4Chdp8FqJUe119WuK2vg43baLVJh+uwt15PL5nYFAeIJcbVYIk2sj70I7SmTzksWx/XSsW V7R3GkKLJCH7xf5ZfSP5xoerGESeHua2o0UlFaLjIKsnYK3KcId3d/+A3H9ZJo+BKzGdQL66YbTR nXXlQtewA2Te9WLXeVFdtX0526iYo1J0yIksXU5ZSzmnD3ax49Mqx6Wcp8duTASm8Dc2NZ1fdiP1 kKR7FhYU0CqYiwqYH7YX32cN7R3yCgsDOl0Q9uw/x1oZiQlGEZ0Ke2GBNS6tiqtA5nMRhqPKdyl4 Lbc989URi1yfeakp5nvuDRYSMPdnYWaGcHHCMP6+S6FS5oIIfq/OF0ttE8vOTd2C7+cAs2DDlRI5 GmP//LQUs+ikDPXzGKutXIzxBgsuIrFQrCAjDfbNsSb352tcj5qWVqifRyUK+/Jwfn56Kn5HgqQB iy+e4TfBVV3O/UqHXXIezktPjDdj5bauHlhP15kynBeC8FyrXVzMUcl2YUHcNnN+gsGVbXpZUy+d uKdxjC1xMcDeXg+385yLB4qASaPJxzrqtLjG8VzH1/ysMU+thQV/E9p6eoQLcLjoxPl3lteY2Ixi IRMXvNAaeys+3+09fVCl10gr+uvud8+xbn29eggoMbd62GrJioAioAgoAoqAIqAIKAKKgCLgBgHm liMBRHInPT3dEEGLUV7RtjE3N1eKi4tNfjoSWbTDZBmuiCQ3TfCaXam4ac/JyTFWk8SEqjYSbomJ ibPayFxwVL29fPnS2FOSpKQFqDt1HQsgZnv37jXlU5FHO1BHS0taWxJTEn5UIj5+/NhcD2LKyQDH 4HXjuS9evDD1stzFXDfHMvS1IuBJBAxBB2JupI8KOhB0SdESlQKCLibcawi6lfSXk2d9IOR9JThx yUntxQT7xsnrgdnivMWcao5hXXwsNUwbHRR8Sz1/PY7HPKyGIrCuCPS1dEtndauMRoVJSIRtzvhg XRu3zMpJ+Lxz6ICcLtppcndGhtrMWJKLBEjkF1dWy++u3jQWu44pJ5iP9fy+PfL+iSMgQFIlOjyM vJz5PmubXvzw6Z0HRuG8lKYttz3u6kgDCfXBuZP4rpzEgog22ZGdaQixcJBLHINTNfynW3flS1go c6GBcyynTeFYnEGb4l3IM/o/P/1avoLdsTMRtC9/q/wn5PwkkcYFEHy22jo4PGJU5ru3ZhniMwr4 cvEGSajfXrkGQqrBlM+cq1viYk0e3W64OdwsKTXXi6pvV2GD08OJXYXy3rFDhtCLATnoB/vefi56 a2o1dsZc3MFr7xhWu0gIUsW9e2s2+pYpMXCNmMQCj86+frPo46Ort4za2/q+3paeJr+4eEb24HjG abSXmNA6mf0d7Z+tejcHOf3Dz9Y5fNZo75yDXK5RaDM/bH1YqFHb0maw/e5J8axrlwES72/OnQbZ Ooy+Dcu+vK0mdyv7+S9ffGvU6ENuiFinJujbVUJAiblVAlaLVQQUAUVAEVAEFAFFQBFQBDY6AlRs 3b17V0iMLSVom0gSiufRkpLED0khd9aJzuXzfBJSzJnW29srVVVVUlBQsKANpnM53vKexNqBAwcM MUbS7dGjR2ayhHniaDtJy0gSaiTDqHajnSe3MScfbTydyTNX/YqNjZWjR48aMvT169eG/CPxxutB xSLLIulGUvD58+cm9xKPZ/ncz7x3xPnGjRvm2nEyp7Cw0Fw75xx3rurXbYrAaiMwjvxh/W09yMU1 iOdeiSRBBwWdDZPI3qKgW20MtHxFQBFQBFYLAaqT2yubpB9ERtSWOCyAiJWgMKhjnRbwrFb9ni43 FOOovz5+RP7u0jmjxqKSlooy2g5S2XQYecHyTqeYvJ6tIFFaoTyyYk9ONoiPU7IrO0tuv3gpTyqq kOs1ACqsFOQV3SW/evuCURGT8CLJtJhYSXvclU+SLBuEDhWBJBxpq/ynW/eg7us1SrpLIHx+9c5F 6Uc7vwaBRvLJiuW2ieQknLcNqXawIM8onEkAWhEIVwduP75ru/zHleuG2OI+q61UshG3FmB+6/lL cxqPP7Q9D2rnYENCRYaHwiq50aiks9G3U7t3yM/OnDDkXVNHl0vFInOL/sNfXZSMpAS0qUr+WHbH EJbbM9Pl+M7tBiN+nkkkOuJgtYsE3eHCbSASe0y7aNG8NWWLIft+fvak6QeVbF0g6hiNsEm+9vS5 pMIFg6o7qhMf4nNGW2Qr56o5cJ5/qAi/sL/ItDkpNsauSsdnjcpyEnxHCwugTEwGMelvyDYq7Rnh IJizU5IkBU4kU/iPC2BIynIBI+sdX6RSb55m6WYPIaDEnIeA1GIUAUVAEQiJT5So7btkUq0+9MOg CPgkAv6B8H2PRg4NDUVAEVg0AiTmqJxaqlqK6jDaV1LlNowbRRJGJJ8sK8fFNIDHZsP6kiQWLTFJ NBUVFfksMcc+026SOfaICe0kSXpSwUZ7T95I08KS+fjYXxJhJNKOHTtm8FsMZjyGhCYJQKri+LAs LXft2mUUcqdOnTL1kDSlVSUJQKrpQkJCZAxjHJ7DNrCNJOXYXuax01AEvAkBQ9C1dk8TdD1Q0MUY i0tbVChWxnuHxaU34aVtUQQUAUVgMQjQPm9scER6QdANdQ9IH75nSc5FbQFBFxqymCK86hiSMVRc Uen2EVRx3z56BsKn16ivEmFp+ffvXJD3Tx6R/fm58h0sgh2JuaK8HEOMPIPd7v/95qq8gAUw7cMT Y6Jgjztm1Fy0HYyPilw0MbeS9iwG2CTYSzLvKfN7kuxiHlHmP+2GwvlvQTJ+YEitdnn0umKmuOW2 iWUXI4fo6T07ZC+wyoFVqCMxl5WcJCybx71ArlNnC8gUWIM+QFt/C9KO9sMMkln/+d1LQqVdA2yQ /x39+PLeI7R/wOA8CUXgX584jHLTDAnmbCVKtdm7Rw4Y0vWTm3flQ1xzWo5S8ZYM0qutu1tIrv3o 5FFDXjIHqnOkQmFJ28rfXL5ucCLRGY8FblSJ//jUMTkC0u42sLWIOZZP28iDBfkGB9pT/xbtJoG2 GBtLkm/vHTsMJWGC/OH6bfno+i2pg0qOZBvtU5kf9aenjxtCsgZ13QVWjspOqh2J30fXoOQDiRng 529UnK7sOp37qu9XHwEl5lYfY61BEVAENgkCQdFxEhiJ/C4crWooAoqA7yGAlXF+ATo08r0Lpy1e TwS42pIE21IjArYvJNRo2chgbriUlJSZfGiLKY+rWfPz8+Xp06eGqCJZRBKLyjuqu3wxqIDbs2eP EJ979+4ZdRwVbI6KRB5DAo853fhYKm6Wyo5KQ9bhaGlJwnTHjh0GvwcPHhjlHMlTkoTE27rRp70m lXTMLUc1HcvUUAS8EYHx4VHpw8OuoOuBgi4GCro4sUWGGesqb2yztkkRcIkAbzH1NtMlNLpx7RGY ghRqFP6zY0OjIOj6pR8Wl/xujUyCpaAtaO0btMwaSeh8cd/uUHC9uNQoiqyimDPzHggNEi2xINci YPvoGEHI+Uk1kw3qrUA8M1/lKPKeMnfmby5flTulL5Gbrl96nCwRHctwfr2S9jiX5er9ABRol0E+ 3oLdY++0soqKtM9guVkEq8WTUJwxF90TkEdWrs+VtIl5QCuQb+/YjgKTz+0R3jPnGaMoN0dyoTR7 DgUZbSetHKFWuznmZO5O5ky1VGB3XryStw7shY1klrEWvQ7LyVqowBgkxphv7czeXYYoiwqbfb14 zAEo7mgpSYLqqwdP5DWOt/pJS8ivHz6V/dvyjJJvR1aGqcPZKnlsfMIo9Fg3LSIZ/KyQcDuxa4ex 1YyJ/P4+hOeTILRIOKrV2J/FqOVY9v5tubIT1qPPQfx+fu+hsdG0xuOVwJZkHdWdvHa01yyuqpml FOSxN3C9aVNKG0sN70JAZ5+863poaxQBRcCHEfDDSnY+NBQBRUARUAQUgY2MAK0P33///WURchYu JM64qngQ9i/MmcY8aUuxsbTKISn1wx/+UI4fP242kVhyZ6m4fft2o8qj2ot1RkdjQc0qxXLrIjYk x6hSo7Ktq6vLPGgjabPZjHqOWLGvVA2SMHMMWl/S4pM2kyQpXUU87HQuXboku3fvNlY2tLIkGcgI ZTL7bdtMPSQJu7F6mG3gtSIBx2NJzPFzQKWjK7Uk28D9nAwgcTdfsK8XLlwwSkfWz3ZrKAKrgQAn j8dI0PUMGKvLyGQQdClx4q8L6lYDbi1zFRBQTm4VQNUiV4zAFMYazO1JFd0gCDrmoIuGfXBEYrQE BHv/lHM9SLQ/375vxivMtxUJMicRqjIqy6hGOoZcZMwh1tHXC6XR7PFWeX2TUSvtBcH0337+vpSA EHlVVy8voeoiyUPSZKmxkvYspq4WWElWNjbNkHLWOfVt7VKHB+0lma+NNogWGbaSNjEfHK0bD2/P h+VnplxH2TXAJgzWmntyswzWv79x2yjQrLZYzySRqIqz2sHtzENH60gGCTnmaHOMPuyj/SStSF2N T7Oh2qMdZC2uO60sg4Nmf0bZLo5dIzDepmKP9pUk3RyD7xvaO2ZIOWsflZZsG+0qaWnqieAYPx3W mfFREfKiptbgZJFyVvnWZ43EXBrsP5mLz1EpSPwacG2VlLMQ867n2Z9A72qbtkYRUAQUAUVAEVAE FAFFQBFQBLwMgRhY+/DhDUF7RRJgiw0SWsshABdbvuNxK6mLtpUkHfmgfSQtLKlOJOlIcs4d+Ug1 HR/ugjf67o4jaUrikg8Sp6x/FFY9nOSw6ncmBB3rowKSj4WCRB/zAvKhoQisOgJgNuwEXZcMkaBr hYIu3iYTYxOrXrVWoAgoAorARkaAFoLDPYNQ0YGg6+wHMRdl8nuGx0dKgBP54U040M6P1n6HCvON SopkHImNSCxSIklHlRzzmDnbLLIPtDmkneEvLpyWQ7AppBKLeeho10iy5E7pK2NpyFxri42VtGcx dbAtzkQTz5sAwdrd3y9DoyPG0jEGC6csQmwlbRrD2PUp8rjV7N0jRXlbTf42EnP5aSmSn55msKJq zVKeOfahG0pD2lw6BtVnlrJuEETqiFOetHH0gwvTGLNpVJEgjGFJmoVC4bgzJxMEXTTG1nN//1MS Ys2it/joSHwGwubg1YcxsWPuOat9I1ACsn2s190Y2Tp+Mc/8HLLNbLudlJyreGOdHb19BkPapvJz 29TxfemdyHXnCt/vj9BX64mAEnPrib7WrQgoAoqAIqAIKAKKgCKgCCgCioAbBEjCuSPi3JzqkV0k CS01nUcK1EIUgfVGgCo5/B8QEiiBIUEy6e88fbfeDdT6FQFFQBHwTQQmQXTQ2nJ0YEgGOvqMci46 LV7CYiPEH9aP3hZUxn1w7iTywR0yhBTtEEmqlUKdRFVVTES4vH1on8tmM4fYl7DBrG5uMRaChciX tj0zA3nEthqS7xBUYsyj9gcowhqgHFtMrKQ9iymfBNwkbEjnCyR2MIoxxyNW2iYqCStgHfn24f2G jLv/qlz2IkdcbkqysVisaGg2dTq3aWR0TEjszRdUjjmrx+Y7ltv5Sx8AJRsXn9UiR9zzN7Uz9pKu ziPxShWlc5AIs8g/532efk+Rpj/+IdHnrr8WDrRW5fGOQctM2m9qeCcCSsx553XRVikCioAioAgo AoqAIqAIKAKKgCKgCCgCioAHEQgOC5EI2FhGJseaiWK/iREZb/L3YA1alCKgCFgIMAftwEC/UVvT Bjk4OMTaNe/zyMiw9EH9MTE5AevkaGOvPO/BHtxBVXgf7Ao54R4ZGWXU4Y7FUz3e1dUpLSBhRsdG hZbQSUnJZpLf3XmOZXjiNW2tWR8XF0QCUzoHeGNQiTzY2Scj/SToek1+TxJ0tmhYmQd4z3fuqT07 5SenjhlF0m+vXJeHII2oPuqCWqsbxNuZol1ydu9uEDogO5wID+LO/HHMQ/cCJE8iFFhbYJOYlpgg Z3EerQV/dPKoyVO2WGJupe1Z6LMQAYtKW7DrHIBUh9ngZNACC3Oq1axYaZuoNiQ5d3xnIXKlZcj2 jHQpBIEZgrpKqqqNHahVl+OzIznouH25r0mo9cPWcRSEX1ldo/zu6k1pd7LCdCx7CN8J6600Y07A ftjvk1Dl9QnD37tl5enY1qjpfYM4fhRE3KwAkKAwZ23SN96DgBJz3nMttCWKgCKgCCgCioAioAgo AoqAIqAIKAKKgCLgYQSCw20g40jIxYCQi5QgEHScHB7rdZrA8nC9WpwisJkRqKqqlFs3b0KtMSqX 3npbCnfsXBCOkpISuXP7liHHzp0/D1vk7AXP8cQBLc3N8t3VKyaf6oULb0l+fv5MsSTDbt26IY8e PpTOzk5j8XzgwEE5d/6CjGDSfL7zZgrw4IvGxga5evU7QyCeR/05OfPncfVgtcsuamJ0XAbae00e un488zs4OjVObFFh4gd1z3oG7QF3w34yE6q2P9+6Jx9fvy1VyAtnURjUHTEfWSxyzNG+0JGXCwWp dPHgXuRO2ybXnpXIzZJScy7PZ7lU3SXERMn+/FyTs40qrYVUVitpz2JxZL6y1IQ4CYIbAi0qrUjD 9gwQiiSvWru6hTaRDE+0aRLKtkflFVLV1Cw7kGeORCeVhHxfVt8oVHStRbAdLciZ3DMwILSrDMQ1 aYLtqGPQCpLqya2pW+Tyo6dCdR8x8UzYP1lUvzl+ltyVzbqZR4+2ogUZqeba9dbOznnHnIDMnUdS lTn5aF2p4TsIrO+3oO/gpC1VBBQBRUARUAQUAUVAEVAEFAFFQBFQBBQBH0IgJCJUEvJSJK0oR5IL MyQmPUFCIkO9SrHhQ3BqU9cRAU7pWoTBOjZjSVWHQcXR2tYid+/ckbKyMpOv1F0BJMBKSorlzp3b 5tiQEJu7wz26rx/KvoryMnn1slR6e3tmlf0S265cvizPnj1FTqoxSUhIkLi4OCgAg8XdebMK8dCb 3t5eKS97La9fv4Zyrs9Dpa5+MeMjY8jr2S3t5Y3S8OyNtJY1yHDv4JKsCD3dStr/kaAiQRMEm02S Z45/YweRN+500U6Jj4qQQCzkoE2gFeNQdBZkpMn7J47Iz86ckNzUlJmcZrRfJPFC20Tmc+sfHlpU P1fSHqtdCz3TmvNM0W7JR9utPGhUYV08UCS7crLkeXWNVIJctEhET7WpoqFJXtXVS2J0tFyCNWgO bCwfl1UaMnOhNnty/8PXFYYM3LM1R87t223sS63yA3CNz+/bI798+7yxL01AW6lU80RMTk2asogn 88aFLkHpSnKwHASm+TxC4cmcc1aE20LkrQN7pSg3R+pa2+RlTd1MbkDrGH32bgRUMefd10dbpwgo AoqAIqAIKAKKgCKgCCgCioAi4IUIhAQFSlykTTpGBSu+J2AfNI6JF8dpPS9s9GZoEiZESchFbYmV iCQq5CIkKDR43dUZmwF67eMqIuCDXy0ZGZmSlZkNIqlMKisrpK2tVTIzs+YFqb6+Xupqaw3hlZef Z+wi5z3YwzsSExPl/PmLMjI6IqmpqbNKr6mpkaamJsnOzpG3Lr1tVHzRmLSPjIwEUTf/ebMK0TcG gbHhURlrGZPhnkEZaOuRyC1xEpUCkjM8ZIYoWiuoaE9a0dgkzVCIUfn2j+++JfdKXxslWWZSIqwX t0OhFA/12KiE22ABGRQ80zTm7HoEYuk0iJIjhQUS/EEQ3ldIK9RNCdFRcnRHAci6LXLnxSsph20i CZmFYiXtWahsaz9VY2wbSbm76Gs/lIB5aamGpKJK7uPrd+R1bYN1uFGHLhejmULwghaLzyreGLzy QGK2APPS6lrpWGNy+VVtvXzz8AlUkonyk9PHjSKS7SIuJAtpXZoSHyef3XsoJW+qPaaW4+WnBeUQ PktvQWlJZd6Vp8Xm80by1l0Uw+7z28dP5ZeXzsvfnj9tVHO0TqU9ZQFsQfkZ5OfLWLHiM+gpMtFd m3Sf5xBQYs5zWGpJioAioAgoAoqAIqAIKAKKgCKgCCgCmwSBbanxsnPXLng9hWEib9JM4Ixiso4k 3TBIuhHz4Pvx6ff214NQDozjePt2+zaeM4JzudJ+dHwSzyD6ph98PYZtnGxZeGpvk4DvopucaKQa LjIlViITYyQ0JhyEHCZ7mRtIQxHYCAj42BeADWQGLSGpNKuoKJemxka3xFwZlGANsGqkPSMJvKAg 17mwVuNSxsbGyZGjR2UKiyuCndQsA7C+Y+67LBBzO2DHSRLPCnfnWcfosxMCIBHGhkakFyTdEAg6 Kumi+L0Nki4Y39kz0jOn0zz9ln9OVx4XS1JMtLyPXHA/OHrQEHT8reWvxgsQR3+6fd+op07t3onc cfGGoBuAfSnjEdRX/+erK/LB2ZNyaHs+VEvZJidZGFRMJEq+e1Js8pi9QV7CxcRK27OYOlo6u4VE TzLy4f3DX100hFR0eJghykjsXH78bFYOM0+26Ul5lVQ0NEs+iEASZFTRTWAstJbBvHFf3H8sw8gz 92PkFnzrwD45gdx3JObiQJbR5vLjG7fl99duSw3sSD0ZN4tLZXdOtvmM0cqTH7KK+iajqnRXz8DQ sPwFn8MhjB1/fPKI/PDYYWMHys9YIFSZLSCDP/zuhnwOMpG2lxq+hYASc751vbS1ioAioAgoAoqA IqAIKAKKgCKgCCgCXoBAAnLk7C7MNLZmVnOomGNOEBJvdrKOhN30A5N9fE3CjRN/M9u5f+b9lNnH /fay7IQcXzMfDAk6Q9pNv7bIOz5bZJ792YHcY3sMsce22ctjfZwQG0e5pi3T7ycmcMycuu3HmXOn z2d7OJHlDUFCzhYdZhRy4RYhZ6NCTgk5b7g+2obNjcC2ggJJT0+XBw/uS01tDRYz7JYI5OxyDlo0 vqmqkj48F5w9D9VamvMhM++pvKurq5P2tjZjuRcTG2tUbCTMApHfyzlYdkNDPewKg4wFZXNLsyEJ o2NiDAkYi/OHhgaFir1xLI5IT4ftLfY1QyXXjNxzDfV1MoYFFt3dXVL64rkkJiWbPkVFRbk8z7n+ pbaX548h71Yt1IM1NdUyDFUT25OzdSu+t8edi/fZ9yQWRgeGDUk31D0gfa09Eg31HPPQBeI7fC2C 9n+/uXxNnlW+EarkSKr1I58XVXS0D6zF/vL6Bvns7kMpq2swv8NWu6iA+hZ5yN40tZicZEkgu4Lx +evuHzB52l7jfJZPNf1iYyXtWUwd/SAVv4ZirKmjU/LT04SkHPPn0b7yxZsa6eida4/qqTa14++w lyQ38HhSUTUv8cW2/PMfPzVYlsKa0Tl+f+2WPC6vNMTpCAg2x6CK8f/97R+g0Bs2185xn/W6GXnl Pr37AJaWDch1l2xIypDgILRtSOrb2o3lZlNHF8ZUs6/bQu2qBgH7608+M7neXsAS1DmeQpn33z/6 k+SmbZEw2PQyx54rvJ3P4/v6tg755OYdKa2pNfn5EkEmc6zJvvBasm1dTteOn99/+vhTY8FKIlTD OxGY+4vlne3UVikCioAioAgoAoqAIqAIKAKKgCKgCCgCXo1AAMigAP9ACVkFoQeJMBJihrQzBNk0 iQYyzU7kTRNtDuSZRcDx3MlpMm3W6+ltE9hPpYjZ53ism21sy+PKJvnsYZnUd/Su+XUh8WaLDrdb ViZGG4UcJ3NJ1Pl6MJcRra4iQufm2CIdyus9jJX/tMBynpj09b5r+10j4If0ViERIRIQPk1Y8G+W h1r/4Nm85L/2F3iefQze2oPb+cDfsNlm3kO5gv/NdrNx+tgVPsXHJ4BQypXS0lKo5iqkBaRYRETe nFKrq9+AGKuTuPh4kGU5EhEePueYUXzmS4qL5fbtm4aY6+/vR3snJTQ0TFJSUuToseOyb98+lB85 69zW1ha5/O23QgVfKPI7lSOXXHt7m3n9g/d+KMeOnYDNZpvJIzeAXHPv/fCvDRH26tVLuXbtqiHH SIgx11xjg13R9+67PxASc67OsypfbnuHQSrcvHEd/bwlra2tIAjGJAztTgNhyNx2zMUXAJJxowQ/ hyP9Q3aCrqtf+lqgoEuNkwh8rweuxo+pA3D8zatrbZfG9k5DqATDoprfqfx+5T4GCRU+XAW/g0kS lUCFFhoSLAHIWUe7whEQq/xbWmqstD2Lqa+rr19uw2LzMRRsNhBSbCv7bPXXuQxPtYnEZ1JsjJDA MrnQQAi6ivaeXrn27LmrXWYbST0+XAVJRD4Wij6QryTxeF2ZYy8QOQZ5zd3hsFC7SLJdL34xb9W0 CuVnhYpF/sYzT+FSFIMkfO+/LDO5+djmCXz3DeOzxvGAq6B67urTEle7dJsXIaDEnBddDG2KIqAI KAKKgCKgCCgCioAioAgoAoqAIuAKAX8QTv4BfhIUgBl6L5iT5aRjVFiI3H1dv6bEHAm50JiIGULO BstKTt5uBELOuu5Ubfz0zHE5BoutOQHciT0VlO09fUblcOv5S6nBBP5SJvnmlKsbvBoBzBtLVFaC BEYnTLfTPulv/p2Z/59+gafZm5y32w+YIQ7MZwrF8pml89mQdlMSn50sQfg8LjdIVBQUbJcnjx9J VWWlNE5bVfpjYtqKSUwsMw9dU1Oj7N9/QNKRm87PYb91HMv47LNPQe61oMwCoRovAFZuVOI9Lykx eeDY9sNHjkqIgx3lMKzgWHZHR4f5niBBlwTVG3N6UUVnJuVBhjU3NwrVdYNQQjHSoPQ7fPiIOe71 61eSgfeFhTskBTnoqLZjkERzPs/swD/LaS/b9OjRQ/nqqy+FJOGePUWSmZWN1wNSUlJscvX1Iy9X ihtFoVW/rz1PYlHJcO+gUdENdvVJeHyURKfBPjIhSgJAmK1mkNygRSUEfMsKo2gH2eOpWGl7FtMO ElF8LDaW0yYq0fzwX0xEuLx75KAUZmXItw+fymuoD2e+fxbbgFU4jn2iYnAtw+6qMLHsKnk+1Zoa GwOB1f1m2xgYbfhehGKEl4CVhWnhNokJ8pcJrJagbJ4Sfg6QzHpDb110aB9Pmi963qBxQBUCSbBf QKAMc9UN2l+FH/aWwZENfx21g4qAIqAIKAKKgCKgCCgCioAioAisFQIkwgwZtkb3in4gJMNIyCEX UXgCFHKwrzRqig2gkHO+ZrRD4wTm2aJdRhXXj4lDEiUmgDdJDa6Y53Gndu9AbqMc+devr0gJrMi8 YbLTuT/6fuUI+PtPiS0qVGxJ0SsvbBElmM8RPnKRqC8weGVTh1TAZWRmSlVVpVRXV8vu3UVGkWY1 g6ozKuY4/5Sfv21WDjfrGBJrd+7cgVKuVk6fPiPnz1+ULVDJ8Tuoq6tTYmNi5bvvLssNKM1InOXl 5Vunzjx3dLSbHHHnzp03dpWTUJwkJSZB5eS6f9nZOea45uYmo7Kj8u/c+QsSHR2zYP675bb3zZsq uXH9GgjCHjl/4aKcOXOrINUmAABAAElEQVTOqOSovstF/Z988gdpAwm/kYMEHa0tR/qHZbATBB2U czEg6MLiIsWfDLWGzyBwqCBfLh7YKxmJCbI9M13au3uNqqwFVqEaioAiIOL610eR2VQIhOAGJz4k UPJgi5ASHCCTWDAxMgIblHFamfjbibnpf70TGPuqLq7CCMQqmrBQLB8NCpEBvB+CordzeEyJOe+8 cNoqRUARUAQUAUVAEVAEFAFFQBHwYQQ4eb/aRJA/7ldDY0nIwdoMygnaVwZiFb5X36J68JpeefwM OYGeytCofbEpeVCSESFBwXKwIFfePrRf3jmyX7pg69cJJQ1z0WgoAitFwCLdTa7GFZLv4bClzAdR VlL8TCrKy03uNuZMs6KyssLkgMsEeZeZlSXBwXPzi71+9cqoxZj/7fDho+Y400YUkpy8RQ4dPiyv y14L7SdJ/uXkbDW2glYdfObxe4qKjKIuLCzMcZfL10FBQYaAC8Qzz+V72mZScbdQLLe9JOZqoQDM RvsPHjwsW7ZsMVURk9179hgCs6GhcaHqN8T+SeROHYS1pSHoOvokAiRxdGq8+T3g74LG4hEYhlUl ybDB4RFYba6dcIF2zIe350tOSrLJg/Zb5PO7/6psTv62xfdEj1QENhYCSsxtrOu5rN4EQmkWjIGW bXxEjIs3/KvD/aCUA0lnBjoYgKxwHLasdi32JMtqYQI/2lNT4xIwMojVhBMSYAvDKsIgsQXqD/Zi sdTjFAFFQBFQBBQBRUARUAQUAUVAEVgsAnZibrFHL+04KiPCpgk5WpnZoqCQ20SEnIVWVVOLXEe+ HWe7Ld6rP0WeHT8kH/vJqWNypHCbySejxJyFnD57EwK0s0xLSxdaQjY01Ev+tm2GOKMSjGQdVXP7 DxzEMWkum03VWnd3F0i4ZGlBzrhRuDw5xsjIsJm3GoK6tKO93VhMkhB0jLCwcKjxkmQxpJzject5 vdz2tgMH2mlmZGRIQoJlW2pvAYlBKg/j4uOW0ySfPWdibFwGkMd0pG9IBtp7QdDFGIvLUPwmUEmt sTACNS2t8r8+/wZW2AEgyJoWPsFDRzxBHrv/78OPJRI5EluR86ysvlGY405DEVAE7AgoMaefBAH9 JkGQ8AeOjUgIVjySpKN/M1fkBMIaA+N9Lw5745jwl/abTILLAdkYEvMG4KZtKiBEgry7A16MrTZN EVAEFAFFQBFQBBQBRUARUAQUgfkRoLvidFaq+Q9a4p4AEnLxkUYhxxxDIYaQ06kLZxhJija0d8i9 0tdyFKRcVnKSJMXMtjmMi4yQvLQUkBjj0gy1RGZyomyFcsHkpquukdauHmGOHQaJvsykRCnISJOU +FgsehVp6+mRV7XIIQgV3hhSXcwXPDc+KtKUvTU1RWy4F2/v6ZWSqhqc2z5Th/P56QnxkpeeKumJ 8caesw3teVlbJw2sD3l0XAXroi0arT5TDUExJe29fVLV2CzVza0mT5Qnz3NVlm5bOgJJINSoYnsF Yo6qsD1Fe41lZWNDg1GIRUZGmv2RkVFzCmealV6oQZnPjed2dXUJvyecg4Qc/y56YAM5ODggzsQc 6wgFQbDasdz2cv6tG+QF57WioqJcEogx0dESDoJxcI3zYq02Zospfxyqr/62Hhk2BF2PRCbHSlRq 3KqrthfTNm8/prt/QJ6UV655M6nSa+2GbaUZK6x59VqhIuD1COjo1usv0eo3kDdSkxj0ToyO45Wf 2MJCzQCAq4jsxJz3MnMclDMmcTPBwQ8T4rZjEDMEcm4KK6/8g3HzwDsKDUVAEVAEFAFFQBFQBBQB RUARUAQUAY8iMIl7LU/dbnFxaDgIuUhYVvLZFhmGxZY6ZbHQBaOSbgj3vkEgKgKghnCMDBBtf3Pu tAzi/rh/aFj25W2VVJBhzFn3L198K5/dfWhszaLDw+Tcvj2wxdwnOVuSJcoojaag0huW2pY2+erB Y/nuSbF0gABzjgDku+O5f3XkgDk3ITrKtIX1VTe3yMc37siN4hemfutcGxYBn9hVKO8dOyT5IOZi UB8tE9mu6qZW+fzeQ7kGlSAnkx0jAOqY86jr/RNHQDimCtvNCd8BEDZtIAJ5zqd3Hhgy0BPnOZah r1eGANVe2woK5MnTx1JeUS7MwZaYmChl5WXS2NhgcsJRJcb8iXNjSiYwZ8V5n2RYO5LgCwKJNV/k IU9dSEjInN3W4vM5Ozy+YfnttauQ55/DCkC/XWPk8U54bYHjw6PSNzIqw72DxuoyPAQ5OD31Q+S1 vfbdhuml8d1rpy1ffQTm/yVb/bq1Bm9BgCsXoDibgMpsSoKMUo4ri/jg4Mkiv7ylua7awR9hDtLY 1m6sxhgfGpEprAoMAFnHvmkoAoqAIqAIKAKKgCKgCCgCioAioAh4FoEpSOZWOiFK8o3KOOaQIyEX EhlqHFw829KNWRrvf6mUS4RSrqO3X/oGh2Z1NBz5fbJTkiQlDqoS/EcCq661zRB4I3Cc4eJWEmsX 9hfJP/zVRUmKjZEHr8rlCSwySbruysmCGq9AclOTJRCkGIk8xzpY//Gd2+VX71yQbSDYHr6uMKRa MEjWA/l5sj8/VxKh8BnCJDrJOUudd3bvblNfRlKCPIbV2R/L7sj4xKRsz0w35TEfEcsmIchzrdiT kw2i8ZTsys6S2y9emnYG+gdAdZcip/fskl+9fUF6BgblT7fumlxKKz3POl+fPYNAbm4eLBoz5cH9 e8bOkkTcm6pKqNsGZdu2AmNT6aqmgIBAs3icxFpGeqacP39BYmJiXR1qtpGUm08ZtxbLzpfbXn7m o/H3wvYTEyrnOCfnGLTqpP3nZg8u5AiNiZCIxGi4f2E+cy0u7GYHXfuvCCgCHkdAiTmPQ+p7BXKA PjXFXzE/8cdAgD/8HPDw4SvEHFHnDSEHKFT5+WO1HWlGknW6OsP3PpPaYkVAEVAEFAFFQBHwHALu Js37YA1VW1trxk+eq1FLUgQ2BgKcFKV1msb8COBua9n3W4Ek5DCpGrUlzlhXhkSQkJut+Jq/5s2z h8RZECahg8emp29w607FGa0j94H4+uvjhyUZhNoX9x5JVVOzS2BoTXn/ZZl8dO2WlDc0SgDy0tFi knaRRbk5UK4dljTks/rD9dvy0fVbUgeVHOcJaBXZ1NEpPz19XH525oTUwCryLsqxfldoi/nj08dk B2wl/3L7vvzHlRvCXEZUtt1+/kr+y49+AMJsp1HH0RKzubPLqOrehbqORN4nN+/Kh1dvGgvKSSyo ZT/asND252dPyo9OHpU3yK/3rPLNTJ+K8nIMWfis4o3832+uyos3NUY9lBgTJcMjY/KDoweNFSex GRweWfF5MwXoC48gQHtGknPPS0qkBlaqzPnWALXcli0pkpWVDULK5rIeElZxsSDuwyOko6PdzPPE x8fPOrYHtqt37tySRny+Dxw8JIWFhXMUpLNOWMU3y20v5+CYVy4SONXX15u+RkREzGoplYZdXZ0S HhE5a/tmeRMYEiQRCdESuSVWwuK4kMMmw41DYs8wuFlQ0H4qAorARkFAibmNciU91A8OIGh/YUnj OeC2Bt0eqmLVimGb2XY+2A+G3QBgfhuAVWuMFqwIKAKKgCKgCCgCioAXIMAxkTUuctUckg4kHzQU AUXANQLu7oUW+vtyXeLG2mruF6fvuhbbMzOxagg5TKxSIQdCzt9FvqjFlrfRj3v78H7YPabM5Fzj nW4gFEThthDkZksw5BlJL9o/Ug3nKnidbpSUypf3Hxu7SMdj9m/LlZ3ZmfIcJBfLKKtrmJkDqETe NpJ1JNFO7t4hu7dmSzHyxlF5x9iWniY7MjMNsfbVwyfyqq5+5tySqmr5/bWbIADb5DXKHJ/OGXeg IE/2oBwShF89eCKv0Xaq8xi0zfz64VPZvy1PDuI4En4vqmtnzjV2nbjvt4UESyCeJ0DmjSIlR11r u/zm8lW5U/pSOqEc7HGywFzueaZR+o/HEOB35vaC7fIwLc3kiuvu6ZYW2J0ePXZM0tLT3dazHUTb 48ePpLKyQh4/eiQJ8QkSCyUogzaX3PfFF5/LCD6beXn560bKWZ1Ybntztm6VlJRUKXv92hCY8ein Rc6RrCspLpbOzs1HzAWFBkMdF4O8cjF2Qi7Cpr8b1odNnxUBRcBnEVBizmcv3So13CK0MDCm+ozW Ft4evMkgKUd13/c3zpiE8vaGa/sWjQAEkOI/regMwJv1vrbmthGfO+t5dkc4ATp7i6t39nO5xyoH L3EeTzUTqOb1IgpiEasUXAE9Dnsi/G/+tkybV6kuLVYRUAQUAUVgdRCgHRLHSO7i+/GTu6N0nyKg CDgjsJi/L+dzNtr7ySVYWQbagiUyCUqH5Gmlg06sLurjUAh7x+0ZaTPHckw+BDVYF8indqiEPrx6 A/nfSuQp7CeHR8dmjnN8QfvJBijkmMPNMXjfkY6cc/FREfKiptao3Zx/E0iWkaAjMZeWGI/8c2Ez xBzz1cVBnfb0SZVR4DmeS9vK2y9egfCrRbtGpRcWk4zsLUnGMrMWZBqtLGl76RhhIBxZToTNJilQ 7JGApD0lo7y+ySj49kLl999+/r6UgCQkGfiyps6Qemynq1juea7K0m0rQyAVpFxWdrbcuH5Nmpub TAqV3K25xsLRXcmZmVly6PARaWlplmvXvoNqrAsEXJ6ZC2psbJSnz55IR3u7HDt+QnLzctedmFtu ezNBdJ8+dVr+8pc/yTfffG1Uc5lQE3IR1YsXz2H9WTWzkN4dXhtlX3C4zZBxEUkg5GIjhO/9ocjV UAQUAUVgIyAwewS0EXqkfVgxAhwE0wLSSq5L0ssQBSsueXUKcGyn443A6tSmpa4HAmGwJw3DKtro 4CCJx0qpkPUYiE0TcfyMTSD/AXMyjo9PyATIa9qu2Ak1/K3g74V/M7SFnfN3w4Mskmv678z8reHv jduN6hP9DITqMxDP/nieKWcxbJ+HL84A8jQ2DQ5Lz8i4DGMVIkk6DUVAEVAEFAHfQoC5Spg3mKur dZzkW9dOW+vdCNClg39f8+Ux8u7We651VDotNESk0iESk6rGeiw2UoJJyK3HeN5z3V7TkmhReb34 +Qzpxu/yMdyHDGKinkRbfXuHtHZ1m23zNayzrx/HzrVljQwNldjICAnC/VZ7T6/0OuWoY3lUunX0 9pnzaREZGRYKcsy+mDAlPgbn4zcGKrV+F+eSEHTMScd6WF8oFG87czJB0EWbeyrndqckxJp7qfho 1hc2Q8zR1vI3l6/LLy6clkMF+UZ519rdYywySSDeKX0FC82X0oa+OMZyz3MsQ197BgEuaNiWv02e PX0i1dXVsnPnLskAGcXvVHfB844cOQoiN0iuXb8qDx7ck5KSZ+Zz0ovPZ0REuJw5e07O4pGcvMVd UWuyb7nttdlC5SCsOOlo8O2334CEvIZx3AMzRxcVFS179uyR8vLyNenDulWCeRMqqaNgV0mVXGhs uASFhujvxrpdEK1YEVAEVgsBJeZWC1lfLReDfA70rYkbQxSQHFhlco71zSExFoGh1U57Ljkrp5yS B4uAzqcOiYGPeEqYTbZGh8uehEiJxfs1CxJpqIyfNUOi4SZ4FInSOVAexs3tMFarGmWp3xRuJgJx Uxtk8vQEkFizyDQMLMnJWcGVxST3xsbHZMwkXZ8wZfNG1YYBJwfjNqwMDYHHPHMmMkeD+ftwLMQq bBWfG/uH5VZzl1R090v7MNVzE7NqC0a7gvDdkBYWItuReDkaeUI8Fqav/IcXAN8PeJgLsdIKpjGc 4rWxrg/L5EVeQYzhmvaDyBzExMWr7gFpHJg78bGC4vVURUARUASWjYANioPk5GRDzPX39y+7HD1R EVAEZiMQBws15jhaSJE6+6yN984M0fiPiwjGGDECtmNGIadKBxcILW5TKdRgf751X/qc1G6LO9t+ 1AjuOUjmOQeHw9ZCQN7vWPfXzsdZ25nvbuYeBwPoYN77YL6ABO08H4NZRXEoHuBvn1+oRS46qulG 3bj0kFAbcrBb7gLB+OX9R7DObDG2mkZNmJkhe/O2GuvLQ9vzJSs5Sf5w4zYUgmAPp2O551nn67Nn ESgs3CF/93e/ElpZpqamwroxZVEV8Dv3+IkThshrbmoyqrnRsVEJR666xKQk5KnLwvdywpy8uekZ 6fKzn39gFp9TfeYqUlPT5Cc//bm5P8/Ozpl1yIkTJyU7O1vS0zLmLMZwd95y28scc8eh/KO6sAH2 lQODAxKJnHJ8n5CQKO3tbaadGRmZs9rp628452GLDjO/GRGwOw6NsRNyfnBN0lAEFAFFYCMi4MFZ 1I0Iz+bsk+OAnIQciQE+LyWWQrJZg3zn8p3LcD6O+0mUWKScY7udy9L3vo2ADQRQVEigbMHNfX50 hCSBvFrdsN9YUglnkXHjRiGHFaN+yGMAmm1kKkBGJFBG/SdBzNkHihaRHRDgh78ZkElopLlBxQtz xPTzFP6cpnDMBG5ix/EtPD7hL1Mgdvi3FgLSMSQ4QEKCaM/qZ3+A5CPRx5tef3Mja6nxTKmrBkUI 6nvV1S/1rB9/b84RyIEzrk0a7CSOYBV0Kq7PisOqhsDxAdsbv2FY7mAyQUgMWoC6rMj1pNDMoewD H5hAmMKKSwHxKQEgeR0H+gsUMVOW04shEHJtw6PSgxwXbUOjSsw54aNvFQFFYP0Q4G8TJ716YHfG lem0KtdQBBSBlSEQBgUPJ4BjY2NXVtAGONv5Ho1dsqzHTC4gKOSCMEZUhdw6X2wOrV2sRBvAIsN+ LDik7SSVaWEYI/cO2m0jHVscNb1vEMdzkSKDw3IeOzQyKhGhNrHB3cQ5YqBiyk21ky6VjU3GzpLK ulFYbpbVNcrvrt6Udije5osh/GY5K/2YP+7eyzJ5AVIvEYq7LbExsNhMkLNFu4zd5o9OHjV56RyJ OZa/3PPma5tuXz4C0TExsnffvmUVEAYSrgB56vKhuuNiWTooBeO+jko6ute4ipiYWNm3z/33NRXQ e/e6btPWrbnCh6twdx6PX057eR4x2hNdJNu3bzckXHBwiOkn93Fct5GCxFsoFvpSVR2RGCWhWJAd CFXtZiXkbPg8U1nMNC5UI1Md7cvxfX/80Z8+r+2Pr7TTlz8L2va5CCgxNxcT3TKNAIkvPjih4wli jjdtzmQbq3J1M2ddBOt4V+da+9g2kid8b22zztfnjYEArytzzIHLQpJvP/NYzZ7xJpOJxPHBknHc DI7gBpSe7iO4gaQ6bhKDf64KpYorBGRaMAgs3ujaSWJYPuK4SZBIJNuojjNh/T358e8JfaEKDp/d YJBeIdN5FcxnGAePj47IBFb+8TiSdcG4yaUVBlUPvOnw9wdZvgafdxJvVptc4U0OjYQdyblYEKcJ sCnyWPBvmpPHo1CedWO160AfXmNAiu12mpO1O8Y0zmbCwXrtdAxv1KBqlNAwkRgkCg+MEmSOl6kF ci851jLf6yGsQKbVJz87waxHQxFQBBQBL0KAJMLWrVvNmKuurs5MZHlR87QpioBPIRAZGSm5ubmS BuUCx2WbPexWlvb7vAwoHIITomQcKgeTCwiE3HwT5ZsdN2/pP20q20CM0W6yICNVUhPipLd2NjG3 JS7W5IXjpGVDe6fQFtOK1q4e2EwOyNaUZEnGcU2dXdYu81wINdsvLp6RATiN/Os330k3SLUW5Abj ObSrDMS42fkc2mX+4Ogh2Zq6RS4/eir3X5UbO81Q1H/x4F45vH2bXHtWIjdLSqUKOeX4oPMIrSwT YqJkf36usM3WPMFyz5vVEX3jdQjw+nJ84yuxnPbyXjwkxGYevtLPpbSTqTtCoaaOSomV8Pgoo5YL xEJl9nszBBXIhVkZRhVcg+8vfh8zspCH82enjyO/pk0+/O6GUDnsCzFffzKTE+VnZ04IrZM//O46 8qGub398pZ2+cM21jStHQIm5lWO4oUswk/LTk/NL7ajjj6kjsTbfdnflO55jHWe1zfG99dpnnjmL j5iXnMR4BNTI93Irn+mY7zWU14APrrhj7jjaTHIlJwm5UawCHQUpxNWhY7Ar5DFWbkOScUZVZ86z 9tmfnYk5i0zjoJwe+gGBUKSCKKIajjaYZjsUcVwZZh1DldzoWJCpm+0hQReC1WMk6+w2lzh+nQau 9r9BkqX+Ju9fKAg6jwT7g9x2fkjeLY314ldbI9KHm/wJrM6lBc84SVP87fDvB4cCALvqDfVPATuz baYh3783OPkhd0F4pEhCkkylpMlUeoZIEAg64GzOs/9Jzpy92Bf87DD3YTDVkmyThiKgCCgCXoZA DFZeFxQUmJxYLS0txv5pCLZo/D3TUAQUAfcIcMwVEREhtK+k5VpiYuIcOzP3JWzcvRz25KXEyaW9 ubJvW7rc7h+UZ32DSsj50CUn8XV6zy5YQebjeSeIs26h9SMjHIvY3jqwV4pyc6SutU1ewlbTMWfc 4/JKqWhokl05WXJ0xzapaW6Vrmnb5DgoPs7t223K/OrBEwzv7VbvD19XYHsj8sPlmP2NHZ2mTtbH xYvn9+2RX759XsJQ9zNM4FLNx6CtfkFGmrx/4ogkgoBr6uiS0upasyxvDIsneUtAm8yegUGoAIdm 7rGXe56pVP9RBBQBjyMQEBQgYXFRJodcWHyk2KLCJJCK2010H825iXcO75efnz0pn919KPWw3rWI uZjwMGPPS8Xxt1ic4Avhrj/Rpj85wt+Ebx49Wdfu+Eo71xUkrXxNEVBibk3h3lyVzUc2zbfdER0e YybRHTdutNfoo8GC5IJ5jRsOixQwAxK7WolEgyHn2H/ebWisCgK8FiTkaPFFS4xBrOocwvMY3k9g OxVwHCgxJ9woyLphPrCfD0Pe4bhx7OMxduXc9MXk9Z25nvammyuKa0nyjRM9zE0SDLKNq+GoigvF SiJLHWfahZtRtmvQb8gcG4aE61wdyGcu1CbJt2H+XvgZ5/9YTev3pkr8Sl+I3+uXdmIuEFiCnJQ+ KOdAkEKSaAeUhCBW1k3B4tQPg3wjrWQ5vATT2JtnXgrOP9vCZSoxWaSgELMNWGUJHKdYBnSZ3/8R 4uUywlS3wHmRyMUXAZUk1Z8eojIXqHHtd08A6wl89ntGxmSQZKqGIqAIrDsC/J2g0oe/LyQVBmE/ xt8vKsHNeGTdW6gNUAS8EwGO1zhW4+Ko8HAowTAG49hLw47A0e0ZkpsSLxlQytmQE7ryRbX4aa5d n/p4FFdVy7ePn8ovL52Xvz1/2qjmaBNJR5AC5OYiWcffid9euS4PyypmiDJ2sqKhEaq2Z1DUJcsH Z09JEmwlSd5RGbHTkHUFINA6jcKNRBrjVW29fPPwiVBF8ROoQngOCTiqL3OgvDsDS8qU+Dj57N5D KXlTPTNZzRx5j8oqTXuOFBZI8AdBeF8hrVD8JURHgRgsgG3mFrnz4pWUwybT+m1b7nmmsfqPIqAI eAyBANwHh+O3IgqWlSTmbJGhwm2bMbho+xDUv6fw/crvLF8Pd/1paO+Q30H5Z4Md65vGlnXtqq+0 c11B0srXFIHN+Q24phD7ZmWrPcnPQfJ8dVgDaN9EzkWr0VfTJ2ONyNdU+2CiemISvALsDkHkTHEV IJ9xLMNgQ9kNJgL8SLpg5Z95PfOM6XzsI+tgjiUJobEsBCzFm6WOIxlHBQEJtyHmUAAhRnKOpJsh 5fCaydPt20nE0baS13ISuTNgS2muFxRxuD6cyJn5nOMS2T8HFHvhc8Bzpj8bVCuwPraBdQ/A2iWE HvIg64LAvAUxqToIPD6olJsw+e7GjaovFBOsNqwm5T6fJ+j4MZ7+OxEkAvcrLxe/yiokr4CNZRAY SOQokZ4+8WvCTT1yJckE8yThbwYTZVOYZPZDMvApWN8APPx9oDDydvybMg+8YWJ55IEjqefXUAvP SazKy8qWqdh4lI/XUC6a4PGrGOnhoZIPi6do1B9Ef1Y3YW/K6rbHTfXz7JpeKjBP09nmYXy/DYxN yNP2HqnFqnkNRUAR8B4ESDBQPceH9TtkjT+8p5XaEkXAexDgWM56eE+rvKclVMvl40GMurAgR8P3 EKDN5F9u34ed2pj8+OQR+eGxw3J2727zGxGI+88WEF+0U/scRBltLx1jGPcvXz54LGO4n/kpSDae S8WbDWP3CBC1pdV15lxOPPMeisG8cV/cf4xhOeo7dQyKvH1yYmehuUeKw1ieNpcf37gtv792W2jv 5hiPoLb7P19dAQl4EpPa+VDyZZscdFTX8bfsuyfFJm/dm+bZk7/LPc+xbn2tCCgCy0Mg0IbvA+SO i0wmIRcpIREg5LigdpNHCMbkQRtooc98/aHl8Zf3n5gpGn7/r3f4SjvXGyetf20QUGJubXDeFLVw IDxDQjj02Hm7NfnjvN06hWVYx1jbfPYZmBgChgQcV6TzZgQWiVN8IIcY30+BJJgCuTNFVQnJGhIN VMnhJsgPZIv9QdIAr/HD7Y+bHL9APvCe+bKsH3Il55b8MeHnjKTYCKwqB5FXoR8qraGhQaOGM8Qb ro8h6ECWDTGxuSHPoKDDOQwSYZzgtCHZuVG8TSdkZr4RbqcNpT+v4/S1ISk7iQcVeFQosA7WTcXC /8/eez/JcWR5np6ZVVlaCwAFWYQgQAAkQTa1aqpm90yP3p6ZXVt1e2ZjdnZ/zP1wt/fL2t7a3Y3N XG/v9Mz0dE93D7VmUwIkQYAgtC4UUFpXVuZ9Py/SC1GJLK0L7kBUREZ4uD//ukemx/v6e29kNLK8 G5QMfVmRTyI9SkTIQbpF1nGVCo1WoSFSpnsll1xrDkkurtXKJUBkPZdev+ScJ3nUJ0agKfZE4vR3 zl2/7uQ3yrldO11OW+KqVr92yz2SXthdliDIItwU305+pVzu0AMu17bNyddU9FzoeUpAxukZs/h0 6r/ckO67fsUlTskS79ol5zpv3L6nVEJQ/zKnnVoZ+JRWlm9W3JVKTwYW1IkUjE++PyBy9SmfI0+K FeRf7o9R7fzFVWdeQcn3lP4VJryM9knRcktj+5qeq0DMFSIUPgcE1g4C/D7536i1I1WQJCAQEFhP CDAvCGnpERgQWfbX//KWe/vo10ZujSxQmfnd5avuf//5L23RIJZq0yXcqP3Dex+6by5cdDs3tcpV ZJ1Zql1XzDgs3s4ojls3i+WKJPL88sOP3anLVywWXasWfvDbclMk3ndyc4kMfXqXiie756NP7J6d mxSfrqFOa+tKXd/gsFy63XQnL102V5W4qIwnysG127lrHRaDrlX3pfVeTOy6G3LB+a3qwuXmGPP/ WFrofbEiwmFAICAwTwTSet+tbq13NdoqGqtdWVW5S07z/jvPopc8O98jxHbDapfvsDJ5uOmTW1ys vU5euuK6inz/EQ9zd9sW+77DevhWQR5/nd/J72LXNzfWuz1tbW5bixYIK+3b1uZeevgBfR9eNXfA hY3b2tzk9u/Y5tizwAGXwd/q+9a7HC7M7z9vU/49Kpt6WDTeKYLsxMVL7oq+71lMUZgapFfao/bg BerMtetm+Yxs21qazVL6QscNWURfVpzRqb8Fs7WHhRN7trbZdzW/Ezd7+6ZUze8FWBGr9B7VX67f AvJ8dfaC/R54d8ZTbtKH+fbZUsi5o7XFXCpvaWow1VGnFozz28pvaOHvFfIuFNPCtobPGxeBQMxt 3L5d8ZZNp9iJn58r4Ra/Z8UbstgKUaKjUNePWU6WTVnIN5EoOfm5z+Lrnk0kjJ3TC5aRdLxwYEUn JbwlXnCxtoJ4g4BjE9mTEPGTKKtwifIKlyyvdEm5PkzIWiihSUMiqbzeQov7Q5oRAcg14sVBiA3p BRArtUFNvIYg5kTgjBppRny5aINIwzIOwg1Xk5Bv3qotrX4p0fmU+olYcQS5t41+0BaRGhJHB2bn WJp1KfV3aXnWlWP9JjkyImqJYzcqi67RMVnPadwYgadryIa1HnKVaVKDKyXqHE8rj9qRtbaMu0q5 VyL+HMHPp1jrzYjEGrrox63ao8bKKq5HpJpWVImYy+1sd7k9e4Wn8K36UkBqhR3DHHAhp+tk+bF9 p3Ptu12uri46J8yc+tT1yPquu8s4vFxFpUsIZ3WQ4tgNa9N1FB1Gfq0MFlVaHdhckRYxV+44LkyM M/qVMTeucZLRGCHxvVjMKnK5vy/53vYyeRmIjViq7x0vT1wGiMQKxU+kO8v9woHCRobPAYGAQEAg IBAQCAgEBAIC0yKA8vXjk6dsmzbTHC5g4fbW0a/mkFNTZpFbH5845T6Xu8hKvW9MaEHhiBZaTacU jRdKXLdPFKvui+/OWmw4pulDureYotLfR6w6XFMelRtL6iuRwh4CclQLvKKFaT7n1D11EdvuK7ng rNC7D/PRYdUFZjPpGxZ639Taw6eAQEBgNgTKqstdtazjalrrXEV9tUtDyFnoiNnuXJ3rkCw/fORh 9+wDB82Nbo0WXvO9wvcR34tfnjlvlrjHiWkZ0xvslDvef/3is7bw4b/95rU7iDnc9eIeuFTfbf/t 17ev79u21f2bl55TnM1d1uBn5b6XOJ1YJsetkkukV3ry0AH3o8cedgd37XB1ijlH+JUuxQB976vj 7u/e+dCdL7AOpsBy6aqe0n0/fuIRt1fEWr30RAktqh3Qwu7z126Y9fPbx762tpkA+T8Qf3/+/NP2 fXpKZORhyXeofYer18JnFphTL78RP3vrfS24uDKp55qtPVaurJyJNfdf//nVKcQcnqael5U1bWyX S2TcEoMXi1No28/f/dC9++Vx+xyXdSF9thg5kR05X3nkiMlZK0xRRvVLzouy7P6tLMex2C4kZxeK abyt4XhjIxCIuY3dv2u6dXFF7poWdD7C8SONhYsU6hBv2VGRcVL8Z4cGXHawP9ogAoycEzkgyyex LxEhpx+6BCSDElYoOb3N5CAP9EOV06QAYs6lRcSJFEpWVoucqHXJqmqX0mbnIOlw96cfMYtc5UmO qMjwN4YAkylID6zk+hWcfEArfgbVL946jj3WaOwnlI+xivVadWUUV6RKP8oVInggwTiPdSMxtTJy 38fKo3H2cuOXyUZxe2zypuuUw5bUpIjA5pB8ZSJZq3Wc0jnGDtZwo9QvebCeYw95CDnHMYSgxTeR DBByEDje4o5JWpUma5UaI5Am64uc4/VdiWcAkyu1y54Pjedco1xUbt6sTXHhtGI3obEuAJVR93Ab x7IcNAJPK5hcvVYv6T6ZPxrhlrglFzhdN40Ud5tUTnWtnieVwc3Uw8azuwaeGcYKJBjWlLg1pc85 5ryPR8i+8Puz8LMat+BEXb48L4+38KRQT04zDsnHS8t80492bnIPa+XktEkyMBToFxQ6EOSmFDLZ 9OxoFR3PAmOcZJZ7+SFkJ8KfNYHAry90uM9uiGAPKSAQEAgIBAQCAgGBdYMA1hKFFm5zFd7uZWHc PBJzvH7m7fNM9t7FQrt5poXeN89qQvaAwF2FAO+FZfIMg7vKak/IVWpxef59ba2CUaF3yj988jH3 737wvGOxAAsTcIWLu0OsxR5VHLg9z24xF7vEs8Qy16cqEXhY2OEpqVrHhalaYUewAmPhdPz6VeJu yhq6TaE4sKj6RoTfp6r3G8Xn9C5/KWtTY4P78eOPuEuyImahBhbF9yiO5mOS6V+L8BvWIgZitxVa oOGK+D/96CW3vbVZixjOur8/9aHpqrC6e/LgfpOZ/oJMYlGDT1VaBE68UMikRw/sU7m97v2vT9jv wT1bNhvZ9xMRbBB0WIp5i73Z2oPF3K4tra5RbcXFsU/IgDz/8YcvGtafylUxLpPT0mU9vHePe2jv bteiRdfICDnnF4kstM8WKifk4YsPPWCYEhPVFqGcPmsLSCBUHz9AfFPGQdL96qNPbRz5Ni4UU39/ 2G98BAIxt/H7eMlayJcmStq5pOnycn5DJpTIeqGwmHEQclKmT0DE9fe67EBEyEHG4U4vKSIuqbwg YWb8+hEHFkOGvUHMp0gxDeacgoTJjYjkkzVVdnBASxq7XVZEUba6xiVFNCRr60TYVbkkxB2uLlGW Q/ZEJWsfEghAekAyQHr09fe5vr4+EXMivWQph6tKSDGIEPLgciAtPLFQw0oOt5FlmlyV4E5UFooZ XR/PiEjJZUTMsVdfqbPYwL80vyosspmL/kZsgwRR1+hWEX8iYcTq0VN0F6RqUqRRZSoi7aokj7nR lLxY8SE/skPIjZWPRVZ7mkya5ZwILeQmD+Qc8ei8RRNtX/sJFEiM+DyQgKJ25NQH6ogoFhyEdTxx G1hr8iyfosorgppjLOaEmZNbTHf5oizlZKmKm0srXzdZNfl64uWt4rEnwjwxNyDiGOKV8xBRjMO5 fg8vphnx72pP/jLuGFs8DyTkgSRcCAF8ULEFfrijdUYRfTupn3HtP3MTFnspFiHYbwqE94xFhYur hMDXt/oCMbdK2IdqAwIBgYBAQCAgEBAICAQEAgLLjQCWWOW1Va52S4Oraq41C7lSxZTj/HpIkFXP yWIN3cDP3npPrnKPyeqpz8i2Frm0/J9EGv2RYm9CEr0p6+M4MbfQ9p2XK0rirn3v3r3uwT3tZjn8 t6+/bYTOmN57fYLMOynXk3/z2lvud7JUIy4nFmV/+cIz7o+fftwIoQ9EnMWJOazOfk/WZ5CK//De R+6nahP1YfG2SaRSp7wJQa5xPy6Bj50556ub3LfJghC3lX/z+juO+JxYDjbV1pprT+KCPibSjno9 MTfX9kxWkD+AtPyTZ59w9+3cbnFO/7833rV6WcT+wdcn3f/6x7/vnr3/oBGCuIvEBTJpoX22UDkh 336s+Klbm5tlpfiB+9k777tLspJDU9vW1Gjunomx+q+ee8rcjH6kvorrLpB5vphyT0h3BwKBmLs7 +nnRrYwraWcrzOdlH/8yKvxcrJy55Cl236qek6La4kARN06WTRByE3LBN9HT5XK92kTM4b4SMo4V FCkRBikptG2PtZURc7g+1MTF5i76A2HA1zxED+Xrx3lC5U/ohzgjci+DJZ6ssrK9pS6La76aepca anIp3PmJoHOyqMPNpSqUwlqERdBa2xDxpByWcP1a5dOrSUkf1nJa1QnpwHmscyDYWNVULhKuSmQn lkEQIqWQPsISi7jhMbnBVH9YfhFi9B8rpfBzbRZF6RL7XKLz9kzoPsrNioRjJSlEA7EPRrXHpSbW bvQ5YwSf2rhlqcSarqZW3hxlPSWyd0BjCcu5EY2nQcVKG5Obx/GycbPey0HKiYhiy+qYz4mExobq XQhxYoCt9h8btzwPaosmktH3iT0ckWT2vOSFVB4BbHnJb5uwdbI6dDdvipi7pHhzIuk2bTH3sALI rFHzD91qt9Tqt+edMaJnnvEBIec3+pGNseUt1Mjnv2P9frENsbGqQuJjBmIMV6rIQp3k4XNEBufd 7y624iL3e1lor29zPFuwkoujEY4DAgGBgEBAICAQEAgIBAQCAgGBgMDKIJCQ3qKiXoTc5kZXLUKu vK7KlZRLv2Xv8Csjw1LU0iP9yq8//szec9/58huLUenLxf0thBhEVINioFVLJ7QUCX3QIAvC0Vco YSWHtV7cWo7z5HtLlnWvf35MVmuRdTDx3T785qR77L57FQuv1txDktenh+/dYy4yiWn320++cN+K 0PKugXG5+C+fHnUP7dsjUnCPEWK456SeeBqXbgpXl+9ow6UkCSxwPfzUofvcZlny1dfgyjFKc22P z+/3uJa8b8cOIw5/++kXFlvU6zVwVfw/3n5Psds63beXrkyRcaF9tlA5H9q321yJfn3ugln04ebT y0n8Vcg6iNCnD99n7j+/VGw8+jee5otp/N5wvLERCMTcxu7fJWud/9KZS4HT5Z3ufLzMueZZMz/2 UlJnZQGXw5JJVmwTfd0uI0s2SDkngi4poo5YYimzXMLCQ9YlUjJrtqJNLipRwouUgZDhH/+jZCrn iDNQ3oTyJYldVi4Ftcoq1Q8nLhaxootIOhF3w4OyzusVQdesGFsNLlVbb9ZzMmtRVfk6ffF34d6T HcOaWEDG9cj0vlcBZbFIwlIOooE8FjtLGFeK8MRlZbkmXyXCUAyqG9YEBVIOl5VMbiALMLOHkIPI K1W8sFJib4kQtfhbMnk3F5UwrhG/pDoi4sXIDpXHZMxc9dke15QR2QLxB3EHUVei/isXOVgiuSAL IeggEok95t0cMh4ymbTJJdG0h0DRqNIHLJziRMta7n7PtdkzjtsL2zg7eSU6x3MkbNTSaD9JbEfW h2p4RM6pTwVMFKtO5HaCSaf6iheJyFWsyuUZU0mTj98qA0Sf+e9CLNJI4OGPvUWnJ8cYSz7/YkWn HsYKYxsS0LvN5DPjiHr8uaWqczaZ18z3/WyChusBgYBAQCAgEBAICAQEAgIBgYBAQGADI0CsuKqW Wleys9VVNdVEhJwWJZuOax22+/KNm+4XH3xs77nDWohaU1nhWurrRHrVmTXUE4rVRoy1W/K2lNK7 8komXApfvNE5Scr5urFUI17cJln0sTA8nnZtbnW4W7yoduHKEn1VPOFWkvd43GxukbUXrhYh3eKJ z1du3pok5fw1LAmRCfeb6KgWm9rkMrNRhOfRL86KgFPoEXQ4+YTbyg+On3Rfn7toFnt9MRlXss/Q RWyTnE211e74hYtm0ReXE3EhPCHoIOa2tjS5WukRC4m5lcLU4xf26weBqU/o+pE7SHqXIlD4Bbiq MHhSTtZLEyJKIOMyN2UijqUcBJmU5SiwS2W5VipyJwkZIDIO8mdCljsTIl2IRQe5Zpu3CNJvETQB Flj448aiDqU4pF4J1jL6AeXHAUu6CRGC4yLkMppAsIecy+kHGgu9nEibVFbknJP1nCy9zLd3oQvA VQVw5SqHRMMibWRk1GLKdcsveK/8g/eLoPOkHGMLIsJbyVVAysliDfwzwhr/3ZBlkHIQF1i04VqA jeMyCDoRcklhbPM1/Sk2bYtoo/yEQ3VSL+WzemdkdFyTH8moSQcrk4bUv5SBBV2l6ijHlabIkbSO B0UoYj0HSTMmn9tYUELuUnJEHErOSBCTF7eDpLVMckzihdwiOB1+2jlWvxgJx7Ew5nyOmHJJxWnM iWjT5DmnMa4HZfKFABysrZB3uF6U5aPYV3N1KdNHl1PfGuknq9WowwyeNfGHMYHsngyj73y/8f2B ZaePOWhWnmrXUn03+nqpE0tRNp4Jng2OSdSFbF6mNQFaECIgEBAICAQEAgIBgYBAQCAgEBAICAQE lhUBYsht2r/dDWpRMguH13si5mRKOpxHDuw1KzJcE0Ks1EiHB0mHlVxNVYXiqvWveFN7FHKlkOBB CHRH6H8KF1+zWBzSDP3UwfYdIujqTA9WKPiW5gZ7l2+qq1EbK+8g5oj5GY895+8fxdOT6kZvs1hd APdvaaqXvFWuq09EY5F4oVgRshWmlewzxgGYgi0uQ73lYlwmMLnV1286vCYRjYyba7fiOZzFUV1u TKfWGD6tFwQCMbdeemqNyOm/fJdKCTzfZvn653vfkueXYtos5bBa6utxmVs33MQt+RiW60qs5EpE 3GBlVSJCICGCAbzGpUzHqgnrFlZ/cA6SBteIOZED7PXrFomqa/ZjZ/xN5NYuIeV7SmVgcQdJl1K5 SZF36coa1VWma5JF5FOm+6a5u8wS606kTanKSFSpNJT7qVgdSw7K2iwQnMEcN3y4r+wRIYelXL+I rRGd4xoTGogHH0euQtZyuBolEuCoCLnRcfWZysEyrlIkhbmZrCiLyDLhmhZZFJFy1msxICKizNgy f1Z9TC7+2F6HpSobSzpWO6WRo6zUVQ+X2yTMu8sckKxjE7LQkwzlFVWaGMhyUgTTkLm2VNxBjSlI OsrB6g5Szj8vrGrjmDb6c16ctbI3LISDDXmeA02Asq2bXULtzingLzHmcljFiZTLtra4xOA254Zr I2IOF64NTcojwg7yWYXgypOnKKH+crh3bdlslnM55RUQ+iyXlirPYs7pM88flqmTnSJg+LjSyX+3 +j395Tc/jntl7XlT7jm7uro0lnuNqKP//T2Lkdk/C9VaFdjQ0OCamrSKrVHuSfQZso7r1LVWx9Fi 2h7uDQgEBAICAYGAQEAgIBAQCAgEBAICAYHpESivqXCVDdXSk0RuGKfPuT6uYBn3588/7X7/8Ucs BhuWWVhAfSPrKKzO6qur3CuPHFlQY1jMyvvzQhMEFLqdO9I0egp0KilZslHnRcWIw9rMu8u8owyd IL4cVoKFyYg/vfMvb0L/JQ89woiF9PPRvSxnnxW2GdWU162hb5lO5+LPp4R9tEB+akkrg+nUOsOn 9YFAIObWRz+tCSnnq4glv/9yWhMNWCoh7MtYSnARZRZPrqvTZa5fMUu5FKScyJXyapFlEAL6UczI fd64CLxx/eBlRJxA8OT046OMLlEisgySgGOdw6Iu+o1VHhTtWEFNyBoGi5hx/WDKCi4hwoFgqJAy aVn9pLXCpRQSUOTc2NCAy8m8fLxbFnQQGhA0+rGjbCNnmBTwax1nH4rhkm/j1F9H3ZgnCdivh8T4 g8yAsBqUyX3kvrLXXEGOEg9QGDNZAr8KYVlpVnLlIj5LZcWW0yRFceSI7afjcuWp0fXa6kqzksNC jh/diDSJ0GBCoVFvH6aZKxnbwzV5mcznZB+RLxafTmOhWqRfpnrCDckSjhU53b39tlJoQDHlykQC 1ug6fQ85C9mW0uqtEbXHiFmRv8iEq0tPoOBWM7LkW7vkHK43zc2n5M+JYHYi2RJbt4tM09hvaJRF nKzcNJ4TIuiSW7fq2RKII3K5IMxdVbXLNW1yOSzh1N9iYUXi6XlSOTxfCcg4yuKaCDys7hJbd0Sk eI1IO5491ZuE/MZSlf5ZQ2OcccyG60os5W7duuUuXrzorly54jrlc31IY5txTp643Hwm+X38ml3Q n/g58nkrvTqRoVu2bLFnxyx/GWfCiUQ+X6aduIv/zIRDHNu7GKLQ9IBAQCAgEBAICAQEAgIBgYBA QGCjIBC9LG+U1rhn7j/o/vSZJ8wi6m/feMd9evI7s37qVqz6Hi3sfu6BQ+77Dx42PYFenqe0m9dt 3gcjXcudBByWd3g+wtJsJRLkD5ZnY1pcfurSVfff33rP3dTC9OnSsPRkPobcdHmW6zzY4RYTKzK8 UOElqjBBiu5u04JqpTNXr7ke9QlpMX1mBczjz6C8bg1gZCHdIdaFldJHIXdhqs1fG1L+MeltQgoI zBWBQMzNFamQb96K2OkUlv58odJyuvNrD3r9gkCaySJtoq/XZbpkoaYtOTRoVnKlEAciV7COGx+T m0n9CLPSJasf8VxldUQCoOCGOOCH3X7bKRPFOqtSdGxJFyDSkpB32kTE5JQHcgEXmGMi7LLDQ0b2 UWdaZA0WemxZrfIx15pY1cnSBash3FnmIABzuPvLV1Fsp7ZRfk4bRKD1C2IirwgrIzWM4Ltz4lGs uNU6h9xmRQaZoR/OPpmWW0w5Ta5w/ch1CIe0sK3QRABruTLhhMXViPoMK7kxETspkTjVlWVmjo5J eiWkGCRFnsCht5hU+BQ79KeK7ovlYzxgFCawjfSDgMUSD4u8ivK06xsgIPCYzOBH5TpT1nu4uJR7 Qe4rGS6J4s5JZlZVMRmjjQP9suaDeCKP2svqKQgWG3tFJVvpkyJPNeYgFZF5TKTaOK45Yd7aRMDp mquqMVJOAFhIucSmTS6hiQ+kHY8LpJ2DvBOBKj+gcuU6JgwFpK5DzkHcJawsEUrVsrKDUN0qok4J l5ZJ1ZvSuChVv0PAWnxAYYRFquUp1ll2Zfn/2POnathn9ExCwkHMXbhwwZ0+fdp1dHRYnESIOZLv 1/h9diH2x+fxp+KfGR9YxmElB7nLWKmtrTWLOR+r0JfN/fFjX97dsr+b23639HFoZ0AgIBAQCAgE BAICAYGAwOogEHm86dMLh3M1eh/hXWSxiQW7/YoVhp6gpqbWXPYvtsxw//pFAPeEh+/Z5XZsanW/ eP937ufvfODOKlaYf/1HG0C8tgbp1HDviIohnkala0LX11hb5sqlIypMuJKsE7l0o3s6ciyqiffx wrILy5rLZxaKd3R3yzXloMNdJZ68rnV1T7kVV4tYB97Tttm9/tlR97GISAi9pUnzaw+4IOs9Wza5 TY0Nd8h6YMd2929ees4NKszL//Pqm0bMLbbPonbOXU6w6SQMjgjPe7e3ubbmRtd3cSoxt1myE9sP XdKVm11yeyq9VUgBgTkiEIi5OQIVst2JAErJuEK38LO/I35+OkXmdOeLleHPrdZezY7c5Im0yo7J haB+oHOyVjJrtgSTxYQp0FGij4o4w9oqqy/oRJkIAEgAkWVGjEE4iGhLqByz5OGzFc6PhH7x9SMq rbj2qcjCTgSS/VorT07kDKTcmOodE/mXVsw6TLCgyoxA41ddxGFOFkUWb075IfXMVd+0wKleZKVs Kf8pn3YZGchEQfUnFafL2qBJ8Vp3i8lk2/pAq1v6Rej0yZIQa6NRTcaZsHhrM+JnVYpww2oOrMdE yA2K2OEHGFKCFU74va6uLHdlIsKwkgOTDByqUi7nZ2fRj3t0drKr/Mc5721Cli+SOIPl5bKKS1eJ NBSpVpJw3X1aBTU44kYzIvEkS4Ws4SrUL5B4PI+8wIyrDbQfsoYYeole4pWV2MuMz+etn+Ys2JJn jNx3sppoWBOtAeLqaQXUECu81IYM4zfB+NeoHtLzBdGY7NHzokljVgBViOQ2IluC4b5SbXadXc51 9ZolnE7a85QwMlvPWELPXVJ9JFLTEp9JIvJS6u+SdK8RtNUiOqtlFVkl4q9MfQ8xamVZ5pX5478P 43uO2ehTT85dvXrVsTGuOV/4fezvL5Q6ns9f8+fYQ8xByhFTbpNIUMYU44ktXmb82Jdzt+xpe2H7 /TlwAkeeMZ7ReCq8J37N90H83GoczyTjXORZK+2Yi6whT0AgIBAQCAgEBAICAYGAwNpE4Kq8g7z1 9psWS+uFF1507ffcs2hBO65fd2++9Ya9T7344stu7969iy4zFLB+EeC9p1TvbBBYpXrv590trtX5 3r173bMPHHRNtdVuWPoJdEHx1C0CZkC6ivvvqXcHd+1wn506bdZ25HlwT7t78r79RuoVI+bwGORD 3BDHrEI6NsKYLDZ9+u1p9/yRq5KpXfvD7uqtLpF1PVYsuqAXjtzv/sMrLyhES5k7dvqcybDYOrl/ Ie35/Lsz7vSVa+5Q+073+H373IXrN1y3Qs6QGhXXDfmflUXjbz/5Qioh6YSUFttnC5ET8vLZ+w8p BqHGg+QBT/qeVCUcX374QffA7nZ36UanO3HhUtG4eJY5/AkIFEEgEHNFQAmn5oZAofKt8DOlLFbB 5yUpVra/tuJ7mBNtxI7DCg1LtkRaca9EaI1ZnDeRALIswzotq/NiVVxK+cwUSiQBlnZiTuSSUi4H NRHAKMd8FuuAf5Y0G8AlX1aEGy4t4YAsFh2kHgQSdWNFhBXdKLHlRG5IOZ/QnrhyGZVP/SkINFwC snrHJhH58ouBJlIux/2DA4qZ12kWd9mBPjunm1VftUvJDWBKlkkuUe+SZSKCKBM81lhi3KEcH5Xl 1aAIn36RcsSUG4Og1DUU5riAhJRjw2qOeHIjo+M2GYKcK9GkxSzSRMaVqpmQceOjWTdOe+kfm7Lh rrWw8RDWheeU/458d+bhDPdCeiZEwrHBtuYUKDCZyLpKkUmZVJlkkJzD465X5Ol4Ri42NRko01gg 0bYRmc9PYO2of7g/ZD1P6UC/8ohcVbuYcPJMFZIGVsAK/KGNuK2E8OlRvL9r8uF+Q/7bb2k1Vz/k qfrNLMDioOkec/lpOHowdbIwWb7o5ORVn70wL58htIVHiZ6pKk2I6+pqXUtLk9uiFU9NWvlUI1KW VVlxUYoVs9TnGKd+HJuYAo2+hTRjo//AiP6NYgtOJc0WKg9YUC/lUoevj7r5zDWS3y+0yHL0GgAA QABJREFUnvV+H6Q/GMVx4DsHknRELw18v2B1iCVuPIHhfFO8jmL3LqTMYuX4c0tdni837AMCAYGA QEAgIBAQCAgEBAICc0WgT5Zt3536VrqOCffII4/M9bYZ8w1I13H6u1O2aPeRRx6dMW+4uPER4H36 tFwkXhfR8uj+fe5//r2X3e+++das4HYorv2TB/fLQqrJQoxUoTuS3iieIL1Oa6HsYyKV/uipx1yz dAmUV6dFvg/fu8dIuR69HxZLvFZ7V44vf+9BkX817o2jX1r9xfLP9dzJi5fdq59+ISvAFvenzz5p Fn8QcCxOb5dlGq45tzQ1ul/97lP31bnzS2Ytt5D2nL5yVVZ7x2Rttsn9+fefMVkhtiAqDxpZd6+7 JozfPvaV9pHl32L7bCFyfnn2vHvt86PuP/zgBfeXLzxrVnPHFb8Pfdu927cZWcc7u7lCFTkL4RpS QGCuCARibq5IhXxLisB0ir/pzi9p5YsszNSqEBv6UU7KLV5Jo2JWyXJuQsTahIg5LOTEOkjhrzxY yEmJblZy+tG3OHFY1yk/lj9GyknhjetLORg08ozy+YKHkEtqEopbyUROexWbE+GXwEoIEiYtsqCk TPUmXRbLOfwcK78pcUXGYd2WampxKcXXSlbI3SFuKJV3upTDAlDuOCe6b7mJjqvOdd906dEhcwXI j/jEQKW1DxeXlEXcOkjHtdZntB8FOUpzrH6YfA9A9khZjqtDCAY2rKEg5UpFvEF6jskEblgrlEa1 ZYVFMpd0E2M5N5LLuMzIoKArJOFmVrCjf+dHf74J469UWmOiQgfq5lyZjQZZTaoPKrWqKgVhggWY rOEGRL6NsMpLcQ3l2jINCZtX/I+PyXKTMScZcKs6LEs0XHniphGyxZNzPv985Vxo/ki8hAjFjOvT KqOr1zrc6bMX3GVNYLs0IYZUpP9IKyUbCPMfF6XV8gO/uatVJC1yKCCxzqUqV8/1pydlwAJXpFix NTU1uc2bN1t8OQii3t5eI+nieefaP/4en59ng+eC8tva2lxra6u5svRuLMnHPYX3+fvvlv2AiP73 33/fnTx50ixz6R/GLdaMkHPg9wd/8Adu//79hhXX2IxwngYkyuC59Buf/Ra/pRD7+GfyLyZBKkL0 xsucT3nUX67vIb5XFyvLfOoNeQMCAYGAQEAgIBAQCAgEBAICsyHQ0tLiXnjhJb3zj9q7zmz5w/WN jQDqmjc+/9K11te5P3r6cbl4/J4RdBArvFUdP3/R/eMHH7tXHjninjl80G3VAl4IusG89RbxxP5R LjAhkl5++Ij7Y5XRj/cpvS+funzV/fKjTyw+HdeLpfe+/MYdbt9lde6UO00qPX35WrGscz5H3Lhf f/y5LTj/E8XOQ66nDh4wmRpF/uE68ufvfuD+x9sfuAtaIL2Uab7twULwN598bkTon4lE/IMnHjWL PghQPFZ9c/6S++mb77oPj59USJfImnCxfUZ75ysnrjT/SeNgWAv5/+Tpx0xO4g7yzlwir1sdcnWJ nP8sshO3lyEFBOaDQCDm5oNWyDtvBAoVc4WffYHTnffX19QeZSnKU5EbJSK9cDeYgFgTSZcd7Bf5 ljc/R3ktxX6OH20dywgK6k2WZlJYihyRhtassIwRoIHkFQHHDw2TAKzpfD0weLioFKMkd34pI44y g7IqIqdkSaRUpmShHhVqhGBJbb2s25ojKzeRdEamobSdRnGLtVymp8tlOq657I1rrkJkVJN+DNOS d0Q/7oMi6fquK2ae8iWJayZrPJT4xi6axDRi9RM/jhBSkbXcoGKsDZprRIhOXA8gc0menEpDbgoP iyknYg5SFcu4CRGnwyJZuyBR1SNRrDFhB7755MesP3UbVnqPrFHe2+f97d6izue73SWcSciirbS6 1KUb0y7XKJJRBFw2LdmScs2ZFBGHwWS9rDBlOZfKKp7gUE7+zkUMT4hUkkVcmZTiEErIl9BYzDLO VC4uI3EVCcFSWVFpVmAQANaHCLxCKYJFhKfcR2Ild04ros5opdaNzlsiUzMmVwXjzshDQySS7Db0 SyqpjReISz2nuEeAxIWUYzJObL5aWcylRTL4+Hy+X5dUiBkKi9eHFRbx3rZu3WrkCdZYvFwScw6C Lp53hiKLXuJexoyvA1Ju3759rr293TU3NxtZx3XyLaaeopWvw5Pd8t3/zjvvuNdee82IOE8me0u6 3bt3uz179hiRChnHs+aJuTh+/tieV+HL80hef96+r/T7wnWfKI/xyLPMRp/555j74nn9PXPZQ8qd OXPGVhD78uZyXzwPbcT9KeMH2UIKCAQEAgIBgYBAQCAgEBAICKwVBBrk/eexxx83PU06zFXXSres qhy4H/yb1992x86cc1jJ4eJxQIuasaL7TuTaRV3/7vIV96uPPnWnLl0xEiku8MkLl91/+dW/uHe+ PO62t0j/pvc5yBnuvS6PQFirUea3urcwHdW1/+1n/+h2b92sECrl7uy16+YKE0u6/+Pvf6m1+CXu G+lLChMy/Z+/+LXuKXNfn7tQeNnqhRQ8Jbl36t1sk2LdEZalb3DYXe686U5eumwWaCyWjqcziq83 U73nr3e4//wPv7JYasfP31nvdO3pVXv+89//Soue1R6RbfEERr/88GOTlThtrfXSserd9yYYys0l OIJHPC22zxYi52Xpq/7hvQ/VHxeFaatrEZmL3hH5seoDu+6+/riYdrxYTO8oMJzYcAgEYm7Ddena bBBfrF7RuDYlnKdUao+RcclKI8sSJSJKqkTMDQ+6rOK6ZbH6EUmX7ZW5tQgeI3ekPC3R6pqUSDQS RBHuBiFOWFFzBz6qA4s6CLkkylr9KKOwRT2bsThwIsl0b07WUonKGpeqbdS+UsSO8mEtp2DGSZ1P ioTBleVsbiexhMvIXQQWc6n+XlctN4pb6mtF4lQYWdGpH5wByBPF/cpu2eZydQ0iiWShJW5uDfFy pvyG4IFcGdSECmUzyuIkOAo/YoahyMY9oX7xFStOJJHyTyhWHNZkuBjNDssN5tCA3Cz2qH9E0Cjv 5BhWX9GfRprqfpKdylOq1ENCQc8FXEd6RTl9HMkSWcWQDxLNytPfhMzlUpKvJIP7TNVZqvL5lpYB 2bhIueGE4v7Jcq6qrMrVyJ1o1XiNCNy0GxqUS73RnCZbsoZTfZGrQ92nhEWljTXVg+tIs+iRZSRk U8qPqXw7ojuW7y/VgMGEMCWW3HVNKC8xYdVKLeLM1SgwcqOCKzfLXQRx/ywengbXMnFywG7yMEb6 ZAGFK81OBeu91aVYdhIWN5a4tCTeXFVVbAwsH0RTSvbfCezZkIm+hShjDNdr0goBAkm0WGLOV+yJ OQi/LVu2uIaGBquT64xdL4uXzd+30faztY+YlcT3u3nzpgLI95t1Lvj4VFNTY9c6Ojqsb6Jn8vbv IH0Z/17gvvg5+tMTcLhZZQGIT1zzxBz9BQFG+VhTYu1I8mX7e2bb014sjK8oloePLxhvz2z3++vc y8soYzQQcx6VsA8IBAQCAgGBgEBAICAQEGC+2dfXa3Poq1ev2LtpnRYXs6CttaXVdB7zQYk58bVr V7Vd0/tQl3nMqVL4Dd5jduzYoQWNdXcUN6xQEJcvX7b5+bZt2+19ikzM56/oPO/ibW1b9a466C5c uOC6tACyUu+CO3bsdJvkEYP5Ld4xyHvp8iVbLEl9e/bsnSyrsFLafeNGh7tw/ry9H2iirvAJdfYe x/tWeT4kReF94fPKIIAu7pIWDF+VHqBc71SQR3hRYnE610gQOWzFEgt6z4qUOS9PQMSJY1H3sEJz oKsj+fhuxe4dkn6GOGu4SmQReYZF4tKVkN4+9nWxW+xclzwPvSsicKbUL33LZ6fOmNwQeOjBaJN5 iMq3q/D+m/KwNFO9t0Q8QUBOlxbanl6Fn/lEcdy++O6skZi8+Q4Jw0Li0Ne72D5bqJw9Wuj+8YlT 7nPhCqYTMooYIQxLTA/gZfT7xWLqywn7jYtAIOY2bt8uacu8km82ZeV0lS70vunKWxPncVUpM7gk 5FStSB9NqHLjdW5ChFym66az+Gwid8QMRcSYlJVYxU3kxuVaUD+4+hLnByWriZnoG1nCyXWhjo3k 4odSX+64rTSXl/pRT8lSDQuelBSx3JHQj3ZC8eWyKgtCRz7nRM7JSk6We0lNHk0umYDrpug6Zc+Q IG9wiZkTkVgiy72q8irXrBhJtVIw94uwG9OkoaNjQj88IrrGRxV7DuKJSQOTlZnLnqHaJb2EIhll 9rgmHJAtbJB0yIeVnFnMiYwyAk54475ybEIWduoXzhFjbKJEWI4NuyHhhotI4rxhmQQ5yjimfLBC Mc5G2dTLBvGHgjwnXCCaOEe53vqEz/jI5zMKdMrjhSKrvjQZ82XmZB3nZHhZOiilu9yVlo6VGjHX 63rcUFpEb7X4YMnV2CBizinm3Eiv2qxYcrJCc7JwZGUVCdIvqXh01CvB7TPkHG74TJmvyQSYGOE7 y/iwApfgD0ObCRaWaZ03b7kOrdjiGNeira3Nbpd8dLe1bXLVIulSkJzLObQkC30wpL7CzedFrSiD WOjVhBNyDis+3Gs2aDUURKHsmfQs3SZXlgCOWYtAPjb6kLFHgozBnSUvdNu2bZuMMVdYmP/eLjw/ 02fGgid72POZutm8LMX2M5W53q7RvumSv8ZzxAs8GPs4cvQPbiCjZzrCyz/75PMbmPLdwd4nXy6f OeY+e27zGTjmfq6xUYff+Ex5WFMS1w5SkL4j/1wS95N8XEHIWEhf2uNl9vX6Mvnsj+N19PT0WLt8 mfFr4TggEBAICAQEAgIBgYBAQODuRIC57Oeff+Y++vADI9JYAEu4BebRkFPPPve8e+CBByfn1bOh hMeQ3/3uQ3f0iy/Me8iQCDcWPKfTZXqPrHa79+wxl5Xt7e1T5qydnZ3ujddfF7k24H78B384SaZ1 dt5wb7zxmmKyl7u2LW3uzNkz7vz5c1oAOygX7XpPFXH40ks/cDt27nQffvi+1dvVhdeSCc29q939 9z9g9W3Vu1k8MZ+m3e+9+44RgtTLCy66gAYtSH3gwSPuySeftvAB8fvC8cojALmCi8pBnCYtIKHb 8y4u53s7JJ4n8uZ772z5aVe/dBwrmRbaHu7rE0k317TYPluUnAVWfHOVOeQLCBQiEIi5QkTC54DA vBCQslUKVKyniP+Wy8paQbrQCa2wsphufNAPocVvw1XkuJStUpbyAyI1a0TKQarJ7Cxne+VHl4qi lM/Kx5YU0cPKGe4r5Zp+sIg9Z24KIehwdSkSzizltDKM2HZY2kVWcjSIQmdJqsPINlmMpSRjmSa1 WArVaGIL0VShySPnVamRhWpUJCc63TkUP0vti76MIpgJPz+uKM0h5TIi5aTGtpVvZn0lTFF4gwuU 4ui4JkCQV/pcLmKotqrCqYvc6IBIN5FyWNWVSMGNJUqJ+pfy8UePQjwtvL0VDAQY1o+UDYFDPtyY MhEvryjPE3ji+0Se5XIjUpqnla9KEmDF5slDhQ4UxuBOHWPDoyJmRSiOi5zT+ZKU2pUYdeMVuLMU uZdOmt/tdKbKjSjWXG/fgEhTsXnCoUSuIJEFZT1dA/GHEj2jMcTLA9ZqlRXD1i7aGCcIFt0R0xTA 0IkU+SIV1C8QlxBg/VrtBZ71Ir+2yCXArl3b3VYFJa4QbsgKhoz7pVT0IwcbpCT9Oq5nc2CgXkR5 1nXIim9Ak8FhWb32iXhhYyxZ/TSC52+Fkm+zH9sRflHljD3GC+TcdCmef7o8xc77+ugXyBr6wMa0 2s41L1exe+d6buVQnKtEU/NN10bOgyt7vmfAh1W0e/TyDxl2+vRpUzbYd5Hw80Sdvwfil3shxtmD Lc+qfS/ly/WScI/fyEtiz+aJOEg4+ol6qJtn+dDBQxbjDmtdEmXMNXE/Ywv5aAP1kJCTepGTPdfI yzHJt497/feJv2YZwp+AQEAgIBAQCAgEBAICAYG7EgHmhF9/9ZX79T//yl26dNHdu/+Ae/yJJ/VO OO6+/faktm9l8dZj80/IOT+XnA4s5uAQXb/9rVz56Z163733itxr07x8zF2+dMl988037srbbxlB x4IzNp94r7t+Xa7x5P0CTzI+cR7LOwg6QkM0aLHb/YcfsMvffntCcaVPmEeeOi2EG5SuB2u7B0Wq Xbt+zX157Kh78803XIsWSjfJawTvaD6dFcH3+uuvunNnz7lDhw+7fXv36d12QnJedseOfWGYYOX3 zDPPTrnP3x/2AYGAQEAgILCxEQjE3Mbu3yVrXVCwzQIlClQpKaWdFEEmK6SKKpetkhtJbVkIOREt KDIT2pws7HIiX8T4KD5b5PYQ4ksZpHWFgKAuKVJxgag8Vq7OZSdE6shSbUITUScyZ0LEhngbkXHV cltZZ/tkOW4r0+L5Ird7yDPnRL1Urg0lKyb43v0jylgmyJQ2uZmcvnQ+zKMuf9sS7hmjrFJCUc7E mgk7uGJ1lcKyEflFzEUKZFmHCG8LIKvruByoEaFWI0JrOJfJ54nKo9+i8W8AGalE2VgqYjlnimq1 A+U49eVykSXcmF4MkAV3kV5pjVx9ssxiJZ+RZoKMF4IxjY8Ieim+JeeorBYhrJL9STfUPyz5RLRq yAymB9yoiL3UOAr3KG9lRZlrbZQfbp3pkPuFjMZJhVxaluUt9Tif1UBBSZ+E3NVGfDeIpzGZ3ZdJ ke5JAWVdxqRnAynVUAg3YgCOIIPISsYORFxLS5O5jmxqajQ5+kTckQf3ALgUlWGptXOxQtIftJkV mpCu1SJkIaH7hHmdAiLjzhL5RkV2YE03k7uHxcoy3f3+O5e9P/Zj0Z9jzNEWtpnSbNd9+fEyqMtI 0Twh4/PE9/44ft+cjxnwazRBnnkCrVBEsISIAx/w56Wel/1XXnnFYvL97Gc/c7/5zW9sfEGaYcEG acZ94OXv5fsIy9Xr16/bOV7g+b4o7Cvq4bsibgHHOb43kLFVCgBPzuLS9OSJk/YddeShI+bGx4i1 eX49Iycbcp87d87a6WPG4eoSWagT+TlGbmTCys7fW4hb+BwQCAgEBAICAYGAQEAgIHB3IoD797dF lJ07d9Y99fQzsjx7WTGJN2v+OGFk1c//7u+MpPrqy2Nu585dNn+eCamLFy+4o0e/UJaEe/75F9z3 HnnU5qYslGU+XCECEOLulAi/h448PIWYm6lcruGm/sCB+9zLL//A9pzbtWuX+6d/+oX77tS3rllu K3/w8iuKU/eEEX+45mRe//5777qLij3Fu0GcmPvuu+9Eyp01V5evvPJD195+j82Xe3q6XVoLgz/8 4ANHeygnfh/1hhQQCAgEBAICGx+BQMxt/D5eFy1EmUcqVEquC+G9kNKNG/UgRWVSq55S9Y0Wb04z NTkt7zXFJWQc8d7EzEyScgkRDhB2uKYUhQLfIsJNhWV1n8UViva5pCzyqEuWWDlZT8mDocoRwVPf 4Eqa5cYSck6ru8yCj/vZljwVK3OeWt8llykqECkgEiLrEawT5cJS4kZuK2+TFww1iKFx4Y4FWVp9 UiVSiA2f4mMjkHcqS/2REakK+WZEnMqmfPzNj4iswZIuo8k/5CVKaVbooQRnYs49/ZqUcx8uJpl0 gxz+6LvkIpFA0xhEMu4H5CYUAii6jzEgFwhSeONaETIN4mqsTIp9DZlhWbllylTehD6oHZRZpjpL akqsnlsKkAvZhktLZMLCkWcqqcooP5WUsl0+MrmG0h35sIyJSMLbGKnYZUv0Ey9h9BP9AJkKYYoF YnVVpbmwxDpzSKQDxNwNkWRggfvLZL49ixMOC8kozmCTCE3cl0IKQjBUi3ChbsaMzBWj8STSgX5X Zy3PIzVDYzzJ4b8f45+Rqdj3ZTwvRft7fDX+HvbxY389vvdlcS5+HM+z4GPVvxxpNjl9m6erG7Lp 1VdfdV/ILY4nPuN5IXMfeughe4Y4hoyCpIKc29S6yfZYjUH8Qvpy3Zfj6+b5I6E46OrqsrEHYWfP qO7ziT72pJ49o3riaR+kP+d7e+XcVq4jt27dahZykGec69WL/YkTJ6zs7du3m4tL9bYvdk57ZMQC 78svv7Qyjxw54ijrAykPeFYeffRRq4PvD9qH7A8+OPsK5zlVHjIFBAICAYGAQEAgIBAQCAhsGASw kjt/4ZxZtT366GMWr83Pi3fv3mPkWqs8pxDHjTnlbAlXlY8/8YS9Q2Jht2nTpslbsD67776Dspo7 buE4cHE5n4RcD2hOe+TIQ7Z4jnsPHjrsPvnkE4f1G8Qa7id9ncz3d8q95dEvPtecWWEnpCuIJ9x1 sjCW930Wmvr5fqveGyD4Dqls3NHTppACAgGBgEBA4O5DIBBzd1+fL1mLURD6CVWxQuMK0rnmK1ZO /Fy8zPj5tXEsxaf+J7GEk6VcAnw0r8xI6Z/trpK1myyDIG1MIQ07pM8iRoghJ+dghqW5pFRjcINI W7VzUr+bm8yESDf5RRQTI1InWwNz5JJSDJc0tbhUY7NLKXCy5ZG1nApbIUigWVY/gRVkGIpsXGJA qBkxJSU3mEJikSKXk5GlHMScKBoRQhAysphSP6UUXy4aq5ECnPh0Ks0m0GMqCwX0QN61IVZvrMoj PzHtIJIIqGtjVPWhdMeqJZ3uN6s0FOvk6erqVhdGRB1yMoGnXMqDeCJBDhDXDzcapRpP4xpIWOON JBS3bmzClWSjr2412yzsystLzQ0n7ehRWfjlHh1NueoKuduELDRijsEZESzmIlL5sLhhZR7y8JIw 03Nqgi3FH8kcje3IIpG+oY9wNUqw7cjlaELyj1mMt7NaedihYMxYzi2VjMRqrCgvc9u3tbmmxgZX XYOr0igWoMVxzL8QmjtSPYSQhxJzVZKNbTpaycZWbG8nC/4YtnoWGP/xzd9LH4NjsS1elM8fPxc/ nu16PG+x45X6hipW93TnaBNxJ37961/bxmcINp/4fuHlG/Lr0KFDemYjd6I8R7ysY13GqljuA1/2 WMl6Nzn0B+foA8rlGiQXxxBcvJTzmTwk8vPdwH4y6RKuV5GjXN8PN2/dtHgV3IP1HC41CWjP9w8r drmfc+Sf6/NNPhYRnDlzxupGUYCsYHPjxg37foKkO6vVv7QdmSEmDxw4YJhMyhoOAgIBgYBAQCAg EBAICAQE7noEbt7sNK8xex/ea/PV+JyUOfOhw4fcPbvvsXkkc9bZEnPep556xua2zKGZa2OBxvwX i7evv/7K3tlrFeKDd+j5JBbLtcgqjr1PLLTzckHI8TmecKfJwlu8SPCeHU+4vGyWe8vT351yP/3p 36qdu43IwzJws6wG27ZujWcPxwGBgEBAICBwlyEQiLm7rMPXWnO9AnKtybUoeVB6YxEnZWaJFJy4 lpyoqJb1nGILsVKKwMRDCvo7MuSS+iwvi5OWVkxMLUn5SrwrFMEygTJXmDlZGSU06cM9plnGQbjo M4RcqrrWJSrkxhKLPNV5tyXGkSmxNRmGTDNFtmDAjSVWZ1G8N03KlY94ZeOaMDNlxjKqQqQUpFxZ WtjFgIPEg+SzCbYsVGBdOWbij7VKeXlEAFI3rig5b/2n+1Cr4yd/WOeI4Vaqsollxkq5gYF+5ZdV pciyTEZWL1KeUwYEWVryYE1GWfiun1Acv9Iy+lQFih/IJuQ+U5Zc8UR/4/4Sd5wNtdVGaHV390aW eiK6ShiPUvxDfkXjKyIGqBN5xtQmVvFJt75iKd4C3LHSJGuj/njLHrAmvlvnzVvu6tXr5lISAmMx 49vq1Z/SUlkzQcbKQm8Et6RGfIALcugZjIRZNTLOdwR9RCrc++t+z3XawPcFG9j5jbHqz5OfMQCO kCl+g2DimPOT30G+8CJ76vNbkcurdgqZIKLYOPaJMcNn3+5ibfT5Id0gtiChwMVbk3IdTCGsyEOZ lMNnCDAs17D65Bi8uZcBhEubb+X2Bpk8zvQV/QKpBelFwHvK4jqbl8XLX+wzZeAms1JjGHmJiUEf cg6FAfKhnDh//rx9t7CSl++YuT4/tIsFAnv37nVY4iH/xYsXrQzcEeHSEjw4Btfgesf3VtgHBAIC AYGAwHpDIKnfz7JW/Rbz2x1SQGANI1BSWeNSLNRdR4l57K1bt+wdGKKsQjqLwgSxFcVfL7xS/HNK C5GZC5888Y1iv520hWrMXYf1/jyoBaoj0rvwPs2it9grQfHCCs4yN68owJi5LotHSRCBzLnjiWvM 5SMtwO13EPLs0Vz6pZd/4F579V8sTt2ZM6dtQVtjY5PbtHmzxYY+dPj+O8i+ePnhOCAQEAgIBAQ2 LgKBmNu4fbvsLZtNwTfddSZn/prfzyYs+eL3kd+fm+3eFb8uWWF4iDWXrJYVkqwaknIzmR3sdxPd XUbKZeXaMiGCjjaUyOqtVBM8Jnw6YcSEkRU6mhDho5mlm7BN+UXWpeoaXKqhSWScCDpNbJMoW6UQ lrlRhCv1Lyot9v5FVT7vmxkXbCjDUR6z8Rk8La6aJsmiLDR5h+yMrJ8g53D5WV6edpUi5cpFzkGg QYrRJ0DI6joUz7ijwO0E5fIZhbrFspPVCi7lIP2wmMOixO7hus5BKnEeCyyU+5BjyAiJl5WlnTK7 CRGEvDhYv6tSlPpjIopGxhTXTGVDH6bSGkP6pk6n9AKg/wn7zACz2wwvpv+QjE11tVL2j7rOW91y 1QkearfO52xo5S2l9CLh3W/i7hPy0WPInvavWCqsyr/H6DwvWxCHQ0OKtyeCgD0vYRZzcQECRkXr r/6DFX1InD0wot2rzsIVtMlk0rn4HkwK+4frfuzjmpSNF1E2iB82xizjl8RzwcskL5U+xh4rQFkV yjkbq3pmoufgdgd5OawQ/Sn87M+v5p62QlBBSIFVYaKNWHr5mGyF1/kMlmwQZLyUmxWzngnayws3 m3dfCVbgDYEFWQeOfEeAHdhiAfr18a/d3yluBmW2t7fbizjfFZcuXXIdHR3u6aefdk1NTUXlLexr Ly/nkYP6IeFoK7HqKI8+pH2+HRCGWLYhDwQgfT9dub58jwNt5j5woxys5RhXuN+EDPREI/XiTnMu 5cbrCMcBgYBAQCAgEBBYCwiw4LFq+y6X3bJtLYgTZAgITItAQotOUxqv6y1FHm3mFht7Lm1jrv/G G69ZfDbmpczBN4vk2rWr3bVqbjyguOEff/y7uRR1R55S6VWYY0+X5htagZjTjz/+uM3Dz545Yy49 L1y4IC8bp4yog1xkHv/c978vS73W6aoN5wMCAYGAQEBggyIw/S/OBm1waNb8EVhKBexCy1roffNv 7VLdIXIH5bYmdjnIBClLUVrmRkdcUudQd+ekqIUsyELAjIkoUH5pWCO2Ja94zUmZnoU4EQmUk0Kd MpIqK6XJZ0orziD9Ep6s0LW7NTE+UE5DsqCQBifcSqK8JkXuQ4W//pFvQsRZqdxWlgvLSm2l+bwQ a4ZxXukNgZOyibncWeakCM958pMwgRGZR91AjwIfd5oQHxBzKLOzcpeYwo2kVtExHshbLiLQ5FO/ IYvFn8vXl5ZlHfWVpytlfVOu2HFSojeIWKyRJVC15K4WOVCv8sr0UqYXM2hca5/aRXtrqioUp03u TVXGmHDIiGiEhIy+6CEcIxd6qVRk/WNYKB+YIXMeLitz2f4gcsFQ5TkQNFPSZF/RjvwmpC0e45SM 8/hgVVh/ifTWs0W7b3+3FAgwj3KXKyuy+Y066L/b8kbkJUSQJ+P6RQZD7vrNVo6KrCKPJ+Z4Jjwx x0ssL4sQTbgiZFVpMYLOty9etz+3lvZYdP31X/+1++yzzwwrSCXaHpHmOSOP/uqv/so9+eSTM4oN PjzHjEGeM8gucIP449mCSGMPGcc5xhHX2ew+9Rv38B3BCmHIwj179hjW3IN1GZh/q4D0XIc4nToW I/Gmw9ufZzwgKxZttNPIuesdbsfOHSYj1zmPSx9cbNLfyM79XJsp2feXvju476uvvrJykBVijvtp E255tm3bZuXTBtofUkAgIBAQCAgEBNYbAszRUxV6t1pvggd5AwLrAAHmnFjDMTce1sJkFqk6p7Ac sYRHmSuXr9g7Iou9qrUAeaZ07NhR987bb9n7zUsvv+z27z9gC9NqdF+13m2OHv1C8aI/Nw9EM5VT 7JrNkWeZJxe7b6ZztOe++w66dsWnw+UmZGJn5w2T8ctjx9y7777jdrW3B2JuJhDDtYBAQCAgsEER CMTcBu3YpW5WMUWeVw7Opa6ZlIDTlRO/p1j9c6l3VfMwoeN/QgSKSB1paWXdJgs3TUxxOwlJN6Et J8VuRkpNLK+w2JIu2EgcrC34MKFYW9h+JMoqdG+1S6gMI+Qg+LzryiWePK4qbguonPGBO0bIh0kl ed7dBISTKAwpkyPyB0spiLm0CDPcWJbLVWQU14y+gryKLFF4eaiUItsTatQRH6vx1XKUjetRn+J5 VaLK1BX+UEY+k41vk0l/bKiQU64GJTeEXLJBMe0a1aY6jYkqKdjLRM6VichLi5RTTLnSJDHpGCOU i9tOiMbILWeFyD/GEu3MCJe0VYocIuY0rtibq9QMJKU2I6iQfy2pJEAjktmwAj/+s19ksiKsvMWX tUhR5nQ7BCrtjo8/jiFdIIYg4qIXvCgGGAQKFk6QKJB2PBf+XsqBPDKLMBFXkHHEaWCVKXtcIXIO 8gjSp5BsoZyl6IM5NXyembDc+uCDD9x7771nJBSuaDxpCXEEgfXjH/94xlI9NuAABnwPQMKBlyfP wIfP4E/5JI8v95OP62w81Tt27DAi7oxWyeICEjIUou6ee6JYGtxLHXPFtTAf/UT/0d99ik3Z19tn fQnZSt+z4ZoTIvC+++6btBgsLMcDgzxgt3v3bnfixAkbSyhJ2MDl/vvvN4s56sXVJeOTujwp6csJ +4BAQCAgEBAICAQEAgIBgYBAAzG9Nbe8eu2qvbM0NTVPAeW8XK+/KlePeKv44Q9/NCMxx7wWyzPm /U899Yx77rnva4461dq1W16KWLBYqdAFfo4+pcIV+sB7wieffKz59DfuyJGHNId+QO8jW22jHZsU Y66np9ed0hyddznm1IXvXiskaqgmIBAQCAgEBFYJgUDMrRLwG6Ha6ZR6823bXMqZS5751rsy+SMy QRpXs56LYsI1uBKtFiPGWbavJ3JTqUlbVlZxWVl8Qd0wIUtiCSdlrbSdRuQlG5pdSVOLS9Uonpy3 lFtH5MJy4i09sk26mcwy+fYuLG0inpMLP3yDKvHZ8uoYwg0LtbSUy4yvCMpE3pqlQRPjyOoNhb6/ 945xSGHcWJCox+f1+4Isd3ykKBOOWHAVIsi0UHCkatQNl4+6sRLFgUuKdFRbyrNlrnmi2dUn6115 Um5STXA4qyjWHLHyqvUSgssQyMpxbYYDQ1F5cWMJEQl5kM2KsBFmE3Ktyef5kAN3NGAZTkRNo2X5 f/m2LrQqYtkBc4QWf9d+sr6TmNHYjaRnnNNfWMTxEoeLQSyY2EPAYJXFNU/KkTee+H7xZJPPS342 yB0IOiy6sJoyckm4+3Hs5YmXt1aOaS8bstI+LMSQ338v8ALMNlvifsg0CDRe6iHoIJ24l3JJnHv0 0UeNvPTlgyv3gtHhw4ftfixkCSDviVPygDmx2SCzsOrjfkguf+9s8hVepz7aCjmHi0zKhzys0PcA RNr4mKzpOq7bGEFuyDTaViwhAxvy7N+/3/YQkJRNojwS9XAe95i0D3woG6KY+0MKCAQEAgIBgYBA QCAgEBAICIDAvn33ysvCdiPUjh8/rnnllsm5KAsMv/j8c3fs6FHNrR+z+eRMqDHPzOTfXXmHjRbh 3r7j5MkTspg7qoWLvbbAjnn2aiXmx5cuXnDvySKuV4smISTb29tNHN4pmMNn9Z5WVV1l7wRhDr1a PRXqDQgEBAICq4dAIOZWD/t1VXOYJCxBd2nyhcVbSlZQMAK4oBzXxHIip9VRxCqT0hf3lmJK3ISs tphkEgctJeu6VGOLK93c5kpaNivGXKMs7xT0WdekAV0CwdZ3ERFREFmzRceR9RguIZnogqUiRxkj I0Qjjk6wJVMon0tciTbGN8QYSnNW1pWWtkppXm+KZ09q+LLjaHFPlCYP/Anbz/+5kRz6l8lNuNGc YoVlFbg6M2yu+MYmiAWXdZXpCtdS1+waqxpdZanGhsaB0VZqA9Z+pbKirFIbhhXHakRx2SIigpYz XKLYVNxDvLZUKiLtxjX2aGexNk5pUPiwYgjQF4X94c/RVxBQEDBYYBGnAKIEl4UQSbhu5CXUE0b+ PoRnDLAxLiBWyAsZR1m8GEPOcT7+EgtJw7NB8jLFy7QLq/gHWfyzxt6TZ5BykF/IjxUhJJi/Np24 3M/zgXVdk4KyY2UGiUUdlEFZYAQeL730knvooYesKHDHlSSEGPlxGUmsN+qEsEIWLM0gsoiLATEH mcZG2ZTn2zCdbLOdp76e7h7FZOx3g4qNCSmIxR+rlMe18AP5GS/ItHPnTtv7fvVlx/uVthw6dMjk Ih/XwIYEuec/gzHJY8P5kAICAYGAQEAgIBAQCAgEBAICIAAp9/DD37P57xtvvKa5cJfbtavd3kHO nT3rjh//yjU1N7kjmlc3ag49U2Iuum3rNlss9o0s0cp/+Qt338FDNke9ISu6r7/+ynXe7IxcZyqW u19kO1OZy3WN94579x9wx+Su8rjiTvOOda8WvtXXN+jdq8d9I5LyytUrNt8mDvZi3wWWqx2h3IBA QCAgEBBYPgQCMbd82IaSiyBwN082IE2kuXQp3FFKcZmTJVM2IzeVIuVk0iASTlZy0CdyQQihJOd1 cn8pd4W19S7V3CpruVaRcg2yppIrS5EvdzOWhUMrUiZHq+GSsjhjwl6iLSOcpWcXGwHdJWUxCmNZ z9EXxI4qMXIKRXNEzMHecS8bCu2pxAa13lY4e93z9Ero23m5M0oIM32iTylvTONiZLTUlYxKxqzc Do6LxBWRwripSFS4mky1q5iAZJDsVGPFciCXeBpHVRVlbkBEwNDgkOLMaZx5YZWROmgfpKSRL7oX ose3dXrplu6KpLB+sa6hWOQz8SGjfD3RcdS3HEebv7qgvVWjcviXP85XbMVRh2GVl4GxA162X1CF C7sJOXyKt9vkU39CykGiYR13+fJlR2w1SCHINa7FSTXK8d8V8bI4R7+z5yWRl1bIOrZ4/dyP5Ryk S7FyuL6Wkj37egmmbQMDA0bMQYaRPFHGcWEb/TkIKG8pWFlV6coUJ5LP4AK2XPfEHK4o29vbjeyD aAN33D9ibUf55PXfJ5x74IEHtGJ4n1nPffzxx1YObn3AlvweX2RZSKKcuvo616sVwt5qDkKQOpCf fsbF6blz54woJD4c33M+UT/5aB+KBNoTlymOmT8fV3aADyQvdYYUEAgIBAQCAgGBgEBAICAQEAAB 5oaPPva45sUl7u2333QfvP+e+/yzT/X+gVv+IbdzV7t78cWX3EERbHOZRz708MO20O3dd992H374 gbmKxCsM73jEcXvq6Wfcxx//zn2pWHS8L+HRgYVpq5HuvXe/++GPfs+9+cbr5iL+9OnT5tViVIsj mU8/9NDD7oUXXtTivbbVEC/UGRAICAQEAgKrjEAg5la5A+6G6gsVjkxA4go+MCjMMxsuhffPln9N XFe7cZ/oFAcsmaxxKVwvjA0rxtyQ9qMurWtpEXE5kTJjmqiZ1YoCkZfUN0YuLCHliE/nSTmVF1KE gCeVgARlOEplFOLET8uzVpYRvgPKg37A3SVx2cwOSBciKmQqIRKV7nG+fS06f6dyn/KjlD+wW6P7 p5Zy+5M/8neyT4g8RLJUTqRcrlRncoopJ8s+/StPKeaV/plbRuTOV2q0pCzqUiImiZ2XTkuxrvuI M2dZEEkbZRhGejGaKIkU7+CHheak+AixjIk2I4dX7lMVMe+sH+kzE4RckdCRZDq2hhRDjBJmTx4r sMtXEt0kvNV8I+VMjnw9ELgQvSbnwqudXbBpciAvmydIOIY4gfzANSJkHMQcbiwhXCBJ/D2+yDjG 8e9eyvQp6v/IPSblUwZ5eY4ge3iWGDNsvjzyrLWEbMiL3Hx/8iIOQYd1GOQclmxYrxViRDvAgLaT v1yugonVBp5sEE4QXVi6US55UBpQF/dxDDYcc44Xf/JQHvkhunD36N0+ch1SDGs8TyQuBZ6031xY qnzGQ3NzsxFvyFZfV2/yIQ+WladOnTI5N23aZDKAAe1ADlyiQvx6mdj7fiffTInyIUDjY2Wm/OFa QCAgEBAICAQEAgIBgYDAxkcAbxJPPf20275ju7uudxfm1bzjYT3GvBirOjxJxBML237yk7+wd7Tt O3ZOXiI228s/+IHbIw8OHXLXPjI8YgvpsLajHOa327fvcE8+8aTq22HvBv5mYrz96Z/9xObou3a1 +9Nuq87/mc5n5GVi185dk+f9wfeff8Fccu4S8VdIHu7bt9/923/77+09g7rjiTY98sijrk3EG9Zx PbxPqI7q6hrXKK8TyNfausneIeL3heOAQEAgIBAQuDsQCMTc3dHPS9ZKr5zzCru5FOzv8XkLlXyF nwvzx+/zx9Pl8dfX7F6K04RWc7mStMWcS7CHRCpNuzJZZVTW1hlJl+zvdTlZe2RQiOtakphyIu1w f2nk3ppt4MoKxtiJb4wLb6GCK8uklOPSKEsoXESKismTK+TjH64hUaBHHIPlyB9D2+gzp2KJunSb 3Rs7PXnox6Xfc8GOrb7JbJzNfyioIC8TxAIpmXdNOVGG//yISKFdJSJnESWjmITm8hSZaDvkgC5g NUccOdKktZyvUntTmquKbFbknMqNMIQQK5THiliyP1HpEIOyBJS1H1aNEF/j4yJFxjO2anJce9pK 7DzayYtPOdaLsjBllWVC+RecJAAypGUtSJnEF2S80NeMA+oeG40sx6iDa6XgLXmj8bLgmud9o421 /F1+jIMLridxm+jjykE+QaJ4SznGwR3jT+XEz3lhfB3sIZEon2PGH7hDIHk3jGDBuTjh4uXy5a3m 3suCvJBj0XMduZ9ELuLmxeOqxfGAOIOsAlsjpUTKYVVGggRFccA1MAYDjj2JR73UBXaFG3VE4yqy SKQeCD5W7VIuG2VBZlFOXCarfK5/bFwzsiNyDWKMerAY5JiU0vNG3ED6Dzkhde3ZEl4+bhyWgQcO HLD7kGWh8jQ2NBq5aRWHPwGBgEBAICAQEAgIBAQCAgEBIQBJdeDAfUZwMQfmzaxMeg7/7lsIUoPm lGyFiTkqZFZzc4vNz5mXM69l8/NX3K6zFSbmxg8+eKTwtLxO1LsHj9x53mfcu3efytvnP07ZQ8YV EnLxDLR73733ut17dpu8xIHHawXvLF7eeP5wvPYQKNfYaqhRWBq9S3X19bshvRcuNC1lWQuVYS3c F3BYC70QZFgLCARibi30whqXgcnCTBMGrqFU9Knw82zn/XX2M9UTz+fzxustvL5mPwsvNdSoGSgG rHcg60oVN65MxNyEfuQzUtQmR0YjPMirCQCExHzwWbPtX2LBGHp+A1cUz0kjfLDuwTlohLcBTt0G Oq8BESnHirWczKUiF4bROL49mqPs/KXboj3HkRLd9wfXouOoLuq0/PYxsjKyPBRhyQrzHyyvtQGK KBe5v2Oi7t1pesLEk2yRLBEhgOKfRLsntGXyn5GB5yPnBaHh0X+kszFlpBR5sJZDgJVIkiFVolh4 aUg3WTeJbBtRPL0xjfkhERbExuNlBdkq5JKzRhPgBrnng0jjnMd8oaLSTNx4Vij+VrVcFXLMaIAc 4QVxSCsucasCRhB4ky9N+rwayfcLe146kRFrqA7FUCh0Xwk28c3LG8eMY1+mP+YzG2MJCzHKZ/zx EokbRPbg4PGPl+frWKm9l536isnBs8J5Xsw9QUebwIt7Id6Itebvhyw7c+aMWSBCRIIvxOdZxbsg +efLPuT/eGKNaygSislBVs5D5rGHhHvrrbesBD5zH+V4yzSeXw1De0YtE4fKN6dkz3WUl3KwmmNP u32ZtB08IOc4ZrzjAhUybr9iXUBoItPWrVunVIkMccy5OJNc5KVua8+UksKHgEBAICAQEAgIBAQC AgGBgEC0+JH3i8Um5pvM39dLYpFpZWVQwa6X/orLuWNTi/tXzz3lajTefvrmO+7o6XPxy/M6Xsqy 5lXxGssccFhjHRLEWTUEwq/CqkG/viouVMzFpS+8VvjZ542fjx/76+ynOx/Ps2GOsf6RNRyWcDkd Q8aNDvS5LMScNtPRSrmc0CYmQ9pQKW7nqKddKoyoboWrnLfoohRs3NjYEWjSC4toEummklCce1LL t8Ou4zZR5A9EB1ZnnIs02LRXOfOZUUDbP06ZktwTH+TnODpv+bgnnmfyI5nIbz2aLy8qh7OkuKI7 Lkskq7Vwso3mchLrHLXhNqFG2ZHLQ0gtn8euG/NLJcpBu8FGuGCpRgK3lXjufB3UCgFQISIAUqBc MbwGhgYVU29UhFCf65H1V1NTo5EIuPfY2rbFSLlRkQxYEEYYm+gL/oOlXpncfW6SFRUvcxMTOXM3 2KvVb4OKy4flHBZG5SLLqyGlJKNZ6tk4WXC1C74R7OgziBasoLDgwsILd5aQO1yLxqAfn1PHV7zi yX7QWPXHXPfHPBOUicUVBFaD+oDNx0LjBZi6fP542Ut97Ovwz4f/7OvhM22HZGLvrQYZVxBzjDPO k4/2gBlbnJiDhITg5F6IK0gtXE7ibofEeTAhgQHEFS4iyQtR6Umo+DHnqBO5uZ86GGeQg8SiY6Uu 8ekgCZGRe9lH3xO3+6JYez0WJlD+TzzfhL7PkNfaDeGufxoNlpN8yAY55+Pggcu1q9cUzjRtcngL Sb/qmD3xOCmH5Ov37bOT4U9AICAQEAgIBAQCAgGBgMCGRUBTyPxMcMM2MTRsHggwHu62AVGnBb0P 7ml3jVo0/OpnX8wDrTuzLmVZd5a+fs4EHNZPXwVJlxeBQMwtL76h9Dki4BWLXuk3x9vWbzYpbHFh mayodImqapcbHHCjY7IUujViriwz4yKUdD1RWe2S5cojJbA0qmpvpGBdqYavEg8xv+ZpZugJJ3zC o6TPKH4fYwnLJwhPMVj6HKEnSsEILQiqrJT27Enkj7aYhRvn4teinFaQXaFMCkb1bceW2T7jipEZ a07EGCTaRE7kif6VKFZcKiF3puTnD7mpx/LbaTvHH5vzWidEPcFzwmbEm5Fst9vOOW9Rp0yWTzul 22XT1vFxWdGoZOqjLIg8SAH/DHLHcibqLZWLykoRc3WK+QXx1SNyAEulmyKabt7scps3tboqERnN IuiwqGtpbjICFYg8TguWUZhAStLmurpa1VNpY6S7R0RUV4/rlwUVpEZFZYWrqa4yi72KPDEnVAVd 1BcLrn8eN97u74hM9cQcRA/kHJZdZhWlMsElvhWrxvex30+Xh2cIco56IP+w6oKcg1yCkIrfv+j+ KCaEzsXr8McQTp6E45jz7Bk79NngwKAI3woj1iCUkI1rYARWkGS0i82XyX2QcJQDKQX5dkRubDgm QeSBA4lYdXv27HGtLa2GA7JQNphQD2XEN+qHdMNajgSpx+rgtrY2kw1LPU/sIRvHHk/k8zLy3FIu e86Rh7ykeD6OaQ/9xZ4x7suzzPk/yER/IjdtGBnFUlSxTlU+18AOC0n62/pcz6uRh7IgpUyOKddk ib7I4sWH44BAQCAgEBAICAQEAgIBgQ2EwKAWfo3onTGkgABvwjYespHXnrsFkSs3b7n//ua7rlyL 6s9d7bhbmr2s7QyYLiu8ofB1hEAg5tZRZwVRNw4CKDUh25KVVS5V1+Ck3XXZvm43NiLlqJPCtVxW clU1LtXY7JI1dS6ZVow5WS2sWDL+IW+BJWUt1mVGBhlVBK2zthKE1JgIJ5TvbFlNFCMlNxYtskZJ Y40izPOKb6m/I4X1FPegkGQRUWatU/5oH+1QQk9eBoD85eh0hIi3TeESZ4Say2SlvJ8Y08vMiBFy FSUVLp2SNY8IOrMAI68K8Qr0mASTOFNHHHUbPyL3cKmJ68tkMt8/yid+Tgr3jCnQk4ozB0Hoy0bx jsUV5BykJK4+S6WEJ/YWBJ21kaqWKUXlQ4rhprJC5ECd4lvVGyEHwdEpUu7q9Rtuy2YRHyLn6mpr XJUIMghWZPddsljxhIjcnSYlB4RD0vVqzFBvx41ONzg0bNdqayMXmrUiaiApJonWxVY+j/vBy28Q LZA39B/EC3tPSPkifT/P1I++PH9P4d7fC2GDm8d4XZzzhJfPV3j/Yj5TJn1D4pg+p922l0IA8giZ INZoO4lrkFaQvZyvb6h3lVrRyHl/P8QaBBuEEuXFiTnqwcLO6tYAoyys2SDPOHf69Glz+UhdBw8e dO3t7dYPkG2USR1812B1B1nKhkUe5+kPCDDuwQqPeh5++GEj+CgXbLdv326PNmVBlMX7MI5BnPgj T5zE8/d4PGgjYxYcwNMIZS7GUlrW2shGHZMY6z7az7OIJR0b9fA9hUUdpCIb7UBWSDqTQ3WEFBAI CAQEAgIBgYBAQCAgsDERuDQ06q5q21OjOWDe68rGbGlo1WwIXNc4uDyk2Nt3GVF7o7vX/ebjL/Re 5Nyw3pVCWjwCAdPFYxhK2BgIBGJuY/TjmmyFV3TGheMcKa5IjF+/m44ji7kKV1JXjxbaTaA0litL p0lOAiKgtt6lFOw4pbhzfJY/sUkyaMlxUv24f5Q22eWMhMM9nFzajQxLES+Fd97qBIKOPsxJgWv5 1Z30KN4SV0s3y5DCZeO4Jkgoujs7O6U4FwkmvCoqUCQrRlay2iwUo1h9ouUg6DSrgrRjLJoSX22a yK/84roppJl54Q6ONstCjWbqSFZwOkjqk/YJfYC00R3aR+WhDOecSnSjWVnpZIbd4PigkXE16RpX XlKulxqRQsrvnwmVeEeibRHCty8hL/7pkc8nzkXyyoWe/o3lLVtKhEHK2olEkWtPCJ2eni43qj6l nFqNv1Ip6SEzVyohK+4hGxsbZH3U7K533BApd0ty9blrOr567YarxGKuudGs1mgT/5c0CTOIpiER cV1d3e7ylauuo/OmkRK42WyWbGw1NXJlqWeANFNfLalssbqok/HpCRMIIfoQcolzXPffp4XHxWQq bAOf/Tnq8YljiECIMOr0xBDn4/f4e/19C91Tjm8HRBH1RWO1x+qnrzjvLboglsgPWcc15MLyCzeR EM2QR1j74bYRsh5Cifytcl8KoTRTgrDyMdeQA9nAmrKoB1IKgpJEmVznPPKBGXh5mQgE//zzz5sl HnHryMfG+aeeeioiffWcerLRY+DLhSTjGJnZOOYc8sTz+vb4vJs3bza3nDw7M/URzyKYksjHRjv8 Rj20xfcH15EDl5+0Aaz9/V6GsA8IBAQCAgGBgEBAICAQENg4CPRokeSHnb1uR1W521tbuXEaFloy LwSwmmQcnOrVYvKlfjeflyRLmxn3lHu2btFC74y73t3jiH12z5ZN7mZvvzt+/oKDQKpWfPo9W9tc Wu9Bpy5f0TXp7fKJ96/t0mkc2LndtcnjD4qLmwqRcfbqdXdei38H9T4519RSX+d2t+k9Tu+y5653 uAu6f0zvY/NJ25qb3J5tbW5bS5PpiDol/4mLl9yVzltuXO95hamB9it8SEbXzly7bnH09tn9zdKP Zd0F6WdOXLjsuvROPV0qk/5p3/atbv+O7a6mstx19Q3onkvuuvQsO7XgulYLRsENLH2aDtOlkIc6 5ouDlyvsAwIrjcDM2qmVlibUt6EQ8ErDeKOKneP6dOfj926oY/14mwWclMvJ6hoRNiJ0ZBafFAmH 4jPJsazpkubKUtZysgbBusmYoKUGAmWsfuxzsqLKSeGbHRt14yNSyEv5jxXHsJTMKI37+nqN/MqW Ko8+ZzXByOq+FLOyFTTmK2y+oFSKFOMRkYAl0XBeiWuVJrsAAEAASURBVC0CSKQmFnVSaWtiEhFY pqy2gkSe5ZXpEBC0mbwQVRCSWHZlNEEj/hnK6UxOsZuScleXEnGZHDc3lbLJc2knRX2ujL+uRGQb FiYQc1kxltwznr1tMTdYMujSScVtgsTTP/rbJ3/MntMmZ54Y5BPPCaRApcaGJwZoE/LSTjYSEyju jcjHvHs85NF5LAvp00HFdSN2VLqsXOfvnKB5mZZ6H/WXM3yxltuyuUVEXKNIGFlCjYy5m51d7sKl K2YpV6NJYpUmpVE8POtoiXMbr8XKRr92y5oKa7mr1zpEDMpCSALW19W4Nk3GWzWZrdAkHOLB+mPp qp6T6NE4YCxE49sTJDyPnvjhmv/+5Nin+LE/5/fxaxwXbpTHcwEBBCHDxrMFScMY8vf7vS93MXvK xUILcp22+fqQA3kgytj7tiILeZCR/uG5wNINy7R6kc2QR59/8blZpEEgPfnkk3Yv7iQh2GZKkFWU i0w8U42NjfY90NLSYvHluI7Fp5eF+slPzDjcYkL+8ZnEPeRDHiz3uBfyEJloL3V4cgs8fZlePtrv 28e95OHcdNhzP/lwyem/IwrL9GUX7v29ngCkDuSjPt8n7GkbloEQkLSVmHv+u6ewzPA5IBAQCAgE BAICAYGAQEBgfSPA6/7XPYPOne9wh+urXXtNhWuVh58yLS4LaWMjwPtAr/QhFwdH3Om+YffZrT7X JaJ2I6XtrS3uL55/1g1pkefA8Ig7skfeU0RuDeid+//69WvuVx996rbq859//2lHXLT/+s+vThJz LAZ/4cj97o+eesyIO66jroCM6xR59/axr90vP/zEXdYC4NnSZulGkOO5Bw657y5fdX/7xtsKh3J7 4exs95dr4ehThw64Hz/xiNsrYq2ehanSFdGO81r4/M+/+9Tk6ZHeJZ6sbc8/7YZHx9wp6WEO37PL HWrf4er1PklIlq7+AffxiVPuZ2+9L7mu3KGNqdKC6z9U+3/8+CNuqwjKcunRhqRPvChvRO999Y3b K0KzVZ6S/suv/mUKMTcdpouVZ6E4xDEJxwGBlUQgEHMrifY6q2s+yrzplIRL1WRkWe46psiqCYgq NKuwyDIMhTfnpuRagg+RFZY0qHJZWeMSIgFICVkyGRknZa40oxFpZjZPS1BlYREiZbJStE4M9LuJ oX6XGR50o9r6JsbdtRKIrbQIuXEpkfukCBcZJ5Jwor/XTfRJyawf64SU0rjltL0UwkYeqr9WKjE2 /Fi9rUiOVhWhUEaxTF8iUipPmFlv5gkv8gzLaqpbq3mwtptQfLoykQBYbKHYRvnfL8IOsm80N+bG UiIrSkVWlCiuVXLCleZKXEWuwlVnq22fTuRJN02CIi4VV3KyktGkBiJuIDlg1nUcI2/RTeDZecnu 48nZZ53HmguLHiyCaBtKdI5ramrtGFIOa0eIC0gmJoso6knkN0W7+hzCMZuKFO9xDC3jsv6JHqIS jZt6uarcpIlw2+ZNImT63bXrna5X+ytXr4m8EDmmlVu1ei5KtQIrGlLgtTTCqSQjnHCfeV3EHPsR TSBxndmqifc21U1su3IRMyv+/VPQRPre+i1PkECOxMkZrsefgYLbp1wjb7FUeJ7PnpDx9SFDYb5i Zc3nHOXxjOH+EQs3vmvoGxKEFOObPJ4oQwbGNrKRIIQsDpq+g7CKIz/PLWQi13g2duzYYa4pyc+z 4LHic2GiLuqFIKRO6iE/rk+JXwdJ58/5cQEpSF1+7+Xx9VAm9XIe2SDvyA+xRXsg6riXfIWJMnw5 fGfY/+hhKMw6+dnL5TGavLCIA+SFHEVGxgP4QhCzeIPzyO+/ZxZRTbg1IBAQCAgEBAICAYGAQEBg DSIwJLfyX3T1uzP9w66prNTV6v0MzywhbXAENPcflqVc91jGdY3K24zGwZ1vLOsbgyrp4HZtaXVb 9J7Heyik2iWRSrwTjuq9h3fPSpFP5MG6rloWYT7d375LZNoz7tCune6D4yfcF6fP2qL7Pdu2uGfv P+T+4ysvut7BIfeP739kZJW/r3DfqnAMkHJ/IYIMq7KPvjnpzolMI9zIXNP3Hzzs/tOPXnLbW5vd 59+ddX9/6kNZwWVlxbbNPXlwv2vXwmPeE3/7yedGwvlyIdZ2SR8DIfbogX0iHXvd+1+fcH16V71n y2Yj+34iUhKCrlPXurX3CZ3Oiw894P7dy8+LtKxy7339jTsp6zowffrwAfeXLzzjmuRpZUiY1krP Ek/TYboYeSh/oTjEZQvHAYGVRCAQcyuJ9gatq5gysVhTvbKw2LXZzhXW4RWVs923oOuafOREXGBF lpXCOAcZpR9kBeUygkeayQUVO91NpoS2OvWjKyWtfi0nN6zkIh3s8k16aSvWb+O3brhM9y2XkTvN rNzD9eIibgx3h1FcplGtoMH94YSsrNytTmnE9cOKMlnK66QUzkkprbH6w0Wn1NhRG6Zr9BKdZxyw oRBGTkiolCneI9xwP+nJBJTaXMP6CtebWMaxMVkZz2iSqfb29PYYMYACHdeYKJwhDfr6+6WIjog5 SLmhMrmmLB2S+1HF3Mop9pJIOQgxVjSVOcV3E0bI5C304uNVlFnUesnAuPbysY9IOI0I5LYxEV23 azqnUyYPbfVkiVfoo/Cv0gqt7IQIJ8k+rkkz9TNZMoszXxeTO4ZwHjvDzPLkSdUl6pvpiqENCIBM 5q5S7iJ3bG+Tu0G52JS7CEjQW7LG6ZIbiWGtWGMyWlISEU858yE6XcmF562i/En//ETneOZwfzqm MY2VHFZzg5owQ740NTWIxNlsFnP19ZCdq2cOWvi9R2M4V7jFx1f82CNS7Jwvy+99mf4e/9nv/TiN 5/d5F7qnbE/KRaR4ZKV36dIlc2NpL0MQ43r+cGtJfog3T77xfLLxOZ549iCOjh8/bsQR5BHyzyVR B/ViEQaxhVwQUBwjw9lzZ+3YY+rzUweuKiH0Lly4cEceZEIenlcs5XheKRu5INr9czytjBq6jFu+ x9j75OXgM7LEU/xa/Px8jpEP67u9e/caKcm9yErZ1AeZSnvqZO1NG0MKCAQEAgIBgYBAQCAgEBDY mAiM6/3plsgZtpACAhsNgS3SA5hl2NuyDFOYCxZ1Y+lWzP2jb/sDe9plXbbTHTt9zv2/r77ljp+7 YO9ELdIjjOg5+f3Hv+fulYvHJi1IxoqsWGqV+0oIOSzyrmmx+P/9m9fdW7K065N+Yq6pXcTa7z32 sMMF5T+895H76VvvmRtNFodvEunXKX0H5NofP/24CL8Od+zMuTuKblP7cVv5N6+/4z779rTplCDV kONPnnnCPSbS7gMRdnFi7rDa/sdPP+FwP/nTN9+1uq939bi0iPvPvzvj/pc//JFcc24xYu6OCmc5 sRB5lgKHWcQKlwMCS47AVG3WkhcfClzvCCyFYg8MZisHBV88T+HnFcNRSkgj5OTOMTsiawYpYrOD /UbOEVctoR82aSOXSRyV64vO8wioYZc7GTEn8jHX0+0SIuWSaruTtdx4JucGRE5C4NBmr5hPivBx ypfruiHruRI3IcIqK0IoWVUTbRU6LhVBJ+W23cv9y5wYOyjTURizQaZQK+MIN41MSFBmoziOiDu7 aGRaVgQR57kPqxCO07IS5HNK7SvVmIispmTBI+u4VKmIrjJt2uPWUjWKmKtyldoqcpWuXBZzuLOM 4tRFZSOfH9/IFA0h9rdx9fgaIUces+iLyDrk90RdmRT6uK6EjPDtpu3IzeeJrFxvyiUkVnMQhKXK h2tNI/s0hr3bSlY4QtrRTtx2RvH2lrmj8sXTfmTFEq5GSn+s5m7e7Hbn5PscizksGIc0AYR8BJfb yWMXDa3b528/OpPPUPxikZNgn9FYHhL5NyTiBXIWorBBbhawlGvUBBbrOeQk70qmaIxMrRM56GO/ 8dlvXjY+++SP/Z7zHPuyi7Wp2DnuYfPjy5e/2D2tY/VhR0eHu3r1qhFZPH9Yzn366acOco56sVqD GCOvJ+TYM+a9bMVkgUiDMLp48aIRYr5t3OMT5yDwKI/nwCfOUydthoyjLK57mbjOZ65zzH5QLkFu dd1y586dM9eUnCf5PfVC2rE/deqUyY/7XJ7zCo0zyphripcJLmzIAybxa3Mtb6Z8tN3cg8r9J5Z+ lM8578qSPVaJWzZvcSV6nkMKCAQEAgIBgYBAQCAgEBAICAQEAgLrDQHec96V68Xf/P/svflzZNl1 53cTmdhRAAqF2quru3one6gmRZGiRFILKYlaYmKWiJEjHOGwwz/7F/8t9oR/ngj/MOOwZ+zQZi2U NZKC4tok1Wz2wl6rawMKKBT2JZGZ/n7OzZN4yMKS2KoA1LlVD++9u577vfc9JM43zznff8PcP3Yi f7f0TuiX+qQ/qujMF7XXZF346eSUCK6/S//087ct3tpsm/tI7/u8PKf8sSzu/pvf+nq6PTWd/sNf fjv9wz+/JWu1Za/S0fmLr7yYfkkuKCEU//IHP07v3rxl+iMa35y4n/7qhz9Jv/zyi+lXVO+zioX3 1sc3LaZcsXO+2I3rzb/XgUtPEtZ+P3rvA1nNfTZd0heqR88MFpukz73wnGLrXUs/ETHJuMTUI/FF cUhOYvdhdbeftB95DgOH/cgabQKBgyAQWpSDoPcUtHUl30Gnuls/RWUpY7Xft49Pf7vVaW+z670I gLribzVENOGqcV1EVWNuRiSUXA8qv6xfsiWZWm2odXft8WRUgIwUAVKTxVg3JJaIH309yMg4TTjP AR2zMOdkbitL9dS1spi6HoqcW1lI67KUS4PDqUxspxEFvB0ezRZ0Uni3+jgiNNgHKLVbxByx4VbK mdCRzBA7dSmS2TPSW+vI5ByTQaHdKxmJ2Xbhgiy4pGCmfo+U3FnxrhhzqoPyfl3EDfHi1uW+cr3C WXH5uuoKrydyS7Hlei3GnMbWvcWYE/Glyds+NYu1beaPXKbC55wvmues1KfU6jTLuuVKFDlxMUo+ c+8R/n1yQcA3kxaXV+0bSZBaEJTksYwNWZ7hppP5cU87Izo01x4j+jLRsY2YR5CdsamI4IQQG5BL CEhESSpysUlYGjlpE7f8DRweFcdrZTAfLd8qh/6MuOUZAEttkD7F3COuHGQle8qtGLdqfxR5yFFM fl/c405Meb3iu5BrPyj3a++HM4cTnp7vffmZdr5HeBYYk3vyDyVJBoiqd999186QPZBg7O1XX33V YsP5OC6jz8Vl8PxiPS8jj3KhwWP4SKIezwgkGe4pr1y+YphgNYmLSUgzLMUgDdkHV65cMQwg5+iX GHFY63FNOYQilnLEsKOM+bQnk6eJH+NjbcY6EPMOfCnfS/I+iF3HmMjr67qXfrarC3Z8KWBY35TE qs/lx8qReHqMRR7riMUxBGOkQCAQCAQCgUAgEAgEAoFAIBAIBE4aAvMiw27LQo6YbJ2mX9y6m+5O P0iff+FG+p//3b9Kb374SXrn01vp7U8+NULsgzv3tu1qWH/3/ltZol1VXHss6v6jLM6yC8nOx/fO n7t0QXHcRhXXbcpcWaIDKibcRvJ325D+fr18bizhLhLSrZi4hxx0Us7LpvW3Hm4tsYrji9+e+Fv0 2vi4yf6u5gx2xbSuv4dxa3lH+GD9tte0V3no/zBw2KucUT8QOCgCm5/Wg/YW7QOBI0bAFYOHOgzK UCkY6yJe6ouyjph9kBpy6VgWKdcnV479jVrq65ZFleK+YWXkil4Ik5OWsn7atdRN+TX/Rk0uKQdE 9CiQs7TVaLQ1tY1yNNut2Uo5L010dmMpQmdN7gWXqqtpZe6BXAOK1BSJpQBmqTFyNnUNKAadlPr8 0taPI4OL/jMx12Mu4lByo3Rnv9SNkBIxJ9KR2H18owlLMdqsV5XfK4sVfUCBHBodPWtiQt7hRpRJ o2CH0MKlIkpqMvGo6NOhH/4Rz82vOTsbwGW+9+lTry2PDMOcglZLq8ccHHvGyfOEOCy+vilRO+3P dcm6rDWoilDkA1ePyDnK1jV/LMRQpnNPPxVIOSzwdHC/WU6X92jPHgevTFxFMDfsGLMFhMmMBeCi PixzJkE6QhghM3NibqwV9zY37QGu2QeQq+BIPoQm5CYkU3vKsmxYH+aVcPTbax/9PTJ7Ql7mi5tV j2FGntdhrsXDSTTPox/qOpnCve0Ftdsq0Y7xPLYY+wT8SPRTPLZq30keRBxrAxlHf6wV1+fPn7fm yEA+Z5KPybXnce3J6xfvufZ2xTZcQzBBwF26dCnduHHD9g/vDogu8p0wI+/55583PMAV3J599llb B/oHF1xZgtEzzzxjJBl1dkq0uXfvno05rj9owBo595KYA30wNnH0iFXHM+BrT1/ep899N7mK49OG 9syL+H0k8lgzMAEfEjgyLnV9HCuIH4FAIBAIBAKBQCAQCAQCgUAgEAicAASIodZOSu0mNi4hcf34 337zN9KXXnnJrNYmFSrjnlxSYqn2T4oVh/vH+7Nzj3Q1duZMGtUXKyGwUPg8rxhw5+XW8uE21nWP dNDM4MvNkGb90nO8duO6CLoR04201788jq6rlM6NnEln9Dd3OzE3L0JyWaE+2tOq9C/IyF/kxb/1 IBbHR4alb9Lfz/OLis33qKvOaXlDgvBM+yDm9irPYeHQPv+4DwSOGoGiZveox4r+TxgCrtA7qNi8 vA+7r+IvhAPJJ0UisjUg5ZYW0/q0Aqzeu50qcw/TGVlHXZFv6Gv6BsuoftH1STlZqYiwKRAGBxr7 CTQu/jLVtJXy/JN56BRhY5lN5TDXYNO8bYnLetoh0kpl/AKeUWywu9Mz6c7MA8UIm09rSwupLPP1 7gu43hs0Qky/xVtdHPYFimgUxbh57O0h5lS3KYqZX13EaibWcEcnckbf8sEijgSJBaFT6sskBC9E 9lYm2Wz61q9U01YfLDKG+Zzn1CTFrIBqmSCxq8KU6df3rZ+t0+Z+8qqby3KNjZ+5j6x438hFLhTu xMvjg9OKPlBx36t5+lxRnGP1Z64sJUvZrOlE8AkzSAGIgp3H3hjvMK/YXiBo20MgOA52YTdN13n6 gHvz0zuK96dYY7KkGxoaTGf1wZV54O5wXh9gIe4gXof0IXFYHziZ08OHc3KPOWf7AdLnop7nsbFR I2LzYK0Rm9MyaZAoy3SYk91HX/7uZM2dIDmjD/FYazE/1rm4blxTl7K8T5hHniN1yWMvkLxvF8vr cU89xoCQATeP5eZ12tt6H52eae9WaRA87EFcT969ezd95zvfMReX3peP6WfP50w/nl8kpcjnYM6O hed5fQimW7dumUUYbhodHyzmKIMAxRIOLIgPx5m4cPSDBRnrQaI/XF8SCw8LPNpRx8exSoUflJGo TwJjZNxron+s1SA4wZB+6Jt5ID/lHJ7HNe9Jz2M8rrdKtPF2WON985vfTDdu3GhVZe4QgSSIzEiB QCAQCAQCgUAgEAgEAoFAIBAInFQEVvUlUdwn7iURb+3//f6P5MJxIn3uebl1vH4tvXr9mfT5F583 t5FfevWl9OzFC+n/+ofvyKJselPXfNEY0u5H772fvv5Lr6Xf/Pzn0ts3byke3OyeyDn+mkPHxd+q NxUj7mcf3Uxr+ltwuwSZuKwvVrYnyDf+juw02ZeaMVzgb06ds25lc2sr2/rPzc0Vt7jbqzyHhcMW okRWIHCkCAQxd6Twns7Oi0q9TmaIcu+w02H12dAvHmLHNRRjra64afUHU6k0NZGG6lWRciPp5csX 0ksKaDomJSyuArG00m+ew57OY+hPa8AyoLQtrAdryS9Ukilhm8pY6pGNS8bN823OXSfqY0W2KCX2 tFyyDctcXz4f0219G2hWREmtLLJHLiJLUgQ3evMv7M192bAH/pF/2WeFc49iVEEgdMsN4Zrcj5Ky nFi8Na2m9IEF035wgJRbM7Iqu2TL8mUyUsV228LIcGIe+TNHhg08mnnkN+swbr7mzF3hnk8szbxm SbO8eecN8u3Gz+Zj1DzZvIrPAR9c+IC1JFeWRjaqJVZ1WP/V9cGspnm6K0vGh7wELyyiUNbzQc5l 3hj08Vz5nNpHAyathhFJsyJ/P9Iem5yc1gfGWhqXC4arVy8Z8Qghd3/qQZrRh1i+KUV8uEsXz4s4 6U63Fdz4rnydY411Vvl8ZuRZtriBmxeiOfx20rRL93jvWR/IENwVQohwZq+7pRLSsH4c1IXocULK 15UP2hzcQ9z4tZcXzxBlPhZEIGSTk0fFfbdfFBgbYo4zfTMXCFZkoH/IJg7Gdmut7cZlLhBU9Md+ dusz+iPPSSQIRuZAP4zD2Fxz+DVn2vnzgJtLxxZC2Ot5G58/Y1JXK2B1yKdOMfk9rnGZG2vH3LHq deyL9Xe7Ls6BusgNucmBFRvzZe5cs/95ztk7YLrbWkI0QlCyLi63ywM29AlJ6XjsR37vL86BQCAQ CAQCgUAgEAgEAoFAIBAIPFEE9Kcbuoe9JuLHfU/x1N4SIXZe1mqXpHO4en48/dbr/yJ97XOfTf/6 a1+xmG7txNyErOr+7Ls/SH+t+G982f1/+P1vpn/11V9N7ytO3N//9C2F9+iMJEMPtCB9yNqawjTo i8z/x9/9Y5qSXmS7tKy/GfdqGbhVXwsKAbSgv2vRq40MDqQB/R1u1nGFyqNDypfu5XGkJ4XD45hb jHG6EQhi7nSv75HMrl1J54OQv5Vyrj2//d7bP4lzA7JGv5iwlqvJdWVJlnK9q0vpoqxtXnrmSnrl xnPpWX3rZVg+nyHlUEi2sSpPQux9jcmHjKp+Wa9JQYsylbhnxBaDvGFekGyrwgIFbkMuG5kvSl23 sGifN/1BbNLfOX0A6VNf+q2cavoGzsr0w7TycDrVcA0pxW5JfelrPNofOh9BQn4Uzb2Ktdbb1685 ye1el/vmFgFnlnEQETXNR/WkRK/qAwzHqjDB7aOTUxLSPpChYOdzGXEFmTskkWU0r+x21x+5VbGa 9eaf96w49+86fH8+JMa2iTr2sVEnrwc54VZjNISgsj2rClXNGxLA4qlZrMRsIdgnrHoVUw1SIe/t bYc88gKHZNNAYKAC9uuSiIJJfcvs1p27Nhc+eA3Kag5LVqzoJuVPfVLkXE9PRR9iITz6RCr0pCn5 NL999559UOXDKhZznPkACXaO36Zxj9ENa53XG6K120gVCCAspHBhCBnDM8u7158DngX2MwfX/l4G R/YB9/kdkN0ycu91ONMPhAxj4GYRMod78l0eP+8bKo2DLBBnMzMzRqhBrhHP7Hd+53fMko14briM vHDhgsm71VjMnfbEguMZoL3LCgGGxRt1mAP9gB04Mk/IpTfeeMNcWeKq0rG5ffu2vfuYu+NiY2sv vvveuybLc88913LB6XLxluC9uF3yvogth7xgyBi47kQm1mQvif6wMGSOWLUxf/oFU9Ydqz6ISu4h 2kiQctQFD9bTZWoflz4nJiasLvH1sCgkIbO/LyAA2X+Mw16LFAgEAoFAIBAIBAKBQCAQCAQCgcDT gEC/9BC/8yufT19+9eX0X3/6ZvrHN3+ePlRMOQ50MbiyHJcHrl9+6YV0aUxhXvS3V/HvPVw13hU5 h+tLrO4+++y19M1f/nz6l7/25XRLeo9f3LrTEYzoNSb09/Cs/ubDXWVF49BvMRHD7o++8qX0/JVL 6ds/+kn6/ju/kI5sb9aBxf64xrqQOT6Qu8rPPns9Xb9w3ghIr8ffmZ999pn0jEhK/oY86vSkcDjq eUX/px+B0KSc/jU+shnycnWl3nYv2vb89nsXzvOL/fm11zmKcyblllJtXq7uFFeue3E+DYp7wy/z s9euyiLncjqnX6Ioeo0n0S8XPx+FPEfVJ/iitF1UQNeZmYcio1btwwIWRL19I0bQoaRGgYvbPxTZ xFwbHz9nc2+RVgUBbc3UL/HZIEHqIuVW1MeM3JpNSvG8ujCb6sK03j+gOHMiyqR4ToVgsYWuDnzJ XkFGt5jrEUFHzDIIRpiduj504MaxJgzKshTrFjmHAn1FVnUQi5Bz1h6FvQWQQyQ+PNhqW111lu/9 pLOG3ZSsimr73qU8522ci6p7usoJ8iVf0TYf9N82gMvjlZGs2Q5S9aGsyhb1AY/59cnHONZyYIC1 3HotE7LMi1hukLL9WhsU90XyxiU6NmcgEA58kMUSkhhxEChYw0Gy4sqStctlxN7Lh5WJnIB4pg1Y 0oa5GiEhLDfwPzaz3SQIz5gfyI/sWEFBLkGu4EKQ5xaXiPY8GlS5HnUNF+HBfEngxnuAupS3k3PU IR8rLkg5iCwOyC5I+kf3Iy32l7DGxRIOIgkiDFl570BUXbt2ze6RD2Lu6tWrrfkVR6Mcq61FfUvx 8uXL1hZsnJhjrlimTU5OmhUZe2Ps7Fga1x8HXENWEaONuHAvvfSS4UP/zBOc6bM4Z3Bb1jcDsXB7 4YUXWpZ8RZl2uvY1Ak/65Z74dhw8h16+Ux/FMvpgrmBHe/AAKzBk/ZgDdSDPwAEijXc8+ewf5GC9 t0oQd6w5a0Fdl40z+WDD3qNfJwCLWG3VZ+QFAoFAIBAIBAKBQCAQCAQCgUAgcBoQWNeXgV955qpZ uZ0XAUdol59/fNN0DHzxW3+GmYtJYrlhXeZ/T20195v6kvGffOcHIs4up9+WS8t3bu7NpeUP330/ /fYX7ijG3Q2dP5fu6MvJE9L7kdAJfeMLv5T++299w6zXfvr+Rx1b420lazHvn956x9xwfvGVF9Mf /OoX04z+NryjL0vzBXHceP7el345XZTOkZh7jyM9KRwex9xijNOLQBBzp3dtj3xmR6GE2+mX1VFM CBeWNbmwrD18kGpT91PfslynDfSmcZFxl+QLekzKTSMupNg+7kr8rfAprhEfDu7LwuaDDz+S27d5 I9Oef+45zU+KXZFYKKk/vXU7fXLzU7seEwafSS9b3DYUv96Xr5Hd69MGKv9e4UO8ryv6Bs4tKdqH 1Mec3KBVpydTGhhKXTqSSKCjSMgB8YCCGeIFN4UQcxUp3nHdSMKyD1KuqvhrlW5IHVkSsaYiEyED cAHJHFtWkVI+2ycp2loP/oM7kSV1yDNdqR4kFyk3oRwmqdXcrimzpEaUqgcbm/bNHq09P/J8nJzL Fi2M9WjKndIHCvnllTWL9bcsNwiD/b1pEAsnNcrzlmtRPhwSTFDJiDmtO8SIK/advLEKx+VHEzfW 6oziPD4jonzASOC67TfcWfJtNIgk1m8Ey1adR2XxOq4Aw7jrZH2Js8faU34OMlokBhajgN9am+My 56Yc/pz5mWzWiPWCCIGAgWSBGMEyjHmSis8DWEBAOfniFmG+Z9g3HPRLHgf1IWwgY7CUgpjDyoq+ SF6P80ESexryiDHcDSWyM6ePP/7YrLWw2EIe5gxR5PNgbK4hJqnLvCDwsDyDcOYhoy8ScwEvyDms yz7+5GN7/iDDSD4Px408x4U8n6/X5b4ustvrkO9j+Zm89gQpxnxYJ64hI7nGes4t0y5euKgvSnTm 6gM5GI+DuUFCggEkI7hCnhUTeVi9QYRCZrpVoMela5e9OD/68fG4pi57AlenrANEn+8PyiMFAoFA IBAIBAKBQCAQCAQCgUAgcJoRwGLsR+99kH5D8eF+9TOvpJ4/7rZ4cVjAjY8Mp6989pX0gvRjkFe/ kItJ/p7aLvG3F+4w/0bWbP/d7/5206XlXVni/awjEg0i769/+ON0XeE8/u1v/LoMDUYTBBxWZDcu X0y/Kbeal6U7+bPv/TC9+dHHB7aW83m8J/3hn3zn++a+89987dfSS9LXQDLi1QhrOXDAdeYOU/eu DuX8pHA4FOGjk6cWgSDmntql73ziO/0C8V7alXrb5W9Xz+t3cj6MPnychizH6kuK9SOLufrsTCo3 1lPfyGA6Ixd5wyIC+kQCoHg8zDEZuxNMXcZOz1vJ6Hl8BGBMXPih+J6ThQ2K3BXmrw8BJM6Qc5Rh WYc7SKzJ/Jeo92WV9aM1BylpiVOH8hyXn+DWD/GlDySrD+Ue9Kyw1TiQY1lV7j0c3hnZIBdQ4kM0 9uOisadPFh1y36YJYDXG+FjNcUDUwMtAzmDpB6mFYhkXl5BANteisBA4Jm4m1AwzjUkVxs3Y5BqQ Xpn0aRJ20AAUqbKReBqTe/ow15I6cw+ejil9su84++FjaNhNCRcEy4orN681W15VXD310y/lfp9I ykZD7jq1hsyZsUwMdcC3psBpQDEAWTfGIuUxNnV/PG40Z3CAhGPtIFS7Rbq1LOYkP5ZxlBkZpTIC IDMvyDn2BXuUcsPVQGwD8njMdJMUvif8zPogP2QKFks8r7hx5AxBB0FF8vpc08YP8sHR7ykneR7Y QWTR9/Xr1+0MoQORSRvvlzPJz3azjx+MB4H0/vvvpx/84Af2TJDHfCCvOEPI/eEf/mH6+te/bkQQ YyIL1lq4usQaDELKrc4oI3k9zpBIjMM8sZADK54Lx4E6PI+8E0m2R1SXfOTxPiljL1HO2ckvb895 qwRx+t3vfje9/fbbhi9yIDukIvJDLH/+85+3eYK7y7VVXz4GfXCAERaTEHKvvPKKkXK0p57X9Xvk hghlnuwbiErasb7ULc6Ta7B66623jHhjrmCOvCTKkZu98oUvfGFT263kjrxAIBAIBAKBQCAQCAQC gUAgEAgEThMCP5Kl2n/4y79Nf/xbXzMLsddfeM7itxFXjb+v/r8f/7PFfPvo3sSu0+aL7X/+3R+m VxVKByLtX/56dmkJ+bVbgvz6i++/If1eNf2br/9a+t0vfiF99bXPGDE3Jh0dbi7/8z98J/2f//U7 6RO5nzysxHiQiWv6+/Jbv/KF9Mr1q+n1F59XzLyV9DPF3MNl5m++/poRdQd1ndmJzE8Kh05kizqB wHYIBDG3HTKRf+gIuHJwq46LCkFXJm5Vr5i3U3/Fejtd1yGecE22vJgaiwupVJHyXgr9XikhUURi QcU4JZSgOrcnclDFInNRbmuzRX3aG6nTbMP9YSTGgwziLJXpI12WJB+kBtZGI1K8Qyn1Sak6KGIG BTMEB64AsYAYk3VJn0ibUSnEByxe24YlGd2rqy3ngJK4V2Qe2HWDm8i4WlVEgeL3NeQyUp8KHpHr MDMYHyU6bgv7B/rNInB9PVuKsUjm0lHuHC2vLqsUEWjIuSbyalWEFmvdLwU1pJUp4124lthZee/u AClmX/geyW4zM8mBLLYWTay0O6w3FOPq3O6wYKvpW1b0ZySdgPW9QT0IJeQoV0TS8U/7kj7B35a5 Kd/a2np6MDuXHs4vmCVPjwgqvqFULou8WFH8PGHPWBBzNMaFYFc5WyENKkivWYRqvLx3mp0ep5Pm CxG3sqx4YXKBMDExZd8awwK0T5aBkG0QyZTNzMxqPyvGnMqwnmRPP5ALh3uT99O6nnXWeVTf2hrT N8h4Xrd+Wo7T5LMs7Iu89pk8gUzFOgxyCYJlSR/iqcOZedl+0j17i4O27Mn29xS9exl7jucfguv5 5583V41ck0db79P3SfF9t1/E2N/I/OMf/zj91V/9lc0HEg0iC/KMMZnryy+/nL7yla+0hkEGrMSw mMOiD0sz3tfUhzzi4Jo5sb8p48AKkAQR+Itf/MLyPvnkE3OF+UDuPmb0RQLqQ0Yyb/pwd6FgAKHF PbhThy85gC8yQpba892SMl/wrkWed9991w4wpT798O6FWHvnnXdMlq9+9avWyDFu62pTGTJw0A8W axBu4In1obennHVi7v6cIycyQLDRlnmyl7aS/ebNm+lv//ZvrS7rwjyYM7iQsET81re+lV5//XXb I5YZPwKBQCAQCAQCgUAgEAgEAoFAIBA4IQgQy+1/+c9/al/QxuJqq/Th3Yn07//Ln0n3UJG7yk9b VSDTIKY+Ujnx2wiJ06O/yR4q1MKk9BDvqu9PpYtYk/ceT9v1RTll/9v/8xeKOfeG9YFryE4T7iL/ 9Ls/SBB5z+rv3ouSpVf6kLnFZcWsm0rvfHrL3G2iRymmDxQT73/9L39qcv/8k425eZ2PRSr++//7 z0zH9NbHn3h26zwtb1x/JWu9t9X2srxuQUpCkH0qyznizn35My9Z3SIGZGyHw0Hl2S8OrQnFRSDw mBEIYu4xA/40D9epIhelotctXh8JdiIrjJwTedGorkpLTTwmlNgiKqSIlYZTite6KSZRchLHC5d4 KCZR6qPMrOiXM2QUMc2Qt6Y+UXpSD0UupIKyrR5u1lDGQh60yJsDTowxkQeCxmQU+cAvW/IcR87I NCsCZ11kkLfB0gI3arOzfWlJCuKlpez7Gqsx5vFQVitdIqpQ7CIzsjNXV/K66PRPn9TtEiZGEkph 3VAfDZTDXFu8N29x+GfGRzGNbCiqsQZbFpmD4twShIVcW1q8NVmQQU4xJ+gZ1pU4c0uqj+z96qtU 0utR68Y6k5gjh5MduAWgrN6cr2PAnmhhD6kEDedtVUY9NoQRc5KNPYLVHm04SNxDHFJPQe/sjILf 9wxd4E6PtVzQh8EHii2H7BByA30ilLHKE/aQUdlaLlsM0m+X9mmfCFcwgiBgTcGO4zgmTdW+6cUa zc0tWAxDnkmIt7Gl0VTrqdm+xdJzRlaaRshpXYeXh1Ov8JzXh1nyeTZYm2WRPuBm69Ba3eM4880y sTdYI87Mg7XDNSHWYsyNvT8lV7VO0vlepazY1vcv5ewn1p/nG4IG4goLKuKnQfRAxtAvbXxvZtw2 y7bfO/Ygc8E6jsMJNcZkPMYlj3cX4/oeZU5YcyE7JBPuH6lr1sAipsCAe/qBiMIKECtarpnrG2+8 kX7+1s/TufEcQxPLMd6FuHdkzr/3e79nsdWQ4b333jNLN8bnWcUNJDJB7vGuQTbwwuIN676tErJA wNGetsyZ47XXXjMZv/3tbzf341atN+eBAXN/9513TeYHMw8MFwhGDuYBaQgurC9ys1dYX3Bg/pyJ Q+fkJnOmvLi2yIybTfqE7AM78HZskYo1Yzx/L22WNO4CgUAgEAgEAoFAIBAIBAKBQCAQON4I3Jeu 4O9+8uaOQk5Lj4Zbya0SMeTe+MUH6c0PP9YXvdELSucgndyq/mYt/n3lbXfqC6uyn37wkR1efy/n eenzcK/5E7mxHNDfqnwBf6Wp60J/tVWa2mFu1Id4+/t/fmurpiLdXk5fkIXcR3fvpR+8877FxvOK /N36pVdeShcU8gYSDhKzmLbD4SDyeP/7wcHbxjkQeNwIBDH3uBE/RePxS8YVpYcxrWJ/3u9Wv8gO Yyzvg99NNoYUsNIE6yYTI3AURrqgHIb8kJXAQ1lTPJB1ypwskyAJRJPIsqxXSk7FrZK/ZtxfYtUE wTUthSYkmFtU8MsZxeaofilhrYPilLbkHySBEwcK33nJhXxTCraKvKtYrInAsGREDsrhFVOsQkxA oKFkvSdirqxf2BBFC7hDbJJZK4q/t6K5ELONuih3ifM1PnZOFirjNp9HFbJZHkgkKCkwxZ2ifhxk mh23RR4Uz5ByAwNLrbVqCCMIMsgsFM5rwqanFwu/PuGne819TWTdvPAATyzpsJxjjRvNqfhe4QzB RT/sHc5urVjEA/KAcl/juuqVmm2wWnNZWCMIAA7qc0AKe16NeHaqo9b5Hx4yJZOTcg9FVj3Uh6W6 6pzTt6IGRcyVNM9MDq8pP+Nfk8zrqoMLy6GhM1q/oRbB6s9bx0A/ropgTzKcZQ2ldSOGHphh/bYu 8hsSGay5x9KqjgWk7iGnWUPct64YucMZ0lpWZI41e/QEJPYEiTP7jcS+gkx57rnnbB1xKwjRBdGO tRnvBA72ka8v7X1fcaYPnhcIJVwSYil348YNs0LjfUU7xqMubTm8LxPiID/UN+8Uxnai3wm57Iq2 19absXmuPDE+71WILsgnSCbkYs4QTeSTyGNfcI+15fj58TTWN2YkE2Tb+x+8b88R84aAwoIOgg6S CteMzJsDYurP//zPrR+wYhyIKuohP0TbN77xjfTiiy9uS8z5NmM9eOcyZ/oiYfGH5RmkV3GeVrjN jzfffDP9p//4n/S7ZsnIVNozJwg7yFlk+d3f/V3Dx3FgXMaHzGVst/gDH8rYO8W1pZ1j4DgiI2vl +4ozMrNukQKBQCAQCAQCgUAgEAgEAoFAIBB4WhGo6m/Hqoix45DQd8w3/y4+SnkuSr/5+1/+oule 9Mdk+nuRl7i3xKvUa89dT7/1+c+lMf3djIvOO9MzRynKln0/Lhy2HDwyA4EOEQhtSodAPc3Visq6 Ig7b5Rfr7OX6sPvrbGwU3lA2OksRyTVcABQI3yhZFQkA4QV5dfvunTR5f0pK2XmZoouYE7liSm0p hi/KFRgEHQpK3OpNNN2sLeoXM5ZnZdVF0T0m0+4rly+lq1er6Zyuh5TnxE1n8m7UAi9XsmPZ9qlM 1u/IDP3exKRZCbnyNKv0aYfFWCamsOIjyBrEBdaBujRFNt/QoQ5K2ZIyK7KuymQTsZUgvIgpJDdo mv9FKZSH9UsWDFpr1yRS7ASefoDvESdkcCUxsQEHRJT2z/WnNSnO63VZymEtJnlw6YgVGa4iy/Jo 2SvrqqrmQDw9i8HXtSy3n7Js0x7A+qosHPiX08YYZIEVuJLAkW8ksZ5GZOjDEB8EPEHwdnVlK6WG ziRw9oN+uG4WUJoPryP5G7KeYx70y9568HAuzYkoIPXhwlNHBTIKAkprxLzNalFEHV2zZyHmIDPc AqZTMsAGeQI/tKy2v3BRinvVFYg5YXBWHwJxxYkrS0hOXFSCO+TBiJ7FQe1VrDu5HtezxvqeFXHJ HsZSsrVnn8CcOhnS94WfacM1cyRBlvC+gWBhzzFvyCJIGogmLJkgKqln+7G5j/w5oU0m288YOXTt 2jWzlsOtISQf9XiHtBNzjN3ap9wcILH3IKmQmTNkMnL1aK15r/gc2tfK3Tdi9UV9yLLp6Wkj7BAH LMhHdvqcnZu1e4hMJ5lsHI3BXOgPcgo8uc+kdibWGRsijjEgtcCUsbAWg8yC2AJvxtop0Tf1IM6Q g7l/8MEH1jfkHuvYybOIfJCFP3vrZ9bP2NiYkYPkffjhh4YB2CEn64tczJk5QVwyb3Dj+edg3syB taadry2ycE8d+qCdWyOzLsjMPWOAd/sa7YRFlAUCgUAgEAgEAoFAIBAIBAKBQCAQCJxsBN78SF5b pCv9xhdeT//Tv/6j9Nuf/6X0QPrSEeniXrp2Jb0o957/+ObP01/+4MeWf7JnG9IHAkeDQBBzR4Nr 9HoKEGhIAY7l2V1ZIbwnBeqHH30sN2bTZhEHEYAikrhzA1Jioxw9I2Ur3wxB0Xlf8Yqw6sBCCReO KDshCSCyZqQERtFJ2+wCc+9Wc4zNgeUWLgzvKYDrz99+J330yU2zmMNCiJTrFRZD5IxEUTKWBgbS kp0sf+tyGjEHCL0rIv6w1oK4dNecLk/u7cn9RI6iAhkFOOTq0rLiVUGiVTLxai4t5dZSABpBNygi j/VYkIIaiyyssICDvJJIHM4kiK3u7mwhUqmVTZltlnAqhyDq1hpDduJCUlH1hJcs4ZogG6Giblzx bR1an/RLPvRfcxG80M+WLfz1j3ksa32JKTepbx1hvTko5Thz6FE8OuZWlWXZuog5J+WwMNM2NPIQ 0sWJOciC47J2PtVNZ80b5MF0WNaaz+jD3ZA+5PH8jehZOj8+Zus9MAgJ1yuyblTr2WWWnVimElcR 3ImZuC5csPg8NzYqt4Y5liBjbYP4JjGe5I3vF85OynHmII/1hDBiTbEgw9UiBIy7KYRQgkSBeCE5 IQWpBBkGEXf16lWzmON5oZy6EDmcfRyXgz64Lt6Tt+ekPkg+Hu9NCCQIIcZ0Cy7G4d4T706IJIgs J40gijjYy7yLwYJ+qQvpBiH2cPZhOrd0zuSmDNzY/2BDf4xLf5BRXPv8IJ+uX79ufTkWlNM3Y4KT 13UZtzpDXlEXwoy5cg/+EFvMm4M+d0uMhcycmQP9cI8syEUeMrMnWFdkphwykTrgwTxZa87kI9NW Y4Mnyc/IyLjIzN5gbPoAx0iBQCAQCAQCgUAgEAgEAoFAIBAIBAJPDwLEkfvf//rv0sz8Yvrqv/hM +qOvfNG+RL2ovy8nHjxMf/Kd76c/+94P01sf35Q+Zve/dZ8e5GKmgcAGAqFN2cAirrZBYCelY7HM lXfbdHNisl1Rj6ISt473p6blHm5ShNe0xadCqdsnF4iwKVhjLSiwq5E5ysfhGiSIWdTJgqpfZAm4 oMTkeCClKPGQIBDcrSWWQBm7rATtFCjaICPjI9ut27LoU2DZ7MIPqxN8Sm+QStv1y3x3GplyyMVl KZNnFMB2QmOclXUeFkoXzPICF2juam6nnraT4HDzcQOJwhgFNRZEKKWr62tSimM5l5X81LEYbMrv lkVcj6znGr3dRt7wgQHii/UF4/56r5FukHXcY0lojjEbWBvSTyZp6ZN79gfPRUUygB2WdBBqamou QTMZhuK/2a45jrpNdV2raR6H/OY/EMqyyzWflPuzuK8UMcdaY6UHKdcn6z5IwmqLUMlx/bDYZE7I 1meYZGs59h2y5r13uGtwmL3l/Zddd2Ith6Ug7iohQrFwrIhs5cwziBtZLAZZ/0wiJHNjSX7GStaR IhecYDlMOY+iL3+/cvZrxvF71g6yBzLJLZc4Q1rhIhEihi8IOMlGW/YBxI0/H5BYWKxB1NAf+Pjh OBXHLo7v+X6mbK+JMZEHIo5nFflIWKmxP10G7zeva8Pqs86QasyTeliCQTSCAf3yRYJuPduUQUBB UvIeZgzakuwLFMrjXUob8jnbw6vNx9wg0CiHwILwgozimnHBdqfEs88/xoWQo59bt26ZDN+QC0xk Zd4cyNlJQibeI6w7bcCAPGRnbqwt68lBPvKSz9jMFxyo46QaYyNfMYEBfZPvc6Q9+CMz/dJnfp89 +fd+Ufa4DgQCgUAgEAgEAoFAIBAIBAKBQCAQOFoE8OREPLt7IuG+/cZP5bZyyLxPLSzri6GynLsr g4X78jSzphAkkQKBQGBrBIKY2xqXyO0AARRzxcS9KTSLmTtc77X+Dl0dehGKVJSQKFJxE4n7ShT7 KDIh1SB8mP1DBYpF4Tuj2G4oRyFGUDKfkbIbt5UXL5yX4lLKYylxsVTAWg5XlxBc9IllG671ynIZ iS54LwmssQKaX5i32HLTZj1VNSUyimQU7ljkQRjtte+iHCyz6Kw0LfKPOF4oabEcnNYvWeTHNSQW TcclASMkmsf/Q163xjE3kDXFfdObD7kh68CxT0puiC1wWoLgYV6m7M6WScwNIoh50r8r29nDreeg 9Txkqz2IUdbVGtBGH1pMkS2XoPTA/qIthBsx6sCYRDfIhJWeH+RTf1UfaOZExN5/MGNy4mpzSAr2 gf5exZVriCxY1ZwUZw0Xls1/EMXVas0U8SMjo7Y/UMqzL/fyvCLDk0jgYb7BRSbcunNXLmUn7Dkj ziEWqpATxEbEheuU9iTkxIXxc4Y1LhHv3JuQm9e7wm4tjSsWJO5jR4XD0FAmS1nz45w27bGCoORD mkCeQJYwbw7IGJ79K1eu2J6hzOvRxskU6joxWyRgqO97c6exXRTqHDQ988wz6bXXXrO1vHjxoskL eYV7Rt6b7FMfBxKJe+TnzD3vXsgirOV4/7bklmi4tYV4hIxyEg4MmDsJbKjPnMnnsPH0/JDIN4s7 ycH734k0MOPwsVw+P1tj/aAvErjyHoLQ453EOxoCFXKPA0LR2/rZGhZ+eF+UIz97H/nokzzmQj5k JAliEhn5MgHjgRNx6MCBsbF4xpqU3yHIVxwXHMCTGHxmEa7feeTRljWhLvIUZfLrgshxGQgEAoFA IBAIBAKBQCAQCAQCgUAgcEoR4Evgt+5P2cEU7W9C/a14cC3BKQUsphUItCEQxFwbIHHbOQIHVcId tH3nknZeM1so5fq4akRZubIqRarOWIUR02pMyv2zo2dbiklT9oogc6Uvv4DOiugh5hzK1h652EMh CzEzL+UwitRl9QmpZS4hpTxt6og7FhRVLwdKVxTTKyvLdqYDlMcoUsekjEaJDOmTa1O6v2S/VjWx eyI5mOfy8pLNyRT+/NLVcVwS+woFMpYcZjmib+2cWTxjJCYWjlW54SzLyqxSQbGOpYyICFnOlaXM 7hXRRWI2ELHLIiKZGuQZ7g8px0LNXFzKPtKJDe79Ouvhs0UOedYfneg/cjE2CTldVvoHQ9aTRD0s 7VTBSKl1kYirq9W0IGsxDvYNsfEg5fr7RL6q7brmQOw8CEcGo6+1NeZX15gVEcAipJqkcraWywSE DXjMf4ANln+47WS/8wxhJWdrWcaKZ11lPKvE1ZMFnUg4JymqyqcNbYm9Z3tW2LDGB30uHgdszH27 58v3DGvtB3mQVux/fw6Kffie40w+WPKeAyPO3JNP8nNxnrQ77IR1HzHucMX55S9/2Z6L9957L/3N 3/xNevPNN20ejMvh1lvMjcQ9c+fLEhBVm5JE5Z3Oe4CDusyRfhwv75czyeds98qiDSQhB2Qn73T6 4J1OWbG9X2+SQTeez7sZ4pD3AgQkfeF6FOxtvGZdn1t7P9x7PerQD/PwPc3akdfenjnxJQHIOb5E gtzremb4/QBxubi0aP0Ux6MP1uSFF16w3ymf+9znbF9NKIbA9773vfTuu+8+Mk6xfVwHAoFAIBAI BAKBQCAQCAQCgUAgEAg8XQj439NP16xjtoHA/hEIYm7/2D11LVEIPhUv2abembkSy4qYXuipUVRC suFyDYKO8oVFxfgxSysRKKqLBRskVne33F1K6UldzmDHmZhXMGqQB7nfJj2g8v3gi1woZiEtkBWL LncLZ9YdUrpCGh0sqb3+Q+z0yrpiRe49IX8YE3eMBs7BBjj01mCJgpr1GhpUnLlRkaBSWs9UHxh5 xTUx4splYac1W5WVmexs5P5T1ovEH9M6EbvPD4gwlN81XEbKCgvSA6s86snWUXuD8bK1DZPhvlQS ydfcQ5kFUl6zHnXM9SWK9HXtMeGYny1IGEpJ7CmRwxoXEndxcTnNyloOMgqCcFBWcsSWw9ZuVURv FUs5zUUMsPVVU73VVfZjJiaGzUJnxPYu2IDRSUjMz9cT7Ae0BpCNfVqnHpGTPFM9PbJ4tDJibnHd a2fWieehXzgxZ3sGsbTS2pEM8xbexwsNZCseO0nHOwCyiD0KycO7Csz8zHVxvb1fJ6f8bHg4Ls0B Pc/Hb7/3/P2ekQuiaFaWyRBrWI+xbqwVln/kueyMTV0Sc+OeOUNEQryxxuR5fZfJ+6MtONk7U88e if5pRx3HkTp+8EUEZHP53GqO8RnTSTHOLlv7+PRF+uxnP2sWaIyF203cYmLtRkJu6tGHr5sVNH9Q TqJv5CT5XJGfNhwk3if5naMbXt9qw7saed1lKL+rSFjN0d4xoU+fC9hwQOhj0ch6YCEOJljeIavL ZZ3Fj0AgEAgEAoFAIBAIBAKBQCAQCAQCgUAgEAgEAoGOEAhiriOYnu5KrmTcSgHXnud1HTHK2/O8 bLuz97nXdtv1t998xu+SlZxZLqkTlJW4AkNxXCZumObGtRFVIgqsvhScJKxzUF4SJwlF+ZKsnBax sNA1ik4UqKZM1RgHmSfGcPRT7sIVJrHssvvNebnJhLBAcarsfaZiQ+Y6Z1YiEEXIjxtBrAgPIv8+ BeuoGXK5Qh6FMnLjinNxUVaLwqlaqmbsRM5BaNVE1GE9h4vHPhE9XaVMamKJhSXKota+ColX7TUS CNeWYExMsw2QIVMybm6pWGrem4ZcWnJfDyNMtY9KFeXVM+ltBJ1IW1w3VmX9hpUc8e6In4aFGHsO l5uDA32pH0JY7i8hFmtFSznVwUoMP95Yffb19Zsrv7NnR00pD4nhCvyOgHzilfJzCNl2dnTE9jgk wpjIAtxSsg6AuiaseF6xaBwVCTkoIpm5jshydWV8zPCgPa5jIe+csD6mvNwjqO/0LqWMg8Re9WeS c/HwTr1+8exlnZxj8oFvAABAAElEQVT32267vj/++OP09ttvmxXWRx99ZO9I1hgXkiTIKyy9SLxT KWOtnXziOecg+dztpvmD/c57l/1Aog4WdtevX7d72jIG5BuWcIyLG03GvH37tpUxZ973jE/9q1ev GrGG5Rj1fvHeLxLvXa3EIzLQjt8HX/rSl9K3vvUtew6R6Z133rFx+N2Cq01wQEZfMxOu8AMZIJrp CxIPmX29OdMn2FCGHO3JceL3GH2R+LIAbZkDc6ctfXDN3O/evZvu3LljeWBGOff0Rb1IgUAgEAgE AoFAIBAIBAKBQCAQCAQCgUAgEAgEAntHIIi5vWMWLZoIuGJvO0C8nLMrSz3P79vbenl7fvt9p/Xa 23V6D7UCsYI1HJY43VL2Q3qhlCUtyHKJNKsYcyhUmc+ACBCIFRSrxPoi5hsEXkUkAPcofSFYcCNI n1j8UOZY7GVOqFQ5IA0hLPplRYR12KIIQOLeYZG3JOVrb29TyYuw+0qZMEI2lNWzmj+EBu7PBvoH jJhCfo69yL8vUfbYCJmkpxYuxN0aNAs/s2jRXHDdRty17m5Z/hnBCKkpqxa1IZllpFxE9motlxS4 dkFY4s60urRu7bBa6+/JlmuQPJBzbrWCJR0WWeU6ZxeafvOqrSvGHZeQZmDGwTVWYBByWPNlUk4k oqz22DMQvcxnQFZEg8IeUk49GNGL20aLKdfsi326KheW6+oP5fkZufIcHz9nVi/uRo++TkpCVOTt lWXP8JBckmp+EAK4ioVkY45YBUEYUBfC+IzWG8s6SFbWHvwgP4aFRb8sDSHvThIGe10rfxaL563m S57X6WQM6u6lfid9QiZBME1NTRnxBSHmX16gjPXl7GNTRrI8PUiev9tYzJUDEgqCCVeSWLBBUkHc IwPWYOwTXGs6aYflHmOR+JIFridJWJ4Ruw73kDxXQ9pbwyPDJk871vTx7LPP2hclPvzwQ4sDiBw/ /elPbc70gZtMZMI6bbvEXPn9kp/rM9YGOZGLRJ+Qdpwt8Zjz2uHka1e4zyXJ5Edmniv6B2PqM9eP RRZC2r3//vuWTz23lMN6MFIgEAgEAoFAIBAIBAKBQCAQCAQCgUAgEAgEAoHA3hEIYm7vmEWLJgLt ysd2YLYq3yqv2G63cq/baT2v3+nZdJb2I7tCHJTy1eK1KWbbvMg4rN5QUmIBgQxmkabOzyvunBEE TeuD1ZU1U/hOTE5aPay16lKWQsqheB2XCzMseXqb1nOdylesh+IUMmhoaCidk3yXLl4whSwkxMzM A1PQ4l4ROdHP7jcBB2MRx04Xpny+rFhQ58+Pm7s5V1rn/pta3/0OdsjtmDsYmeJcOGEpB3GGzOb+ UeScnONpWrwKUdzL+kz16zURAnJF2V3pEsHTrT5KspTLZBciosBeEc6Qde7C0t1ZmotLEaaMwQE5 ZysgyznRCIYleELimktT9UV/NRF2uEPNbkK5zy4pIYUrZZFMWss+7ZceuUnFUg4rPyPkmm5FIaaw CLS9pv6xlGNvjI1l8mBAbuzYo0f17Bzy0rW601SMuCR+3IzI7ftT04YN2DEniFeeywczs0ZKQ5RC dPaaq8vu9FBWTJNT2YUp2GA5CPnCGhzX5LJxbj+KMm+3lt6eut6+vR1ti/WK5btd77fdpn55L+nA vSJx5fjSA19eIM8Pnh8IMMqfeeYZu4YMoi6WXtQjsZ5ORiGb5/t45PGupg7vA97BPAsQWhwQZ/RL O8oh6szK1p7vDRKX55SxOdMOgo8vZtAX7xj62Wr8Xn1p4sUXX0xYA0I8Qn55wkUkcdw4Ll64aH14 WfuZvhmL48aNG+nll182EpF58fw/fPjQfj85FsX2zM3q8QUEJbAlMRfwgBx00o/+mScyv/rqq/al DH+f0QY5mCsx8lgXiLx2zKkXKRAIBAKBQCAQCAQCgUAgEAgEAoFAIBAIBAKBQGBrBIKY2xqXyG1D AKUbyrjjlI5UJul7sXbrHeqVFcMFxZJbNMXuhCwI8rXiOOE2T0rcIRFskFTDUtIScwyLhcnJqTQn 8g5lKVZQEDLEuTorBei1q1fSlcuXzNriIApN1qMs0gby5cKF81LUPmvK0YnJ++aGbFUWIFKhihU6 CC3HikMOZAvCs2dH0jVZdtx47tl06dJFs9RzBa9VOk4bpCkL+wRlO/h3ncW9ZSbNIAFQquMukvk1 UrZ069KagRgxmbBoJI5Zbw/WkBAAUsiLzMNNJGRAVQpxcz+p+qIJtCeEE9ZzUnqXS1LoQx40CQTK WQ72ghFx2hec83W2mjNB6EPtIeIshposv7p1bXp0CdoQEWdEBO4rGV99VCUPxBVuVZEEkmBEbhvH z41L4T5spANK99ZaNbE5CSfDSyQl5NvE/el06/Y9IxggGYYU6xGL0bn5hTShZw7SDqKOsmxF2iNL rOl0+67iYQkf1vqCYnvh6pPnh71x4MfjiEAsvm+59sOHK97neTAXdi57d6M++4P7YvL62+2HYj+0 83s/k9feJ3l7SVnSZATPV7/61XTjxg0ju7wP+mc89u0lfRGAmGw8xxBCbiFGOXmsNxZvzJX79gQh 78QcX7SAbIJ4svez2vK8XLt2zfYFjyljEkON54wD0oqzJ8agLe8QMEQOvrABoeVye10/867H/SWy kmhDvyTaQEBiybuieJHbJerRDwkyDTmRCxkgCcGGa+bTjgP5uKfEQpAyDvDioC8s9qhDQjYI0699 7Wvpwnl+/y1Yvv+gDXLQDqtD6tImUiAQCAQCgUAgEAgEAoFAIBAIBAKBQCAQCAQCgUBnCAQx1xlO T3UtV7j5+TiBgUyHK1dTga0TSkpc5eEGEGUq1m7ndT0vMgciBJeO3VJO4h6POpxRdhJP7v6F6ey6 UkRJTUQK5AyuH8dkrXNJ7sog5iDyUOTuR34UtKSshO1RrKOx9IIU24NSkCIjrjaxDoJcOqyEEhgF LJZ5N569LtJnLFtKSJONSnaz6v+wRj2cfsC4iDXwkYdSG4X+mlw/Fl1L+qiqYrOryHIOcqxSrphb 06pi0IEv+wByjv2BxZtZwYkEkP2O+l9vrW1rjTUuOLF+eQ2bGcpjLbu0fyAOu3XGWg9rOcu3Ns1x tJ+wlkP2FiEnd5fIo41mynkU/rjZG7WYanI5qrWjnxObtBAQnmDTI+xrWDTq2TFrReXz3FVkSYi1 HAcEOfM1AkLX5DXErBITkDxfD0i/45x8n/gZQoTEGWKIPUAZc2WNbb6aXy5nf1AnE8855uHGbL0N OBaTY+N53PtBXt63XnrwMzLjOpL9ulXfjJ3XOhNuvINowzNHfUgo5gLJDlEEwUU+7by/ZVn7QkhR DwKKerithKzj+YdkuqH35+uvv27tsJ7zPiDsIA75wgXJ8/2aPrF2c2s5H9MqN3+QxxiQgrulrdp7 G8qYN5ZqrD2JeTpJxtyQA0s6iDov58yegEiE1Dw7etb2C/uDPsGUo5jA/JVXXjGXnoxVxJN63LPn wJvxIwUCgUAgEAgEAoFAIBAIBAKBQCAQCAQCgUAgEAh0jsBmjVzn7aLmKUcAZR0HyjyO3RJ1SSjr Ok3exuu3t20v93qcva7LyHmn+sW2W1/DwCA77gYhT7Ji1xSesjjqkZJyVO7N5q8sKObXiilFoaMy WdUnJehQ01ohu7fEmgzrhFURJuBHzDEUyMS7GpaFG1ZuxJhDwbzfxHyRGKs9SL6ua11pVLJeuXzZ rC48Ftd++29v53NlrFERP5CWEB0IkTHbaGG7ATz9MEk3yp/EFXsGvFmH4eGstEcxzQRQ2hNzLsmt pTZSQbzmvlIeZE9ZxFxPd7ZkqzdkrSJLLuLNGUmnsxF09szQTs+NujJsRApxti3WPKPQRyZzgalr LDS7IZc0jrmvxPxO/821pRTjNSPjMhnDeFjtEbsQRTuWYMQbxLUjca7OjclV6ggx2E4OKaepWtpA P19BgHfJlShuZS/JMhRrRJ4pSG6IR/Yllo2Qon29si4UeXdW+VgKUnZBRDWkHGt9dnRYLmSHRCQo 9iL4tgZrXRyDndoEwvFovtv8/cYZQon3C6QSpAkkCmsNKcM7CzeolBFnEitKdh/kJBj7+5xngfoQ MuxFkr9X7ab5w58bzn4gg8tTrLvfa8bfidzxcemfesyXZ5bnjTnwTGMBh9Ua5aw7iXZghYtH8Dgn F8IQVripLBJKYOIY0K44P1w1/vqv/3oLN8rbE2MiR7GP9jqHdc/vHYhF5s8eYO4Q8XOzc+nqlat6 F1WNZCReHfP3RDk4MLd+vbuRGcz8nUi9Yn3yfU95H1udmXOx3VZ1Ii8QCAQCgUAgEAgEAoFAIBAI BAKBQCAQCAQCgUBgMwJBzG3GI+6ayleAQOlJQpG3k/KtqKDtVEFXbGOD6Eex7VblXo+z10Wh6t/6 35dSlABgKBZ1NERscF3UzJtLQikwXYk9IsU+VkqMi4IUKx6IFKzpIG5Qg6IUHxocMrkgU7DEQl6U yT3dihEmUqBSwbrlcBSa9N0jRTQWe5B9I1I6o6w3F5oau8A+AN0+E6RWtspBoUtsPDBhbI7WerX4 DSEBtiJUwNaA2dAR71OGgzdDVsi1vj5Faasr5pz2OPuGdcwkB64hFYtKRE5Nbiv7eruN1AHGbn5w aN6QYDmWXLZqq9flPlFl7Avacq5rH2xY4WXZNbxhYWQT2GnssggiyDnLQxZdG1TWX7aOq7GeOth7 2coHt4yrupY7S42VSdMBI6NQ0kNKQbiQv6/n4uBQd9xDE5KN+mAMY8ZJP1gznrExuVF96YUb6YpI b/bbgFx8npEbWfYluIzLGgnSnPlSNiSrJywQISsvyNUsbj9xbwmhh0UUhLaNAGnKYeMqh3V5RCir emQ/fGzO7dee5/nsWfYAFmIQK1zzTLIPmDvPJXUgbbGcxfUuiWeWeWFtSaIefXKmvT/HPo6fySfZ c6L+bW9rLBJ1vJ5l7POHj7Fd82I5crC3IeEgwzggkMDjwYMHJh/PAHsfbMAIQop5Uo98nnXuIer4 kgRzKibG8zE5M6bfF+v5dRETz2s/d4LTTmN4f/RzvX5dT0YjTUxMGDkH0Yi7zx79HmK+4AMePibW fljLQeSBF/ufOZHP/Dm2G5t6kQKBQCAQCAQCgUAgEAgEAoFAIBAIBAKBQCAQCAQOF4Eg5g4XzxPf m+mjm4pYJoPCEZLnuCrnUDy6UhXF4nbKxe0WpgQ5JpKs1NOro0/aas1ZfeJ+kn7p3xTXWDOJHOir 925SRvuYRcVtpYJ1iggdtc2KUWMYTDb6gpkB4r3Kut0cyGd8xoT8I+aWj51H3qllZ2W+L2y+GgsS ydT1zb1CPmOBGaRATdZLDclSUpy1LrDVvA9zvp1JvXUtI74kFwrqkRGRztoD4Dc/P2+Ka/Y78cgg 1ho2H8g2Hd2KOac8CB3Wkfh+dmZvsK4i1FIDkjLvIbBgL5HByVJz3YGtRc5xU2pWEG4tDIUjVo/I w2GkXBVCjlhycl0pCzD67xbZOzggS0yRVGchnaRkJ54ee+G4PrebV0Z7iT3VPGwvCTtfB+YN8Y2l JgQS8cJIRoxqjjxM7HeIN9bJsFVfRryJHB4RLuxJ6vhzApnHPcQmeGL1qFvJkQlo6mlVjjbZkud3 BLIUk99zLh7U4Z75QMxiNcWZe0gnMLN9B37KM8tKzVGtNHfIX+3NJjFHP16f6+Lz6X0wHvl+kG/r U5CLOlulzTPaqsbmvOL4m0sevYN4u3PnjhFLkFDcQzrxDEPCMS/ehzwjkE/cY2UGIcUzC26U72QR thd5HpXwaHN8T2D9x/zYA5BrbkkHDuwJCEgS2HAwd6xpwQEMWE/66NU7eqt0nDHYSt7ICwQCgUAg EAgEAoFAIBAIBAKBQCAQCAQCgUDgpCAQxNxJWanHLCcKPBSXWyn225V17Urd9nJEp852qVjf6/m5 WLZVe+ohK/WQFwXsbm2K/ZREapRFajRk4SZmQ0rrtbQmJT3K+jWRICguITjos9HI5EGx/VbX1JVe /7Enxs1jP/7BNbRhZdZcWHJBEIBtv1xsClvIObEejx2T7QYEJ9YVpT6kECQOpA97CAX2qixtIGtq NcWfEzHUw6FyrB0tjpnaVupyn1iua//JUglyT/ujpDlCWcpQUHlQOxwbJ9hLnoRmrq6a5C1Epvay k0so1dnL5iJT8e/A1Ugk5JIslGO11yfCCutMLORQsKNwx7Udz8RWzy6iHKfkrwV/3/izhotQ3DBO zzxM5+WCD2IOa9CBrj7htDED1tGTvzPsXtleZvHl1Mhr0gQMiQU5K+ui2TkI2WXDvxtrSo2VXV0e 9X59lHRDdubhR/G+eO37l7Xmmr1ZJGLJw6Unc6nVcuww5sSMcI3KvsNylP3ue8X3C+88T0VM/bp4 djn93GrnF0d0hlAjJh1x4iCY2PfEb0MOnhXIKubjcxk+MyxLyTER1v0tIgsSy/HjmW1tkCOS+Si6 Zd6sIcQcXzTAco75Q06SxzuE5L/HIDDPjp01bCDveP/tZC13FDJHn4FAIBAIBAKBQCAQCAQCgUAg EAgEAoFAIBAIBAIKTxUgBALtCKDURamJwg9l727JlbJ+pn0xkd+eVyzn2ss5+9FeZ7d7VzC36hUU +K28tgss5SCOyqujKY2Opfqi3H3JwmROSss5KeyJpUb8qkrX7ji0df3U3LJexFPDOuOh3KVBdixL OVxXvK+us+dS+cxoKunaXFoeI1R8jyM/xBx7vSIyAwJjXi4AcQW4rnhNq9oPxVhyuA2F7KFuReRG uQJhi/VcPtOvWRSylzFRksbfnwhRLsbMuYtLzmaZJ/xwgWrEHKScEXOyeBKBtCarH0i5KnJI0Q7F VKn0SKkuV46ykiG+IQp5lOwQNIzPnI5/goDi2c/xxYwkgFgUAbe4uJRm5xfSrTv3zPoPC9bBwQGb Em1aqTjN7fKpXCzTzYpIi9nZ+XT79t009WDGXGBigeeYIgs4bhqrNejBL+g3HxsWvyamMiFRigfv Ty/zdyPvOsgpZGRPcI/MTmySz14YVFt7hwsn9jhw5f6woMtkNOXFPcMY3PuYdlH44e/5olxb1m3K XWh6aJfId/78ebOQg2DidxVEG/m4bMRSzmWCfKMM4pp9RDnY8Mw4Xocm2GPqyPcBaw7ZNjk5ae9f LGexiAMHcPE1oj4kHmQmePDlAzC6cOGC7aPWC+oxyR/DBAKBQCAQCAQCgUAgEAgEAoFAIBAIBAKB QCDwtCMQbMPTvgO2mT+KPJS9HFxvl1D8oUQ26x4p+rj2+q7A3a5tMZ+6jOVk4G7jFtv6tY/r952c u6SkTIo1lkTANJbOGRGzsDyfJqcepDt3J4z0QFkPGSMbqE66fKrqsDVY82q1JiuN2XTr1p10b+J+ ml9RnLY+EZ4Qc8MjqUvEnEzIjh027JkiMYFCmz2Ie8hF3L8tL8mtZdUs1LCmhChbKa+aW1OznDOC DpJOBJ32L+QHfeQjE3OZljNKxPgh+AqIzPx8ZEIOUs6s5NS/WcmJbFnnWgckHeWwS8RM6xGZDEkF KYe1C9dYyxTnceyA3kIgcCjJhScuFrHsGhkeSufPjaWJyRFZQa0YcfbBR5+YNds9EQ/EirNnXFDS dq8pr4BaqTEWsZDvE5NT6b6edfYvGI6OjojYOJuGh+TyUOvIGh1FotcW+WbzyePkZ0kkrN6l7AcO f48WZWGPQsxBstCG/cb6c5DACYIZshii0/PAoJjYsxyeaEdfJK59TM/zep5fPPs1dZiNzShPy5sd 6pm9DzmHS0viqUG0QVKBC1ZjYMfcIOE4kI+4dOBFu9NgKca6QLZBwnEwX/bx+Pi4EZFG5Gve7Av2 Cmf2FnUh9SAs2UuRAoFAIBAIBAKBQCAQCAQCgUAgEAgEAoFAIBAIBB4vAkHMPV68j/doUqKivORw BS2KP663Syg5Sa5Q5uwKXe9ru7bFfOq2K5bblcHF+rtfax4Se3vJcw9dImCsloiPxtnVVBcRs7i8 mCZmZtMHn9w05TbzGWlaV3ThjnG3TncX7tTUYL1Rgs/Luukj4fXehx+m29OyQCopxt6Zs6kCMTd0 xmL4SeN/LOftex3lPdcot9mL3ea2Uq4t5SpvVdaAkGQtAk3E2VrVrexEiDTbZKu5DWLO97BvGW3z JjnHc9aMJycMa+s5JhiKdAg5YstBLPjzRT8V7VWU64MiHrCSGxJ5BAmB3MiM7BwnLUHM9fRUFENu KF29fNGsLnFPOKc9NXl/2qznJu7fVxwsrY/qMkNw3HdS26qI+CWRf7iwxNKzv783nR8/l65cuihi bsysi/La5ffhvsfapiGxC3EpaaSrdgTvP9aaA+LED/aD7wPKfK8iG+u+XQIf6nDsRrv4nkEGT7Tb 6v3t+9FlLcpNG0/Wk/qzf4V+vfwwzowHAcVeua/9AU7nzp0zws3low4Hbh2npqas7tWrV60ez8xJ T6wdBNvly5fTBx98kO7du2eYQFI6acsa+VyxlAMrMDkt5ORJX8OQPxAIBAKBQCAQCAQCgUAgEAgE DoZAuV96kXPnFUolh3E4WG/ROhAIBA6KQGVYntNOgc7loDh00j6IuU5QekrqFJWorqR1pe12EFDO 4Upcb+f327XbKX+3MXdqSxlj4yKQtGGtZLeP/hABg9vBJBdg5fWxVDMSZindk9VcXYrOFRF1uD4b lyUPJAiEDUpNk3FDj/1ov1vlFDmTvbbdqr/95B2GDM0+UIRDIBCj6/79qfTJrVvpY1wDrolcGFEc o/GLqWtkLHX1D6aScDvouu5nup22QTYOFNhFgg5rEhTcKP9xbbkmBT+kTiboskUb7ZwAwMrKr22f QCTRd1MQtiVH3Szmmi4LsZZrkjIQCo06T2Lmf7GQ6xZ2yIAlzMBAvx39+uBJzDUn5RjrJCawEDyG EZZ/z16/avjivvNTWV/Ozi2kmYdz5lq0LCytsk0UhPaZxNiDP6QYz36vLBAvXhhPL71wI734/LOK VUbssUzS+vtsnyNt24x+bQ9BxCo2Yb7PZCxEN0QSB9d+UId1Zo/a3gK4ZirK6eQZ+84Tl2BN8nxv 4+dcuvmn1yWX553D89pJw+K4DEW/O/W9eaS93yEHz8WlS5eM0CSuGsQURJU/F8gLjhBSyILrRggp 1rz1UO596GPVAhxw03nt2rV09+7dNCvLZebrOCAs72kIaI7uSne6KAIaazkn7I7VhEKYQCAQCAQC gUAgEAgEAoFAIBAIBPaAQI/0TuWX+xQaJMfY3kPTqBoIBAJHgECZ0EboXSLtikAQc7tCdPoruPoW xaUrMlHgQUJxv1uiDoo/zkVFbPF6tz4oR7FLP7RDYegK4E7aensUkiiysUihPRZMO/Vjcc9UryQF b5eUm401ubNcW02LU410Z+FhWoMcULyrseEz5koP94WmFGfAPXEDQhmgDWxHnE6eUDLZmxMQ3ntK TfEhFla1Xlg2TUkZfH92Ls3IheUaMeXOX0rl8QupS+7mZHqWvykhnI9r8r2a90y2pOGaOFyVMq4t u6XsF1mi58IIk+qauW9lz9dFpNWaHwDzFDMZhyVY3nuc88xtHMHtMea497HZUDamrDLdAg+CIZNy vaZox60q98jD0U7QHFd8d5crkyxYrWEtiHUi5Mm9yfuymFssvFv2uFcfGbi5EFoQrO8GcF85Mpye uXo5vfTijXT1ymVzDZoJC9bmkQ4OJcNiC+odZeSc1p13H3uJA8KL9yAH107UsU+Qi3XfilDZ2Eeb RfS9l3M3P4O0yXu0vU2u52XI5+9n26MiCD0vPwO53OsDm+/xvb0nN8ux2x3jETvtypUrRsbNKb4l v7t4Rnk2kI058sxARGFRB2F1Wkg5xwccmBu/s7EMxLUnzw1fKCCxVtTBfef4ufF0Vu5aebdECgQC gUAgEAgEAoFAIBAIBAKBQOCkI0CIGgtTc9InEvIHAoHAU4dAEHNP3ZI/OuGSiABX3qIMJv4Mykyu Ud65svXRltkqgnxXzhYVvVzvJblC2smGncYt9ks9FI8osJHdFfndUsxWZB1Af9snKaDVvkQ9hUFL o2P6UUo13a9O96RJkXOzt+6m3vqtVFHVMtXtHz1qfjtNMeu2rb8MsCwLAZrxOD+xhNxth09kp/m4 vCY6VkcKzad+1pS/oj201juQaiJWSrKUq0DMCcuuXsUFE5kAasc5+Xr4XmHvZhIEqbNFHJYmuFN0 C6ZV7beqCDpzcYnLwSZ5sRE/jrYZ0Nw/mFt3/sP2AlZbjMt4EHJOumG1RTw5SAWuySduGMr3SmXD daXLzmgnMbEViTVXEYkO8Yj1GvPDShVXlnOyyFwW2VITYed4Hmyewltjdct9Ju5Ax86OmhvLi+eJ yzUknPm1mNftYOPs0FqTzvsEQiu/v3iH8R71g3t/J0I0cc/a+95k3ff6jm2XaKu943l+pk1RFvYq vxcY2w/KOVrPD428/IixRE6smXHniAtHfgfYlzPYWEp9+qbWkNYVAs/JbCs4RT/AAOzdhSUEJV9S Yf/4fgEjLOs8HmVxfU8RFDGVQCAQCAQCgUAgEAgEAoFAIBAIBAKBQCAQCAROBAJBzJ2IZTpaIeU8 L9VK5bTWpXhaXVIOV2v6xv1S6l1vyO2VSBUp/XZNKGGblSCuSBs5+c4yt/zhLWjX7KWTMZt90RrX dChjsZZYkqu6andfWi9V0prYI8ij3RLWMwrilbrk0lKmNCKTZC0ICTPVnZanJlNj7mFqLC2kxuqK 2CiZx2u8LOpOfTcJOCnTu6QcLmHG26Oz7t1Sbze5Dr9c8rJWxNQTqdRYWdacdMg9ozTrFCntMCeK tDaGlzBOcqlYGhpOpeGR1EU8ubELOnSWP+EuWaa05nrAiVQl27JIi9m19TSxtCoSbAcZ9zkWPRrR AMmg9c3uKptkiZ6FmgiUmvZUtSzSWm/OqvbZmvZetVFO66lshIroOcGYY8NliyE6RSBZJnHSD1OI g6EOYhaWZZVnpJwRboptp30IObRe1v7j0JjLcndYFi9VWavprL70jGLNhzLeXLHS9xGk+8traVH7 Hfw3P895sIyZiHltnKrWZE37aj/JH/cGpI/2zbnz5dQrImF4dMRizOFGFNeTh5WMmBPGuAa1eH0i bQY0bpfyBK+tfXPZOh4SjNZ1gIO13bVl3gNFgsT2hDBgP/ieYI3J93oQYH7NEOzZ/aZiP96H53H2 a8b0cZArk8Q9RhQ6GUd76nib3J/teu/6SM6MhwxuSQoB55ZyDAiZeVoJuSKg4MDaDBBfQVbK1ZGq kaXUoQwMwGLz+hR7iOtAIBAIBAKBQCAQCAQCgUAgEAgEAoFAIBAIBAKBx4VAEHOPC+ljPA6K5GUx BsuyeJrDLIwYWooTllaXjEjYj+ioY/evLt7HiFIIQ4SYcrLvjLlPrIrQWF+piljoRKEvJTSGdVJo EifMCCXF8EqKj9YYGE7rk3dT9f5d4SJl55qIrJqILBTiO0zSyDeU7N29qTx4JpXPjpsVWUmK0yTi T8LuY6KH0ARSUdaQjYV5zeleWp+aSHURHxB1Rs4xqR3mlYlLEQf9Z1I31nEXLqcKgXYVV648OCRC biC7EdAcDYNDEHlZa4ibzFsLy2lAZPGwrJ2OItm0ta4QDLiohGSriamBpMtWQZl0qxn5Blwi5LSO Na1zDTKvofo66iK4qQ+Q+R+PUt6f7FGITSxVIdeMmGOfiBznX5eIvnJVZIPGKGtNymLkcMlqJJxM Nm1/skdpf8R7aHJ5Nd0XEQr+25GhYAYhtaI6Sx09a9usnB4He2+AvfZOj2LODYtM6JerSfDHwuyw EmsAnljmVTRGl8arso42zv5GASPI41X1sR1W3nPeA1pDyYDLU0/kk9g7uFzEyokvG0A0Yf3kclPH iTKu95J8jO3aPEqu8aoqGakDsQMBBvmFbE6GQQhRp9U387B7RtmY33ZjHjTfx3WCrojNJrkOOtAx b284CO6KCGYOx+FpwuCYL1GIFwgEAoFAIBAIBAKBQCAQCAQCgUAgEAgEAoGAIXA02u0A90QhYNYu Up5WKz1ptbtLSnZxclVZqIigy+TC8Z6OK5IhKrAKIG4UQSaXxBisyLJoDROYjlImTFJJinr1ZeSc iLou9VeSK0FpoVNJFnV1EVpGYkHM7ZQgT7B8kUVZeUzu+UReVUbPGXEFMefK5J26OPwy0URY9LC2 iwvy8yarNrmbrC3MinBcNWJO2tydh21iU9Gcuq9eT91Nt5VlrOeEf7aS69DScueRWqVGHovwmBMx Clm0qBhkR5Vs9pBDOsDKLOdElEDUufvBrPDmHrpN8bYkzLqIiLqOmoiWOuSccFIvRsy5rJmvgFTL 1nItizlIOR3agSLkVFtjlzQmLh67umQdpzIInC4Rc7SBgHgc+2dmtWpkG/jr/6OJPB2UUQersYMm MBKsRl5X+kSeNXo3YXjQ/r290UUajH+sm60pe5857SNhnQsGkJSs+k5pSri+P7+UZlblHtX2i1qo LfuL/YZ71CVx/wupJ811D6YlGadCzuWExNTdaYRtyjRpm3fz5za1LJt10CZr1Xdyp0fvwqVyf1qo daUZCdlfX9brbM32JZXzviylBRGVs5onz+xW6c8/mUg/m57bquhAeVvBkud8oG5PXON2HJ4UBj9/ MH/isAuBA4FAIBAIBAKBQCAQCAQCgUAgEAgEAoFAIBA4agSCmDtqhE9A/yti4u7KKmZBJJb04Kku xXBdSmDc+fk37o/1NNBAisCQel2ERTVVlhel1F+WC8tMGDyQcnhPCWW0CDVpmtWfyBKRcyWRcrhn rC9cTfXlJVnMiRjahYQwazH1YxZkkHNYk4nYK4kANVeQexLqcCvjyrJ+RjINDaXa+YupvrSY6ljM KX83ZqIEJrKc6dKcKmcVR27ojMjL7LZSE8uKedPqH57MCyIqcJOIkv/O4kqqiJg6sqR9I9rDumf/ G1fTZEGckGuN3azrdXJ92nj7R9XhDk2plLEuiYkrlda13ajbJEJazXSva8vVhV1bPSdAWpIcyUXG fD2tYLHVnFNxoFVZ9a1X6+mtmXmRTGtmzVgs3/c1888Q7ruLx90QfFa0R8Hsjt6nO6UP5pfTnPZ0 HxaTzbW2Pcd+Uj98IcKs5ER+VUuK3aj3j++p3G/elzuNsWWZ76UtC3fJbO4/szSUL9fu2fXUvTQr a87F5jOf2+e9ClGbsbit53WrBGETpM1WyEReIBAIBAKBQCAQCAQCgUAgEAgEAoFAIBAIBAKBwGlH IIi5077CHcwPBWpVrivnFL/rZCc0+bIqWXXLkgPMxpTQkHKyejLLNxFRfQOpMTKaGiKHGiIkjLHZ iT2ApJILQiP2FFuuSzHriGMHYfc4rJ12mj1K/pLk6YJwFLFWV3y+htxb7jonIHY8FDePOHJJ/UBk uqXMTuPutwyyg2NBIk7tt5Mn1q7JvGwa31knP28qPDE361iI6RmA2OeI1BkCD/VlAVxflnnP6N/m lPeE7wxF+jTrQb/fXPfx38ELl2r6od8bJb03RMFtIQS2onwxQmQlJtiRAoFAIBAIBAKBQCAQCAQC gUAgEAgEAoFAIBAIBAKBQKCFQBBzLSjiIhDYAgEU51jP6VyWlVhDbi1bVmVSOu+Y0GDL6s6syGQZ Y4SWW3opWwU7Nj+6QpFy8hWI1V5DxCFx9bqkZDcLwN3mZGLneZW69PqAkGNOzDVSIBAIdIQALi+J RbgVLVfsYDNFVyx58tePEoobMrncnCHnIgUCgUAgEAgEAoFAIBAIBAKBQCAQCAQCgUAgEAgEAoHA BgJBzG1gEVeBwNYIODmHpVijnBrdUjR3omsWV2XKa+OsuDku5JUJprlmck6ByzYs5Tqcl7VlPsdm TlsvXeQGAscRAcgqcXNKnTxwx3EGJ13244ppyBUIBAKBQCAQCAQCgUAgEAgEAoFAIBAIBAKBQCDw NCAQxNzTsMoxx8NBwIgocVGyNuvY2M24OPtxODIcdi9NYs1Op2leh41T9BcIBAKBQCAQCAQCgUAg EAgEAoFAIBAIBAKBQCAQCAQCgUAgEAgcAgJBzB0CiNHF04TAHki5EwXLaZ3XiVqEEDYQCAQCgUAg EAgEAoFAIBAIBAKBQCAQCAQCgUAgEAgEAoFA4JQjoOBQkQKBQCAQCAQCgUAgEAgEAoFAIBAIBAKB QCAQCAQCgUAgEAgEAoFAIBAIBAKBQOCoEQhi7qgRjv4DgUAgEAgEAoFAIBAIBAKBQCAQCAQCgUAg EAgEAoFAIBAIBAKBQCAQCAQCASEQxFxsg0AgEAgEAoFAIBAIBAKBQCAQCAQCgUAgEAgEAoFAIBAI BAKBQCAQCAQCgUDgMSAQMeYeA8j7GaKnqyuN9FTSWF/3fppHm0AgEAgEAoFAIBAIBJ56BPor5VRS GNVIgUAgEAgEAoFAIBAIBAKBQCAQCAQCgUAgEAgcFwSCmDsuK9Emx2fGzqT/8TPPpsX1WltJ3AYC gUAgEAgEAoFAIBAIdILAjeGB1N0VzFwnWEWdQCAQCAQCgUAgEAgEAoFAIBAIBAKBQCAQeDwIBDH3 eHDe8ygX+nsTR6RAIBAIBAKBQCAQCAQCgUAgEAgEAoFAIBAIBAKBQCAQCAQCgUAgEAgEAoHTgUDE mDsd6xizCAQCgUAgEAgEAoFAIBAIBAKBQCAQCAQCgUAgEAgEAoFAIBAIBAKBQCAQOOYIBDF3zBco xAsEAoFAIBAIBAKBQCAQCAQCgUAgEAgEAoFAIBAIBAKBQCAQCAQCgUAgEDgdCAQxdzrWMWYRCAQC gUAgEAgEAoFAIBAIBAKBQCAQCAQCgUAgEAgEAoFAIBAIBAKBQCBwzBEIYu6YL1CIFwgEAoFAIBAI BAKBQCAQCAQCgUAgEAgEAoFAIBAIBAKBQCAQCAQCgUAgcDoQCGLudKxjzCIQCAQCgUAgEAgEAoFA IBAIBAKBQCAQCAQCgUAgEAgEAoFAIBAIBAKBQOCYIxDE3DFfoBAvEAgEAoFAIBAIBAKBQCAQCAQC gUAgEAgEAoFAIBAIBAKBQCAQCAQCgUDgdCBQOR3TiFkEAoFAIBAIBAKBQCAQCAQCgUAgEAgEAoFA IHBSEGikpP+kRoPrer4p5e9Pl0ql5n3znO/iZyAQCAQCgUAgEAgEAoHAKUAgiLlTsIgxhUAgEAgE AoFAIBAIBAKBQCAQCAQCgUAgEDgpCEDENZqEnC5r66mxrkPil8rlVOoq60KEXFcplZKIOuPmgqA7 KasbcgYCgUAgEAgEAoFAILAbAkHM7YZQlAcCgUAgEAgEAoFAIBAIBAKBQCAQCAQCgUAgsF8EsIhT Msu4ei3Vazqqa6m+tprqqxzLqba8bGRdqbs7dfX0pXJvb+ri6NFR6U6litQ3WNOJn4OuM+Juv/JE u0AgEAgEAoFAIBAIBAKBJ4pAEHNPFP4YPBAIBAKBQCAQCAQCgUAgEAgEAoFAIBAIBE4tAnJRmV1V ykKuScjVlhZTdX42rT18kKoPplOV8/yMyutGxFXOjKSes+fs6B4dS91Dw6ncP5Ag7Uoi5xpdXU0j urCiO7X7JiYWCAQCgUAgEAgEAqcagSDmTvXyxuQCgUAgEAgEAoFAIBAIBAKBQCAQCAQCgUDgsSCw yTJOhJxcVLplXA3LuOWltL60kKpzD9PazLSOqbQ2fd+IuXURdRB3JVnIdUPMjY23ju4RkXPKKw8M pnJfvyzpskVdCUs6ub7Eki6HpAtLuseyzjFIIBAIBAKBQCAQCAQCB0QgiLkDAhjNA4FAIBAIBAKB QCAQCAQCgUAgEAgEAoFA4ClHwGLG1XPsuHpdbirXUm1FRNz8nBFvmYQTETcDETdjFnM1kXTUgbRr yK0lceeS4stVRditTNxJFVnJlQeHEhZ03WfHUu9ZyLrzRthhSVcZPGNEnbm5lBXdJoLuKV+OmH4g EAgEAoFAIBAIBALHGYEg5o7z6oRsgUAgEAgEAoFAIBAIBAKBQCAQCAQCgUAgcLwQKFrG4apyvRgz biWtyzKutjgvUk7uKmdn0prcVULIYSWH28r1hblUX1lO9fVqSiLxIOTM3aXNsqSyJZFsIvRkDYdV HG4sIedWRMZhSQdB1y1Xl90jZy2/4pZ0sqYry+LOXF6K4MOMzizp8o/jhWFIEwgEAoFAIBAIBAKB wFOMQBBzT/Hix9QDgUAgEAgEAoFAIBAIBAKBQCAQCAQCgUBgDwhssowTobaOZZzIOJFtkG5rD+6n 1SkdDyYzCTc3a+4raxBxWMZV5dJShBxuK42Ue2RoSDoyRfjV5dqSulWNsay4dCL2Vu5+alZyFSzp hs/mWHRjF1LvObekE1knSzrcXZqbS+LRmTXd8Y9HByYNIyo34vIZPE0i1ALrGTZF0JTRlpfdeoqX pJoVe53NFR9BxMdRs5J3og5KNKfMypskqq5LlNm/5kCSHfntgLC167Z26tfWo9KTEiQq69Td03RJ +ohEdBwpEAgEAoFAIBAIBE4hAkHMncJFjSkFAoFAIBAIBAKBQCAQCAQCgUAgEAgEAoHAARFoEjVO ykActWLGiWirYRknd5RuGQdxtvYAd5XZMq6KZZzq0AYSLlvFNcmhZt87Sqg6tGk0ZFkngg4ru7QA sSNLup4eWdINpu7h0YRbS4tJhxXdqA7lVc4Mp8rAkEg8ucPsV1w6SKBKJRNAkEkQTy3yaUcpHk+h SEjceTZWl1NJWFUgsER8GUz5R4Esg3RzHDNpVqS0bGoFwszXzzpj2vpHKrbJDF7uk/KNPjIBZyRb DetGyEPItnrqkgyiPUXc5TqJ/bGuuII1kal21n2LbMxtGnQsK8ikdamLQG0MDqekdWpofVJZKjrK IwUCgUAgEAgEAoHAqUcgiLlTv8QxwUAgEAgEAoFAIBAIBAKBQCAQCAQCgUAgENgTAkaIQaZADolU g2gRcbS+MJ/WsIybnkyr9yfSqs7EhKvOPZT7SmLGLZuFmxF4VVxVNq3A9jR4W2UjphAlE0eQRCVI IOLYiRhEluVPe1OXXFliLYeLS2LR9Z6/mHrOZWs6yDri1ZmrS7nIbGBJJ1rpWBBBYMx8lhdSQzH5 ekV49XVXUhckleHPvEWClSQzvJXBABmWr9XaLrjPR5NY041hZkRaxg5Cskv51GulJq6M5eWM1apn lm9aR0g2HZCspRYxp7CAatdFnZr2CAQqFo6sDdaO2jcNI/Qg9VRH/SZZyNVExlVTLVW1Drgsrels pF3TBWlLtrgIBAKBQCAQCAQCgVOJQBBzp3JZY1KBQCAQCAQCgUAgEAgEAoFAIBAIBAKBQCDQEQJN YsYtq4yAEalSW10xK7WaYr6ti3SDlKsSM+5h0zJO1nHVWcWMk7tKrOcg7nA/2UpO+LQyDulC/TZk uQXpB/nD2GYBJ1IHyzjcXK5OiTS8f1euLnM8uh5Z1VWwrhsaTmVi0snaLlvSyY2iLLjMvaLoqidh SQfRiJvPdeHZNXUvDQ30pYvnxlIfVn4tCg1CLcuXreUgFj01STfdUh/yzubRKm5atDXLu8S45X9U yG29KmPYoTpGBFob1ZGMZvXIGSJO7RhHNFtSND8j6qzcyLsmQQeJx8E+0GHyqlFdRNyqXFkuVPrS XKWcHjbW00J1Ja2oz1pZ1nRuOccAkQKBQCAQCAQCgUDgVCIQxNypXNaYVCAQCAQCgUAgEAgEAoFA IBAIBAKBQCAQCOyKgJFcmWyBmHPLOKzf1iDhiBmHZZyIrrXp+5mIE0FXk8tFYr81qlhE5ZhxTuzt OuZhVoD0UfKx6yv1VJVcZtl3/54RdWZJJ0LOXF7Kgq4PS7rxixaXrvuMLOlE1HXJiiuVRTM9bks6 MBd5VRf5WZ24k3pufZjOXb6QXrk4mkaH5K5TxJWTaJBt+cjEWybfyMuAOvHVqmfZj5a3CD76y03p sNm3E3OymBMWHNaf6lGXsbx/7ydb1jXbe51mv7lNLqM+q1XXnBdX19Lk/GK6PbeYbi6upLtry2lG pN9yRSRlt2rhdvS4WDQ25xKn44vAHzx7MX3xwujxFfAUSfYXn0ykH00+PEUziqkEAoHAk0IgiLkn hXyMGwgEAoFAIBAIBAKBQCAQCAQCgUAgEAgEAo8PgTYSC+u2TMStmAvK2hKWcfPZMm5OpNzMg1TF Os5jximvtrRolnRmCfX4JO9sJEgui4EmKy3cKSoknUzhLK5cV++DVCH+HS44J7GkO2dH98iYXF8q Jt3QGRF0cnU5MJAqvQMi9LIlHUQdyUgwWKlDTpLYZMbasC7sG8K4Z2wwjcgM7fJQf+ojPl5hXJOj KU/x2sVqz/N7yv2as18X23k+ZyflWsRcs43f086vvZ3fc/ZrL/M+aQeJuiJibnhhIZ0ZnEsDMzoW ltPNlfU0Xa3Lcq6e1hs9qYH1HPgzf45IgcA2CLw2dib9/vUL25Se7myeJ56v3VKn9Xbr52fTc0HM 7QZSlAcCgUBHCAQx1xFMUSkQCAQCgUAgEAgEAoFAIBAIBAKBQCAQCAROLAJGWskSSVZJRshhpSUy CDeQxIdbU5y4TZZxiiNXXZg1V5bEcmt4vDBcVeLO8KQk4prVGtkirUqMvNm0Kss0XF52ifSqnBlJ PaPjsqBTTLrxSzoumPtL8iv9A6nULTeXcr2YCaJsPXaoJJGZkCEjJCkx2YS1YrVBB/ZLvtFRWfQR E8/XbxvcO1HMt9ehT09expmjnVijXjG//X67dp7PudhmQHPr7e0VMTcoy8DBdGbqQSpNTKfS0kp6 gOWcjqos5xpyMyoAGN3ax49AIBDYQGC398JGzaZVcTPDn8dieVwHAoFAIPC4EQhi7nEjHuMFAoFA IBAIBAKBQCAQCAQCgUAgEAgEAoHA0SLQJF0aIqYg0urrivulOGbEi8PqzeLFLcyl9fmHsorLceOq WMjJfWXVLOMWzDIOizqxQkcr61H3DqklsosjQUZqPIspp1hmZc29+mA6rU7LXacIu+5RWdLp6B49 a6QdMemIWWfuLvtkvQahRwy0Q7Ska9QhTGupIp+Q3XJdub5WTQuyJqtWq0bKdYscrBfI0CKhdhDo turHiTT69WtX4vu5WFYcv1hezG+/ph5x7iqaa1nuQ7t1mFWg5tj/cD7dWqqmqdpakv1gWtX+rTU0 /y65tjTrORu9vcu4DwSeGgT8ueW8rvezHzW+bMG7Xgdl+TnL1qsVuYaF4OddwrmYOn1ui23iOhAI BAKBw0AgiLnDQDH6CAQCgUAgEAgEAoFAIBAIBAKBQCAQCAQCgSePACSUkXGQUbLCEhlVN7eOsoyb nzW3lKtTk2nNYsbpLMu4deVjOYcFHURcK2YcZJD6O42pYXOriqSUInt1xcjI1Xu3RLz1pXL/YKoM y5Lu7LhZ0PUqHl3PufMWo64ioq4MQde05OpCyd2lOHBYhDWtwvaMF+slnHt7ulN/X19a03o9EFk4 NzeXzp07Z4r0IjFH/66c3/NYe2hQHIP5Fe/ppphXvPay7YYq9lMW2TYkq7myyM6+7koa7u9LQ5PT FnfunqwHH2qdlnC5WpZrS+LOCetWsLvtBoj8QOAUIuDPDYT98vJymp+fT9PT0+n+/ftpZmbG7pfk jnhNFs68LyDgeuSSd0Duec+cOZPGxsbShQsX7Dw0NJT69K6BsCPZ++sUYhZTCgQCgeONQBBzx3t9 QrpAIBAIBAKBQCAQCAQCgUAgEAgEAoFAIBDoAAHIphwzLlvGYRW3Lqs4CLl1uavEGg4iDgs5rrGW W1/EMm45NaTsPa0k3LbQQWK2W9JJmV2qPEzl2QdpDUu6qXuKQTeWekbOGjHXPSxLOpF2uLrs9rh0 xIGTJV1J5JJZdW074FYFkkEWcyWRc73dPWlQfTXq62lufk5Wc/OmZMfK5UklJwMYvxPlvdf3s8u9 XVvycZs50Ncri8FRWQxmgu6MLOeG5hbT3ZVqul+tpQURxmv1nlQ3QrQQe84HiHMgcAoRKD5HVT0D 8yLrb968md555530/vvv2/W9e/eMoMPKdhWraL6QoXcbzxbkHAQcRNz4+Hi6cuVKeuaZZ9KLL76U Xn31lXTt2jUra3/HbPe87gTxHzx7MX3xwuj2VXjfqhTZ1iTn8opim/JFEOXxDsC1LV9MsC87KM+c 1+73yw7bSxElB0TgLz6ZiBiDB8Qwmm8gEMTcBhZxFQgEAoFAIBAIBAKBQCAQCAQCgUAgEAgEAicU Aci1ddxUNmPGrdy/l1Yn78o6Dsu4aYslV1teNJeW2TIO6zgpcYkbJ2VpJMGAJZ0s1tZF2NX+f/bO w8+u6jrb+5bpTTNqqCCNhADTjRsG23GNY5s4sZPwxd+f5y924tgkDriATcAGXKiiiiLUe50+c+f2 733WufvO0dWdpoYk1kZnTtv13eec4beeWWvPFwQxz4dsx9GQ7Uo86TqGBI/Mk25j6FqvbUSedMOE vxxWuMt+SbhKOGeW6lrICM51yWOsVx5jmbmZUJDny+zsbJhXHzBYY2C/FGP55cxpNO4vVkfr/dbz dDnutUuMiXsY5llTLy8IiQfdmoHJMHj6bBgYmwwdM4VwpixYWa+GouZHfE7GfIdz7fT0azePArwX 8b2ZF8Q6cOBAeOnll8NLL70U9rz7bjh58pSFvJ3H41fvRwRyrQrAtvBI7ZRHLpBuQJBu8+Yt4Z57 7g6PPPJIeOihh8K2bdvsO5P+xqSPW+tsd37PyED4zrYN7W41r8XxEH4Tz7902E3gIFtsN+6bhf3g ulDg3fNTDuaui5m4OTrhYO7mmEcfhSvgCrgCroAr4Aq4Aq6AK+AKuAKugCvwCVUAr6uaeccVThwJ hRNHw/zp4wmQGxeQk2dcFc84QZ66oJPBp0+oUssOOxrDG96H5K/Kso0nXEYebay/lx87F0qCnvMn R8yLrnvjltA3uit037LF1qPLyLisAss2FTPYfLDGnNZa6xaEq5UKtm4UYelmZmYVio5QjwmYi4bt WPZK79P1YxiP59FI3u485ot56BP50ueL9TNdH/k7Mc6zHpbWoOuUHn3ypOs7PxGOTM+F4/Kem6jU w5xAQ1kgs0YYPgtteRlhRBfrmF93BT5GBQBWhKQEtrF/++13wpO/ejK88Pzz4dDhwwpzOy1vM/1B BdStmfSduuC8eUP11BT+Ul5qhfkwPjZhUO/DvR+GN996K3wkz7vvf//74fbbb0/evxZAtlDL5R/F /sU179I1ci/eT1/3Y1fAFbh5FXAwd/POrY/MFXAFXAFXwBVwBVwBV8AVcAVcAVfAFbjpFTC4IUMu AG720L4ws/+DUDh+RJ5z4wpTybpx5cQrDtikzdMqFQDWoZvW4MPToyqvxJLgXFbrN+UEzXq2jsqr rkNQbkCedQppKWC0iH28TcNJ3RmBuZwK4dVSBewpkFtB6/6xztzQ0JB5k2G0jiCrTUVX/FIarsV2 o+E8fb5YvpinXcdiPfEeeWM9eM/1aV0sIGW/9oOCc4PnxkKPvOeOz1fC+WoxzCj053y9M1Qba/2J 0LVAiliz712BG0+ByclJharcrxCV58K5c+fDs88+F/74xz8EwlZWLFSlxmQfGcBc4o3KzzSmi6PW q5X6HukPDPSqVATqJiYmw9tvvW1hMCcmJsKX5D3Ht2bLli1h586doU+eq7yLVyO1vv9Xow2v0xVw Ba5/BRzMXf9z5D10BVwBV8AVcAVcAVfAFXAFXAFXwBVwBVyBxRSQ4RWoUQMcCc4RfrGsNdJYX45Q lbq5WEm/vlIFGuBIsdcMdFKsNp8zL8S8QlhWZqdN/yCDd8NOvrKamRrmR/ViAsczLo/XnM7n54sy nk+EtWvXhsHBwatmJF9ZR5fOFSFcNLhHyLZYqZg/3qdc+lpOQCAvLYYHMqFDxwbpFIZveHI6HFFo y1Olchgv18KcgGZZcK6eUwg8editxlMxtn3F97yLeu9qxbLAuML1FeWlynNB4jlKrqwxPgAAQABJ REFUjvRT6+vlcwK88hDsFuTVxhhYc7Ambyg2K8fzobwZeRFmdT+jMuRb/XqGzYYXDugPm9pMQ3vz EM1FD6Z2uGehCj+6cgrEd+DEiZPhiSeeCK+//loYHx8Phw8fDefHxpI50rtiTM6abcxffKia9xJg F+vjEbJZbE4lB5lQ1jN25PARa2v366/benPf+ta3wmOPPdb8Y4D4Tl+5USY1Xa16r3Q/vT5XwBW4 ego4mLt62nrNroAr4Aq4Aq6AK+AKuAKugCvgCrgCroArcC0UwDBr0Kgig77WjuPYDPrXovFPZhum LwAGvfFiuVTN5f1FXXXtMbh3dXVqKusKYZeAOUJaAuputMSYovE9/SzGa+nxpPNyPebPC7qtkRcP a2MN9vaEob7x0Hd2LPROzYZjhXI4V6mFaeBcB/po8TnoJiIukAuqu3aJeeQ/AY+qQgdWZwuhNjuv 80rIGF8TVGn0RuqEmtYVrAPkdA1AB3zjPZZrZgiCehngnJ4FIEpd92odAnl11uGSOfNyx2nPnPoq aGgAH3hIW/RB8E/0T6Q49nYJCW3Muq+9UUf2Vkw/+He5/Vyi6ZvpFs98fO5nZmbCXoWafPnlVwLv f1XPBN8Ewrz29ffZNwJdK1qnbWZ2LhQF8Xl2WJ+xp7vHAG5V62TO6t6cwldSb7fWr+R+XnNb0zlh La1ufbtOnToTzpw5G7rksYu3HNetLzalC+/xzaS3j8UVcAU+fgUczH38c+A9cAVcAVfAFXAFXAFX wBVwBVwBV8AVcAVcgctSIDHqJoZdrKnaPF19BUznqDeaX4ruwBGFyBSMwdOqQ6EsM4o3h+F8Zmba jORlGeBZl+lapAgHYlsAgPS19LlBF0bdeN7ieSzLnnvtrqfzxHzxWmwjK9iAF2FvttvW4EObXnkU DmqdrH6Ftjw0XQgnSvNhWrqVO1l3TnDOoJIRuljdtd3zOAhy1QRLwtx86NQ+p3PGkpf3X4fGA1Sr Al81r8UgMNalua124zIp8KYh6J6VacCyqq4J1YUy9fKIqR50uZzEvBiUK6tmeSDmBDnlr2ceefSv rjbq6kxdx4sm6gBI06+Ghx/n4McMHneai6ytBYiH3xL1LNrAJ+OGzQVapt4VjlljDihnhFPgfnhk ODz88BfDjtFR+x6cOXMmvPLKq2H//v0Kg9sZPvvZz4Z77r7bIBxwb/fu3WHPnvfCvEIa33nHHbr/ mbBmzRoLyfv+++/LI293GJdXLqmi+SN0JdCOZH3ie5acrugdtoL+wxVwBVyBFSpwbf6vZoWd8Wyu gCvgCrgCroAr4Aq4Aq6AK+AKuAKugCvgClySAjKgY0N38/clqbfqQuicAKcF0VervUzx5k3FWoBF eanM14phaKDHPGIKhYLgXMHAXFH3MbxfLoxZ9SBVIA0LKJ8+55i0GHhL57WM+hGvxbLxerqOdB68 BbnXJSC3VmCuT55z/T09oU/Apys7FvITM+GUANe0+JJ8g0Il06k2ZO4DBBlUWu2sxB5dxl5ApT5f Cll5zXULfHXrrexQX7oFPnrllcR4igIhk7pXUb5ad0lgTuOUnuA2IbrQo61L+QBaJeWd1f1p5S+h B552Vs8l9pF502aengq1mVUfOgXmOtUWnn1VQb9yXmBI1Te4TNuGmCegXFVgr8o41L+66kH2jOog PCeDyeANWCfU6McwF217fv1cREPAO1t87itaF5SUvBNoluhGWNuvf+3r4ZFHHrbvwd69e7UG3blw 9OiR0Kv34qGHHgqPPvpoGBjot7XjWBPz4MGDgm7lcNddnwo/+MEPwtatW62t3/72t+HAgQNhQuvZ 8TiQNPv2k77Mz88bqAPWAcT5w4D0O2oFbsIfzMFi6ZMw/sXG7tddgauhgIO5q6Gq1+kKuAKugCvg CrgCroAr4Aq4Aq6AK+AKuALXhQKLmxmvi+59sjshI3C1OB9KUxNhdnwszGTKYW2P4FOfPI1kEC8J eBQKcwpJN2trPgHmMA4vZTy+GoLG9qJhuvU8tsn1mCdea7dvl6+1znge9+jBunN9CmuZHcmETsGp HoX97Os4Hwa09txxhbYcK9fDrFBSOScPrhxwrrHu3LUGQrx0AlY5ubf1CWoMqN9d8h7r6+lUOE4w XSbMKlRlXWEuZ+QZWVRe6AhYJK8f/co/orH1q56crs+VKmFM4KskiFbU+PCs5HoENu00bndNT47+ SyCPDhIYWK6GfLESeqyviReeMGEoSDMFSLRsZG2XmuvhqV8VeQfW5jUmQUQS3nLmPad9TpuFGW1X ySf8GtAdQHbs2DF73/Gs3Ldvfzhz9myoAHhtnhORioJlJ06ckIfcgdCp5+PIkSNhamravOrKgnBn zpxWXfvDQH9/GNPadGNjWm9UUI4wmMladYcD7QHeTp8+bcc8d0kTeq7klXfi+HF54b0i2HfMnhTC yI7uGDWgBxy/mVNa6wvGucSrtmgZVbCSb+EF7Vylk6X6uJImr5dxrKSvnufGUsDB3I01X95bV8AV cAVcAVfAFXAFXAFXwBVwBVwBV8AVaKMAxv5MVuBGQILwcVmtz1XX+lsNq2ubEn7pchQg3KRpLYii RZ2wwqq6BvRYacUymNcwlE9PhtmJ8TCVrYb5of4wNCQPK4EnPF7wmpueng6Dg4O21hpG0ss1tK6k e+k2FjPMkqf1XryWLp9ur11+7sfrsVzrefScA9D1yWMOD8Iu4JzWXetlPz4VjgswnauVwpQAQ1Ge ZVW9C/UL5ifdk6t8LGN+Xs9Ij8Bcf1dH6FYfB3s7w8hgrxqWF1KhFGaAd5r/+NSwz2t+GdOwYNaw IE1O9cxkywZpxoo6AeLpuVkqxSeRfdaey8aTqWJ1XQTOmTccRIY+CKb1qK1+QKa2OR2Xla+kjToW bQ2oI3hUEzis4TEnQFev0Ii2XDZkNQ5AHQCPS42uLNX1T8y9+JwTcvIPf/hD+N3vfhcm5b0GfMdb 7dSpU1rzTR6HSqVSKRDOlNCVv/nNb8Jf//pXW0duRt+FI0ePWkjUqubx+eefDx9+8EHoUDkAHLBv VuscAvjeevttgboxA/y8S6dOnZZX3ZiFrszp+9XZ2WXfHNa2+/GPx81LjnXq1q9fH/75n//ZQmDi ORf7fbNNFN9atvT40Im5AIjneX/1DW6Fk/E7tRo90m20K3cpdbarJ1670vXFepfaf3f7xvDZDWuW yuL3rrICTx0+HV4/k4SqvcpNXXL1DuYuWTov6Aq4Aq6AK+AKuAKugCvgCrgCroAr4Aq4AteNAjKo Z2SQzXb3hFxPnxkY8Vgxi3jsJFb2K5VkKF5VuhJtr7ZNOni12hW8yAJBpTcQFCi6evIgRCLjd32+ EEoy0M9mAHEKyCiw1NHRKUNxYhie0DpQhLEbGBhoAqxVab/KzBiO2xlzo0E5fS9ei01wb7Hy5GmX P15P1xvra7cnX6cgwRoZylmzrVegbs1AXxg+PxEOTc6EE4IS4zKyz+U6QkXrzhHZktCKq5+fdq2v /Br9BCTmtOX1vHQItnWp30Ddkua2Q9cjOLNalV//Qqce2h4d9Cl/h0gaYKu7mDNot7QPW/K4s8Ie Bk8gHyE0c0BknfP6sGKZUJm89LTpKvPB2nKdQETBtHo+K83oM6h/+WTQDVDIRgMqZBBO3x5bf07P sl1YvqpPZA681wBorAd3Vl5ymzdvCXfffVfYuXOn6XFcHnLvvfe+haYEjI2MjIRNm26x0JJj58+r zDk9Q8mag4ODQ2HjLZsE8LvC3Oxc4LuRU6jLalXPUm+fINsGwaUBA1AAp9MCfXWB//Xr14V77rnH IByNnjp1MnwgwEfdmzdv0rp2DxscvJknaGpqKrzxxhvh8OHDtrYfT39Vf9gypxDDbBs3bgzf+MY3 wo4dO+yd4b0B3LHZc99GHMLQxm8A34H4fYv7WCR+E+Mb1zznY3CZKXpIxjpXWx395o8gVhvK9J6R gfCdbRtW29w1yw/sZl4BrcwhULant9d+r1yzTlzlht49P+Vg7ipr7NW7Aq6AK+AKuAKugCvgCrgC roAr4Aq4Aq7AJ1kBjHcYZvEiGlkfemRozXX3as2nghnGm9ZyrIcyJmI0X9SSuJyOaisaDzHAryhZ e+Sk7ebJioqmMyXGzEajK207aZaWbezp+lZz3K5trgF7utZuDJ3DI9JcIQqBP6tIDAMoIr8uGYPL giUl89Aoa62u6J1SLpfkMTel6wUzIGIovVYpzlerIXmp9imzmvxL1dXuXrNPugnk6mh4sdi6c1p3 rVcwq0dw7rg80s7Ji2hGYEgBFgWkOiR2A85dAYN3u761u8Yc2+OqH+jC/AHjAF+ELWy+T43C9lwp r8E8gTIt9WZQz/LyzC31DqG96skKksl31qBcV04QU98HwKA6YGAOPfJyxcNTqqL+AAjZOtVe1aBc AhFsHpd6ZekL92Of6B/t0Aq7CxIZL7p4QY5P8kmEAzt27gj/+qMfhTvvuMO+l3/5y1/CpADbuLzd NmzcEL7/D98PD3/xiwZL8I77t5/8xNaZ69H3/6tf/Wr43ve+J++2IQtV+fOf/1whMc/ouzETHnjg /vAj1XvrrbfaN+bpp5822Dc9NRm2b98eHnvssXDvvffY8/nqq6+GH/+//ycPvbMqmzwAV/Odvh7m /bwg57PPPhtefPFF81LmO8MGOAXi3KH52LJli9by67XvMHrU9H2p6A8r7B3QIOz3TGMw9mbbO55A 0/hdxCMyDenIztxzHQAW1/MjT/Nbp7YuJUWvSaDjpf7eoA8bNmywDTh3MyT0Bobv2bMn7Nq1y7xL T5w8qef/3rBN74ena6fAzfFEXTu9vCVXwBVwBVwBV8AVcAVcAVfAFXAFXAFXwBW4jhQwk50M6h2D w6F/552ha93GUNW6ZDX9BXjTYK7+mvecDFJ4Y9n1hjE9MbsuPaCmWVDGQguXiaHQtqXL2V01YJ4z MawmBs8VFCNLs121lVHbsi6qWe2bN5aqSJloS+02PQcvuW0BHWubccc2kz7l5ImC5vmBIYXuk68T /VxF6pDXXV3lyhg9K0UzEs7PFxXOskvG2m5BudlAuDtCWvJX/Rhwr0WKhmTaisethuLW89iveD2e r9So365cvBbraD1HD0Jbdki/bnk/DPb1hTVnzoXBs2Ph4NRcOFVWKFA9A/M1eUbkuyy0pc3RJRq7 45hWsudRwUBvIE7t5RobY+Eae/27IDVey+QVFRSp6QKGZHuGzfRPjW2S8mXZ5AmXETAINSCcnn8t WpftwMNQhn9pVVeDFeXr1vVih0J+4u2ZK8vzkD5Rb7K3/rVp5qJLGb3NNlDGIpjAebOHduOiIn5h cQU0NQbD8NayNfzsm42m2nTTYJDCg+ZyVVtbjvx2j5/6tlcVtrKi+/bMcLNZlOdIZXSfrXnfyukP A+yeQpLWspbPHkCqtgqo2xqyKzfij+X6TxjRQ4cO2UboYKBWLINWQLPjWn9v3bp1ph/nJOao+bi3 CJO838nbCuCjPuAW8C1+zyjCd51rwFU8uFjXj/o55jopnd8uLPODtvAIO3jwoK1RSp1xPLEoX5Ll fhvze4dyw2uGre+x7I28Zy7wCH3ttdcFsYc11/PhJYWHZW3GrYKvlwoxb2RNPq6+O5j7uJT3dl0B V8AVcAVcAVfAFXAFXAFXwBVwBVwBV+DyFcC4L78rAFF3fkvoXLvB1n2SNS0xxMngWqtojarZ2VCd ndZ6UDI46lrz/op6gNFdxkEZ8bNd3fLO6w35vv6QAUTRPjdbEiCBdmsKmVadU9vzgoUYJ3U9Gntb irQ9tbpVf9Jun7WdUx8yMnAycv61ptg2XoPV2ZnEe1B9Sdpuzb34ubUt0EZ7WYUHZdzWtgBHMmb1 QMdZGVANyunYhFq8ygvuUEdeUDWnNcg6ZJTN1ROj+qzmamCg30LSzSokHUZijKwYSQFR1wrOXdDZ 6+AEA3Gi+wIo4BqGVNbjAs51ai0owjdiNu+Stn0zhXBGYSPHq8UwK++WksJbVvUcS0SDzKuZr9VI kIScjI8nD2nyoGIIt+e2tTIYChBGd+siZAAuDW3hPbX78Z3WnvfIHv+kXiE3hb2U4V9wJic4Vy0L ummr6JGsdeM/J11YS0wehTrV8AXRxJDn5alZ0vegy2CNPIQEdSq6J3wTakBm3m22xRJ9pCNKTcO/ rnFliVKW338kCkTdAJv79+0LP/uP/wjDw8n6XCcUyvLEiZOCZXXzYPv1r38loPCqfQPGx8fDhx9+ KI8uAbX6nNaYe8FCMQJ0+Fbs3btXUGbOQNLbb71jnnKEwwUEHTp02NaYqytUKuEbH//FL7TW3VrN WcbWnzt27PjCfOrZupET+kaN242Db0phrmB/AMG3FSiGlxxALm7ATFL89lKG705GgDt+k9NAJ90m xwA26oqp2R/ea90HFsWwk9TNHAIBh4eH9QcH+v2jdzJ++2Idi+1j3REurlmzRn/oMWTPwWJl2l2n PdYlpD7A7c2QGAu/S3lvWEORdQNrtT5bxxWI+eCDD4Z+ATpP10YBB3PXRmdvxRVwBVwBV8AVcAVc AVfAFXAFXAFXwBVwBa6WAhgJBRvqMipma/rLeAyp2FJlpK/pr8FrUxOhNH4+zB8/HMo6rik8osG5 VfYnp/XU8kPDoeeWW0NHv9b3As4BOfBia0l1gbCywqRV5mbC/ImjoXjutHny1WUUtv615F/qFPiF R2D3hs2he9MWHa8JeUEyWURV7GLzv8HH6YlQUQjIgsZcGjubwDmMq9HGfHGxtl1A1441I6Frw6bQ s+nWkFM/0EFxAK1tM5YKpCSefCusNNUSIQ1zgkk98vQSM5ERVOEXZ6ZlPB+RMbdfW94M7zMzs2Y8 xGCLIZh2owE2Vd0VO6T+9EbF8Tw2kjZEx3vszWDdUj59v91xukxsK7bDPj1WjmMd6Xtc65YBfP3w kK3nNtTfGzZOTIUj41PhqDwPjwnSjotGVbv7Qq1LawMqb0Yei6os3dQVOI7vH0968h+Pqbptxnmx EPN2qmmubVxk51gAkXN7j2X016OhTWEo0dQK65684eoCMWz2wFgewlaG0M/4yas2p8v1MD5TCWUB vu5KPhSpX3mG9NwOKVzliJ4roeZQVEjLyUwtzE4XwpzqnBM7mBPYK3XmQ1V5WHNOE7qkRtZngSPr WzJIOt4YW3zhroCsN2sVmhcSSlX0jSrI45n3nsSakxEKseccD9qcnts5wSQgmz070r+oP7oA6hMK l9C3pZL+MILnSRWX9T0mP+8IHnVAGwNFajtpM6kXMEdZrlGumRp9bJ63HKSzttz62E8Z82LJ3j/d 5F1k3T00HugfCNu2bbMiR44cCQBQ8gHr2NCcPdcoQ8IjjcQ1vmXxexbr5178ZnEtfZ15ANzRbrZf 60+qbubn3XfftXVF77rrLgN0scxS46GddMJDD0+8GIKT3x+k2H/apV7GTZ85jvXTLyAW10mxfTu5 QX8wBsKWAqNZt5WwryTGfODAAQORDuau3eQ6mLt2WntLroAr4Aq4Aq6AK+AKuAKugCvgCrgCroAr cLUUkGEpkxHZkSE+miHNAwejmwy9JYGx2cP7Q+n8mVAVrKuzNs5qkurHS4517LLyOureuIlVu8xj jPCWrYm/RgeQlSfGQuHEkVA4Jig4MxnqjZBeiRk69rS1dOpc7QLHOteuNy+hXKMPgDGgSjQipkqo jZJA3Hwoj5+zdgsnj8prb0bgAyM2JmS25dum7mxnV+hUqEpClnUoXGXnyDqDche0rXyXkoQuBFGC wghmQ2+fwjF2ZsO84FHiJVfS2LTul9qvCpRgrJ8S6OQv/DECtxt3ug/LGVGXus+9WD/7eByNzbQT ry+3T+dNH8c64761bvKS4v3kLPnZ7lr6PgblToGhkR4ZocsC1eY5WQuF0qzghdacE5ioaj5rmT4D X1c9tGV8PGzPDxnm4zU9ihaysESIQcFswbmCnofJToUt7RSQVu7ZOQGXed0rEmpQ5KxQltefng/B mxwhKDXWHgG0tXp+BlSW9eLOa4wAt5LGWdHzQzGuDwm4berLh43dmTCU7QhFSXQmWwtHBfzG1Ycp tTGnPsxXVA4bfpdMp6J+xt4Xe87RUu9WtSivVLWrl0x9E5zQ8VLPWXrOPsnHwDBLgkO7btsZ/vVf fxRu27nTPlGs9/bzn/8iEGpxw4b14e///tHwuc9+zry69u3fF34hT7eJiXHBl97wN3/zN+Fb3/pW GJRXHPDhf/7nf8KEoNK0YN39998ffvjDH4ZNmzYJyhTDc8/9Qfd/qW/NTBgd3R7+5V/+Odz5qU/Z 2oZvvvVm+NnP/tPKrnhermMyBzyL3mOt4+FbEsM8AqsIY7l169bw3e9+N9xyyy2mIev88X3q0x9P 4HFIPsrxbAO+gFrsgaLoTn143XE9pvjNimXIH+uIAAyvObzk8HDj+OzZsxZykXruuece83qLHnux 3uX2tEf9bPSbtdVIQCn6cPr0aYOCjA0vS0BdhHaM1b43yzVyA95Pz0f8RkWtbsDh3LBddjB3w06d d9wVcAVcAVfAFXAFXAFXwBVwBVwBV8AVcAUuUqDFeF6XUY+QjpXpSUGy86E4fjbUWDcGMCej3YoS dcoyX1M9pIq8x2olwT2s/ca4ImVI1yaDoAzAFXl/lWQ4Lo6dUx8Sbz2jBOmsixwnVcvAr5CZtI/X nAE26zvQRgVbxktV9AtPwbLaBgyWaFvH9Upp5WOmIhljc/KsCgKAeM0BONGTZIa9Nm3bzZX8kPYY AjMyxisaWujt6ZZBVyHUNDd4xbBxPzEaBzMsT01NNY3CGIoXM5pavam+cR5TPI57rnOcPk9fiwbM 1j154jWOSenz9HFyN/m50uuxP+3yx3vpetPXOGYzg3SxFPoEq0fEjicUznJG6/fNCBgVBUPwmJN1 WtUkHiHp+i7/WJrz2mge4npyALSsQBrXEtCVtIKnXA3opmerJug2RhhLQbYJQTZCVBZ1b6KAN5SA nL0UAgPy/Mt2K7Ss1o4jnJ6Cy4YN3dmwoUtr7smjclBrkM3pFT9XEkAQWFvTlQ2bevNhx2Bn2DYk r0Kd9wjIzfeoDfXznNotzgpMSJ9ZeVyJs8mNyBzf1F+NQ+3YQYswPFrWb/WxKoBYk94k+pbv1bsi aKfJaCnlp4sp0KWwhWtHRsLGWzZaFkIZdnayJpn4qP5AAWizYeNGhTrsDOP6rhqk57nS92BgYDBs WL/eAE4ESYRA1G3zmFq3bm3YuHGDfUuGhgaaXnldgv/DtLlho0Bv1ryzCA3bmuy5bb0Yz9XG1Ujp 97pd/e2+D+l8wDLAGmuKpUFZzIM32X333Remp6YNpnHOHz9s37497Nixw0AmkA2IBagCaAHNTAtN SvzOUB9hHwGowDPqIQ/zEBPfIwAh99NgjvqAYnzfKb958+YwovnYsmWLgcKTJ09afkDhRs093m/L jTu2yZ68tE2oRrzw6MMDDzxgEBBtgHL33ntv+Oijj+zZwUuOMlyj/8vNQbqt6+WYPgNk8S7FwzEm rjM+5pgxjgmkAiKZYzzlmAP0TifmivzR2zB9z48vTwEHc5enn5d2BVwBV8AVcAVcAVfAFXAFXAFX wBVwBVyB61UBDOoyArI2WsfIWgvHWBPUKtXPJevNWUhL4NrShnMLYSmjJN5iXevlKTe8VuuqyfCI 0VHGrXYJb6+sPAfyCjvZtX6j4OAsFnyFtxwXsFMYMPVjSYOf6qX+bJ8MyNb3W8xrLq8QmgZU0mSj pQM2ZoWb7FDYzS559lUFCIGB5Wm8+ACKiVdPS7HmKQY7QnQmujFmta2x4zGYBeRY283sl3SA4uIv pj2mWwzhffJ6mpYRHmPyvAAJBlsM9aTZ2YIZaTE09ivkGcZdQtjFlNYyfcz9eL7UPt6L+eM5e/Qg xX28F8/t5iX+SNcfq4j1x/N0O633yNPuGtcph0EauDUgsLRW3l9T0vW8wvoV9BwEnkGBo4zCOSo3 RS4vSSsLR6m13WryQGNjbaaK9oQPLJeTjaY4rupazcJXyrOswPsgQ7+uzeqBqJVDmFG5jOqs4MEm eFgG0PAfMU95BnlOtRHqUkxOHnCZsE4QblDj7NLzUazJK06PfjmbD2t6c2GjINw6ecGtUZ4BbV16 v/L6r7+3M3T3ywtzaj5U8CiU5xxPVkbtBx3zfLLGWeKlutBuIpau8/2QzuahSz48AlU2euwm+fzn YgpIreSW5pRweo8//nhYK88pdCSUIqDA1piTB9VTTz0tuLLHQM25c2cFU/ZpviphVmvM/elPfwpn z5w2WDejbwgQZtbCXVbDO++8G376038XeBk0UAGEOX+eEI3JGnO//OUvBbD+bB6krC93/PgJC4PZ 7HOjizxz7VL7q+1yrvzaYu/1SmugPF5nTz75ZHjmmWfsO5EGZYA6gAuehLduvdVgGnCG63v27NFa e6ds4x2L36AYxpI+8O2Ic5d8j+sGeAA5gDnq4tjyqi98i/ims4/10UeuAYa4BpijDfIAYXfdtisc P3HcnoF4jzCbQKJYhzWwzA9+pwAn+f1Bm0BE2gXWoQkg8L333rN6aRtd7rjjjlW1sUwXrult5pCx MWZAZJx3xo5XJHrs2rUr8SCU7ngqErL05ZdftrHHzpKfufnMZz5jsHY1msc6fL+4Ag7mFtfG77gC roAr4Aq4Aq6AK+AKuAKugCvgCrgCrsANrABwLNfTZzANrzM8zjoP7A0zB/faum/lyTEZ0Jf3IssL jvWN3q5tV+jZsl1hLDcbqMp2ypgPnGuTMvJG6gTg4W02JDi3bkOY/lCG4kP7bM23egE4tgCWLqoC Y6jKdimM5OCn7g+9o7eF7lu2hK6R9QbIgG+yGl5UjAuMtVPtZWRQ62R9uLUbwtQHb4e5owcV3vK8 IOHSYE5WPAth2XPL1tB/xz2h99Ydanuz2t5gei4FJNt2qO3FBGAANRhFl6BLrzzm8IRhWISbw6CI N0M22y1j4owZVTHOdgs6YgjGcE/CeBj36ePFrllm/UjnjcexTMzTbp82TsbjuG+Xv/XaavJSNuZn Tz/Zx2uL1R3vx7zdehZGBvrDpFzOuqflcSbDrazfKi7TuuRb5FFqrX7xcxnpDbLh+aawk/WiwJs8 z0qap3kqr8pLRuCsC88zzficPOCKhKQkf1YdIDSl+qhF8kJZeerygrPVq9Q5C3VpXVU4VdyfdJ8w lhmB3Jw2/bMwqJ0q06OtX9523QolmVfbmwT45mpZPV+5MNwhI3MQKJRBvqhvQ1Z50TOvCjp79L4O dIcOnefUJwAjwtQ0BrxEMyXa1KZ6DAzSaEzMh/pl3ns6Bhhn5HllD7bpmzyfMbvvWxRoyMN3AGBw VOEGJ/SeMzfnzyscr7xnSawhd+rUyVDSH1TkFD54Wmtosh4l0A7Ie/7cuXBQzwUgAW8hQENVkEfV CPhMCPIdNm8roMWZM2dUX+LdOCdP4OPHj4VZQRsS0AYPrush0VdAUbvEux09z1rvx+8ZoSX37dtn kAZdYn7u4yl1TpoB4AjxScKbijl4+umnLa9pqD5Qjr4cPw60PG7HtB89yqgPzfguA3nID5xjn06x X3HPPY6pm3L0BRBLyEk8JIdHhm19QMbBt5+xAOU2b9oc8nwD1IflEnkoy3b33XcrJOoGaw/oCzwE XtIuY7d29bt7586dpnsEWsu1cb3dB26eOHHCfocyt8wFCa2Zc+YQ78dZjZl7w8MjNl7yok+cH56R /fv3W5lbb9Uas/Z793ob7Y3bnwvfjht3HN5zV8AVcAVcAVfAFXAFXAFXwBVwBVwBV8AVcAUuVADD oYxsmaw8vWSUxAvM1pvT2musv1aZAW6pyDJ286y8tvAaA8r13jqqsI5rFeJRUA4j1SKGQdady3X3 2vpwwEFgVklG5uKZU6EypZCWWRmb29tbbQwYEwFzrOvWs2WbwTEAW65Xden6YkCQwhkZQ3NZAS2N N9/bbwBm/szJUDx3Rm1PLj1mG4/aVlk87no3J23jMYcHHXUDPC87yZhuYUZlQKzIgysIzHXI0BrX J8KbAUMpngwYlDGQYiTEaMxf/JMXjaIBkf5wnD6P12JfW+8tdb3V4BvP456yHMfzxfYxX2yrNV/6 frzXmrddnsXyxutxj25sGFQxfg/Im61TUFgB2hoeQcs8/LEzS+0butcF/VhnrTYv2KZ2ymV5Z9RL AnbV0ClQVRDkmpOnHKmgfBOzWvtKHmlVwlvimZbXC6H3pi7oVREAk7gJ26KA3lNCYrLhuWbea8Aw NrLKA85iUtquLo85sT55yQ0Jys3Jc05oTc9bOZyfKoWzEwptKCg3pEw9AngFvYgEewO6ZeU9R/jD nPppXm/m0adnS2vOZeT9hxddJq+9vPZYVw4AWScv8AQp1b7+JRvn0qa56dTTxQrEZ5X3c3R0VB5c P7A952+88Ub41a9+Ze884Obb3/52uF9hCDv1xwcHDx0Mv3ryVwIuuw3WP/zww1pn7isGW4BrTwku TQnGsGYlQOZ730vWTSsp3CjedU89/VQozM0GgMM/fP8fwu23327v87vyrnviySdUrx6UjzHxDQQm 8c0DzsXvF+8zxwlQGbZv5mLdpA42YBbfVsqSqA/d+S7gHUbIUPIA1/AqA8iRn7Lk4Q8kSK+//rrN B9d37NhhMI3wh4cPH9ZafxPhK1/5SvjSl75kMJ38tBH7zXGca+6lEwCP9lnjjWSw7PSpsK1rWxMU 0Sb9As4xdsAS41msznT9/JEHab1CnTLfrC1HG9TJswLEYowAW+4BqKJW6XpulGPAHOPid+entHYi 80ti3o8ePWqedMwbEI7f50WFvuZ3LXnRh8S88bsW71ID2dKQMKKerpwCDuaunJZekyvgCrgCroAr 4Aq4Aq6AK+AKuAKugCvgClyHCgDQspku8zQDVAHaAEyiW+otZvSlE3nzAmJ5QigKsgH5DA7I0LhU Ap7hOce+o39IUE2gjvXiIAlN8/1iYERGTJXLav0jwld29CmEpcHAFXoJ0DYwUhAvL7iXkyHTwlDq +rJj1rCsbUJxat0mQlgaiLxSUE4GP1n9ErAhL5iSvFsqssdmNR8YXNmASBikMTBynhcIwbZKiEuA HZ510XAaDb+tcxENtq178sVrlI31xOvci1usMxqAY7nF8sZ86fvp43S97epqzcs5KeZNl0/uLNxL 50vfowwGaMbaJy+1jpzWUBKs4j8rEzNf4r7JnwStgHJVNpGuqmBWTdB1Vh50OfUhny3K8D6nVjIW 3rJIiErKKNhmVnnrgnl1wbm6PNsyCjGYADjeA20sBKe9JivRgnfP5smqM687jTCU5a1WE0DDO69D z0yP8gwIQ04rROXZuXI4PD4fjk/OBzjehr6OsGlIwKJX4VP1vFVpR15xRPasC84ZmBNstD3hOQUY g+oh4REHjKsK8hiIVDhFQJ0at2c7o8+LhbKkfON555mnz57aKYAu9TC0ZijcrhCCd991l2UCTOHV BIAFCuzYsSM8cP/9BnFYe+5Pw2sEjvR9FajfumWrrZc2NDQUTgnq7H5jt4EeygL17lKdhEHkG3JY 3nPd+q5oQsKgvnG3374r3H//A1YX3na0yb2PMwG7gJKEI+QdBrLwPeRdBrCwFttjjz1m66Ut1U9g F+CLOoBs8ZhxUiewij0Qhmt8e+N3kfyUA9LhwYY326FDhyysIffwvmLPBvABavEHFISwpQ579hud Sx+n+xuvx3a2bt1q4wTC8e1nnMwfib7RB66zNuCgQpNSnrJLJZ4dtAMy4QHGWPGOA0QC7QBztEHb QCiuU2fs21J1X4/36Du/i5gX5h/oSeK54Voc32c/+1kb/1tvvWlrCEZASl7GjjZc43cxv3fRfTmt KetpZQo4mFuZTp7LFXAFXAFXwBVwBVwBV8AVcAVcAVfAFXAFbmAFDJLJIAWkw5vNvL6w5S1tz7MR myHKysq4GcuvpCClZSCzMhhGVdbgwgrajNVbv1VWcfkMlllfljFCWqetbUEMvJGabSfeErHuZr6L DtRB/gFB8M7T1gQiF+W9tAus9VfVX+lXZCCtTkyGuazAyPCgGRD7+/vMy2VO60Nh5KUzOfUB4zvG eIzIGBoxMJKiobDdnmsXXGdcXGuIcMG9Rl2xTLs97WGwxMAZDcIxH/fSx/E87rkXj9N7xseteL95 L9VPutsobXU0TiiZnDd+NppoXov9oa+JgV4QjHlN+NJF5ZsFV3Bg4EmwinXhCP1ogApQBaDSAoJ1 daaodhSk0qAr4JX/bJwCYDWcY9QXPDtzms9Mp541ebAhhmmLVyXUj1CX9Fd5OaZeG7eAixziQkUb /jAzkmJGx8N65rt0nBfooTpxmzBfV0hAhUCcmp4Nx89My0hfC5MCc8Vir7xJesOkMhUECfGsM288 hESnPHARyKAG2OMdJ4ioTgi8Uae85rQ+Xk2eczVCYOJVp6xyR0wg5WxJ1WhcKpPVswv4w7PPNKAN TzbXQDnmnfCCv/71r8Nrr75qyuzbt1+w54zeN4W1PDcWnnv2OQvLmBdsOK3wgwcOKjwvnpgCKS+/ 8nKYLcyGHkEkwAvrynG9qnn94MMPw3//9y/NcwgP3Xf3vCfvqwlatbB+Tz31VHjrrbfVhay8vw4p tOHpRr8+vgkCdP3ud78Lr0oLwBIeXYAzoApwDs+mhx56aEkwx7vO9xKvOL6ZADZACxt1cJ97fEup GxDDuxcT1/nWUZZ6eG63b98eNm7caBAOiEX5LVu2hB07dlg9lLdvzAqfb3sXGg1Slj5SP/0Bzg1o fVe8ufCQA64B5gjFSD68HBOIGnt88Z46Wa8OvSKM4xwQhycZ/WYcjJHj6KnN2NHoRkx86wnHybOC ZgDNOJdcA3hzbhBV9/CS5Jh7zHecPzS+99577bmIzwfXPF0ZBRzMXRkdvRZXwBVwBVwBV8AVcAVc AVfAFXAFXAFXwBW4ARRITI4LhscVdZnsGCu1sVtVsmJJ2dUXxlzdUnY1tnzrbyzPGFbVc8tvRlob e6P8atpfpDnqrMs4XlEYucLkeCiMnQvTWa1Htn6tGUcxtM7NzWsryDhbNEMhRsQueQxyb428ajAO ci0aENmTMPJiD072CQSKht/kGvcXNrEdMgumWCG7Rz142WCkj3m5xjFGSwyd0djJWLhOSh/bhcaP xa7b7UZZjhu1NB6TpI9JnmTqqIcjy4dHmY7k+Baz2L12c0y5uCUjxSON0qt9IJK2+Mk6ahaKVOt/ 1QqCpwArbWFeIKomMCf4VBOEqlaAZ/Iu6+oINYG3LJsgM15ObKwDxyJxBsuZjMZ4EKGm+jKNvlvL aGWbzrRnjTnaKWmbVTXjsqEPVrNhrS53aWz1HMZo1nsT1BYwyymUpdwzw/zMbJiR91x1Tt5DoRxK 2VqY6u4Kc5pvzPAorEObV3SzJ0ueb0D1KrDQwleqfwI+dT0LAEmuGZiTkdvGoF1VUK5KyFqWsexV +/3aFCoz0yVzrMYenxsbm/9AdQGSswai+gSieDonBe1Zb06yG2x7++23wyF5u+X0TLE+Fh5aFWle ExDe+9HeMDY+Js+uvEGGU7pX1HXmDCDD2oI9Pd32Dp+VpxdeQCTWL3v9td3hw4G9dj45ORXGFZYx ed906dJfE6vvUn8AiAgPST/51gHmeGb49gBJgCvsl0p8F4FwQCm8nYAvACiuA2u4R518Twn3Getj 7MAd7nF82223hT79wQR1EP6QfrEuGyAPCEr5W265xQBiLJu8CEv1bvF7wD48+YBw0WuSNoBpwDI8 9QCXXBsdHV3Wk4t+Mz505BtOXxkbY0HPQ/ICpN94zKEzGrHRFvlutMS87tq1y+YJ2BbniGf9nXfe MbAJjPvzn/9s48ZjkPG///77TQhKHcBYwlsyz+TnWeS5QEdPl6+Ag7nL19BrcAVcAVfAFXAFXAFX wBVwBVwBV8AVcAVcgZtaAVlm7d8lWmgpK6PXJRl4afJSy8Y5uZTy1i4VcECK++Tscn8CdWqCJBX+ Ql8G6LmZvNZ7KoTu4S4Zd/tk/JswKBf/Sh9jKoZCDKx4j2A05RwDIYbTaDzFhhrP02AtuZa6J8N0 XLMs5ofGxOMI5iL44zoJQy1GSgzcbPQr3rM5XkSY9L0LzLzMTdRWbXAGoOBaRnUL79htmjdEBDEi yQMsIzgGcLIkaFTPaH023Qcs0V5sk/5hhE+SWojPgzXNj1UmK69y8iALgnI5QdROwQ8FFw0dAnB4 hVXlkVYQpJuZLYaK2s/rWlZAint1zVudcyAd+THyJkNu9E19V32ZGAYSKkOKXW2MrY47ni4WdX9a pPGspOnuyYV+xtqTD/1aQ66rU6Hbaqpf/cnXtNaWoGFfXWBVW0bXZueKITORDzNdtTCjfpQEzGoA wkYyDQFwDfBo3nJqj/4ZLUJtaZ6VR2dOYThrmgPmirCxQo9JGMySnvV8JWTLGrfGBGy8kRIaxGf8 avQ71k072wSQvv3tvxUgudWeiT179oT//d9nw5yAwMjIcPjq175mISnxnD0q2Pa///u/Yc+7e+x7 8PnPfS584QtfMLACzHv+j8/Li+4V8wK6U+Exv/a1rxrsAcTghfZH3T8tsEWoRNocHR217wnedc/8 /pkwI+BkaeFxuBrDv6jOqHfc850j8e3Dewy9uAcgiX+QcFElqQuUB8wBnA4ePBgI9cl3K4aKBLYA YL773e8GQhuS4jpzfGuBX3jEDQ0O2R9GkJfvyR3SFFDGWm2sV0bfAGr0LflupjqxykO+63i1AQCp G285+kF/ouccwA4PS3RhDqNHX2tT9IcEhKN/6Bc1jfvYb+pgTCT0jWXtwg30A/2Zj06F+5yYGDeP QHQklOe7775r84+OAFfmEsgJaGVNR8b8gNZxBFJGzQn7yvUkjHRXExLfQJJcl111MHddTot3yhVw BVwBV8AVcAVcAVfAFXAFXAFXwBVwBVyBm1gBgJYM5HJXsHCARXleYSDGaIxXC+CtoGuAOYyBGNPx mMNwirGQPcZbDKuys5qhMaqF4ZUtDdXitXide+n7EcQZZBGYifeTfQL/MEzSZlV9L6s/mHu5xraa RG5DcIQ9BKwJsDEIoJrcwLQJhKBPTUEgqwJHtAFwy8pQnOvUscYnyJQtz4eMNlI9p3sdPQJAXcaL CN8XYRxjxhDPttBnkJadGROzSlbzQ0XpY66kNesE4Aaly1B3Zxjq6VL4SNa0q4bx6blwXB5LRfWl N48xHO85OZApjua8+oS3G7AODzrVlvQn6aBJImERONGX68AwztkLqtUVwrCCt5o2wk0C1LK98hAq dYTqYEfYONAZBqRtB3MmIJaTl2af2h5WCM1ct9rXMwBAHJssyuNOaxrKA69KOE08+IAxSXM8XKqf TV6BaMj8YFFVe5k6UJEQf6pfoVZrgDcVzlIHcE5jY428ZHzaW8Wc3xgp/Xwzrqub6hbC8KGHvij4 9il7B7v1zu9+fXc4ovXWhrSe2IOf/nT48le+HDr1fWDttfcE7j7Uvlsej3hEfeMb3zAggUfVMcEG 1s4qKWTuqMIvfuXLXwlbb92qZ7NisO7111+Xx90pAZv1BvTu19p1vN8ADdo8cODA1R3uMrWjd05h l/nG8e7yLQSWAKdIhGEESi2W4vcKIMc3k3HhGcWe7ynehvyRAcCGcROykDK0h4fh3r17w44dO8Km TZvsmeZ7Aqzi2wvQefDBBy1cIvW8IgBKWeqmLtLlPi+Mjd8H9DmCP77HXOMPJPjDCK4zT/QJ8BZB W9SEcTJGtEND+k+iryTqIMXfBYwx9jv9xxeW6Qb7wTgI/0xiXT0gN5qOju6w8fIssaEPYS+Bk6Oj o2FsbCy88MILNr943fH8oA9ziwc70Ba92TxdngIO5i5PPy/tCrgCroAr4Aq4Aq6AK+AKuAKugCvg CrgCroArsEoFEm+vWugUwOjo6pTRVGBEYI71nwBzbAA5jKMzCj2IHbW7u0eGV8IgJiEsE2gm0gPS MUNr2rMngQgYJ+MW80cjbDzn/sJxAuwAdcm1JOwieVjnCsMtnnaWGsbdVQ7d4JJoZMhWAGtzgm8E UBSYAqp19huEA8plSwphNz8hACYgJChX1b1alzw+AEKVYsgVJmyDYtU7e0O1d8TK1hTfsiTDdVnQ rKY+Mg4SRmpCUNKWRLFrdtw4WvVOemQF3fKCVt3yFBuUt9mIQFuX5qgsD7F6MR/G1ddO3dvY1y1v ts5Q1DxOqg/nVLaivmUI6aj8JHpk86g84lyc2bw3PcxUxjzpVK6mNQmTscinsMQab9pUIlvRs6H+ lOWlNqdrQ9350K2F5pi72UI5zMmwXMfbUHlZKq4kr7uidCoo5GW5UxANveoylzZgGhmtK/RTmtFf a6jZP+Wn/Xl5xwHu9B95svIINE9AAB3Pq3kHCvpRvqk9Y7y+E+8k7yEwiC0+S1ey12iWpIx57fzl L3+2dd649r6g25jWGeO5mFCIydcEzGbUpw55zB0/dlwh+U7Ycw0wwHMuevhMTk2Gffv2GXQAUh9U qMI/Pv9H84biPSAkJuH9NFvhtMJn/vWvLxkAAszv2/eRhbeM8KbRuWu+43nLC6zk5Y0JiCKsI33C +40NjzJAC9fYyB8T54AoEpowj3xLucb48TbDY47vGdf4QwhAC+XY843lmLIAG8oQEpE62G/atDls 27bdPOkANqzRhjce5aKnWbo/sV+r2fOsMUYgKyEYAZER/K0dWWvfguMneAaO23NJX1mLLibGgW54 9FEH41ltAujRJn253PGstu3Lzc9c4QUHgD6k55/QoAA4QrXyTgNc0Y5x4RGZ1dzdddddNt9vvvmm wTnK4z1HWeZ1cHDAwB1wjrm5Gt+Dyx33jVTewdyNNFveV1fAFXAFXAFXwBVwBVwBV8AVcAVcAVfA FXAFbgYFZCTNir70ytMlN9gvz6uCjMdz9hf5GPyAABgPMaxOTyd/oY8B8cLwlAnjSIzQgBrVKQNq YixMjNXRGNtqVE3qitAOo2uyRQNsPI/5ouTUZ3VegpHX6mAMAlNZwFxpRmEgz8vzbS4Bap2DAkJa A0kQLlMpCLqNh47pUwJ3MqjnukOmd22o4BmXlSeW9MrNjYf8jO6rPoBdkDddJdcjj76sllIrhoI8 ITC8R5BJvyuCFOZxZ4ZmjTkO7BL3gKyc7N34oXSpsh6Bp27BqHI9q2NBOQGuXhl8bx3qC329AgSC V9lCMUyqfxXAAbbyFFCweTL7ud1o9s/kVn7zHtQtqShddCAASCZb+03VTQq6VdTGrKDcuBaeG1Sn +jrJrZCX5VqYUGjNGUG7QlXwUk0DCoXqQrVDhYFoNEuF6AOcsy1pj8vUxD9L5FXHaoC5uZLAHNqq iGBKVkDQ1sBTeXuGpAsAklCeGeli42xUcz3ueFbo44cffmgQC280PMqAH1e876a5ZFV7J06cDM8/ /7yFTESX8+fHDMoAmAlr+MorLwuc7TWIQKhJPLvKmu9afT68Jdh2+sxpA0vz8pI7JnBX0LOGh+uB A/sFlYr2XQHU4Sk3NSUwp7ZPnzodXnzxRY0zCXM4NjYeWIPO3vOPaXJi2wCznJ6bSlXPmMYBKEEn IFXaOyw9J4AzoBvfToAWAJJQhZTnmwqkYyMf8AqAEwEdeTiO5+yBclwncYyHFX9AMT+frF1GndTB PrnHHwA0JvVS9FPRCGuj1xxQEhjEGqMkwCwQjnz0iZCWPJv33HOPgTTyEBIZzz4gZBogpbUi31KJ cQCw0OlGSfSZ+QXG/fWvfw173nsv3C3g9vDDD5s2L730kp6NknnCAS3RbUDwFY2Bb7fffrvp9dvf /jY888wzBja/+MUvNtcpZE6Ya55Nfk+vRs8bRcNr1U8Hc9dKaW/HFXAFXAFXwBVwBVwBV8AVcAVc AVfAFXAFXAFXQApgeRVEk7G3SwbPXoWoK09ULNwYxl48oTD+YVjFeJw2yGIEjNsCIUFUaEkCE5L7 XGufMFyy4UWF+5OqtPPkGudJGxHyVSoJicE4jbE7baimBfKvKFk+6lYb6mtW653lBOCypTlVojCK hKnU2mcibOqQ8hDqUt50mYpCWjI+wbw63nNavYy+xE3xE2VIV1hHGagxmJfU36IM5RjJMawD5uhj RcfzXFMLdV2rN6DRivreJlMcNWNJNkEpHYs7Jd5ralMthy5BqUGtJTegUJfZojwi5aGm1pUJ/dsk qzjWntynfqCXZLF121jfztZ9EwyzpEYJZYnv4YzqrcgTrqB7Y4r02U20SZUH3hUE5Walj7BoqAiC lqVDVf2Tm5/BtGyP1u2Sd5tBOqCcxmCAzg6Tc7umQ02Wee0YvBMkrMvrjmOgXLZ3Ye08sloe4K85 zDXq4fp1kHjuW1O8xppUTz/9tD0/rCmGMb5dWvE70KawvRa6Tpt45nzuc58XDLnFcu5V+1MCS9PT rGHWH+67/76w67ZdFqLv5MkTBtsmJycMnNxx5x3h0/c/oO9Gj5UBQEyMT8ibsWYh+4ALcX0yPOZY h25O61quXTtia6sR1g9PWUIj8s2Z0v0k2Qw2jq/sLupMre005BrvL2AIaML7DGgDhPF9Iuwg4MnK 6ymfK8zJ2/CwATmAC3m5j/cgiW8E5WiXuqiTbyyeYZynAZYV0I90v2K71PvnP//ZypOP8tRDaEnq TpdpV0+8dtFej6KFitVYSImX1qB5dlF/TLSBJuvWrrP28NZjjDyfhF/kHmMZHd2h7yRfvAvHEetZ yR4Ayhxc74m5Bcjx7BK68j0BOd4dwCK/T5kbwlKiDfNFiFDCf5JmVYa5ZeN54bniD2T4fQewA5YD 5rdt22bl+d1DO/G5vN61uV7752Duep0Z75cr4Aq4Aq6AK+AKuAKugCvgCrgCroAr4Aq4AjejAnAA jKUyBPfI82FQocKm55KQeawrh8cTRmW8IxIvOoWu6yDcZRq8JfAMeRLjNcbmJPxk2qsu3me/AOKE adQHAFlVnlOU1z+lC+tMricGYgzBbBg/MVZixI7XKEninDKLJe5bGzJqihIJugmuAXR0zh3qZOzq lU64bphLd7TGlNYy063kvgzOxGHM6Vo2AEoE5hR+saJ13YryRJsT2ytonwZzGFKBclNaj62oftRk bMY7zwa+eJdV92JJhRpjVU+VKdGHY9OlUQwQlRX46pDXj4UtLQs0UNTuU26RhFbJP4Q1iFdHL7zS yoTJlBdPEZ2ko/TICvxRKzVWRO8K2koqNy0vuVyZitQvaVpRmM+qvPlqCg+oDmldPnm2AeUE5HLd gmmEs1RfE0+5hefBOmz9Xhh30i+1D7hlUKrXvOHkFYfXXAzRyQgXHgurhEvXRWp9hls7hWcMnmpA keXyLvXst9Z74bk0sUSYxi3hm9/8ZrjzzjsFQ7LmyYbX3onjx8LI8Eh45JFHwpe0AWA+/PADeYId E0g7aODhM5/5TPj+33/fAB6hCwEMlOV9vf32O8J3v/tdA3S8w5R///33w7mz58LmzZvC17/+Na2x dp+FymW9tA8/3GteWLFfjQ5e9g4No04cpxPnvKf0jz2QhD1QBTAEpOKc7wRgjLXdCCGJ1xMpq5dt bHzMwCLgZd26dVYWwAJAiYk6gFZ4OwFCgTUk+sX1uMVz9vGY54BnAgCEtrSN996OHTssXGQEYmlv vthuc7y8jvamJm3G+7ZP3eOcsdI2ZeM3l3NL2uE5xziZY4AkesQ19egDv0fYox17woI2Pj5JFbGu pMYb9idzipcknp/AdCAcumxTyFO8TVGM8JRoxPvM+4FmgGp0weMQUAfgxAuVdydZ7zVZwxCPy1/9 6lfmcUdoSzxo+eMPwsoOyduOZ8bT6hVwMLd6zbyEK+AKuAKugCvgCrgCroAr4Aq4Aq6AK+AKuAKu wGUoUMfgqnBanTLo9ff1hrJCWmLwxRgNUGI9OUawVFIAAEAASURBVAysWcGj+Jf8GB9JGAGbxtmG lTWjdcwyikOYQLkLDb4YdROjMOvELXQ6Gny5gn1W2Sw1DcjJaRNIRKM4hnOMxNFQHPPHduI5xeNx 8x4XGTvry8l4niuoQ4JVdKsq77hKVeH1cnLzUhsZ6ZAtyChdk3+ZOliV51ylNBlqGUEf1qWblzdd ESApblWSwV6edxXFlSwJQLFuGobXaITHW25SoULPCSLNa606Lewn3oeRGoNqw9BN31aaUkU4TLQz q3qzBrN5ywMJj7Nkzb5krytY5tsm00sAFm86QBwwDfiWHKf3ibE5I7jWBGDROIxbnSYaEFtiwukc oFNk0+CermcIN6k177LAOMBcV7IOnK0LJ8hmz5eN0Xq7IFHjGp2nmcSuz0XGqR3PZnOzzGS9LhNa 8wzH9yp2Mj6z8f2IRnfy8uyTFt6/pBR5omdmcuVSfmYMLnwg4AZY4rnB82dGoWx5XGYF7/fv26/v BV4/XeGQQvXh2UNoSr4RRw4fCW+99ZaAfl8YnxiXp88pXU/egdOnz4Q9e94L58+dV+jLspWd0x8B UC+ecx/u3Wv1AAMBG4CvCI8uZSTtykRd4z5+T+IccB19+Q7GPQAReMYejfk2ssVQlHEf6+SdB5RR HvDG+mgPPvigASnGQ2hLylAXHoKEemQPUIvtc4++cR73HMcNzQE6gB+usT4Zcw/s2bhxo9VN+8xJ TLEs56wTWcXzV2Vjaj5PulTjxVLiPtrEtfAASM18saD29B3PLzSiXaAU8InyADmuAzf5Qw/21MMY 2eg3+5ja1R/vXc97xgqUfOGFF8JePcs8M2iHFjwTjBEPN64x/3EOd+/ebfcOC8ydVphU8qAZG2sL UhZ9uQ64ow3ejR07dphH3Zzq6m7oez3rc732zcHc9Toz3i9XwBVwBVwBV8AVcAVcAVfAFXAFXAFX wBVwBW5KBWR9lXFcC6HJF0xec/JqmDeDKSHayvLOmZfRL2NG1E55RBDaEgMhWzRisydFqIBhkg0v uIXEeeIdJzOv7id3Yl7OOI77eD1tjI73uNa6kT+dt935xXXSKIBJYSkrxZARUAtVGcLVjWpGEGFu UhBOII5+CcQFgbS6POPAUHXWy8pqHNCgxv26PP7w1KpzXWH5apliUpf0iRphlC1I17OTU+G8VoMr jgyFeqfWCsN7JGWUNiGW+4FcbOowBnZbk03nCZq6cE/oSW4Qmg5DPOvbsd4XHhyUZZOAyZ7x8E/n Vrd5xumevADTUK7ZPWAf3m2EodSxeaxpLDSJNqaf1Z8cs/6biIx52mVUJ0Av2yvYQehKgTnWg4t1 JcZ51WSVNVtsf2Bj149GYmoM1q2kbCz0Me0BPKxZBsSIz0q6Kzw3x2WMj0Z5PMyid1U6H1oDg2LI PO6tBnDYXFFG7R08eCj88pe/NKCEhIAk+shUsu7b73//+/D6668ZUGGNuKPy7ik1vguEVty/f5+8 qDoNXh07esxCVQKl9+zZIy+gCQtzyVjxNmMtOT2c8hY6Gp584kl5CMU15sYMQtjzyWAuNcXHQgOJ Y2TPBkACkKAte2BcTNwDhgAn0RWYFOEK9wBgfHfQOEK6WD8wGgDFOfNHfrwPgWdcA9rgEUX99913 XxgdHbW2gS0ktAFWHT9+3OANAIf6aI97eN8B34ByQD88GG+VVxZhE5kr2iEvnnTAnfgcpL+TjIWx lfVN4rtAHmAZKea3E/2gzahHXM8sjjXmYY9nHFvsZyxHWTRCZ/pEO4yPvPSfjXq5RtvU3dqHdDvX 6zHjZpyM+/Of/7yFZmWsrVoBS9955x3Lx3p8O3futHCXeL5NC+IBanleeHaiHoyZc8o+99xz5j3L MR51aMqzw1zHObxeNboe++Vg7nqcFe+TK+AKuAKugCvgCrgCroAr4Aq4Aq6AK+AKuAI3qwIyftbl LVefm5HBT3+RLyMp60JhgMbASPhKDKoYTLmGERmDYwyhhpEVQyF5Y8IAGY2QC8eJZVy37F683rqn jvQ16k2fx/ut19N5Wo9jmcWui0AZhMrIkJ6ErFQf+A9dIhGi43jLKWClrKSqUoZjrSWXHNNpriuE o24lxmTd1wlZowGa62hVVDtsCkgYqnlCNiq0ncActTbr43iphMb0Fw82wa2gsJhALolFz6yurLVH H1SzoAdTVBQUm5Z3X00uZezniiWBBoXrYw5LqoOSeLRRN0BO9VPQHGds8tQpZQGeJSEmgWgaV4Rp DThna8FZL2zCEdTmkX0Nb7myQlQqLyEwLa+AHjAuo9CTBuYQg35bHUsJceE9VR9bXW3RCyu6imc8 hzHFY6DLs88+G1577TUzttvQYybtM/JW3a91uw4p/B0G+YMHD5gBHj3TEgGDvvCFL4RHH33UvK94 3tIpeTbTVxY5Vh8BJTtGd8jjZ509Q8l6aWNhWu88AH+rIBDrXBEaFSiAR9CkwGJeHpC33HKLoMId Bl2AXfMC/IwR+DMyMqy1x24zmEC4WDxxz58fC/MCYgN9/WF0dLTh7ZUxcDWmsICTqvtSExrbc63H iW8X0IQwkEAMg1KNPzSwfBI+agTwIC/fGgDWyMiIfQM79M5OCCwCRgGpeIHxjuO5ltZbfMkS9VE3 G3mApuSjD9wDRAH9SNQFWOGbS37aph9s9JXvLfe4Dnj76le/amWBd5QDcgHn2ONlRf3oz54tJuqm ThLX1TurM8KzmDfuYz7GiUccICiOySpp+UE58tInEv1Fe3Rkox3O2UcgigcY4+e5Q+sI/1qqviFO GT/6A1y//OUv2+/N9LPBINAfLQhVCWDFm5Lfq2OCquN6V2LZ9BzEwaMdUJh3knlAN6AtzzTzHec+ 5vf98go4mFteI8/hCrgCroAr4Aq4Aq6AK+AKuAKugCvgCrgCroArcKUUkGG/jhG4VAz1vDw0MkC5 XjM6Y5TGyIfn3OBgXoa/Pl3vbxqJMQJimMZwiOE1GmrT+9brdDt9v/WcezG15ot52+1by8TzFe81 hkxWRuQGx9BpYsxXBQuGUbuYcJDG/XgvGv45t42G43Fqj3G23jEb8lOzgl6AKIE5jNcAFBpdQTJP NoCcwBkwrSYoV5/V/Am0VQXZyqoL2FaU0ZcqSwJ2HNteIOT05GzomS8JyskoXJDRX8dVAZ3sbJe8 BqU/c0nYSuBcnA/Ameq1ddsILwmAixCOczzlLA/CJJt+NhPVYP7nH+CtRllTUt6awL8GAKSAaktu 2f1mFcsc0FdlYdMP2rL2051YpoZrcTs+07wXJM55XoBarDv19NNPm3E9GYb9bHQrY+8dxnzCCeIx F5+9RgbbUV9ez9OXBAMAQOkUwUC7cjFfvIdnLB48//RP/2SAjbJ//vNfzLvt7NkzYYPC833n7/5O XloPCzqwxtyHYU4Q/9TJk6FH4XC/8jdfDo9+71GDBQCE//zPn8nz65jBmPvuuzf86Ec/MrAEmHnq qafkFXdc35LxsG10W/jHf/xHrTF3j4BVPrz66isK2XdWof1Oxy6ueg/EiPAngid0jGAKMBa9tBg/ +bnHHrDEPSAYsAMgBXBirjZv3mygDaCEPrt27TKgtFQHqZ8+kPhDB8IcUhYwhwccdUcgxVzSNrCG OadtgBUwh+cHgEWb/LFEDBcJoNmxIwltSBv0ebF5px/UT5vkoU7GTLutKT4X5KdOwB8pXm/Nz3tI PbEu8qVBHddpiz6woTfjYqxszBfaoEmEexe1cZ1eQEvmZnR01OYSAMsYmBv0i4lj8jJOxg7c5ncu c7xmzbBpwlT09HQ35zCWRTugONpRN3rSJm3xO5v5oT1PK1fAwdzKtfKcroAr4Aq4Aq6AK+AKuAKu gCvgCrgCroAr4Aq4ApergMBFXd5TNXmt1IiFKANqt9aYGxjok9GPMGcFGQvnZRjMGKzDKEvYOgyD GAABChhdFwNwdC9toI3dTRts292P+eI+bQDmeKXn6bzxOJa94LxRZ4RCdk+Nt81D3sa9hf4JWsU6 dJNjUrzGMUZYttzEVDg+NRu6CtIQjzldU8ZkI+MSCSiHhxwwrobnW0FbUWCO0Jqzgm3y8usQsBP+ C2XNUYeM7oQPHJ+ZD1OzClmn8jVBsLzgWFn1zCpvQRCOdfEymU5BQnnN0RU84OS9hjdTDE+5AOYA dOozMK4xZgSxIS8yDruXoDJlTIrqwTD4Z/1Xn2rqTwZvOgAfi8Qp36oS9SX/ks6stvyqGlt9Zp5z DOmEGQSkxHeGZ4I12c6ePSfvmSmBuWQdNxtMupnG2KrzRb2XxfQdHSeD5fk4p3qOKiRkXob/+Bwy j2vWJGAHkEOK9+yk+UONWNL6h/LQGh8fs7WsuDSmYwAKMieePhPhjNaLI1zl+bHzYU5QgNCoNT1v UxrHaQErIAvjnZmZtfEyJrxwgXUAhaSeSdOFNgATY6qLdehYYw4gVdIzfZEWZF4moTf9RWu89RhP WnN0RwPyRSjF/NAnrtE/IBlAaXR01KAKsIM+EoYSmEYIwttvv93qIV8avLR2jzpp0zwHpVFsg3JA FTzR6Eesg/vMFZ55QLy+3j4DnXx7Y4p14i1F3whryZ6xcg/IQ/0cxxTHzD5u3Esfx7zpPfdJ7Onn ksme1QvbbM1PPWjMFj20mS/6znMD8GT8AMkbKTHHQPFvf/vbphXzxfPO707mmfEyduaE5w0wh4cp cJvro3rWgHT8fuVdqNeH7Rmg3pg4fuCBB8zTjvoAcjyrgEza4huS1+8W3iFPK1PAwdzKdPJcroAr 4Aq4Aq6AK+AKuAKugCvgCrgCroAr4Aq4AldEARlnO2So7+mTsbUQKvKS6pEhF2Mwxj2MpBiiMS5i 8B0YYI2jxGhN81yPRsbW7qQNifEeeUns43G813o93o950/t2ZZbKzz3601pH+jweK5PlIxRkvMZe vTbPMLvW7ICu84+8/GfDi/tmpmY99KGkfOjbVZtXBMvGekpJwYUCbY4w5BJasioQV5vRnMyUBOa0 lWTkl0G7JjhXKeu65mte2+RsQU5teMIIhgjiTcmrrqTyBXnKMTbWmKsqxGVV0CajMJ1CMVorTiE1 OwQP+zq17pvWfOPcIJy0w8ar+swzjvHSZxsvnU0ft+l86pKBSEoQtlJQEBinCIdJ6Ex5ANaZJ9pp 1q3MjD1Vx0WHGqNliACCsta/dCUXlbomF2zeGv3C2P7HP/4x/OUvf5GHmbwm1QPmAtj9rtZeY94W xtnSd06tnpbrjVHEob///gfhxz/+sYDGoN3hOh40X/7yl8LXv/71ppdWo9gFu9g2YPTAgYPh8cf/ y4AemVhf7uTJUwYUzgj+PSXvvt27d8v4nzf49dFHH9kaczxvL774Jwu72a1vxpzWWzxw4IBAg74v AsHvvvuuQMKcQaaKwsEePXpMYG9c9WqNOYXme+KJJwS9XrTpA1AcP37C1rW7oKPLnKA5gA2wxxp2 HEcoyvcM+AUEmtE3bmZ2xkAT19giKAIWRYgSm+P9BYIcPXrUygC90qAs5mu3p0+Up0+ALeqIfeEe wK4VeFH/Ca0teOjQIXvfJqcmL/rmUif3+T7H7YRpVrN5aQVzsW/JNy2eLewXu04O+nk5KZanDY6B SXgeAqy4xnOK5owJoBphFuc3SmIcfN/ZmE+eFwvzqpCVzDegMXoc8kwCHwllyTuCHsBU5pFjEs8L WgFfow60AdBDN0Ac4TCZZ/6ohlDUhYK85roEdVWGvJ6WV8DB3PIaeQ5XwBVwBVwBV8AVcAVcAVfA FXAFXAFXwBVwBVyBK6WAjHYZha7MDq8LlVl5lVSLobczZ0bBzs4O81zAmFjUWmQYBTFWCyWY4RAD Y6uxMBoB2S9sMBKMgw2YQw2qi/CH/JdcT/IslFnIyzXLb3XEuhbWLVIFFxgfk7YWrqXP08eUI3Et Xk+utJTlPv1s2Detx42+JPnjvSRD8vNiAzZjYEsAAMcaV6Pti3PHnqT2Ms4C5mpzpVCZlHfSHN5y glqsEQeQE5grlecF/gTiBNOActQPsSqrXLGssnhHZgTE1Hbd1sUz2ibCKj3lhcf6clnW0uuRV4fq AMzJ9SrRh2FSHT/sINW3VR6idxbgJzhXB/6pXYOO6gPt1oF2UXDG3dh0kAC4dHv0qVE+MfzTP7p4 +f1MN3Mpx0AbjPNJv4K9T2+//U74zW9+Y+Ah9pc8QDkM9QxxqRTraptHYz5y9Ihg1Cl7zpI8dUGC foPqn/nMZ8yrhmcQkfCoaff8g0HzmvceGfkBDPQJmJCUS97f7i7Wo+yzfHjV4p3JVFAfsAGwQB7O E8BlTTbAVxIul/EC73hWKQzko50+hcOk3PTMdLPNZCzL/0Q+9ARYsPYaelEnYPF3v/udXWMc0TML aEf/6DP75P1sPPON5qLm9Ik+AwzR5U9/+lMTpnEvnaiXunjn04l2yQusoZ8AFb6j7ElRY44pS1hH wAvf22QuLnxAqIuxUu7ll1+2PWVIfK+pI/bfLq7wR3xuKd86thVWsWg26kPH7du3W+hSABOJNuM6 aXhaAubwJmvVcNGKr7Mb9Js547liThgbzw5zyXxFjYGyXGOeeC7iM4lXJudpOBefDzTkucZLDq0m FQp2TU9n6M9r/dKivNknQujU+8fvcU/LK+BgbnmNPIcr4Aq4Aq6AK+AKuAKugCvgCrgCroAr4Aq4 Aq7AlVJAxr2swFxmzVp5UBVDYaYQqgJzPfrL+8QQPyPPkmTtH/6KH+Px4CDh1fotlBuG02i4jXu6 htEwbgagZKDE8r5wrQHmyJe6fsH9VB1cTxtnMWhi2MXrheOYWg3QlLv8JEP4hbbwC6pUYDdZlJNL cvpR1ovbpF/Nvuk4o62hyAV1LXqi/PQhg2eYvI4snKVCPwKz6sAf2+QBV1F4NK0PVlQedE3+gVkE 4rgi77h6Fi84bVEbwTo8pFhXrp5V/WqDEWRkODYo14A31reLh7Zol5e8QduAWYXMzHYo1B5jkicf W7URRlONWxU2PkJcar4tn8aHFklKxmjHzAGbxkHdJlnyI9TRjRSzx7EnV6/KT55PvLUIycdzSjhJ vIDwgCJk5ZS8tRgHs2PJjtXFRt+az0uqdyu5R7tsJJ4B6qnqOQFSsTbdJOFndQ8DP546eN4ApWJ+ O5DGrDH32L88plCNu0zLl196yfpPeD3WmPve974XvvCFz1tZvOX+/d//PZw9d1YwSGvMfeUr4Tvf +TsDK0Cjx3/xuHQ4HWoa87333Rv+z2OP2bpt6PL73z9jYTyn5A22ffu28MMf/lO4++671b9s2P3G bguLeU4wY8VJ40Xnd955pwm/aIdvF2EnGTPfkvQ7Gb9daX25z3l6HuJ5vBfzx77F64CVffv22TeS sIZ8o2gD7ynAHMCM+eCbGsHTsWPHLA/9o6/UxR79gIrkw5uKulrbTV+jHUANKQKg2L+V7GmXOmgX D0+eDyBr+ju7WD2t/WqXL2pEfYTeBMrFNglheVLrFAK00RAgRR+ATzdy4v1iDOyBrIwLjfmjF4Ad zwPrBfJsMH7mDw3Iz5wD7iKcQ680nAP8odXk2ZOhphC2g4K83XOCgLmhMNM/GNbkF9YZvJE1vNp9 dzB3tRX2+l0BV8AVcAVcAVfAFXAFXAFXwBVwBVwBV8AVcAWaCmBIzXZ2hXr/QKjMdIc5AQw5VoUB /YU/xkLgXFXh5jCOyl5r5xjeMfgC5QYHZPRLed0s8A4hASCIflgbMkIaJqA9gIzto7dO3C/cAxRh uEzni+cYdAEPGDXjcRwQBt6VJnICKBI60qAinKpvsRY7qitcJ/VqM8Clvon8WOEMkEhxGDPEYiQB uAS+kjoSoz59jIZnxmPtas9/1rYVXO4HYqok2gmcZrvztiYboCrRSIZ8hSS1/tEnkjWUYB/y8F9W QC6X70qgm67RT0vct01nzCdwLKdrbGRpZEsyX6GfVKzxBNrIC28W1VfBxjAvj0BdyxqAkLwKb1mZ m9fzKWise3UgXWqek7XvpImM2DmBDOCjrY8nNlUvqzxTpTHZQGjPBsTuagyKxwThE++4F198MTzz zDNmWOeZNmCzf38oyABPSnI2+qEdTxZap4bHFUvJHOqwkT2dJ32PkJDNpEOpayEmX33tdcGW84Is PQYqu3u6w6OP/r0A2nfC2rUjzSLxwKZHugGHSOZd12ic9jjHE4iNPDFEaczLtbiZd6TVgu6J1yjl eDf4HjST1ZuzcoR5zWkumwNuZlr+APgB5ABsADj4fvG9AvjRZpx79nG+4j7Wnr4X88c8reeUidfY A+BoByh322232TEwhX4Bn4A0ABWAF0CGMhyjyejoqPWbttAPuHvkyJFw6623Ntehi23Fvqb3fCeB v7TPunXUGfudzrfUMXUQahMYhFcb33u+ufEbTNlYZ+wL52zxfKn6yUP/+B3DvJC4RhvohD5Dg0P6 G4GavTMrrXepNj/ue2iX9p4DvgGQmd877rjDnhPGz3VAHDCZcaPR2rVr7Rr5uYZmEc5RL+fzp/aH yWP7Qn6znp/C2dDRXbNwuV0KacmzlXrLPm4prsv2Hcxdl9PinXIFXAFXwBVwBVwBV8AVcAVcAVfA FXAFXAFX4CZVQMbQTF5hC7t6QkVgpyA0UGSoMvZhECSkHIbAmZlZXSQkXRLuDWDHhseHGQibVr9o nMXQugDcMLrGLXrQJfcBcOl78TyCuWSP8TEahTG0c4wRU5Va/wxwqJ+rTjL8ZmqiN4KPBtfU51pO egAEdCz6FbIVhZ6rlHQs4CXoVuvoFnxTeDD1IVOVJ1R5TvelmtqvC3rVOuRdkuuUUVmGZvWVfmKE jobUOvUoqeu2rajP6AtwEQzJdmkNpn55L2q4VfWhXhKIKmvD+0xtUT9zRn/Sifay6n+W+cYbjjlR ebPYQoSYL4NxhocSbzxAmfIq+uUqOptutc0xOgkA19BF3pi2Zp6AG6E461o/L1NUPwidKvhIyE1C dVbnFOZxei5UdF2uncn4rGqEUdeAODJA1wQhbHwGFqWHIGZGoTINDPGcST/GnpGXXpZwmUA8mwir 5or+wLC+XxDuhRdesLXZeM55Bljbj7khfGOlMRZGwT2DXzqp6X5V0NXyck9584xJfWVWK4KTeMGR CFdK2MkIuKiTdyROf171kufkyRPhjEJcco8NSHDHHXdq3bmvNfW050Z18m5+tG9/+OlPfhrWDMtb SY3iyXOssd7b6dNnwv/8zxPhJXnR0W8Azgcf7jXv2lp9Ljz33B9s7HwfgFQffbRPa7lp/tTum2+8 GWblJcR6lfTj8OEj4ZxgBEDx4MFD4T9+9rOwTqCQsdLO0aPHTA8b7IWPtF1q/WHfK60bB0xi41tB /9jeeOMNAxxcW0myZ0MZeX9jGeqPG2O3OWlco07yMfesGQYgwxMulgfKcQ9Qgp7oQx4SHnTUBxAD yNEGdQEVAXp4zTFnXG+XYj/YtwKcxcq0q4drtAsgom36T7uMgXqYM9qI7XGNY/pOWqqtWIZ81Id3 4COPPGJ6xLJogpcY303COC5VH2VupMT4GR/zG58JjgFv/D7leOfOnRbaFIgfx8498vAM8yxwfWhw IGT1RyN1fnfpfEBrhM6V9KzIK7W/MBkGeteFqfmZMHW+EjrCWoG6Hvve3Uh6Xcu+Opi7lmp7W66A K+AKuAKugCvgCrgCroAr4Aq4Aq6AK+AKuAIy1gnuCGhUBZXmBaXmZSAn8h/GwH550gHlMNACDZI1 5QABAhsqB9RJvGEEWmRoZZPJVRuogQ0jv/20fYRylMX4zz45xluO47jnGKP3Qp50vmjUlIWyaby0 xlbxA283wFpGxsystowAHAQq0z0owKO19Aj5qGu5ufO6P2Nwrp7vCdVehZPrlIEcyKVy3M8Vp2SR FvDoGgz1vnXSU9ChrnWsBJLw7MOYjWYk4EQNMCWNL/BuWqbvQCp1yoBVPtOtPqr9Xq0zp3XZ8Cqr zcuQK4hl4R4xoicNNGrFmJ+AOANTEVABezqAVZpL5lOaGDQrCShOF0NOoTGzWm/OABd5kslcpqdL 3wYcmhfczFwoA9sE3WoKYUn/a4BAUSD6w/p2wEZLlME7kOdG447eWfSVUJc8BzVpTShMxpkkjZl6 ND7GZmsaCh4ANjsGekNeGzAPqLdQplH0Cu0IMQqIKZdLgkRrwrZt28y7hWd5fHwiHDp8yAztPTKa 37rt1rBeof06tCYUMAtIxXpUvAeb5Xm1ZctmvZNdAnZVrSN3NBw/cVLwohzWrlsbtqve/v4+TU8C sw7Lw2pO7+yA3t/t20fD8Miwnr+chYU8eOhQGJdHTkeH9Lb3tc1gJSFggDWxmHJAwKxgV0UQgMTz TAi+iQnAfFb5tC6Wxqls9mzPFeZ0b9I8v+a1/hwegvY8qizvA8AFT1zqmZubldOpvhmNNmfUZp5n TRdmtMacAXge3xUmxkTf0BjPK4AR7QCa0PPgwYM2NuAYkGSpxLipK3rfRfiENswRHnmEFmSP9iT2 9BmvJ/JxTD1c5zvKnm8rfaLeCOboG/VTJrZDXsoyJqAMwK1divVTH/rSJn2KOrQrs9Q12mWOGCN1 4XVHXWw8z/Sfa8mznazRh9cWf8xB2cUS96iTPqI94+Q4Ju4zftpmj0ZL1RfL3Wh7xh01jOvrMf8c s/F7ljlPv5/oxZpzPAPoU9N6or3Fcf3+Kuj7pt9bU2dCv9aYG5+dDBOCc+sHp0PXzOkwdUq/o6bW hJHtd4Z8/8WesTeadlervw7mrpayXq8r4Aq4Aq6AK+AKuAKugCvgCrgCroAr4Aq4AperwOL2xsus mYpXYXm+zNYuKo4hVYa9akdXKHX2hmKmFEoylPfIsIuBsFCYN4NyoYAhFvAB52gAk1RldaCOtoWx EDKOtZzwrmB8iwu4YHzFEB03iiyAN4zP0UjdarRMdcMOF+prvRPPZSjHWC6PuJw83nLzEyFbnNbA 8qECAJMe6rSBu5ygXK6gNYFkCK119gu6yWNOHnGMJ1sVvCrq/vykiIS00XirnVozKSvDu4aM4Rpj eTRuY8wuC56VZXCuApVWOe8GpDqAl+qbPL4spKW8zGra6iWFrBNQS9adS4E5e7Qa+ttcq6zAB0DK oJWBORl25S1nUI866Jv2wko6Vl0VQcAGKLM+UM/i0xlFvnjPHKpuvOUqBQGrqbnEU06wiX4DaGwt Oe2ZwySkpvqmvib9pR/y+NM580NYSzzq6nou2dds/NTFeDW/gEf6zXitz/Ls4RwAjOehYGk93ru4 t5d1JbZHJRzv3LkjPPbY/wmf+tSnDEq8/c7b4ac//Wl4++23LZQka7Z9Sd5Dg/KEOSFvqn/7t5+Y tx0w7uGHv6iwk98zDyPAxn/913+H3/zm1wJiM+Huu+5SvY9Z/Rj8n3/+hfAzeZ0dFvQD5j32L/8S Pv3gpwOhK9977/3wk5/8RMb9cRub9TE1ynjOHO26bVf4v//3Rwqxt9Pe61dffTU8/vh/hQ8E4TZs 3BB+8IMfhM9+7rOhS/OBR9zjjz8eXnnlVbXTE77+ta+Hb37zm2FwaNBg2JNPPBmeffZZec3Nhk9/ +gGtI/eDsHnzZoHrYvjDc88F7gPodoyOhh/96F9NI74xb7z5ZvjFz38ueJn0dyXPHDMP1EEnQBJA HE81vOe+/bffDgcPHbT107Zu3WqeWXxT2iWgEN5JeLLxHgNMgCNoRN2ANxLrpLEOG/fRn/u887t3 77Z14fCA4nvFePCSA5gBWKLW1EEfPvjgA+sroSPJk04x72J9jXmBOwBI8uF1hpfVpYayxFMOCMQ8 oQXn6EFf6D9aoC9gDY25hgccwLPd7wf6SFlCN6IdYT6pG+1IPHPUw9yRBw3pf/yDBst0k/xgfuyP MzRmNAS0JX/8krNnFd3b/Y6LcA4dp88cDbXCmTA4vF5/oKE/JunR2nIDa8JALR8mZjvDbOgWkF8f yvpjk/nzJ0J5eJ2DuSWeHwdzS4jjt1wBV8AVcAVcAVfAFXAFXAFXwBVwBVwBV8AV+NgVuBQY0a7T 1CPjmn7Yv1XymXY1Xt419aWuteYq3X1a4kueHAIdfT1dFspyYqLDwBKADiMsRkUM0GnjazQc25DM ei6o0hgf+3gcO6kqdE2QpmGgjF52GCszWRmxtTCYeTipLsrSVlIHYfwEtmS8ZU/5mOL9xc7j9bin ezl59+UE1/LAuZLCpilEZb06ICux4I76J6wYcjWteyTPOiCcyJyucU8Aielrzl8C+mRdxsKsf4Qh TEIG0s/YVwz8JXlPleQtVOa++p8aQuzakvvEc04AQHDJoJIBOvqttgFb0rDhjregj8nUeNZgqtLT 5g/Ah8MY+lKfgBZADo82g3zAOcAfbXRpfTp5ZFiISTzZBCEvKTFm9bGu8aMTQDCbF4jQhOBhRkjL qqAdoC2IdQLPsnJsikDQIJvBNIapfleZJY1NdVKe8Ji8T+TL6jnNdeMVl5hdk/XpmF7phF42X5c0 ilUVYo479X4BGhLPt25BmhOhG9CjmgxsyLtr8+ZNBpAA3H1aC05ToiX4soI+/QZ5ABlAJryTEo9S 1ibr0Vpi61XvFqsHINMpWEYC8KxdN2L19giYnD1zRkBFWi/70GltK9ULaGFtMyABHnwRTHUJMANU bhXc4hqAMAEyydpzhL/cunWLeax1Ki+wES84xgPsB8pQL5509BcvQSatR/BwQ6NN5hsoRv2aTYaz osRzjecWEAy4g7a8d7fccku4bedtBguPHT0Wdt2+y8YAdGpNfFfOnTtn3nUAPOAbG/VSP98f4AkA iflgTDt27DA4xX0gC/BpdHQ03HPPPQa2aCN6laFr+nuFvv+fvfMMkuM4z3/vZRxyJgmSAEiCOYqk GESTUKJE2aIly3KQ5BzKucrlL65y+aurXHaVP7gc/pLKQbIlmVaiSYlJoihSIgWKoEgKBEDknNMB l8Pu//m9s703t9h0uN3DhbeBuZnp6fD20z09s+8z79vIQX9dd911Ghci/xnENQTqM0JQGO0/sN/a TTbqYLzQ/jj/1FCcJaFMiMZjGi/0K4QchCHjFwIO15bID75YVYIFGHOdfiVPun2xXuIg+HDLCV5g StsJYI4VGWODsiCrKI+4UmXFMqfrnnZjbQphzBqCYExIxnuCB+OsOCTE7qLQwsckGT23Fq+U9e+y MHL2qDJlw3zdayNnT4ZePavnti+UpdyyMHBAlofqUw/lEXBirjw2fsURcAQcAUfAEXAEHAFHwBFw BBwBR8ARcARmEgK16RxLtFgK2oKOlkIuuKASZdcSla8/Vl2QpZa8E5DV6hlXZbUINJpGyv9MW0cI nfPD4HBf6B0aCEukJEeJj8UOilpIOZTQrG3FOVtaYYp1XBISMo1rcbNOk/jwAUa+QWzlLekg6PK6 WWVXIv4rLwf2146TkhMiL2uKcZS3KJyjYjdJkSg043Hcpwk86wUJgrVcRmW0iIRqFgmUEQmVE3Mw zHpnmT5ZdUmCQVnEKb5pSLIMaf05yTrUq+sjut4sUknXm/qFx6DaLjJxRO0a0lo/g7Lo6s9mQq/I TJTXyInynH2X6junOvpIj3VgFHIceyPnREphUWiWbiLODFwKU9vAWQf2P3+i8wTbPKgJumBLGQnQ xlMFlYWlWbYZSzzcY6qvtGVzUhJDqIlAMCs0s2JLCL2kAOocX7B6hUuT3FNqQIlkUx9ofJkFIOJr YOQyEHixfURCw7FPxkdsn7XZCD9dU7CxZ4SiLONEDhGsPSIEDfQ0Tna1cX+QDUICK7eNr280suSg zg8cOGj3w2kRG9///vdFRB0wIgIl/bZt283taZ/uOyzHIG4gS1DWv/76T/L34kjYsWNn+MbXv24k B0TkO1rr7cSJk+qqnBFHTz/9dHj77bfNcgqyCjm4ZrixT4XCfaJ7eY+IuK+r3OUi/UiLC8zDh4+Y vMdFWlHuli2brS0QODt27hDprPHS2xdefvllc5cJQQNx88Ybb4YexbM23tubN5tFHwQPbcFS7NSp 06oiI4Jiv1nP/XjDq0YUQ1hgPViQKyVruUP6PVpvMV9x/xEgy/btV3la0+34ieNGPEJyRJIplse8 BtHEWm/cr6uvXG0YRFKO8pEHkg1XmWCKm0lkJUA0JvNXUiLHlElgriJvvJ5uF8djNg3SmC4pqfRf CCzqZ3xgMQdZiNzEM44gv5BzvJZnyEy/ElasWGFuWCM5iVzICgZgvXjRYvXTIZODenDZCsGUbl+U PsZRRrp9EJHUiaykoRz6Zrxyx3qm+h5XrgQIVPqKsQoekJGQ3pHwhPTF6jGNFWu9Llx5ecgt1lhj XdMBPZdPHdKmdQqFY2f/qTCsZ9qZI/vDsiuvCXOvvEGWwnq+eyiLgBNzZaHxC46AI+AIOAKOgCPg CDgCjoAj4Ag4Ao6AIzBjEDDlJNYqY5XCNbUPAsFC/mAcRYxJWlxOLLbi3tgLS4ESMdHuFwqqmNPq HiMAyfNlnBdfVFSsQkq7hgWUpLLSCHNFzPWeDj39I2FI/TNPimsU0iiwz53rNuV2JJmisjnKxHkO C6a8mIkikRNtiky6G+UzOfJkEPQQxEseg6i0TVJYTl0bq7BGuc2GHCijo7K7VLoYZ+WlyzECB4us vpDRGm2ZfinOh6TglDyyZQsj/d3i2WQhJ0u5zICInEERQ8NtssbS9cFeI+WyMjXLDQ/ir9Isu8Ta ybWYSLvurjCc6ZG7ypwRFZAPyBjDGa2VdrJ3KPRqnTrVbJZ3F9Sz9Blgq13p/GCpUpPq8rtYt+0t cZIj9lW8bsWJnMRVZsDFZbvaKGLSXERqPyJSkjXtMm0i07T2XLM2jiHVCh0fC6tprzaoLta9M3Mq 2kLdxmMkwvPX+pE22YkigFOEolkHYqFolm/axzQqAmxsk2xYz1leylY/JSfaTVrImaJ9565d4YRc DTbLVSpkCm7saBKkN4TZgNZja9W91icSi+uQ2Kwph6UbBBbWQ4z7SL5AsHV1nTFXkpBmYHf06DFz P8s46FU5e0SodXWdNWIYouYcdVJphQBCZ892ifTbYdZNJD158oSRB/QFrhxZH4+15SCcz57FaqrL XJHKPjQc1vp3kKrMG/39A0YYDUlu8p5S+yEPsfTjvsB6KpJn57rPhZ07d4pYPG7jibXwINSsXyvI m76E7OAEiYn8P/3pT+0yckLmgyvyQyh96EMfCnfddVeBRGK8kAbyjjRYIV56yaVWno3LVEWUBwlH XbTzjNYMPCucIavi2KO9ca4ijjmSPfHk5zgGCKi4NUN66xp503NHTBv34LZhw4awS+OK9jI2IBSR nzogde64447w0EMPGQFEvnSdsRz2pCdEGWk/BCUWg+vWrTO8kC+ms8T6QzsgjlhrlLqxNISUw0Ix utGMdZKXY/p87969JnNLsywaZUXMPBkDhC79c/PNN5s8MX4m7eOz64zuySVqK7jTbvoRS1HwYKzy /CWOPVjH0Nyu+0dYDneJiIWUO3dK1sxzQ5izMDTPXRgW6PnUdWxnOKXJcsXa6zWvdMasvi+BgBNz JUDxKEfAEXAEHAFHwBFwBBwBR8ARcAQcAUfAEZghCKBAF5EyIuXzkNYMGj53Ri7rRHJIKSftI5rB qg3NSlk1LOXtkNZIahWJhHum5jla06ZFFjEpJeeYglQu9VLPSH+f8upr8p5zIhtUr321XqVe8kv2 LHm7Tlnd5hYqN0+WOHKTJxmq1417vr4wSN29In2o29o8RtLzT/Kyg5PVvXCxkSAtnXIlxlf01D2G ljm/iFpiUJZSnhaIkrVXW+hVdwyIFMACBwU6CsPkq361QVZiKBVRAhPiHrIj6cK4T2CxuDwXoisF TmRUwZuk5zy9UXZMg3Ka43L7dL6YJp0+fR156E+IgzAiZfCwLGqGVPcwji3VLYyTJp1DvGFdpbbK FE7HUkoLa/oOKy5IPLuOS0ZdxzFmblj5ROhltTZbVsQc7iyjYn1E9UFSnB4aCd2ZtjAot5nZevRf 0bhPTkcV/uBYc1A28V36g6tSnYggyLXIQg7rObgtcZVGhkHWkQ7XlyLvEgs6kQ60h3xVg1WSDF0O i8LYEiLxiHCphIzZ/Hmyo6C4pRJauoSqZJzLMMu2VEkNP0SaVZevCo888oiRHFi8bN2yJTz++Dft vlq0aGH4mQd/Jtx1551mJXTs2PHw9W983dwhYrV6++23h/e+971mTQOJh7Ua68RBWl111dXhIx95 xKyUUNz/6EcbwhNPPCFrzV6zdPrgww+Hm268ycijHTu2h29885sikbRmG+BFAPMIpAkUXBd+9NGP hjWr13Bnh7fefFMWf98yghGrng+8/wPh1ltvEfnSZuTft7/97XBOBF27CP577r03PPDAe4wYglx4 9tlnw9kf/CD09vSGG7Qm3oc+9LARRVjYYV337DPPmryQQKyld/U11xhRsVmWfk88+WTBzV+tHQWB BLH0k5/8JDzzzDN2D2J9BV6QodyTzGlXX321EVexXNof12mjjVgztctimPYPDiTkEXMJJAqkE/VQ Lu4XyQu5iuUY/QB5SmB+ZO6EwGODLKMM5IB8oSzmU8hYiDbIMIgt4iD8yEOa4kB9tPFN9cvu3bvN bSXpsXLD+gqLq82yTiQd46fYfWap8ohDXshgSFzqxh0mWDHukBfZ45xP+42Uk3y4ZITUBAPIOfJA rpWSHXkhFAngR7uR2eYWDUuwf9/73mfEHPLPtACG9C9tBtd777nHyDf6HexYzxEyLpKtjEkIX87B Ww8XfTChZ/HRXbY1z9dafEtW6TuSHhFzcsW8YFnoWHyJnkgt4djBd8IJfWCy4qqbQvs8kcbNFd6V ZhrQ42iPE3PjAMuTOgKOgCPgCDgCjoAj4Ag4Ao6AI+AIOAKOwDRCQIqoSMoNnj4V+g4fCP1HD4mo OmnkHNdqCSMDfWHg2OHQ3DkvsYKRwhRrm4wsUMoRZEaqiWwZOtcVBk8dD70H94aB48cScm4Y93zQ MSXYgSiQLiEf+fsO7jMyzqxBlsqoaJ7IQSmmixXchawqOysii7wDx4+GvgN7TIaRvh65SoTYikRC zJHa2yWRUVKGQuj1HdgrokxriUEWKbTMFQZWdyrPhR5K+dkky4Wc3F0NyzVWnxR6uGKEfJoj4pM1 ro4ebTIFKmvNoUiNClmUjGyENCkW44v340lDmTF/uXzpNOnjmC/uR6/ZEQULfclN/xtRR7wOMyLe WNwsskC6plgu5Akd+o0+QGGctBtSjk1UkcrjkuJ1iIIe5TXKaUiIHhSxUnoPar22Ea05ltO1UReg yjcVgsYCunDkyomgNEshrQOXadN5u8azLAhzcseJ5Vy2X8QC7iI7tfZcp6xm1C5rT03K9Dx2wJgP 1iPWLzEGGE0YlYtckfxjL/SRC9IiEXg0U/qIamI3FeIToo5TLqVEKKSo64Hkw0XfjSKlIEkgUJDg hRcWmuidsoa5RiTRnSLmUL5Dbrz00osaNxkbP6tWXW75sELi3sM1JWVAzCxfvswIjGuvvdbSotiH 7AASyrpea5YlVmFtytMavvfCC+JOq7U4Z9ZgrI92w/XXG8YDIpVffPElK5fy16271spl7Tzmh1df 3aDx3mR1rFmzOtz5rncZmYA8b7+9KbDWXL/aQxtuvfU2W4sMoueorKcg/5FosTC64YYbw2233Wr3 DvPsiy++qGvV5B3bW8jHfAE5hnUWRFJ0kQg5xzXqNjJI4y2SP6TDWolziCyslJg/wDm6G4RQ4Z6G YIMsoR8gpSDUXtv4mln8QUgRsFyDgGJP/ZCrtJ8ytm3bZu4vbW4QoYWcyIRrTMqE5Fq7dq2tOUd7 kKM4kB65kI+20C7CrbfeanV873vfM+KH+qoF2sy6eLjkhDREZgLEamw744l2xLl4jj7kYE0zsGCu o93IcVJWkeSDnGNLy44skIdbREwjN3mpO/YLdS5dstTuBbCJfUP8TAqMNXBMWyTSPsYSrkPBE+yw yoQkZRsQObxg3pzQ0q33l+N7wvCZI/q2RB/5dIpw00dGOd5n+NhIRBzHbXxUow8runZvCpnuk2Hp FVeHjkvXyrJuwUyCsi5tcWKuLjB6IY6AI+AIOAKOgCPgCDgCjoAj4Ag4Ao6AIzDlEJBSEUsjLOX6 RIz17N4WevdDUp0wKzazXkLoKgrjrKztBo4ftnRZkXQon5pkoZGRxZxZr5XInxMRMiyXawMiAntF jPXu223k3ogs13JSjpm6s0S+MRhKmTgk1269+3cbMTYisg2CDEu9jAgtUx6WKAP5hs6eCf1HDqre XZZ/4MQxuQSUdUBUlpbIl647J0XbkAhM8hu5qboRulB3JCbSmS7kWEpzLKRGZDHXz6Y6hrXeV7uU xChkUVJDyvGFP9YYUQkcia+4rxQf06T3iBrP08fExXM70J9SccXX4jl70hcrdhO41VbhZnYocGqK TKeDBiic568VzrmWv57E5fNautFrSmJloFxGyQpuqM27uvtDS6uICIg5CGUEYptqId8eZGNo5ES6 5LSunhpja/FlM1IA697KaozkRNCZFaLWosO1JWvU4T7SSL1a2pYAalikcQaSZBQkEFGebSqbzsvQ v3acwi9/mOSzgpVwtCDKz8dOGuKMw0Ny7/id73zHXFJC7ODKz9Zsk6Bn5ALxlZdfMWIEK6XTp7vC Lq3xxnqOKOM3bfqpEV4LFiwUeTNoa7bhpnJYcwjpnnrqKa0797oRaJvf3pys2aauwtIGcmaP3FlS J2vaQbjEe3QU3QQKI6rtUOu9yS3h008/o7reMLy279gZjqk8LCUhcF58MVkTj3KPHDksq609km3Y yJbXXnvNiKU5agskz9ubNtvcQXtwY4lFHyQO5ARtww0mnXTw4KHw3HPPmaUX983uPbvDEbnmjPd9 TR2m/oXQgDTjvqO/yQ+JFYk0SC9CeqxRH+QHJBQWcBAkBOQHR0gkcKMs0kZrJ6y7SEs+3GbiPhNL PAg48nEO2Qehdb1ITogpNqzZsEDkGDnJDzlFOiynmC9wtXnFFVcY0WrClPmDTJTD2IHUg+yC3IHA pX8ov1oACywMWVeQttIu+ggCEYITsu06kbzr16+3eLBAxp7ensI6dsgNkUR+2sKe50Y6ICv4kzeS iTxfooxc79dzHnnMOiydeQYd01/0Df2Ubj99t0TY9+WJVsYy6bqFJxapJ/YdDHN2v6K1Tc+IeV+q +bYjDJ7Yr5vyoD4KkXXzMq09d/JgGD4t17aLV4WOZuHdPBLObHstNB3ZGpbf92hou+ImIZmfKGcQ phNpihNzE0HP8zoCjoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjsCURQCl/bCsxLAa69m9PZx7Z5OOZckg pV6OL76ljDMlqZRxlUJWyjzL131OyigpbKXYbVuyzCzocLsI2VIcIMewzIPYOrdDX+nL8gyCEOs7 yDWzuFH95UOi2B3W2mG9+wfN0g65IeRa5VqyGcUjJEQJRRdk5MDJ46Fn787QvV3K6UP7jaiDYMRK q3qbVTfEnOSlLNx4jqjuZpE6rQsX6ct3kZIl2ly+LZWuCHuZIY20tofBNpFwueHQL2X23LnJujcL ZBmREAVyxyhrCJSuyI8iNQaOi8+5FuPiPsZZ+/OZuRbP0+liHPvi4+I4iopxMS1K9Hgcr8U4i1e5 WBCBY9wbcZOvrxCPtRYQxXidm7tHqzMhoWK+tBzUhWIVvCBTe0S6HBtpDedkQTRct76jxkYEGsyw gAVL9hmRczmtP9fU0SLrOVl9YD3HXltTi4jyDpHkWnuO66EV0rq6XLEfcpjBgW/RvcQIy1EQDKGs 5NiTB4s+S08errOZoLHOfBzXuRKvp8onvtEB+VmjbePGjUZ0MCa6RMScPHXa7g1IjE0iUQ6L4GKs 4PKUddpYYw5CadcukfpS1EcXh5B8EHa4Sz0iC6sNG161+xSLQizUIM65LbtEeEGs4TqwSSQw8axx B7kmRM9vdj4KnFjX7seygsNai8A9j/tM7s2zKufNt94Me/ftUXc0ibzqSSzTRDbkNE+98847gfXh IFYgYA7LGmxAHxTQnv0H9mseGRKJxBpzWj9P5BWkA1VD/mB19s47W62vIOyod5QwNFGq/oHkgSBa tmyZkUhDg0OBddviOl3ggFz0QzpQF+2FLEF2SDnwhDSj3cRRNqQK5BLyUgZ5ItHEOeQYGEL0UQZx 5MHakf6kLDZIUspBTizusJoDD8gY0nJMvkoBeWKf0z7q2rRpk1n8QXwiC3HVAkQb/YYbRYhGymK8 QSAz/sCMcu6+++5C2bSFDQs45IBUhGQCD8hb5jxkADfaSwCXSB5yTD7qIm/sF+oljnthpgZwYVyB L+MIIpdAXzIuWtX2SKCD1yKd85HMuV65SNX81776ptB66Tqb88yiP6u1TLU2arNcWA71ntGHSiJp r7xB8/C80CnozxzcG3JH3tF7T+9MhXRC7Zq5I21CsHhmR8ARcAQcAUfAEXAEHAFHwBFwBBwBR8AR mJYI5BVxJrsUQ0ZwSLEEkdUiF5Cs5YVLyuiacTxtbJaVXIvWS2nWWmtmOSbtulWnP+cp2qX8I01T h748V30t81lnReuJifBKMtVeM/la5i+UG0l94Y+lHgpPKk4qP78g6pa7yWYpoZG1RRYvTVJSZk3Z migqz89UOoY2IHvzXK1tJ8WlKk/VrTzW8PNaX7qwcrEqM6d2Zedo3Z+hc6FXyv/FnR1aZ6lDCtcF UhLLgk51o0xFSYtiNR0qncdrcU8+juN5PI7n6evxWlQwo+Qtla5Unpg37mtJE8u2PPl20tJCvOLM HSDyJwVqT1s4GdsuZI544bKvo3cgtMjocSxySb4p+9f6SdIxZLX+HOMeCzojpCHK9D+ndedYIwoX l+xzWkuvqV3Et1xd2gY4+UbbLUMajSfunWxGLtgYe7ovcrK6SuLz9ek6FrUQgMMZWaoqjVnJqTDi Sc814gv3oS0kR/l5t5smOG5hE9maEGASA2MFxfv69evDmrVrjKjYsWOnrX/WLWveBSIz3v3uu8Mt t9xipAyK+qe1NhpEGKQG7h3vv/++hGQSEfKC3FF2dZ0RWZcNV66+MrxP63FdJisvxhlWT9/5zndF 7MjqadkSrfX2QMDNJcp9CDrWXDtrFmrnAxDHL/fX5atWhQ984AO2Nh7dtnnzlvD888+HHpFwS5Ys Dg+85z2yALtOBEKryLYD4XlZ5kFCMT/ccccd4e677gqdIvUhB1966aXQLWIHi1tcdj700INGRkHq QFbiIrNfJM6ll16itrw3rL5yte6vprBt+7bw3e8+L8Lm7PnClovJ9y24ESDlBvWsaRqBQOw2wof7 mDYa8ZEfChAlkJ/RAi4SJ5GQgqyKLhu5Fq3rIPMg1gjgHy2c0kQd+cCFQJ3UjXXblVdeaccQUHFO Yw8pRx3VAmlpJwQY5C4bmEJqESD9sGiNBE+58iIetB8ikDYgL/nBjMD4oS7wYd056qGNEIqsj3fm 9Bmrl7oh5ojnOuXFvqAc6qJv0/Mia9q1zG2x/LSbupABPGdioN/Aj/bhunT79u02tojfunVrOCtC lzGVJmXBa64wab3kyjDcLvJ3se73hSsSeJQvc/a4PuA5qnlZpPDcJaF10Uq5rbxWLoYTy8+2JVeE weUrQ4viPZyPgBNz52PiMY6AI+AIOAKOgCPgCDgCjoAj4Ag4Ao6AIzAdEcglykfTh2PvIMURRFbb kuWh88qrzdrMrMCkuIOYU4qaWpnX64vcmyuLsSVhzqWrRHYtkgtG1Coo4ksoM/V1OZZtnZevMUKh RcdYnSVuLHEuWFsw4kWKtNZFS0LHSrmIWnmZEW6WG2WrOSocWxZEXtvipZJrrb5ylzJN1n0jUqIi Z61tpkTqhtBrXbTU6m1ffkloktUcwdyAolHXxq7ADtnVcf7BEkn9lBPx2N/VG7ql3B8QmdEpYhHl MkpV3JuhpEbK28RjAABAAElEQVR5ynmtG4rFcmnT19LHMX06jrGEwpI9G4F0xfsYl463RGX+pNOP SULZ+XpivKXN12lxY4bvKGlYXCbnlo3xoq243Fj+lN0jP8KhL1d/NouUy+K2sk3EAlZzkHIi6LLd IgQ0lpraReDKeq5Za9AFubjE0iNCRd9lpZCHwMsqjxWsfs32K68RaOCjerTlhrNhJCuLKxHFw9wN JgT9n1xPEupYZJ8FXcCFLemzIhBzQ9r0L6u6yNw8Ijei+aRJhsb+Rd4Vy5eHd99zT7gjv8bcj5e8 Fl4XKbVr5067t2699TYRYe8P83WfHZTFzKZNb4e33nxL91lrWHfNNWG9SD3IPciSQ1LmY9kE8bFK JMn9991nbgZR9IPrq6++au4luVdZX+7ee+81ogXrOVxebhMRkABuQKYaH89z4RKRZPfff7+5X+T+ 69SHBeTfu3dfWCg3ke/SGnIPPPAeydcetmq9MKyttmmD0LnpxpuM1GP9May+sAB66623JO9gWK31 5x588EFz0Tgo0gziDDLx6NEjYfmK5eFeYXTLLbeatdRiEYDUicXWhQTwwFKuOZt8SAAZwsZ9GAky xgXBSCzdk1h8QSRBUkHKkQ7ru+XqP8i0mJf5j2ukgbxiTgKnSEIRB8lEfyAH8VyPgXIokwARBxED oQXJtl9uRJEnzm8xT6k9MpCHsiF5qHO9xgryMQ4YI6SpJVAfJGG6bZEoQ15IN9yBYt1GPBttOzZy LJyTNfeCngXW/zwraG8k5orbMaJnPv1AGw1PkYdDsmynXgJlcsy1mRjAA+zAEqxwFQo5ByaMJwhb AmnGBMHRtmCJPjDS2rYixDNNCZ2U0/uWBroslPVRjSzibM1duaPmHo9p2uYuCC1X3GjvXsm9P6bk WX/ixNysHwIOgCPgCDgCjoAj4Ag4Ao6AI+AIOAKOgCMw/RHASgVrODbcVJrVihSDZt0iRRwEE2QV VmRZKeOkNUyU7zU03dR0+gMpZZZjWl9lpE/rtUnRhxs3/TmvFKuXenQJKzvoLFxiypRA9Ua17HnZ zoswJaGIBazusH6j3KFzXUbyWb0V6kZR1ioCkT24JG0eX92QfLS5eU6nEXvD586obqyXtEkp1yRF ZpPwyAhfk7WEPOc1qjgCSwYsAbGY624NZwe6Q4+skTrac3lFaZMRcyiqUbxSDwphNpSNnKc34pM0 xJMu2RenifFj0ydlJ/lGrfNQVqLwZR8JOsojFO+Lm5c+N3W8ZC4VEkUyZapNkMz58nVmY8xqIy8K UTbFWxpLl8hCGUk5iVyGj1KqJaS2fDGulAxTNs6al/SzwDHLwRyEmzYj3iDrBkS46f7Ias052YZo vGY1NuXWUuScYYKlHJY8kHj9IueTzrD7wlxjQqAxL4A3ezNuBbM8ppaBTFEO7bHgI8i9I3VEazzk 4BpZUGBnRNRAyiflW8VJvgb+RR5cSELERReP27fvkAu7UyYXlk6bN7+teyqxGiIt5NyIZB+Usn7X 7l3hhz/8YcFijnXLILm4jvtDSDrWMYPQYJ0zlPvUidUSxBbEDUTHLlnMnaDOSGDmSanRpkc8MiIL jhmxc1hy6May9cpOyypKyJobzjfffNOIFeaBA7KYQ45hkaHcm1u3vmOkA25wsSxj/bko7/59+9WW l+UucrkREay1hitM+vLE8ZNqy0a580tcRJpLTFxZ0nkXECAy161bZ3MVZBJEEHLiehHM0wG5mX8i IQRmbJBxzHfRCo08pINQoTzKgYSDVAH/aP3GNeYn5ini2OL8RBnEk486IDOpJ85ttDeSaRyXbH8e EupFBtIzLpALwg/ciY9zJHWWC7F89rSBPkUWZIv1x/g4R1MW6cAG7HDBSH0Qm7QFHIst/5j5yM+H HeRDVizjiIt4U198PlBHPOd4JgX6BYwYn7QRwpz9TTfdZPjt2cOajXpvGRM0HzaL4NU2Jmgs8C7F GGgWcYdLy9xQ4i67kM6e7Ylb2kKcHxQQcGKuAIUfOAKOgCPgCDgCjoAj4Ag4Ao6AI+AIOAKOwHRF ADJupOecSKuzYRjiSmsLJW7mpGCXAsks5KRAglzLyM1jEjmO1ko3ZSScFFtDIqeGe+TmLEWIlCxJ Ci9pvaxu1qLL5F19EVdzUL0oj6lrpFcWEiIETdEa48sVFOuWvJCSmbx133k68XL589Va3SprWNja Gne0mf8i5ZpFyLVg6SFrPtxsBr6mN0wqFXr+NXM3qj7JyO3ngL64P6su65b10nwp/ZpFbrS1dZpS FUucSMy1iOigLpSCNNXE0p+owE2UrJGUg0hJSDbi04RcTE/c2PjE2gVpUVyiBGZPfSg3Y3zcUy7X awqWjrGh1NaPHHIAIccOgggbLR1KboGNVp7LSbzW9clovSwanZOyNNfEJvJVxAfysSdEeSkH+Swk l7ianE/Hv2oLsPAnA+mqMZKFgOvIW871aS+SbrhfOMmlZbPWn8Pazsh6kW+5gSGN5UjeCwdIUEg7 cBNMBay0lpyRSVjXClcBmqBlUFK3NsahYrmebOoDkQsZEcv0jwV1arMs+LCmszImCXrEZc247373 u0ZcQHKwfhokUVYXWW/ulVdesfXnuK8gKfaJwErWdBy09edwbwmBw5iHtOuVW8gRWRLu2bM3PPX0 0+bmDrxOnDgeTonMAsLjx0+EF174vpFz1MmaVocOH5JtLw0/v/ExBjxZCw63l/NkxUU8a4ZBaDGm T2ltvBdffFFWcD+1eQGC6YCIwSHhzXXWidu3f29oU1u4X7Hw61WbkH3btm0ipM4Z0cU9QplgAUZY 1n3nO88ZRrQFYhGCsOb7Oenlwt9Vq1aZG0/2t912m5FNEIG45MRCCZeKkEXUBYnEHARO1BeJNVw3 pkm5WDhpIZa4Rl5IlDheyc8xaQjF8nON9JAv9CuuISEOwQpLvXRZ5Cd9LLNQXv7+IJ4xA7aQaZSD 9R1jC7mSm4JcSYgyxvNi2Wg/JCLlIUfcE8c1C3Gg6ARyCaItuq5Ehkg0Uj/5Y4DUpYw1a9ZYv4Af blbBCXkhkXfvZj3EBLeYbybuwYV2QmSCH9aNkJSQyRH3NHaVMdBch6WcnvvtK9aEoZ6TMgHNf3xU OaNfzSPgxJwPBUfAEXAEHAFHwBFwBBwBR8ARcAQcAUfAEZjeCEjROiyla+/BvaH/yMEwePJYGO6T 20hcTKIploKRzYg1ji84qCyUgyjy0eiyVQqFeqkzkaFS8orX8vWN1ltr3cZgJIrSihWUu0g7dU31 p+s2azlZubUvWxHmrl0XOi653Mg5LOcM73LFlYlHKS/NbBhqaQ89mZbQLWKjX+4FqbdFij8UsShe UdQSIOxiQK40sZZYuyX9jRIyfR4V18Qn2yiZNxonMkflc06AqIgKzVhn8d6wKY4sPpecGUi1YVnJ aMuIfMPijfV5sm2szyRZhnRtqDc0DbLGkhSfzXITJmIy2zbXrOiaBnVt4Jyua3xLPuKzHVqHr7VT BEWi2B8S+cTQKyjOpYw1t2M2BouFmqbnaiBttD86aFJ/5VrAUn0m4iOn8YNrSu7/rAg6lPNm3QEh BzmnaxBoCeEG1IxzbRRKv2cg4lRennDLcM1uBMgKMOO6dkqfnELiJeRcGFEc+SmL/1j1jeSt9shq QXGTEBaJzL755lvCqlWX2b2zb98+WbadFVl2LnTKCvbaa6/TpvtX1kasWwZJA8HG2MG1HcQSa9EN Ca8fv/aaEWX9Iipx/3j7bbeblRT3ytatW5Sf9ef6zGrtpptutPyUc+jgodAtq6YuEV4Vg+bVZUuW htvkXnPlypXCNWfuJM+d61b+biOkrte6d1etXWttOXbsqBFZZ7vO2vxw9VVXhZtuvinMUVsg7Ta+ vtHWmuuXdSQk1F133WnWf5A4b7/9ttbUOhv65DYX15W33nqr1pq7zOaRvXv3qr5eIy4rylviInMG cwEkJyQbBBpEIMQHbQJ/SCLGK2mRJc5JpOMczOJaZ5RVTGpxnf7CUgwyhXzUxRbnLOogH3Fc55iN ddkgO7E0oxzki4QYeSMJxnGsN+5pbiyHdDfccIP1PzJefvnldow83BAmB2M/X2+6jAgbccXzJnGU zRbbUkiTumWIQ3ZwsvXsNEeTl+cE7eGY/KSLGEFEQUgxrlnHkLy4POW5wtgnz0wOEQuw5Zi2gwF4 YekY+5zxUltQR+sjEiOade/aByQyM7Y5tbYCZn0qJ+Zm/RBwABwBR8ARcAQcAUfAEXAEHAFHwBFw BByBaYyAFEwogoa6u0Lvvp2hZ9c7oe/QAbNoSyxUUDKhIaxzG00bb38qFNyoeqnyItdtFnNyhbbq SnND2TJvYeKOMq8UrQBK6UtSimL1NSKLuX6Rc93Dg6Fbyu2OvIIVpSnKxBhQHpqiUVZ1OpAiFyUs ym4U2aTjOMmTnCcDAN3r2C1RWKOUHN2SuKiojekj5sWyRJmq7TMoMYdlIdPfFVr6ToWM3H6ZpZuI teGM1n2SZZxd6z0RWnpOqDita9c+P4zMXRaGcR0q5Wdz/5nQ3H0stPTKNSB4dS4J2IaMiMwcGsiG HineUcYTUN5jGYVbQtwPgkq0HKz/DWFVTvKf5P5KrOfUZ+LTICuxkssNCsvBFll0iICzTRa1Imiy eWJOTCuMqzLkldCAkx9eRmKKlLNziH39T5P6jCRTPjMeuc7kwp6ibIwSxzHysSEY55qr7Lpdbfgf xunlstr64Ac/EG4R8YQlGa7r9uzZbW4gFy9aGN7znveE9esfsnXGWCsMCyKsujpEVkCQffxjHysQ LpBG72zdakTHVWuvCo888ki4RuvQYb363HPPar23beY6c8WKFeG9731vuPvuu40o2bRpU9gjsmuf NsOqaDJWzxkWYHPl6ivDhz/8SLj2unV2P+JKc48svI4cORyWyYps/UMPhfu0tl17e5tZwWH5BtnV 2Tkn3KN14j7ykY+IwJtr5NOgrKh37dxl64hdf8P14dFHHxVBucrIr6eeeirs1Dp7J0+dNFLp4Ycf Nnd+kBaviYCEnDsoV5kXEpBni9a/Q27cbVIm9ySy0if9A/1GGEIYYU1IXHpOieQSdRNfHJinIJMg USPpxjpxkGNgSB6uRZeVEHHIdEbE6WHhGMk66sb9KGuOQVxCWtFuSCqwgawpHq+UTXkQj4ydh9Qf LXoWtKk/GD9Yng3rg5hzIn4pi7aXakNsE22lLMYWlm4QRaSnXtpJ+8CpWA7OIZTY+jWnZvP3MXn4 iII2UC7HbLQV+VhXDVxoK5hRJ2kph1BcT5RzpuwjluAAPjfffLPhS1+BO1vNxJwwb1LfD57SGoPb Xw25Pj3X5mrt3RLr3s4U/OrdDifm6o2ol+cIOAKOgCPgCDgCjoAj4Ag4Ao6AI+AIOAKThoDpu1Wb rTEnhSfuFoe7z9o6bGYxJwWeh/ojYOvWifhpFd5Z3Ibm185LGIgLrE9K1Zys8IbbO0NP30A4K6uV 5o52I9hQuEbFIaVLf2hKVOJMr297jhPlYhI5Kke8HGMYFihhcYGHIpHj5DyxvIj1xTgUmih4IW2I Kw4mR3Fk0bnUzWYx1yyLuBaRc1i/4YpyRARbbs5iHctaRDRbs6zqmqVstvStHSpF9WJ1ZcSjrFp0 LB4yiYN8FDZmtQAhmW9HlAdZUXoPyY1iNrQordzCGZNVJNx0PrU+VwOEDyQsVnO2tQgkYWq9JYsv 3FWy/hwWNriotH60/o+NF8b0EYSa4hkzHIItCmjGBJGMgRFham4urfAEd/ImleX3eYLY+oT6ZNGY 0/p2fDAAsWeWdFTSwHBWxMuuXYmbPiykIE7OaW01hjCWZBA2WI9BiJyUFRVWb5C5jBlIuq0i4rBM Y/wfOXokIUnUFsiMHTu2iwDqN/IFF5h9uDBUuT2aE/ZofTfKpE5IHqz0Ru8bJUoFZElCRmTQ2bBz 104j04AGcqtHbhZJ0ic3vvv27ZULvgVWLmQCrgwhnYdE0LPeHWvmdbLGnNxUHpM7SiMiJO8JudeE ODwtd5i4vty//4CRMtQLabNr1y4TgT4GIyz81FsWN54/5If4gQSC+KDtYEB8/JgAHCANW0QcQ1yx 2dhSRaMYVa6V+5t8pIdYwxoPkgUrOnCHfDNsNGdxHVeT5InzAqUjH1ZTlAExRxn0K7Kk06bzkA9C CwtA4mnrHK3b2qu+YZ1BXGTiKnLJ0iVyczpX8xTzDbnOD9Qb243MrFGHHJBljD/agIvNUkRRGqf0 MbWASyT6KJ9zZGV80LexXyAFCZyDGzjN9AAujHfWBbzxxhvNUhR8IcC5nyB0aw55F79ZPBPIpaU6 SgNYm+43D7Uh4MRcbTh5KkfAEXAEHAFHwBFwBBwBR8ARcAQcAUfAEZhKCEipZ4E9Cj65O2yZOy+0 LlgUhheek/GR1tySsrZYaTeVmjCdZYGoaJZCtnXhIq2fJSsHLA6k/DRdduwbzscTIIxUZnbO3NDT fSqclZu5uepHlKtRgUtxUWmsaFFNUk7rnxFT+XRNqreUZVgcCygiTVRYF9FVsbyk7KT8qE0mD+lR Eg9DbpVQOpK/VIj1Wbn6wzmEDCSmKTNZJ444jdOsFOhZWb2JDlLVUmZr3ThKHWlqkXMwubxTvVzL NsntZXNnGG6VS0alG2meI9pOVgvSh2rpr8R6TvnghIZV9rBIqD6RUn2SfTgjRbSsmwQWjUSsmRWs TfS9Gs9YUjsZC9aHAzongGN+K6VAVm7DPUmsYvSP9SGZX2ydSJVLX6F/zskCkgGf7ueYz/Y2RVGf UmnLipTL9qmv+9WjrSpDsrE+XqP6Arkgtr761a+aFRn30Dm5/D108LA1/aQsn5559hlbZwqLoUEp 5Q+KUMJ1a59Iuw0bNoiw2mnWaSMjObM2gsAYVvsh7CB+sFRj/GNFdfzYcZWbs3Xtvvn447amGphB 3rDe24jdOwbKGJjAkMA9u2PHzvDlL3/ZyiXO1sSTdQ9tOaryn3jiifD973/f5oMeEfeQh4ODkObZ 8L0XXghv/fSt0EpbdL8elYUaFqTcA2+8+aZZ3bWL+Od+hkA6eVJWp+rf3SIRH3vsf41wYghBXBxh jTmTV0KUEhnh0oG+1IaVKi4e77//fisnzl1c4xgCiutYFWL1BmkHMcR1NgLkCTISaHeMt4h8HGn4 UADSCdKNdjXnyePospG81MnanKxZB0lJfZTHNcqAiOOYsiDcSANhxTEEG9fSgby4kGSNNqwB33nn HUtPOgi1tWvXmlUipM+KlSvCvPnnl5Eur1X3FTJhybhu3TrDhb5DDvoBqz1kKw7IQTxtiAEZiAcP ZKdcxjV7cId4hFDESjCSdaTnGnm4DjlIHuJnWgAfcIU0pp/oQ8YF8ddff731JVadpfAuhYU9y+R6 uXXpqtB2xc1h+NiukOuVu1q5aPZQGwJOzNWGk6dyBBwBR8ARcAQcAUfAEXAEHAFHwBFwBByBqYIA 5IaUSRZsL1eG+jq/47LVIh7aQtvSlWFEa8yxhpRpxKeK3DNIDtaYg5hrW7o8dKy4TMfRBRkMhBoq vaZU0bbP/6neeoi1to6QU7k9KuOMrOYWSwks7bL+jyquowIW5akRcFRnxzqnYm3J8GCMyEIqmyii o7I12SeK1xiHcOljzgkoyKkvrSwvlS6OR/bpjTLieYCIE3uWycpKJkBoqHxZeY0MNYeh3gGRcGq0 SLSMSKSmYeGgskZEVgzLgm548JyRCJmhPlknKB1uGlVAVuuljfR3h8FmuYLTcb/IlUFTVmfkLnMg DEl5fby7L5xgzb4OkUqy0APPGRusW5O+hVEx5TFWanETQalOpVfsX0wJHvQHmw0hdho+NstA0GAd oouWy6xD82XYQCOVpdS+OCherBxWcpByw90DoblN6wuKUKGipjaNWDtMS1JcxnjPE1n4i0tB1miz tukc4oxxRWCsYOl2YP8BO+cP19loL+QUivoElHzePFl1WqQcpEm8FyjT8qlNEGY7d+2ya7TKrnFP FmopfUBZlAkhY/2QlyeRV+uj9fWb9d+YOiUP5eZywyIcD4oUPJQvPLGGjdwaa6qdktvKZH5I4aCK sCqEPKRc5E3cIo7vHom9B8mzfv36sHbt2oJFXl4gKx8ybs3qNUYCsc4cRB7kIo0wy0zdm8w1kFOx n2L+uIc4iW4sIZRYMw3LMginfn3MABEFwYQMEHOQULQfUoayIwEXcaQ8SFbyM9+xcc71cjJQL4G8 sZzVq1eHK664ws5xFQlRh0VepdDe1m7pISrnz5tvsoIJZCJYESDKaEdaFuoEAzbax/U4V5MXki1N vlHmgw8+GJYsWWLWcVFmyqdcyEgwu+H6Gwr1cm2mBcYA4aqrrtKaipcaRpzTd2zH8+OEuKqBeU3/ WuYu1nvA5SGIlBvuEdHrxFxV6GICJ+YiEr53BBwBR8ARcAQcAUfAEXAEHAFHwBFwBByBqY2AFGhm bYTSEisjCIioZJc7JazlMvoCv23RUhEWSmMK9Grq4Knd5KkqHcRCk5SqzbJua+6UVQRK3x5ZKkpB irVSE8pUlK5YH5g7s6i6Lt8ilKVNUipnlU8rsYVzIpoGrX/JmyiJUb6ixeYfsShV9V/KXf3RJdFU llZ/yGIKb/bxMDmyqyohf91KS+LiX8q0Wqz8vJJfdZviGvMnux7rR4ZEjoTYSMg8jiGGsLJD2W9j FytOEXGZ7FzlUVtVzrBItpFsvyQfTKw8h9XWIVnCKf/IsKziBjTWhS1psbTDJeOIyL2sLP6yGVnO NMmKSYgNKR4irrCenHAHvy4RQl2iAvua20JO94cxQQAyk4PAMjJM1mkjPSI9e4TtgMg1EaPJGnIC U0GpNDYSMKLin3MNRbvK3yzzCEYgwtYuULbiLH2SkGQKSZnJcf6v+tBqUd/YWneSY7hVbkpluci9 kpGrTd0s+frG5KzLiUmUH5tJgZI9L6ZZliJdjNAxzZFUGltJOu62mCGmSyxSuVCUN4lKUFAdMb1F JxDnU5TfGVrIk5eRA+aFAsypcmMyio5ES7pOm0+Un/uGwG1rbCs7NixHFaJb0xQMo/VZitr/QCJB lEF6JHPV2LzIBAkEaUSIxNYIY0ziQEbRBohCXCtGd4ukJZ78EF4QUpBR1IWFHBaLxGN9RxnE33bb bZae6xB31LVs2bJw++23WzrKJFBmxI0ykR0CjzwxPkk5+pc8EGDF14mPoRK5GNNAFNFOLDGpr1n3 BRhCpEGigSFr53FeHCASwQGSEDIyfjwBOYrFXDpQ5rve9S6zEiNdus2k4xzcIBTBPN2OdDnT/Thi FEnaOI7iWMVFL+OketBNpb7J6KYalnX7UNdR248M4s62cPNWL2aWp3BibpYPAG++I+AIOAKOgCPg CDgCjoAj4Ag4Ao6AIzAtEJCyB5JjRMq7wTMnpQji62yRFSLp0LiaglDXWVeuYClHHlcSNaR7zVJN yuVMy2kpuCHfpNxVTZANkHIt8xaG9uUrQ8v8BWZZVxM5J+UolnhYPQ5q61e5g6IJ0KejOERhSH9C lJjqT384T2+kG3MerysHinn9NUW9lUNZtpEnKYu6kmPVyTXLkT+Whj9Jny8jloV8Vg7pOU7OKacQ ny/LZEd+6T5zWVm9Kc2I2j0igk1qTtWNLKwdNUel65rIt1wWDMCXDTJPm4hIGQJanBF0pNVZtolN JwSVO6x0vR0thuWQLBFzUmBLo89FSzIj/yTAi0xTbw8I116Rcv0iRI2UYxzEXtUxIAs3AoRc/kDx ihN+JODY3DCOgWyU0Esy6W++LMsbI4W/9RzlqbNzIpuRBaKwqV3uMdt17zTn6xpTfiyg3nsqyZrV 1ApZCGE9Zc1ULFe4r3t6uuW28rit7VZce+ecDnM3OF8uCgk0OcmXrDd27PiJPKFjlyf0BxwhS1au XB4WaB5JyBID2fqmT24qbY00SbFMLvloC6Egk8Y51ne0ZY7WqlwuUqpN5eU7Snv1jO63U1p3DteW g2ZNZK2x8inrQgKkWyTeyuWPxA/tIy1ESWwvxBAuJqP7RcgyAnkgUrAqhICDZIMcg3iDxCJdnCNj HvJRbiReIN0eeOCBwjnXiwM4Une6jOI09TqnTbjGhGSDNKJeiDqIRtxbInd0cUmdYEUe+jW64SQ/ mCWWlgnxSdqIMccQc5Bupdxzcp1A+rglMTPrL+OADXyx0mSdOfAFP8YVxGiaCK7aej3HmjvmhWF9 BNW/f3PIyCI809aZTINVM3sCEHBizseBI+AIOAKOgCPgCDgCjoAj4Ag4Ao6AI+AITHkETLkoxd1Q 99nQd3Bf6Dt8IAyeOi6Xlb3SM0dFu5qR19tO+QbNAAFRYePej2DHUvqxZlaTSLX25ZeIABkJHVL0 Q7Y1tWlvSZP0lqnUHyXKSfma1ZpJg+1zQp/6s1su7M5094TQqjXS8srnhPxSv+sA5SIEmBG3dhyt 1JJrjB2szxLLNe3tHJ4kSWfXuK66VIrtkzgoDGIgyEifXLP8irM6Ue5z3c5JTxmyOOJ8TFyClV1X OQldw/p4WL2RXuWAlTaxmwmuYGHxYKY4LHyIy8fbsa4QYrkck4f//EHGIWGCS8yc3IQGXFkq/4wN hq0wYC8rNbOaEznHXpGGiZHKYADWQotQQMTigSiPvV1XWeS1/JbcroNjQfnP5XwpSd50uqRPjfiD aIUgxLWmSDqTUeUW6k+y1fWvyZ4qkfMr5XLw0UcfDdddd61ZKeVhMOJjy5Yt4Zvf/GbY+s42u2cK WXW/XHrZpeHjH/tYuOmmm2zNPTAxyPRn8+bN4YknvxW2bdsmokltK8arUFCFA8ORMkFEhNuyJeHR jz4qa6c7jFyhPnoM0miP1s974sknREZlw4ceftgIHNa0i/0EifP666+Hx//viXCFrK4eeeTD4ZKV l5i8JoHqGJIF6wtam+7ZZ56VG7+TlhW5MynZK0hb8pL1f4X8hTGj3MgIMQLBiFUYx2xYkEFOkRYy CWIJ8g7yCTeT5INAIx6SDosxiDqIvkjCReEoI9YJbunzmCa9t/lUc0YtId3HMX2sK55X2pMfF4rU eUyuU4f1YQ1EIwQi7cYKEPIR4ohySU97wQAiCczAgXaBGcQe55VkqHStkqwz4Ro4Y00JRq+99pqN J3DmHHeiENSksXtAeJcN3Kd6vmdaccksq+7ertDSmSfPaxw7ZcueRRecmJtFne1NdQQcAUfAEXAE HAFHwBFwBBwBR8ARcASmKwLmBnBQa2bJUq7v4N7Qs2dHGDhxTNYncrdliiDUtVIkoYScro2chnKD eqLU50ibyA7cXA51y3ni3HmJq0spmnFRKcbNuqhaM8mfmTMvjOhr/NNaP23PkWOhX4TGvHPqa7li NBJMvRzJKAg3iDT+JeRaQpoViDaTDJIqEZV8ljeROB+fJ8cKcSpLddCqmDaWZ3H6E0k7aBWL08CL pFnMg35eout6kiYSmclecSg/UTjrOvtkg8iJx9qPuZbEx/xcskA9+cNCnM5NLoQgEmtEKbCt7Jh2 Ru4LSBhxWwBGxCbETbPGEPCaO0rrVIg3EFIvQNZBXrCBnzqSzZDMw8gZyn0j+OQu1NLJMg4Xj9bf lGXXdYW91SvrOOGflEs8pUx+QC5kXLp0Sbj33nvC/fffLyuZVotDGq4vWLAwvPTSS6FZGJgbz5SY i+U28N3vfnd46KGHzrOuId+PfrQh7Ni+Qzm4Sy8wSAZwQyjWHbvzzjuNVIN0Sgka3njjjfDaxtdk sTMc7rvvvnDPPfcYQRXJIsgaNtqyevWVYb1kvuaaayzOJFMd/QP94YRIsR/+4AfhxMlTKp5OnngA x1oC6RYtXBQOHz5s7ish17BognSCgGJtOEgpI+YGhywNlmWQV5BQ5Oc6lk6cQ+pVCrXIVS8MKsmR vkZ9kEH9+gDjpNYBhICEcMNFJWscYiEYrelICzZs9C1paDMEHmkgmWycpCvIH9P2WtpfIuuMiAI7 MIKEgwx98cUXC+OHBl577XVh//79BavLqliJmGN9U55drUtWyTpZ6/r2ntSDcQL3/oxAuvZGODFX O1ae0hFwBBwBR8ARcAQcAUfAEXAEHAFHwBFwBC4WAihMcVMpIm6o63QYPHlc2zEphmQxxzUPUwMB 9NEiN5pk8TZ87oz1D+5FC+RIDVLi9rJZysPcvAWh63RfCCLkulrOhHatvSZfdHLVKEszKVkhziIB ZvyK4ohPk2B2rDhT9Mdr6XMjYpJ8pGEkFfLn2ZM4uuI1UqRJOitbaZPrSQNHjxMFvZ3bIbKQhj0H cc9hXnFs8cl5Ia0OkmjS65rly+/ZVQzUbpmsjopJp/tF4MEqjXZwLAvOTCsuV7Wp05pa5WY1pzE0 ojFkliGJdYh1qOWBSFOefB8k5F0+zRgY6Q+lU1o6xsgMzUOFjwQUl1xHCN0PWI3K4pM1F5va2JAp IQHJP5FgY0t1IzNyVJsOqY607SJzUNJHIoO8Ft/eNkpe5QVTawxTyJAOuYWEAIEMinWSDDKF67UE w6tUQmRTPJvBLVIT4jBNOkU5rT6wVZ20gbYUu+IjHhktjeTrVBpIrhiIb2HdRasxxk7ufp7cguJm kXXlWJcNYg6yDYs5XFPi5pE2QF6xgQWEFO0nHXkg6mhrrfhXaiF1TXZAbnA4fea0tYm20EbaRvsh KSHsCGCCjFzHmg7rQSzoIOjArh4YTHb7J6s+iDnww/ISvCA42YNhn7wPxDFW9v5MCcrcOKL15ZoW XRo6Vl0fBg7JUvbYLnWQ3It7qAmB0ZmopuSeyBFwBBwBR8ARcAQcAUfAEXAEHAFHwBFwBByByUcA xbA0bmaNhXLbrKqktE0UxqaannyhvMaxCNANcrloxAaWRGYhhJVcbcr6WBh92zJnbsguWhKGtBjb 2aH+MNAqhXpGriy1xlpOrrNw+5iQbmOJtNIWaMnYkTZXsqS3hFQxRbTiKc+uI4id2wF/LFjz4on2 WOhZnkKc8qdCOr0dpy8jhwUb2aqPE8mgfT4muZxEJ9dSx6MXazmKddWSdrqnMQALhFxTR2to7myT y0j1AJ2gDddrTVh1FIg52mw9pL3QtzGSRLEGmTFd+exJP5GKpKRlDCVJEkYsKSdeZ+wbQacxzbhu FjEYZWrS2n9NIucKQ4EyLyQYGRflr60AFO/mijWVNxJeijKCr3JJSX3kiUr89HH5vIZM6ctcKm5G SpYoH5lL1VlcP/2YThcrjXGxnEK+4rpjhnw5Sb5yiWLi8e8hCnHduHv3biPnIJyWas08CCasxeK6 cZQMKQcZBQFFgGAhP8Qeexu7dmV6/UFuiFUIX0g2CEeIRywIwQFyzsaGxggkUlxXD1IJ0o70K1eu tPzTq+WTKy3k5tGjR43kvPXWWw03xg6E3aFDh8yVZeF+qCZaVh/caB5t1kc4mVaR8h1a45GPZkT8 eagNASfmasPJUzkCjoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjsDFRAB3cLJsaJFrM9YvY225po452mvt MRTs52l0L6aws7Ru6ayNlFM/dVyyKrQtXWH9Rb9BqtYcRGY0yTIudM6Tkk/rCg72h6ysjZratJ6N ysqprEjMGauB4lyFJy4jqUXaW8Ule9ULgcu5kSjJteS86NjykY285E6u24n+jFcln5SS5E4fx/JK 7i1hzalLFuGRQkB92CQruRzE3PwO6zv6E2tMFMemPGYNOlioMsHmFLusP+lkhe7RQb6/ClFjykqu 20cEWOxpaxYZ1zyvXRahsm5q130BMafxmZQzJnPNJyjbISYY00Ny65gEa63ETqzgYmHISVMgO3AB Oyj3iOlAGYn7SlKqjPy9kKQhLmhdtmG5gBxk2lUYBWbYFPJJnrH5SFeAyghBZMb9IBZRsQ+ibEnq JAdxWPGQLl0mx5AJ7ONxuizLrWuQWvF4WOsMkiZtUUUZ8br1gZoTy4R05xj5orwjrFXYgBCJJlw3 YvUHWQI5B1mFzGAAIQVZFS3jzM1l/0C4/IrLjZBC1ukcIBYh4uI6ehzTftbPg4iMfUW6iANxkJcQ dBCWXPNQGgHGMWMJd5VXXXVVgJhjrIEZlnOsc8jGXBLvydIlJbFYB2e0bunwmaNhZMeGkB3SvayP HsxlcqWMfq2AgI/WAhR+4Ag4Ao6AI+AIOAKOgCPgCDgCjoAj4Ag4AlMVARTqTVIitS5eFuZfc0No F+kzdK4rZLXunGmIKyjYp2qbZppcqOgTYq4ltC5cLHLu8tAmq7emvDs5ablrajJl4AoTQkO+50IG IgUiQZsRfCjLI5ORKnNs6TqzCJTrVDt6bkLEOJ2Us1Ir1GEZ/M90QoA+zzWLnGvPqz5FfmU1nkZ6 RXL0DWneYADIJd4or6QM8SSxAtPIyY+hGlquCkeJERtcSV7iIeUg5OaIJJzbZltTp9a5w52lkXL5 9DVUUyrJrl27wisHd1j9PT094cCBA6aAJ20iU2yXxVibz549F7Zs2WpK+YTMSNJAWhF/9txZ3WNj 7wDK6u7uCVu3viMipDO0yCI2EnNc27J5i0iVLlPqW4uKm6U0WZGhBw4cDBtffz0sXbIknD59xix1 jHQBK0RU0KEd94m826416zZs2GAETXI1IRaJJ/+wyPstW7ZYWyGvYmjSM2Pbtu0m8/HjJ8Jbb70l i6ATeUySSoZFEO7du9fICPKNwUsyQFzu3bsvbNy40Yifo72UP46PDCi0hoDcy5cvN+svLMYgRqJ7 SsjFSMzRP5CEkHK4vly5YqUReDOBkAJ7iLhLLrkk7Nu3z9aXW6IxQhzEWyTmwIq0WMrh7hOswI50 Sf/VAPgsTAJOjCUIz+uuu87GTbxfIDqvv/768JOf/KRABFeDKCeLucwcWdudORKyXcdCZp6sG/Xh DO9qHmpDwIm52nDyVI6AI+AIOAKOgCPgCDgCjoAj4Ag4Ao6AI3AxEUBpK0Vwy9z5pvxpW7I8jAz0 m0XVqEL9YgrodVs/SHEMoQax1ixSrblVazyhLEfTXmuwvpbylXwqp1QoV1q5+FJleNwMRoAxRPNk kdbUJPWnCLAmW2+uKYxozbmmfsi5vDtLFgyUq0tbHw5yLvJYcV92UI0mMEKAMa56jJxWXRwH7VlP rglSTmRck9xq4sLS1r1DHsjmCYaXXnopvL5zk5ESkDYQTVi9dXbOyZcc5eSUxuTMZd23v/2t8KMf vZK3ICONZFcbTp46adfnSFk/1nImZ9ZJzz7zTNj42sY8CZKUTb4TJ06axU271qjDyikJse6kXoiA t958M5w5faqwRtqePXssaafIl7EhZ+tePf/882HTpp+OsXSjvq6usyL59psF3pPf+lb44Q9/mJcp KQUXoligQRbu2LEjPPbYYyJvOkerUBkQFQf2HzCya7R+yaxrzGdcf/XHr4aDBw+YpdqZO9eHcPXN o2XU6Yj24KYSUgrMcd2IdROECaQbhBznbBBSkFQQLCtWrrA05J8JgXZAxjGO6TtIStobcYjkElZd xIMLLizjWnMzAYNGtQHsuP/WrVsXLr/8cjuOdTHGVq9eXRh/jPtqwdaY6+/RnLYwtHQuClks0k8f 1Fw61gq3Wjmz+boTc7O5973tjoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjsB0QkBKuyYpkDJNnWaF1Zyd n1jLTac2zGRZE92+CImEcLA15lAYzxCl8UzuuhnZNo07dMVieOVCUtZaLTpvF0kmgiw3ICukgWHb coPaQ9IN4eJS7i3x0WhuGhNUiodvpJoigWfXqQciDus41pGTpV5Tm+Yq6tOWyZ83iRTMiCyEsKsX mdKsORGXdJQHIXbttdeGa665pmKXkhYlva1/V8TprFyxIiyTG8WxpNxoceTDGq0YFwiS5cuXlc0X S4BMSerOGOmEpQ4ylwqI1mT1nY/X0qVLwqJFCy1bLK8Y08suu1TEzQqjI2M56XpoI2791q5dU1Zu 2orMlM2+UaFZ9WAlRz2QUrgXxCouwVuEssgSNmTAzeVMtBKj7ZBEtI09loH9ff1G1IEDAVKSfmPM gwNbHP+N6pvpXi54xbGDW1AsEIsDLlIhh2Pa4uvF5xn1Q5PmytZL1oW2S9eF4d6u0I/1nFxaqhB/ 7hcDVuLcibkSoHiUI+AIOAKOgCPgCDgCjoAj4Ag4Ao6AI+AITFEEpLgzi5QGKkinaMunn1jqKw+O wEVFgPmCYSiGjikjhwWdCLNsRzY0iZCDlBsRQdekLTckUk5riBk5Jws6Uy6TtcDEKarQGBTP+ROz klM9EG4i5ijfNizjIOewmItkHGkRqI73xkMPPhjue2R9QbL0AfrxtNQIPZ6qUdInIWlsLXkLWVJo Wb0UFDHLl5rejc0nOaukT+et1/EoXqXr/0ZXNrzSGzGpV635ctRgyCeIE4gmSLloOUcKiLv2+e12 fd68eWbBF8mqOktyUYvj/qD9WM7N0TqyrCHXqzVlIZYYj5DPuK0EJ4gkzhtJmF5UMOpYeSR2I9Fb XDQYQoaCMa5TqwZZ5bYsWB5al6zSupmLZQncGYYWLINJV1bukQo3e9XCZ0cCJ+ZmRz97Kx0BR8AR cAQcAUfAEXAEHAFHwBFwBByBmYNALdrhmdNab4kj4AhMFAHNGdE6LNeES7emkBNhlhuRUh+F/7AU yVjLDWtjr00+EmU9p3g29Mz5nU0/GE7lCTkYv4zWs0s2HRsJl1jGJW4tpaAmTWSa6qyvXrNmTbh7 zcoxCI0SamOiCydGDhbOzj8ol/9C86VrKFXGhdaXLrfcMWWXqjOdvlz9pEnn/cFbu0PYczSdta7H 1AVxAvGEBRPkU1xbjYogTiCtZiIhlwYSHCDcWha0hI45HWYxF8kiroEBWDghl0at8jH4gR24sS8O EXPiI9bFacac51Reh9b1a8PdNPOfrHbb5CoWy2FdS8yVx+TwkyIEnJgrAsRPHQFHwBFwBBwBR8AR cAQcAUfAEXAEHAFHwBFwBBwBR2CmISCFMf9RSmMGB2HTihmdCDoMRHRuZJy5s9Rx3KeIOUNE2YOy ZVBAY4YHQQcxB/mWJ+xUCRXlrb6S40ahGS1dGlW+lzuKQBN93uAQSRMIFLbiEK8Xx8+086SdCQkH EZcOEYNaSNd0vtl8DNHJ2nKsTViO0MTFJekivhXxatH6se2aOJvjepLMgVjLZczqrvF3SkXppsXF 8+/uaSG2C+kIOAKOgCPgCDgCjoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjsAFIABpBnlmZnAolJMyTNGf 1QkknXF3+kNglz80to2s2ox6oxzyF8rUMYE0yR8OGhae2ncsbDp1rmHle8GjCGwug/O39x4Nm06e HU1Yp6M45NLF2bBKR8zw46mEQbn+L+6CRo2H4nrGcz4sN72nwoLQfnokfOv1HeeRb1l9nXCwaZG+ WWgKGzcfCG2tlS1Ds309th5n07ED+jDhiIky3IXF8GBoPr7T5sPxyFfvtLX2Vb3rHU95TsyNBy1P 6wg4Ao6AI+AIOAKOgCPgCDgCjoAj4Ag4Ao6AI+AIOAIzBAFj16wtBcJD1m8JKzfaxLjOXIEkyCe2 Xf5PtDIppBnN3tAjFNDTQQndUBAucuHeBxe5A6ZY9VN6PPT1h3BGW8nQLkthXTh8uuTV0pGniqKH Qjh5vCjOT0sh4MRcKVQ8zhFwBBwBR8ARcAQcAUfAEXAEHAFHwBFwBBwBR8ARcARmDQJGqJkVXb7J ItwiIRcN3/J83FhM8sTcZBNyY4XwM0fAEXAEHIHphIATc9Opt1xWR8ARcAQcAUfAEXAEHAFHwBFw BBwBR8ARcAQcAUfAEWgwAnkKriQT1+CqvXhHwBFwBByBGY9A3oPyjG+nN9ARcAQcAUfAEXAEHAFH wBFwBBwBR8ARcAQcAUfAEXAEHAFHwBFwBBwBR8ARuKgIODF3UeH3yh0BR8ARcAQcAUfAEXAEHAFH wBFwBBwBR8ARcAQcAUfAEXAEHAFHwBFwBGYLAk7MzZae9nY6Ao6AI+AIOAKOgCPgCDgCjoAj4Ag4 Ao6AI+AIOAKOgCPgCDgCjoAj4AhcVAScmLuo8HvljoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjoAj4Ag4 Ao6AI+AIOAKOgCPgCDgCswUBJ+ZmS097Ox0BR8ARcAQcAUfAEXAEHAFHwBFwBBwBR8ARcAQcAUfA EXAEHAFHwBFwBC4qAk7MXVT4vXJHwBFwBBwBR8ARcAQcAUfAEXAEHAFHwBFwBBwBR8ARcAQcAUfA EXAEHIHZgoATc7Olp72djoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjoAj4Ag4Ao6AI+AIOAKOgCPgCDgC FxUBJ+YuKvxeuSPgCDgCjoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjoAj4Ag4Ao6AI+AIOAKOwGxBwIm5 2dLT3k5HwBFwBBwBR8ARcAQcAUfAEXAEHAFHwBFwBBwBR8ARcAQcAUfAEXAEHIGLioATcxcVfq/c EXAEHAFHwBFwBBwBR8ARcAQcAUfAEXAEHAFHwBFwBBwBR8ARcAQcAUdgtiCQySnMlsZ6Ox0BR8AR cAQcAUfAEXAEHAFHwBFwBBwBR6D+CAyOZMOmU+fCoZ6++hfuJToCjoAj4Ag4Ao6AI+AIOAINQGDV 3Dlh3aK5YV5rSwNKL1+kE3PlsfErjoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjoAjUCMCWX32m9M/D46A I+AIOAKOgCPgCDgCjsB0QCAjIZsy/J3c4MTc5OLttTkCjoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjoAj 4Ag4Ao6AI+AIOAKOgCPgCMxSBHyNuVna8d5sR8ARcAQcAUfAEXAEHAFHwBFwBBwBR8ARcAQcAUfA EXAEHAFHwBFwBByByUXAibnJxdtrcwQcAUfAEXAEHAFHwBFwBBwBR8ARcAQcAUfAEXAEHAFHwBFw BBwBR8ARmKUIODE3Szvem+0IOAKOgCPgCDgCjoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjoAj4Ag4Ao6A IzC5CDgxN7l4e22OgCPgCDgCjoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjoAj4Ag4Ao6AI+AIOAKzFAEn 5mZpx3uzHQFHwBFwBBwBR8ARcAQcAUfAEXAEHAFHwBFwBBwBR8ARcAQcAUfAEXAEJhcBJ+YmF2+v zRFwBBwBR8ARcAQcAUfAEXAEHAFHwBFwBBwBR8ARcAQcAUfAEXAEHAFHYJYi4MTcLO14b7Yj4Ag4 Ao6AI+AIOAKOgCPgCDgCjoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjsDkIuDE3OTi7bU5Ao6AI+AIOAKO gCPgCDgCjoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjoAj4AjMUgScmJulHe/NdgQcAUfAEXAEHAFHwBFw BBwBR8ARcAQcAUfAEXAEHAFHwBFwBBwBR8ARmFwEnJibXLy9NkfAEXAEHAFHwBFwBBwBR8ARcAQc AUfAEXAEHAFHwBFwBBwBR8ARcAQcgVmKgBNzs7TjvdmOgCPgCDgCjoAj4Ag4Ao6AI+AIOAKOgCPg CDgCjoAj4Ag4Ao6AI+AIOAKTi4ATc5OLt9fmCDgCjoAj4Ag4Ao6AI+AIOAKOgCPgCDgCjoAj4Ag4 Ao6AI+AIOAKOgCMwSxFwYm6Wdrw32xFwBBwBR8ARcAQcAUfAEXAEHAFHwBFwBBwBR8ARcAQcAUfA EXAEHAFHYHIRaJnc6ry2Sghks9lw8uTJcOLEiXDu3LnQ0tISli5daltnZ2doanIetRJ+F3Ktt7c3 HD16NJw6dcrwXrRoUVi+fHkAbw+OgCPgCDgCjsBMQsCfeTOpN70tjoAj4Ag4Ao6AI+AIOAKOgCPg CDgCjoAjMF0RcGJuCvTcsWPHwssvvxxeeeWVsHv37tDV1RX6+/tDc3OzEUQLFy4MN9xwQ1i/fn24 7bbbwvz588cl9cjIiBF9bW1tJQmnr3/96+G5554LEIOf+cxnws/8zM+Mq/zpmvjVV18NX/va18Lb b78denp6jPiEmPujP/qjcPz48fDd7343dHR0hE996lPhvvvum67NdLkdgYuOwDe+8Q2bY4aHh22O efDBB8fI9NWvfjV85zvfCZlMJnz6058ODzzwwJjr4zn5yle+Mivv3dk6j49nbMzUtNXur9juSs+8 s2fPVrxHYxlTcV/pHadWbKZiu2qRaTq27/Dhw+Gxxx4Lb7zxRrj55pvDxz72sXD11VfX0txZm6ae z8hZC+Isavh0nBdmSvdM93u10vPU3zMbP0or4U/ttdzb1cpofCu8hmIE/L2nGBE/dwQcAUfAEUgj 4MRcGo1JPh4cHAzf//73Ay/xGzZsCHv27DECDYIsHbCUW7ZsWXj66aeNIPrVX/1VI+gg7qqFAwcO hCeffDKgEH/kkUdKKj9ef/318KUvfSnwInfPPffMCmJuy5Yt4XOf+5wRc6dPny7AeNlll4Vf/uVf Digwv/jFLxoJeu+99zoxV0DIDxyB8SPwk5/8xOaYgYEBm2OKibmNGzeG//7v/zZijjloIsTcbL13 Z+M8Pv6RODNzVLu/aHW1Z96mTZsq3qNTFblq7zi1YDNV21aLXNOxfXx8xodPvJs+/PDDNt87MVe5 t+v5jKxck1+dCQhMx3lhJuBOG6bzvVrteervmY0dpdXwp/Zq93YtZTS2FV56KQT8vacUKh7nCDgC joAjEBFwYi4iMcn77u7u8Pjjj4fPf/7z4bXXXgucL1iwINxyyy1h7dq1YdWqVWYxh2tLFGbbt28P P/zhD8PmzZvDjh07wh/8wR8YgVbJ5eLevXvDZz/72YAFCcruYmV4bHIulzNruWJCMF6faXsIyCee eMKUQpBya9asCXfddVe44oorwsqVK8ONN95o1ovgwQY+HhwBR+DCEeAeivNMqfspXsNirtT18dQc y5pt92663ePBy9NOfwTo+9j/7ItDLc+8n/70pxXLKC5zKpzX8o5TDZup0I6JyDAd2xdlTu8ngsFs yAtWPNPq8YycDXjN9jbGe2u2vQdNhX6frvdqrc9TxhSbh/oiUAv+1Fjp3q61jPpK7qXVgkDst/S+ lnyexhFwBBwBR2B2IODE3EXqZ74W/ud//mcj5VCa3XnnneGTn/yk7VnjDJeK/ADHxeKhQ4fCj3/8 4/C///u/4a233grPPPNMwO0UFnPvfe97bV+qGbhjxHpk165d4V3velepJLMyjvX7IDhZW441/H7j N34jfOITnwiLFy8OuPuEIPXgCDgC9UMA97hY/mK5izteD46AI1A/BKrdX7U886qVUT9p61dSLe84 07Fd40FoprdvPFh4WkfAEUgQ8HnBR8J4EajleTreMj197QjUin+le7vWMmqXylM6Ao6AI+AIOAKO wGQg4MTcZKBcVAdEGX7acUeAsvrjH/94+PVf/3WzaluyZIkRcuksrC93xx13hOuvv97IvJdeesms 53D9hmUd10sFCD//qu18ZCA7e3t77asz8MNVJZaKHhwBR6AxCLBGI4QcXwo68d0YjL3U2YtAtfur lmdetTKmIrq1vONMx3aNB+uZ3r7xYOFpHQFHIEHA5wUfCeNFoJbn6XjL9PS1I1Ar/pXu7VrLqF0q T+kIOAKOgCPgCDgCk4GAE3OTgXKqjqGhIXOhyNpyfX195l7yt3/7t8P69evNWiuVdMwhhN2HPvQh iztz5oxZ0H372982SzjIJVd2j4Gr4glWO5GwnD9/fujo6KiY3i86Ao7AxBDgPmPz4Ag4AvVHoNr9 Vcszr1oZ9Zd6ckqcqe2K6M309sV2+t4RcARqR8Dnhdqx8pSOwHRCwO/t6dRbLqsj4Ag4Ao6AI1Ab Ak7M1YZT3VJhJffUU0+FgwcPmhvFn//5nw/vfve7K5JysfI5c+aY68o33ngj7Nu3z1wxQvCxdlza PRxl4/rylVdesXrIj5XeY489Fl5++eVw8803h9tvvz3MmzcvFj1mPzg4GN58r5Ny4gAAMAdJREFU 883AIs/kw7rskksuCevWrTPLPdZka21tHZOn1AkuFZB1y5YtYf/+/eaWE9eRq1evNpedWADSpkrh Rz/6UWDtm2XLlhlOuOR64YUXrMyWlhaTB1ITchLXn5XC22+/bVaK+GCnXQTcWbLe3NatW02W97zn PeGaa66pVMx51w4fPmx4007cjoIf7khZsw4Xolg0lloLEHxxTdrf32/Wkljt0abiQD+CAWTi3Xff bdZ9uNwsDhGr9vb2cP/995/XDr6kY31CymN/4sQJq4919S677DIbQ8g6d+7c4qIv6Bx5wZU1ElmM GpxwwQoW1EmfMfavvvrqku2OlcZ2jXcM1GP8RRkq7XEXS/9AjmN9CX6Me+6hPXv2mPvGFStW2DqG XOceqCVc6LgqLrse/T7RMpiPGOuUgxuWcla+UXbGycaNG21jrmO+Yd6IcxcfKtQjNHqMTPY9nsZk qszjF3r/0pZG9w/PJcbmsWPHwpVXXmn3KPdquYA8GzZssPmM+Yv5mGdjcZio3OPFrNz9NZ5nXrky itvGOXMTODDvcQzxh/tt3g0eeOABs+4v9YyKZU302TCed5zxtov0432Wx3bFZwFYsK4vcz19wNzH M5d5jTjWEeYZzbMPl+QTCbW0b6Lz93jlYzyAIesib9u2zT5C47667rrrAl/7xw+jai13os/CRvbL RO/1WjEoTnchz0jmOe7b+PuD9xHeU8sF3v3pw507d9o7LWP68ssvL5e8YvxE7/mKhZe4WM8xP9E+ rjSfL1y4MFx77bX2cSYYseZ4PZ5HtcwLEbaJzueUM1GMoizj2U90XqjUL+P9fVlJ7ql+r47neVrc znq9Z1LuxRhDE62zHs+W8eJf6t6utQzm9Ml6BkzV92vGWj36jXLSYaq990zW/JbGwI8dAUfAEXAE LhyB81mACy/Lc9aAAD+6UFjwAIcEglRCiVNr4Ecc68o9//zzRipR3vbt28Ott95aIKZQZOPmEhLu 9OnTVvQ777xj6VGWsaYaCqFSxNzJkyfDF77whfDVr37VyoW84cUb0gHFCuTR7/3e75nyrRw5x49L CMgvf/nL4Qc/+IEp7pCDciAtWMuN+j/2sY8FiElIoXIBEg55UOTHF+inn37a2oIbUH7Qgh9K0moB mf7f//t/AWLu1KlTlhzCCDmxmoNMQ+FfKzHHC+6LL75obkl5UYbk6+rqsr4FW9qJovLnfu7nwi/8 wi+YAiRNHiLHf/3XfxlJ+Fu/9Vvh0ksvPU/JS3m4Pf3GN75hyqzPfOYzlqa4vfzwIx0bfQS+6XZg nUkZrFPI+npgiXszMOTrO8YVxAeyst5eJWVNNZy5Dr5YdCIP4xMrT9oCCckYpE76jX79pV/6pfDw ww8b9qXKHu8YqOf4KyVPcRxj4D/+4z8MP5RB9Ov//d//GXnO/YQ8tBfFP6QUbmshxsG+VJjouEqX WY9+r0cZuN8FI+YAxlolYg5y+7Of/Wx4/PHHw+7du20sobzm3uQewXL405/+tH0okL6f0u2udjxZ Y2Qy7/F0m6fSPD7e+5d2TFb/cL+yZutzzz1n4+kv//Iv7TmXxjJ9zPOWtWH54OBXfuVXxnwQU0+5 x4tZuftrPM+8cmWk28/9y/q4vB9AnHOv8uyhv/jIhnuUuQ/33I8++qjdr+n8HNfj2TCed5xa2lWv OTc+C3j+8gEKimOeuRAbPHN5/vEOBDnHM4BnwUMPPVTyXawYt3Ln1dpXj/m7XN2l4nnWf+1rX7P3 Dd41IBnwFMEzkA9yIHcgJYmrFqZyv0zWHFUKowt9RvLO8b3vfc/uUZ7Df/VXf2XvzuXeRfit8m// 9m+myP3Zn/1Z+zCmlDzV4upxz1erI329XmO+Xn1caT7ntwe/E3gfvummm+r2PKo2L4BXPebzemGU 7r9qx/WaFyr1C/fEeH5flpN5Otyr43mepttZj/dMyrsYY6heddbjmT9e/Evd27WWgd5msp4BU/X9 mjFXj36jnBim4nvPZMxvsf2+dwQcAUfAEZg4Ak7MTRzDcZXAF0SQXQSsP1DWjzdAvGC9huUTL/18 kYwlWXRniUIIkoUvqAYGBuxrZZQifKUdlSOlSDUUJV/5ylfMQo5yIcwgElgXiq+++ZGOpRl1kZ8v n0t97f3ss8+aYp0XH5R2/LghLXKhnMKSiBdDyqKe3/zN3zQiqRQO/KDH6oiAgoe2UgY/mpALxTxE Ty0K+kgI8iUkbYWYQplIH6BQ5HrE0Cqs8IeXeognlLSQcpRHn2AtwA/tI0eO2FfytBOlHG34/d// /XDjjTcWSo3kGuQDX7A98sgj5xFzYMTX9pRBQDEMeRbzxsIgv7DSIh2EL9ZlMSArVpr/+I//aMpU CMj4pTQ/cMEU4pa62Pix/mu/9msllaqxzEp7+uff//3fw3/+53+aPNTHmGU80U/8mGMMYEFAfZCj KCUg50opiMY7Buo5/iq1M16DdIaAgXj8l3/5FyPk+EFy55132j3HPRC/XKO93P9/8Rd/YdaesYy4 r8e4Spc10X6v19iJGKGYZv4oFxh7//M//2NpSMv9AkkMhlifMf75AYrC+0/+5E/sg4RyZVWKn6wx Eu/TRt/j6bZOtXl8vPcvbZms/oEoYO5HRixDmJcgDnhWFQc+puGZy8b9zXzG3JYO9ZJ7vJiVu7/G 88wrV0ZsH22GLP+nf/onuw8ZZzzb+VCI9wqe5ZB1kJzMc6SHvATfGOr1bBjPO061dtVzzo11MY99 /vOft2cccxXvY3gIQHnDs5ZnH/MYzwI+4oGcu9AQ6yw1t9Zr/q5VNuZ2PjbiOch7BW3jozGISuTD whIPBbyrMBYqhaneL/W61ythUOraRJ6RvGcxZ3V3d9s7Ke+uvC8yD5YKvJcy3zGGS304VipPcVy9 7vnicsud13PM16uPK83nvIPz24zfMVhf1+t5VGleALt6zOeUUy+MKKuWUM95oVK/jPf3ZSnZp8u9 Op7naWxnvd4zKW+yx1A964z32USe+ePFP9aZfubXWsZkPgOm6vs1/R8xnEi/UQ5hqr73NHp+S1rv fx0BR8ARcATqhYATc/VCsoZy+IoTUoI9BAU/kGslgtLFo2xDWY3SA0UPJBCkQCzrqquuCr/7u79r ZAhKNOrkS0ziII+wfItp0+XyQw2FCcq2P//zPzcyDRn5gQLx87nPfS7wpRZkE6QD6YrdfkEMQe5h hQDpxRfhWMUhEz88eYFBOfPFL37RFKFY0aC04kc/L5blAoQm5AdWYJHIw0IN5Wia7CqXn3jcJkLC Uc4//MM/GG7U/Tu/8zvmchKysVY3PShwv/SlL5nSAqUkFjwQZmv05SvEH0QCSkqUVJAJWDDSZ7ST /iPg1glcIDD5spw23nXXXXYt/oEMhbiKAaUehGtxAFPaBcaQYOl2oBiBoKFv6X+s81Cm8oLOjysI T/oVWbEEQfkKVsh6IQEXEXwxj+wQsowBxgv1ESBEUdzyJTbWF8j1giwjccdaqc5axkCjxl8tOIAj G/caVqkoW7GM4McT7jxpL5auTz75pPUDY7dYIVaPcRVlrUe/16OMKE8te8gPsGIM//Ef/7ER3Siq mDPBBrIXS2Asdph/uJ/juKqlfNJM5hiZrHs83fapOo/Xcv9Odv/wjGKu43mFdRnkL4QJJEpxYM5i nmVuh7zjPid/DI0YV7ViFmUo3tfzmcc8zTMCRT3PPEg3nu0olfkYhXcQ5nHmOeZ+nu3cox/4wAcK YtXr2XCh7zgFQVIH9ZxzY7GQlJAZfHyFFSYurbFQYh5jfuPDFbAAS569zHdpAjOWM9H9ZM/feEjA AwHvEczNvBd98IMftOcc7xrcQ7w3Qd4yXiqFqdwvjbjXK2GRvjaRZyTvpnyUxUdlvD9DzNGW4vcQ 6uN3A3Mi45j3bsZoqd8NadlKHdfrni9Vdqm4eo35RvRxqfmcuZJ5gt8x9XwelcImHVeP+bwRGKVl LHXciHmhVL+M9/dlKVmny716Ic/TerxngtnFGEONqHMiz/wLwb94vNVaxmQ+A+o5nzWiz8BwIv0W +2Cqv/c0an6L7fe9I+AIOAKOQH0QcGKuPjjWVApfR/OVDl/88QMXhTJEyngDpB5KnEjMQc5BdsSA 0gzFIooPjgmQQfzw4+vlcgECDkIH4gZiIf1jnR+OkGqQRHwJjXKJH+xpYo4fIRBAKOf4CumTn/xk +NM//VOrN22hh2wQFnwpiiXRN7/5TSNlWK+nXOALX2RDLhSCWIQhD1jENpbLG+MhGSMZGskx8qI8 hziqNYA3xAAKNdqM264/+7M/MyUkL70x0E76+e///u+NfMKlFeTT+973PrMM4xp9Aoa8HGJVAyaR oGScoOCCiEOpR10cQ8BB9qAMJYA1xB7XIAYh32IZXEcZxkstecD4ox/9qLWZawTkBAP6lvHJWOJL K354lbKITHKV/ov8rHuI3PQRY4D+Qv50QKmNkhJLQsYS6eNX2el06eNqY6CR4y8tR7lj+gFiEWUk LkcZ4zGgpOQeQGnEV+iQc7jzQmkZQ73GVSyvHv1ejzKiPLXsmYMgLCFzudfTlp+Ma8Y8OEGgfOtb 3zIlI1aqtYbJHiOTdY+n2z9V5/Fq9y9tmOz+oU7IK+ZALJNRIvN847w4oMTmwwjwRbnNnBlDo+Su BbMoQ6l9vZ55PAtwIQ2RBMGCdTcWq8zj6Wc7H7rwnsMHCuAJZjxzmP/r+Wy40HecYozqPefG8nmG 8iHOpz71KXsepEk33sF4VvAs4LmMoplnbzpNLGei+8mcv8ESgpt+5732F3/xF81LADjwnkbgvsIq iHdTyLlyYSr3S6Pu9XJYFMdP9BmJC1XeO7k3IWd49+IeTd/H1Mm4hDRirPIhAn0X+7FYpnLn9bzn y9VRHF+PMd+oPi41n0MA4d42/o6px/OoGJPi83rM543CqFjW9Hmj5oVS/TLe35dpOePxdLlXL+R5 OtH3TDC6GGOoUXVO5Jl/IfjHMRb34yljMp8B9ZjPGtVnYDeRfiP/dHjvadT8Rvs9OAKOgCPgCNQP gdKLHNWvfC8phQA/wOJXwihhUNpeaOCHXCRm+IIfkqMeAdeVWH6lSTnKbW9vt6++UbwRUL5RbzpA GEFWQRDxhS1rUqAAKP7BD2m0XmvrURcYRBdivHxVCrzgvf/97zfFPYofiA9wLC6/Uhn1uMYPf6zh +KIYwjISXWlSjnpoGwpMrNM4RtGB9Rw/+AgoOVDSgSkuR1GQYP0YA8pN6iI9ihGsD0iHGyyuxcDX UMShBIH4w4IhrUDhBxQbAfILhSA/zNMBcvAP//APw7/+67+Gv/mbvzGiMl1GOm21Y5TWWGeiuKW/ ikk58oMV64xBwhBqHcOVxkCjx58JWuXPgw8+aGugpUk5snD/MN4hkcAD17CQqen7tl7jKopYj36v RxlRnlr3zA3cN2lSjrzMG1jfQGgy/3EPYsHEPVFrmOwxMln3eHH7p+o8Xun+pQ2T3T/UCVGARRPP vPihQHxOc53A3Mp4w5oO8v2OO+4Y81FKI+WuhlkiYWP/Qhzx/OK5z/PlIx/5SMlnO/cs9y4fZLCG LB+K8IFJDI18NsQ6xrOv95ybrpu5no9wigk3PqgCB75wJ/AsR7nTiDCZ8zdeFXiuoQTiPYS1QNOk HO3jXY17jWvx2V+q3VO5Xxp5r5fColTcRJ6RfBCIZwY+dOMDLMg53gvTgXuWD4joU95XSE9fXkiY 7Hu+HmO+kX1cPJ+Da/p3TD2eR9X6qR7zeSMxKid/I+eF4n6p1+/L6XSvlsO9XPxE3jMp82KMoUbW ORWe+eX6Kh0/mc+AesxnjewzcJlIv02X955GzW/pceXHjoAj4Ag4AhNDwIm5ieE3rtx8aR7JJyyR Sq2nVWuBKKMpj0BZF0qiFNeHu5pIvhVfg7yJJAuKymKFOC9PkHK0EdIFC5dypBnKKb7ApUyUUvxQ jIRVcb3xHLKvkqvDmK7Re5SzKNNQAGBpR1vLWZbxgxtFFGtNYbEGRlilxYDFAYpOxgJfJ0OyxYDl BnVBwKLgo2+op9idJRZnlEsZkeiLZbBHOcrLMWOEr6T/9m//1tabg0RF0YoSJhIIKFNRujIGLmR8 IitWYLhChZyjz4oDpCAWghCRUSFJXDFZWJyP80pjoNHjr5Q86TjGOi+/rKdTKnDvQORCAEDI8UIP SRpDPccVZdaj3+tRRmxfLXswRAkYldbFebifuA+YN5gvuF+KPxAozpM+vxhjZDLu8XQbOZ6q83il +xe5L0b/MKficjd++AABh/VyOjBXQTrwdS1zPh+cpD/EaKTc1TBLy9moY55FPKN55tF2nu3lrP35 GhsL8r/+67+2DzN41hMa/Wy4kLbXe85Ny8B4imtMpuM5RukbLWSwSIrvhcXpJno+mfN3+r2E9xDm 8FLvpczx3EPl5njaPJX7pZH3ei39PdFnJH3CfIfFL/czVsK8i6QD9zqWj/HjM+75+CFgOl2144tx z9djzDeyj6vN5/V4HlXrl3rM543EqJz8jZwXqvVLOZkqxU+ne7VSO8pdm8h7JmVejDHUyDqnwjO/ XF+l4yfzGVCP+ayRfQYuE+m36fLe04j5LT2m/NgRcAQcAUdg4giM+t2beFleQhUEUFDFH7eQM3xZ fKEhbbGGNVbadeGFlskLFF9SlSsLqx9+aBBQJKW/hCcOsipaGkAy/d3f/V3F9Z9w48QXu+m80cWk Rab+8CIZ3VCmoi/KIVZtkVzjq+Ni66hiodJpsJqMZBTpsDCAoIRwQPnLD09wjUQdChLcIKIYAXPw Sb8IoliJxBxKQF4wo8IvygGJAdmGdRFWWiy0jdIFudjIgyINAjG6XIx5x7tHbuqPMjAmqAvClraD HRvx0dKPOmhHtVBtDDRy/FWTjevch5Bu6XWnivNBkMYxHscCmBPqOa4orx79Xo8ykKXWAHlJnXGe LJUvYgh5Eq2QmRtqCRdjjEzGPZ5u+1Sdx6vdv7ThYvQP9aJggkDFSgSrZhSXWP0gMyG6uISMwnqZ H7np0Ci5a8EsLUejjtPt4+MYnlflAvMgW3Fo5LOhuK5az+s958Z6aSsYYdlbKvAexX1K4Hlfy/Ov VDnV4iZz/o7PM2SKc3Q5+XhXqTSGpnK/pO+Fer/nlsMrHV+PZyQfD/HOh7cK3glpB5bo8d2FjxN4 H2VsYvGWdtublqXa8cW45+sx5hvVx7XO5xN9HlXrl3T7LnQ+T5cxWfdBo+aFWvulGq7F16fTvVos e7Xzib5nUv7FGEONqnOqPPOr9Vu8PlnPAOqb6HzWqD5Dton223R472nU/AZ+HhwBR8ARcATqh4AT c/XDsmpJKCIiYQGBBSmF1Vsku6oWkE+AZRHEXCT2INPiV+m1llEqHXKw8RCvJRQrk7D+icQcX+Di dqRSWfzoj1ZS5K1k+YKinnZCDl7sEF8SaRskSznlW5STfo/9kyZUuc6PG15aIWdwKQRZCXFHegg4 foji9gkCDQtF3D/xIxiXa1hvsKFEJk90j8WLZjpg2fHhD3/YlH9f+MIXTPkMAchGWnBFUYYMKJ0/ 8YlPGFlYXE66zGrH9D9ryLAmEfUgHxZO9DF7+p16Y/9XK4/r1cZAI8dfLfKl+7lcen6oR+Kb+xcr yhjqOa4osx79Xo8yYvtq2XM/xXulXHrGTbznIMirWdqmy7kYY2Qy7vF0G6fqPF7t/qUNF6N/qBci iXWWmLN4bvExAS6I/397Zw5qSdHF8fYLFUREECN1TE1EI8WZQUcRt3HfZdTBxAEDwWAQNDETFFRE NHB56vjEZVxH3HfNNDEz+BCcQFA0NfGbX32coWx7qe4+1dV37r/gvbv1reVXp07VPadONQ5f5unv v/8+HPeGQw6Ddt3xlKveKcyof+6ErrJjd+PxN6bcHHPDmHrwHW+da/VgDKLneWxKrB261kZN3xnz 3pz6Gz0cy4jNc0317tPzS+6XXGO9iVPTe33s+E48RpvmSBxwRPdzT0B0G/dsZZ1JJCwRnJysgB5k vUkEbOrGl6b68t6cY95D5nP1cao+nzoftfWDve+hz3Mxsjo2PebSC6n90lSnrvdWcax2tSf+bOo6 k7xKyFCuMpcy58d91PV8zjlgqj7L1Wfwmdpvq7DuyaXfuuRLn4mACIiACAwnIMfccGajv0FkFQ4Q DBYcBcl9HXBYDP3Ri3OHP5x6OKpwqPADYGqaaizCyYKzjYTxkiivtuOu6nUlOqFu7Iyv4cc2C6g5 jFlxuU3PcUjaX9Pn9ffiHfFN34PVKYeOm8Q4gtON6DJkBOcbhi52KyM3tB8HHUZjDB3s1CKijsgh yoAh+TQlZGznzp0hLwwx3C+IfNgVjeEG4zORd0SLUIc9e/YEJx3chybyfuqpp6r33nsvHFlJpB+G ItrAsZ/IKwZu2rNv377qu+++SyqiTwZyyl9KBXFk9jkz4zrisInl2WSDx5TUJ1fk4dHvHnmktIdr UnRQzAcZGiKjMX9vHdXVxjnGuJWfwtCubXrMxahv/FKXXGU3tbP+Hse7Eb3MRgcM02ySQPaJNEYn sjGCzQ9cE4/bnPVOYVZvR47X6Ko+3ZZSbq65IaXspmty6FzKSZkLmuqT47259Hc8JmId3dQm5BqZ aktL7peSOgpeKfo95t82R+KYQ5cxJu04SxxzrC1ZC2Jw3LZtW1izDZlj631aYsxPlflcfTxEn0+Z j+p9UH/toc9zMarXNX6dSy8M6Ze4Pn3PV22s9rUn/jylbfH1Tc9LyFCuMpc05zexbnpvrjmAsqfo s1x9Rr2m9tsqrHty6Tf4KYmACIiACPgRGG519yt77XJi1wrOE272TTTUV199FSKZ+PE7JH3xxRfh fjd8hx/SHEVI3qVTvDsQQ/Tu3bvDkUYp9SICputoo3jxk5Jfzmss8hGnKn84WYmEaktcQ2QbiWig el/hsKIfiabkWCG7zxxON/LlyAnKhBFOLQwtdpwlRmPOX+f4HowsXQ5a8iIijgg9nHo4ACkDQzRH F2Gc4f2333473GMOJx91G5JwNm9sbFSbm5vB2UcUCsdoUje7mTp15Hg/HIrs2CbZD+6usvpkIKf8 ddXLPiMaEFnoSkSUxrJgR0fxHW+5snp49LtHHlafrseme1fWr4/HEzLV5dCvf7eUjMw1xuvtHfM6 F6O+8Utdc5WdwgF9R3QI8zKbF9CL3O+Q4y15zuYCXjN/11Oueqcwq9clx+u4fSl6DkMKdY+deTnn hrFtzqVzx9Yn1/fm0N+sT2xtY/Nc2wkH8S7zpjYvuV/iseC9zm1iUX/Pa47kuFGOL//ss89CdBxr z61bt4YNYjjnWGc2Hdtbr0/X65JjforM5+rjIfp8ynzU1Sd8FrdvrD6P85hrHOTSC0P6pY9t/Pkq jdW43nM9LyFDJcqci+fQcuaYA6xOU/TZkvtsFdY9ufSb9a0eRUAEREAEfAjIMefDMTkXdigRAYWh D+MfjgmcMhwZk5JwwhCJxA9nEvnhmFvCxItziB/DJCK9MGTStrZElBbRWhhzWHi1GXHavl/qfWsn DjS754G1u6lOdg2f2Q/L+DqiCnGWEQ2Hs4o+5scyjrNTTz01OOPY8cQfPHFq4ZjjD2MKzrRzzjmn 2rJlS+MudCIrYf3bb7+Fe6DhzCBf/jCg4uigLcjiM888E/LFUccRlEMdcz/++GP1zTffhLLOOOOM 6q677qouueSS0O7YSEv7OU7HHFlx9FfMZshz6xe+U0L+4MgfTNuiAegrriEx5pEHS1Z/L7ny6HeP PKx9KY8pDOPxZMxS8uaa+Po5ZST3GE9tf8p1pRiV7B/KtvvHHThwIGxUIGrE/tCd7PjlPnTmfIhZ lmQW1yPX87h99eOY62Uy17z44ouBHfMa+p+5puTcUK+jvbZ2eelcy3cpj3Pqb7uvHPrZ5rl4fouZ 9MnQkvvF6kZ75pxDjJ/XHMkahQhgfj98/vnn4QQFO8aX8cCGMMbvkI0vVkd7LDHmPWS+dB/Db8p8 ZPzbHuP29Y3FNn0e5zHXOLAyV0Vfr9JYbZOVnO9bf1LG3DI0Z5k5GU7Je445wOo3RZ+VkBOrd9/j uqx7+jjocxEQAREQgekE/nkzqun5KYceAhiouJcDj0TO7N+/v/rggw86769mWbLIf/311ysi5ljE chwg98Fp2sHPd3CEzOmwI5qLI2RIHMvIMYkcY9iUcMS8+eab1b333hucN7SLXdSrkOJ2EmWGgyw+ OihuAw42jofkhySLYIwg3Gy9nuyoO2SCe81xvCM/mIk0w2FnyV7z2UcffRSOIeKINSIxkammBOd7 7rkn/LE7Ou4T6oSjjkiRq666KpRHHgcPHgzOvKb8ut7DYcx3SUSXnHvuucGRWHfKwcuO7eRa5IG/ KSnulxLyx/3iOLaJvm5KOKHpW3aREx2JkxX2luL6e8iVR7975GHtS3nEUYtcYNxtStxrAIYYfnH8 Mzb67kkX5xMznltGco7xuI1Tn5dkVLJsuKGzOIIZfcVYJnoYnYaz3YzYTXxL17upTp7vsUGDDSGs JzgCmWM+2/Q1vNAbzz77bIg2tM0XOeaGqWucuN88dK4nc4+85tTfjBtbi3IULP3dti5C9yJDbWnJ /RLXbe45BF6ecySON9tsgL5jfUi/UQbRcqw3p/yGyDHm22TG3veQ+dJ9bG0ZOx/Z99sePfR5CUZx maugr1dprCIrU+fTNnlrez/uz7l0aYky29pff9+D/9A8cs8BcRvH6rMl99m6rHviftRzERABERCB PATkmMvDtTVXdttfdtll1QUXXBCM8/xwffTRR6snn3wy3FOszZCBk+uRRx4J9+7C8I8x+pprrgmO uaYd/FTAoqx4jiMPB07OxFEF/Jg/8cQTQ9QXTkciupraRETWq6++Ggyf3377bXBSsqNqFRL3SWOB SZQfToR333039F297jjAPvnkk2DswEEHn9NPP/1wVGF8PbuTcbTSl59++mk4VpKdv0RXxtGU5pgj b64jooN6sDg0p2icL89xeGIowwH81ltvVT/99FP9kvA6PtIG+YqPWWz8QsObGGutvzFm81dPfM4O 7ddeey0cpcnntKfN0Fv/ftvr0vJHuz7++OPq66+/DuMtrqfJAsfk4XwlmhCDWBwl6i1XHv3ukUfM oe85MkDkJrJtR37adxgPOKPhi8EDpy8c0XOpqaSM5Bzjqe1Pua4ko5Jlwwbn05lnnhk2T3BM8Btv vBGOecMBjKzxeVMqXe+mOnm+xxxEdD6bSrj36Ycffhiiu+tlMGYZo0TKoPuJ4raNKDnmhqlrHG+d W+dR+vWc+ptNRxj52HTCevX9998PUfd1Bqx5kZG2DSxcv+R+KT3WPedITnrguHEMnzhK0Xf0HX3I GtccrfU+TH2dY8z3le0h86X72No4dj6y77c9eujzEoyWrBeaWK/SWKX+U+fTJgZd75WQoRJldjGI P/PgPzSP3HNA3L6x+mzJfXYkrHuwXbDplYh5/thEjO5SEgEREAERmJdAukVz3nod0aVh5LvjjjtC lBzHUhIBwlFZ7ETHKIgxix2NGLa4BxjHGxJBhUGaSBGcJkQ3XX/99YeNXk3AOPvaDP/kTVQa0Tos cjAS87lnIr+dO3cGJxDtwhHEhH/DDTcEhx0OJAx33LPnueeeq3DI8TlRf0QjtDkYPevokReROlde eWU47gwHAsYM+urqq68OkWc4tIj4wfjEkV4YOo4++ujABiMIO9rqic9xrmHEpL/hQjQVshAfJYRc nHzyycFp9uuvv4ZsYEd/ck+QpoSzFIcg+dIn5HfjjTeG9+gznLYYUolwQE6IosMIi6NwaKJuHDvB MZhffvllyOPyyy8P7aDdyDMRhC+99FK4lxNlkzwcx0uQPxg/8cQToT0433GWchQQhuznn38+RFfS rzjnMWLGyVuuPPrdI4+4jSnPOeYXhuiKHTt2hPtUwhBDL3oDxzKGpUsvvfRwhGdKvlxTUkZyjvHU 9qdcV5JRybJhg47iyEo2RKDbkTuc6ugwjIIYPZpS6Xo31cnzPdtQxDqEKEL+mCeuu+66ikhQPke3 v/POO+H+osxNzEs4z9FrpBxzA9ynrHG8da4nc4+85tTfrEsZJ8zvnOrAepPxxAYy1h+skVhfMPez YYkI87a05H5Zwlj3nCMZp3a8Pn2HvuPec2wcGrM5K+7THGM+zr/puYfML6GPadvY+aiJS/yehz4v wWjJeiHmGz9flbFKnafOp3G7U56XkKESZaaw4BoP/mPyyDkHxG0fq8+W3GdHwrqHtdgLL7wQbFb0 16233hrWcvxmVRIBERABEZiPQLOVab7y17IkjoZh9z3HOGK4J3IMRwaGDCKJ2FXEDxB2rHB8JccW 4rgj4o2drTi6br755vBjmoVOWyJyDScgP8K4X9nGxkYwbl900UXV7t27Rzle2sqy94nowunIrlUz 4uGY4gc6CxjagPOCHytcc95551W33357573oLO8lPXL0I+3kPmncK/Dll18Ox3fCGwcZ0WcccUm/ wv+KK64IfYZjrS3ZUXfwIeEYIz8MoJYwQrJDi74lcoFEXXC2tiWcezjiuHcddd3c3AzOYJwb1O2v v/4Kx08S3cgCDQcjMmaRDm35Nr2P4xFjLLuv2Xn19NNPBwM37cDZiGMZJsg1jitkm2g+DLm2S6tL ppvKjN8rKX8Y7TlvHsfRQw89FI6pxQmKgwlZoL8YA4xdDJg4quvJU648+t0jj3obu14jc4wRjPwP P/xwOBKPHZ0wRI8gw+jHXbt2BfnhB9vQVFJGco3xoQz6ri/JqGTZcMEBh9PcIrnRuRh7GQtdqXS9 u+rm8RlH7zLucFayucbmPKJq0H3obzuemLnrtttuC1E3ps9zzA0eaxxPnevB2TOPufU3UVZ33nln WP9wNCLGHo6cQ6eznmUdytqPscIaF53elpbcLyXHuvccyRHoHIVOND9jmN8nGGpZZ05NOcZ8X528 ZL5kH8dtHDsfxXk0PZ+qz8mzBKMl64U651Uaq9TdYz6tM+h7XUKGSpTZx4HPPfiPySPnHFBv91h9 ttQ+o32rvu6xTVNsqCexOZENOkoiIAIiIALzEpBjbl7eh0vDecOP4bvvvjtM6nbkIcf7YJSOE0Yv IqJweGzfvr3aunVrMHSYwSu+Nn7OcTTsaCd6i/y59xeGEQzbOAbGRETF+Tc95zhKnG3HH3989cor r1QHDhwIxy3iEIrvVcFC8KabbqquvfbaEJ01dWduU11yvkd9L7744sASRxcRUTiYMFjigCKx24g+ hjV/7EqOnWz1+rFghQuRZiyKWIji0Kon3sfQhaMHxwQ7m7ucaDjfcIKR6BN2s2OEIVmfYHzGwEo9 ceKRZ1sEXvhiyz9+FGCQ5bscVYmTkT9ew4VHjN633HJLhYMYucRRh8xj1MUB3XYkZ0uR/3i7pPwx ThlvtBFnO0cysuCl3fCl3Tg9ibZsM/J7ypVHv3vk8Y8O6nmBsRbZwGFr48p+IFAXNjQgn8gpmxTG pJIykmuMj+HQ9Z2SjEqWDRN0KgZloouJJEZvM3aZT7tS6Xp31c3jM/QaczuO8n379oVNPjhd2IBD Qs+xEQG9TjQ/0a6MZ0s55gaPNY6nzrW2LuVxbv3Nmod1EfMdjls2mrHWYJ2BfNBf559/flj7sRbp cswtuV9KjnXvOdI2HrBW54h51pLMs5x8MDXlGPN9dfKS+ZJ9HLdx7HwU59H0fKo+J88SjJasF+qc V2msUneP+bTOoO91CRkqUWYfBz734D8mj5xzQL3dY/XZUvuM9q3Luqfel3otAiIgAiLgS+CoQz+W /+9F8M1XuQ0gwDF+OOSIqsFBQfQQu9IxZuDg4gcyEWfscMRRww/P1EQEFA4PdilzjCWOApx87Igl uoeE0wwDCaLQdYQheeF8wtFCvTjuhqirpkQ5RLeQLw5B/oiS4kcV7cEBxfFGtIcFV1vCUAAXWFA3 6j41EX3DkT3UD8MBOzB5jBOfU3d+vGKkbXOkcN8rIsOoozk+yZ/IKBxd7DrGGI8ztM+RCn/KJS92 l/M9HGT14wSQDW6UTXksqLvqF7eJelFXIuOQM5wfRDBytCKOPuSBMumTLgdinGfTc/qe/NkxT+Qc jmHew+GG0eeUQ9F9HNtJuf895FzkXk7IBqyQCdjFaYwMeMlfXI+25/fdd1+4TyRlPvbYY8EJikGf yDk40O/IAg5V2pciC55y5dHvU/PguF70EHLNOEaXxclu/E7fo1e4zhgi5+g8GLKZgDGB7LSl1LE7 p4xYXXOO8aXq8THjF14l+sf6ibkSmeW+C+hF5ohUQ7VHvYcy6xtfjN++Oa8vD2ND+5hHmB/Rb2z2 YW3AmGSMMj7R5Rhg6onves4N5N+3xkltl4fOTR2D3COT/mD+Yz7AEdK1uabOMX6d0r6p+jsuL+U5 5TH3c3QlssIJAqwZ2UzBHMj6z/Q7a0jGFxya0pL7xWOsN7W56T3PObKeP7K4d+/ecJQVx2w/8MAD 4Vj9+nVjXucY8yn18JJ5jz4eqs/r7RszH6XoBcqhfWP1udXTg5HllfrooRem9ktbXVd1rNKevvk0 dY4bYi+g3BIy5FFmKo/UOb+PP6z6xnZKHuQTp5xzQFwOz8foM8vDo8/Iy7vfyHNp655U/YYuxbaH zYLEegxbEPYvJREQAREQgfkIyDE3H+vekjDa4ihhcucPZxROGYzVOK94PTZh6MYByCNG7jknXCZ9 DDOUT7ns6KIOfY6qsW0t9T367s8//wxHQ+IwI3qAx6UlFrb8SEDGiEbCgEqfEPHlmSiHPufIUuSO MihritNvTP1yy1/smHv88cfDEafUE8bIA+MWWcApPWYMe8mVR7975DGkD2GI7kBvwDCX3sotI0Pa vNRrSzIqWfaU/ljVeqe2GQMQ45N2ottZq6TMIznmBs81jpfOTeU413Vz62+OyWb+R05Yy6LDp8z/ S+6XUmPdY44kevHBBx8MG/juv//+as+ePSEy1lMuc4z5lPp5ynypPk5pp8c1Y/V5XHYJRkvWCzGb VRmr1NlzPo0ZpDwvIUMlyuxi4cF/SB5zzAFd7R3z2dL6zNqwTusea7MeRUAEREAEphPwtcRPr89a 54DRHocVf10RIWMg4QRr2sE+Jq+h38GY7t2eoXWY43qccKlRFXPUp60MDGM4yfjLmSgHQy1/JVMp +cMQWY92HMPBS648+t0jjyEMvBj2lVlKRvrqtaTPSzIqWfaUPljVeqe22dYrqdfbdTnmBs81jpfO tfYu5XFu/c2GMs+135L7pdRYnzpH4ljnfpqchEGkK8ev40D1TjnGfEodPWW+VB+ntNPjmrH6PC67 BKMl64WYzaqMVersOZ/GDFKel5ChEmV2sfDgn5rHXHNAV3vHfLa0PrM2rNO6x9qsRxEQAREQgekE 5JibzlA5iIAIiIAIiIAIiIAIiIAIiMBiCbCbn5MMcFgR0b9///5wP02iebZt2xbupzkmsn+xDVbF RGBFCWisrmjHLbzakquFd5CqJwIiIAIisJYE5Jhby25Xo0VABERABERABERABERABNaFAPcW3tjY CPfYwUHHPYe53zL3lbnwwgtH3+twXfipnSIwFwGN1blIr1c5kqv16m+1VgREQAREYDUIyDG3Gv2k WoqACIiACIiACIiACIiACIjAKAIcb/bDDz9Um5ubh7+/ZcuWcG/cs88+O9t9XA8XpiciIAJJBDRW kzDpooEEJFcDgelyERABERABEZiBgBxzM0BWESIgAkcugbPOOqvatWtXuFk692hREgEREAEREAER EIGlETjuuOMqHHAHDx4MVTvttNOq7du3Vzt27HC9H+DS2q36iMCqEdBYXbUeW436Sq5Wo59USxEQ AREQgfUicNTfh9J6NVmtFQEREAE/Ar///nv1xx9/hAxPOOGE6thjj/XLXDmJgAiIgAiIgAiIgAMB fvL98ssv1c8//1xxLznWLCeddFJ1zDHHhNcORSgLERABBwIaqw4QlcW/CEiu/oVEb4iACIiACIhA cQJyzBXvAlVABERABERABERABERABERABERABERABERABERABERABERABERgHQj8Zx0aqTaKgAiI gAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIgAiIQGkCcsyV7gGVLwIiIAIiIAIiIAIiIAIi IAIiIAIiIAIiIAIiIAIiIAIiIAIisBYE5Jhbi25WI0VABERABERABERABERABERABERABERABERA BERABERABERABEoTkGOudA+ofBEQAREQAREQAREQAREQAREQAREQAREQAREQAREQAREQAREQgbUg IMfcWnSzGikCIiACIiACIiACIiACIiACIiACIiACIiACIiACIiACIiACIlCagBxzpXtA5YuACIiA CIiACIiACIiACIiACIiACIiACIiACIiACIiACIiACKwFgf8BIYM+aEvnaXkAAAAASUVORK5CYII= --Apple-Mail=_DBC99868-74A1-46F9-A361-8ABD90B4D8E9-- --Apple-Mail=_FC27D8DE-327A-4BFC-A142-246BB86E6C2D-- From nobody Sat Oct 20 07:56:33 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29CC112D7EA; Sat, 20 Oct 2018 07:56:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eXBSlyBTgPeu; Sat, 20 Oct 2018 07:56:26 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1068F12D4F0; Sat, 20 Oct 2018 07:56:24 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9KEuHsq008730 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 20 Oct 2018 16:56:18 +0200 Received: from [10.137.140.28] (104.244.9.242) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Sat, 20 Oct 2018 16:56:12 +0200 To: Laurence Lundblade CC: "rats@ietf.org" , Guy Fedorkow , Hannes Tschofenig , "Smith, Ned" , "Jeremy O'Donoghue" , "eat@ietf.org" , Denis References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> <9c73f9b7-9129-c273-254e-465f92ab3650@sit.fraunhofer.de> <09818298-9FE1-430A-8045-A9A7E76ED64C@island-resort.com> <35F3F15E-5B24-4CBA-921E-FAC50A1F3122@island-resort.com> From: Henk Birkholz Message-ID: Date: Sat, 20 Oct 2018 16:56:10 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <35F3F15E-5B24-4CBA-921E-FAC50A1F3122@island-resort.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [104.244.9.242] Archived-At: Subject: Re: [Rats] [EAT] Device Identity (was Re: [EXTERNAL] Re: Attestation BoF charter updates?) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Oct 2018 14:56:32 -0000 Hello Laurence, well... I was actually including this picture as it is the only complementary material to the EAT draft that I know of. And I am perplexed how you think I was implying that EAT or CoID are insecure. How did I make the impression to have suggested that? It seems to me that I am unable to convey a very fundamental concept here, of which I assumed that it was way more obvious. And I am a bit afraid that our dialog is becoming somewhat circular. I get the step named "provision private keys during manufacturing". In a given scope (probably in this case defined by the manufacturer) the decision (let's call it design) is to trust the keys deployed (in this scenario it seems to be a secret signing key, which is an assumption!), right? Where did I dispute that? Wrt the "verification keys" I am not so sure, what the diagram means by that. With an asymmetric key-pair these would probably be public keys to check the signature by (I assume)? My point is that evidence about system integrity (first phase of RATS WG) are just something else then putting trust in identity documents, deployed keys or signed claim sets - that is all :-) Further comments in-line: On 10/20/2018 03:59 PM, Laurence Lundblade wrote: > Henk, > > I think you are grossly misunderstanding EAT. I certainly wouldn’t > propose such an insecure system as you assume it is and folks like FIDO, > Google and ARM would not be supporting systems that are very similar if > it wasn’t a secure model. I was not remotely (sorry for the pun) assuming that this 'system' was insecure - how should I be able to assess that? I was trying to highlight what trust means in the scope of identity documents and corresponding key material. That was the question, correct? And: 1.) trust is does not guarantee trustworthiness 2.) trusted claims are not always attestation evidence It depends on the 'system' to use your wording, and if you trust that system or the way it is designed you can derive meaning from that trust. Could you please explain to me what I got wrong here? I seem to miss something very obvious. > > It is true that EAT doesn’t directly specify how the remote party comes > to know the key material on the device is authentic, but it leaves this > out with foresight and intention so that the EAT claims can be used with > key material established by IEEE-802.1AR, ECDAA as deployed by Intel, > Googles Attestation Service and others to come. Our current understanding is also assuming out-of-band mechanisms that provide, for example, claim semantics. Still, trusting key material that is deployed with foresight and intention is based - obviously... - on trust. That is the only point I am trying to make here. RATS require similar trust relationships in order to trust Attestation Provenance. That is how trust relationships work, right? > > I don’t think we can rely solely on IEEE-802.1AR. It has size issues for > small devices. It has operational issues.  Maybe even some of the > central / hierarchy issues that caused X.500 to fail. Correct. That is why we started to incubate the Concise Identity draft. > > The core picture and system diagram shows how this works and the loop. > In this picture the IEEE-802.1AR roots/CAs correspond to the Entity > Manufacturer box. EAT certainly doesn’t preclude a group of > manufacturers getting together and running a central CA based on > IEEE-802.1AR. I also assumed exactly that, how else would you trust the corresponding identity documents? > > If EAT was just proof-of-possesion, then there would only be the one > line from the Entity/Device to the Relying Party. There would be no > provisioning step of any obtaining of Verification Keys. This is not true. You get the keys from from somewhere (or they are create by the thing itself, which requires some type of CSR anyways), you get the signed identity documents from somewhere.... I thought it was very obvious that I am not implying that there is no provisioning step - how would that even work? Possession has meaning to it. That is the whole point of possessing a key as you pointed out above. Trusting that meaning enables you to assume a trustworthy devices, but there are additional methods, such as explicit attestation, that provide you with more evidence for the purpose of assessing device trustworthiness. Viele Grüße, Henk > > > > LL > > > > > >> On Oct 20, 2018, at 3:19 PM, Henk Birkholz >> > > wrote: >> >> Hello Laurence, >> >> unfortunately, I am traveling at the moment, but let me try to address >> an eclectically chosen topic. >> >> In an attempt to answer your question "What is the definition of an >> “identity document” I will just reference >> >>> https://tools.ietf.org/html/draft-birkholz-core-coid-00#section-1 >> >> for now (instead of writing a wall of text again. Sorry, if I do that >> sometimes, that does not always help...) >> >> Based on the reference text, the important principle here is that an >> identity document is signed using secret keys issued by a (sub) >> certificate authority that one or more entities *can* put trust into. >> >> In comparison, if a CWT is signed with key material deployed on the >> device in question, what you provide is proof-of-possession of that >> signing (most likely intended to be secret) key. >> >> Again, you *can* put trust into that proof-of-possession, but the >> trust relationships here can have vastly different semantics. In both >> cases though, putting trust into, for example, CoID (via TVP) or EAT >> (via PoP) is a decision, I think. If you choose to put trust into the >> signature of these CWT, both are Trusted Claim Sets - to you. >> >> This trust has unfortunately nothing to do with the actual >> trustworthiness of the thing in question. As Ned illustrated already, >> "in a closed ecosystem, the trust characteristics and properties may >> be implied". In consequence, if you choose to trust that possession of >> a key provides an appropriate level of confidence in trustworthiness - >> that is a decision you make. >> >> This does not provide actual evidence that a thing is really >> trustworthy. And providing this evidence via interoperable network >> protocols is the gap that RATS intent to address - not only in closed >> ecosystems, but also the Internet in general. >> >> IHTH, >> >> Henk >> >> >> On 10/20/2018 08:19 AM, Laurence Lundblade wrote: >>> I consider /device identity/ an absolute critical part of our work. >>> It is a critical part of most EAT use cases such as enrollment of IoT >>> devices with IoT management systems. It is the first claim defined in >>> EAT. >>> What is the definition of an “identity document”? Maybe you are >>> thinking of it specifically as what was defined for IEEE Dev ID. If I >>> recall, the identification claims for the device are in the subject >>> DN of an X.509 certificate. >>> Seems like any EAT with an EUID in it could server well as an >>> identity document too. It provides signed, secured proof of the >>> identity of the device. It can include manufacturer info in addition >>> to the EUID. The EAT style identity could be as tiny as 150 bytes in >>> CBOR syntax. All you need to store on the device is the EUID and the >>> signing key. Maybe they are even deterministically KDF’d from the >>> same seed so you maybe you only need to store 32 bytes on the device. >>> EAT’s mention of X.509 in 1.4.2 is as one of many ways to establish >>> key material so the remote / relying / verifying party can verify the >>> signature. So yes, I think you have it correct below. (Technically >>> speaking the private key associated with the X.509 cert is used to >>> sign, not the X.509 cert or keys in the cert. The X.509 is only to >>> help the verifier find and verify the verification key. You might >>> even have a means to get it from some service based on a key ID and >>> not even store it on the device). >>> It is an EAT design goal to keep /all/ the claims in the signed >>> payload. That includes identity of the device, identity of the >>> manufacturer and so on. That way you can use many different signing >>> schemes (ECDAA, symmetric key, non-X.509 public key, X.509 pubic key, >>> simple public key with just a key id…) with the same claims. >>> LL >>>> On Oct 17, 2018, at 5:49 PM, Henk Birkholz >>>> >>> >>>> > wrote: >>>> >>>> Hi Laurence, >>>> >>>> maybe I understand now where the general confusion is originating from. >>>> >>>> I dug through some parts of the EAT draft again and could it be that >>>> UIED are identifier and not an identities? They literally are claims >>>> (aka assertions) that can be signed as content of a CWT as >>>> illustrated in >>>> >>>>> https://tools.ietf.org/html/draft-mandyam-eat-00#section-1.4.2 >>>> >>>> 1.4.2. talks about identity documents by mentioning "X.509 >>>> certificate chains or something similar but different". But as you >>>> highlighted anything with regard to that is explicitly intended >>>> _not_ to go into the EAT claim set as content, but is stored on the >>>> thing (or maybe on a thing that signs "on behalf of" the thing the >>>> EAT is about?) and consequently is only used to potentially sign the >>>> EAT claim set (via COSE). Is that correct? >>>> >>>> As a result, an EAT would never be able to act as an identity >>>> document itself, but the key material that comes along with an x.509 >>>> certificate (as one example of many highlighted) could be used to >>>> sign the EAT. >>>> >>>> RATS are able to use the "X.509 certificate chains or something >>>> similar but different" and the corresponding key material comes >>>> along with a certificate (as one example amongst others) to >>>> establish Attestation Provenance. >>>> >>>> Viele Grüße, >>>> >>>> Henk >>>> >>>> On 10/17/2018 01:19 PM, Laurence Lundblade wrote: >>>>> Wasn’t saying there was ambiguity in the TCG case. Not being a >>>>> TCGer, was just was trying to understand what the TCG definition is. >>>>> Your mentioning 802.1AR DevID helps a lot as I have some knowledge >>>>> of it. >>>>> I see now that my speculation about SW / config version was wrong. >>>>> That’s fine. I only wrote it to try to get to clarity. >>>>> Thanks for help clarifying. >>>>> In EAT, we defined a UEID for what TCGer’s mean by “identity": >>>>>    UEID's identify individual manufactured entities / devices such as a >>>>>    mobile phone, a water meter, a Bluetooth speaker or a networked >>>>>    security camera.  It may identify the entire device or a >>>>> submodule or >>>>>    subsystem.  It does not identify types, models or classes of >>>>> devices. >>>>>    It is akin to a serial number, though it does not have to be >>>>>    sequential. >>>>> See here >>>>> for >>>>> more on UEID. >>>>> In EAT there is a strong desire to separate the signing key >>>>> material from UEID to have flexibility in the signing scheme. For >>>>> example FIDO and Android both have privacy-preserving schemes were >>>>> a signing key is shared by 100,000 devices. (Some use cases need >>>>> privacy, some don’t, perhaps because of legal agreements with >>>>> customers, and correlation between use cases and privacy schemes >>>>> can’t be counted on for high-volume devices like mobile phones). >>>>> I don’t know what the right answer(s) is(are) in the design yet... >>>>> LL >>>>>> On Oct 17, 2018, at 4:26 PM, Guy Fedorkow >>>>> >>>>>> > wrote: >>>>>> >>>>>> Hi Laurence, >>>>>>  I don't think there's ambiguity in the TCG case...  current work >>>>>> in attestation focuses on using the 802.1AR DevID spec, which >>>>>> corresponds exactly to one of your cases below -- it's a vendor, >>>>>> model and serial number. >>>>>>  It's true that TCG technology can be used to validate software >>>>>> integrity, but that's hardly the same as identity. >>>>>>  Considerations of user privacy commonly accepted in TCG would >>>>>> preclude the inclusion of software state as part of identity, >>>>>> practicalities aside.  In general, privacy considerations lead TCG >>>>>> to carefully avoid unauthorized disclosure of either software or >>>>>> hardware based assertions. >>>>>>  Let me know if I'm missing the point... >>>>>> Thanks >>>>>> /guy fedorkow, juniper networks >>>>>> >>>>>> -----Original Message----- >>>>>> From: Laurence Lundblade >>>>> >>>>>> > >>>>>> Sent: Wednesday, October 17, 2018 12:31 AM >>>>>> To: Henk Birkholz >>>>> >>>>>> >>>>>> > >>>>>> Cc: Smith, Ned >>>>>> >; Hannes >>>>>> Tschofenig >>>>> >>>>>> >>>>>> >; rats@ietf.org >>>>>> >>>>>> ; Jeremy O'Donoghue >>>>>> >>>>>> >>>>>> >; Denis >>>>> >>>>>> >; eat@ietf.org >>>>>> >>>>>> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter >>>>>> updates? >>>>>> >>>>>> I think the TCG has a certain developed notion of identity that is >>>>>> different from others.  A way to get sharper about what a >>>>>> particular identity means is to describe the space and how the >>>>>> identifier selects in the space.  Here’s a few examples: >>>>>> >>>>>> - The space is physical human beings with fingers. A fingerprint >>>>>> scanner select one of these humans. This is typical biometric auth. >>>>>> - The space is humans that know a password. A password >>>>>> authenticator selects the humans that know the password. Typical >>>>>> authentication. >>>>>> - The space is humans as legal entities / citizens with criminal >>>>>> records, passports and such. A national ID selects. >>>>>> - The space is physical manufactured devices from one maker.  A >>>>>> serial number narrows it down to one physical device. >>>>>> - The space is physical devices from one maker. A model number or >>>>>> version, narrows down to a subset of these devices. >>>>>> >>>>>> My understanding of the TCG world is that identities goes beyond >>>>>> any of the above because they include things like the version of >>>>>> the SW and configuration of the device. The identity is largely a >>>>>> hash of an identifier of the physical device, various SW >>>>>> components and various configuration states.  The point being that >>>>>> a change in any of these is a change in the security >>>>>> characteristics of the device and if it was trusted with a >>>>>> particular key or particular data in the past, that trust should >>>>>> be revoked until re established. >>>>>> >>>>>> - The space is physical devices from any maker >>>>>>  + Measurement of the SW (the SW versions) >>>>>>     + Measurements of some configuration >>>>>> >>>>>> Changing any of these change the identity of the device. >>>>>> >>>>>> I know I hardly need to ask, but TCG folks, did I describe this >>>>>> correctly? >>>>>> >>>>>> >>>>>> So that said, many, perhaps most, use cases for EAT do not want >>>>>> this kind of device identity. It is not a prerequisite for >>>>>> trusting  claims coming from the device. In some cases this level >>>>>> of identity seems extremely disruptive as small SW upgrades could >>>>>> result in re enrollment of biometrics. We already are annoyed when >>>>>> we have to answer security questions when start using a service >>>>>> from a new device. >>>>>> >>>>>> I think this WG needs to address both this very tight TCG-style >>>>>> device identity and the more heuristic EAT-style >>>>>> claims-for-risk-engines. I could see multi-decade evolution where >>>>>> risk engine use cases want more and more of the tight TCG-style >>>>>> device identity as criminals become more adept at forging >>>>>> EAT-style claims. (Today risk engines work off of unsecured >>>>>> browser parameters). >>>>>> >>>>>> The Introduction in the charter seems entirely focused on the >>>>>> TCG-based identity use case. I think text should be added for >>>>>> EAT-style attestation. I will write some after some comments on >>>>>> this message. >>>>>> >>>>>> LL >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>>> On Oct 16, 2018, at 8:24 PM, Henk Birkholz >>>>>>> >>>>>> >>>>>>> >>>>>>> > wrote: >>>>>>> >>>>>>> To quote Carsten, there is "the usual terminology problem about >>>>>>> identity". >>>>>>> >>>>>>> Identifying vs. Identity brings back memories about an extensive >>>>>>> discussion in SACM that in the end resulted in using Profiles... >>>>>>> >>>>>>> Profiles are the "things" that you can aggregate identity claims >>>>>>> in (in SACM these claims are "Target Endpoint Characteristics", >>>>>>> which are pretty much the same thing as Device Characteristics) - >>>>>>> and you use the Profiles to (re-)identify target endpoints. >>>>>>> >>>>>>> In the scope of remote attestation procedures, I think that "just >>>>>>> not calling" claim sets that are composed (amongst others) of >>>>>>> identifying claims "identity documents" might just end up in >>>>>>> making up another name for something that is effectively >>>>>>> composing identity documents anyways. If calling the same thing >>>>>>> something else helps in some way, I am all for it. But I am >>>>>>> really not sure. >>>>>>> >>>>>>> That said, Ned's elaboration on the relationship of identity and >>>>>>> attestation claims and corresponding claim semantics / trust >>>>>>> semantics is spot on, I think. >>>>>>> >>>>>>> Viele Grüße, >>>>>>> >>>>>>> Henk >>>>>>> >>>>>>> On 10/16/2018 03:51 PM, Smith, Ned wrote: >>>>>>>> Agree with Hannes that identity discussion can lead to confusion >>>>>>>> as identity is often highly dependent on some sort of context >>>>>>>> (domain of interpretation). >>>>>>>> In order to have productive conversation about attestation and >>>>>>>> identity, it may be important to understand that attestation >>>>>>>> semantics sets the context for identity. >>>>>>>> * Attestation attributes have trust semantics (and trust >>>>>>>> semantics are interpreted through the eyes of the verifier). >>>>>>>> Identity attributes may also have trust semantics (in addition >>>>>>>> to identity semantics) hence can be regarded as playing a role >>>>>>>> in both identity and attestation. Since RATS should be >>>>>>>> interested primarily in trust semantics, it makes sense to >>>>>>>> understand, discuss and consider identity in terms of its trust >>>>>>>> semantics. Hence identity attributes are only interesting to >>>>>>>> RATS if they are useful for evaluating trust semantics. >>>>>>>> * In a closed ecosystem, the trust characteristics and >>>>>>>> properties may be implied because there often exists out-of-band >>>>>>>> processes that ensure the characteristics are applied (for >>>>>>>> example, if an IT organization sets a policy that all asymmetric >>>>>>>> keys are to be hardened using a smartcard, they can apply a >>>>>>>> deployment process where the IT professional verifies the >>>>>>>> smartcard is used during enrollment.) But in a non-closed >>>>>>>> ecosystem, there isn't an assumption that out-of-band processes >>>>>>>> exist. Attestation attempts to make explicit what otherwise is >>>>>>>> implicit and therefore subject to misinterpretation if the >>>>>>>> verifier, relying party and attester are not part of the same >>>>>>>> closed ecosystem. Implicit attestation therefore can lead to >>>>>>>> semantic confusion if we're not careful. Therefore, the rigor of >>>>>>>> treating implicit attestation claims (assertions assumed to >>>>>>>> exist but not explicitly named) should nevertheless be defined >>>>>>>> explicitly. Then, if there is a need for implicit attestation, >>>>>>>> the specifications that describe them can describe them in terms >>>>>>>> of an explicit definition. >>>>>>>> * In the context of asserting trust characteristics, the >>>>>>>> verifier needs to know that a set of characteristics applies to >>>>>>>> the instance of the endpoint being evaluated (aka the attester). >>>>>>>> (Otherwise a MITM could supply characteristics that may be >>>>>>>> valid, but don’t apply to the specific instance). Consequently, >>>>>>>> it makes sense to consider that *attestation* keys are needed to >>>>>>>> authenticate the endpoint being evaluated. This doesn't imply an >>>>>>>> identity key couldn't double as an attestation key. But if it >>>>>>>> does, we care about its relevance to the attester endpoint. >>>>>>>> -Ned >>>>>>>> On 10/15/18, 6:49 PM, "Hannes Tschofenig" >>>>>>>> >>>>>>>> >>>>>>>> > wrote: >>>>>>>>    Here are my 5 cents on the term 'identity'. >>>>>>>>         I have been working on identity management for many >>>>>>>> years (partially because of my OAuth co-chair role) and I have >>>>>>>> noticed that the use of the term "identity" tends to confuse >>>>>>>> more than it helps (even more so when the term is applied to >>>>>>>> devices and software rather than humans). >>>>>>>>         I believe we could get away with describing what we want >>>>>>>> without ever using the term. >>>>>>>>         In this context I would argue that we are about >>>>>>>> identifying different components, such as hardware and software. >>>>>>>>         Ciao >>>>>>>>    Hannes >>>>>>>>         -----Original Message----- >>>>>>>>    From: EAT >>>>>>>> > On >>>>>>>> Behalf Of Smith, Ned >>>>>>>>    Sent: Monday, October 15, 2018 9:00 AM >>>>>>>>    To: Henk Birkholz >>>>>>> >>>>>>>> >>>>>>>> >; rats@ietf.org >>>>>>>> >>>>>>>> ; Jeremy O'Donoghue >>>>>>>> >>>>>>>> >>>>>>>> >; Denis >>>>>>> >>>>>>>> > >>>>>>>>    Cc: eat@ietf.org >>>>>>>> >>>>>>>>    Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF >>>>>>>> charter updates? >>>>>>>>         I agree with Henk's observation that there is >>>>>>>> opportunity to find common ground on identity as identity can be >>>>>>>> a collection of attributes, that if signed, becomes a set of >>>>>>>> verifiable claims (about identity attributes). Attestation has a >>>>>>>> similar structure in that it consists of a set of attributes, >>>>>>>> that if signed becomes a set of verifiable claims. The main >>>>>>>> difference between identity and attestation attributes is >>>>>>>> whether the attribute semantically relate to trust (vs. >>>>>>>> identity). For example, claims of security certification >>>>>>>> compliance resonates as attestation. >>>>>>>>         It may be possible to combine a set of attestation >>>>>>>> attributes in such a way that the combination uniquely >>>>>>>> identifies an entity. But that doesn't make it an identity >>>>>>>> system per se and shouldn't cause a conflict in charter goals >>>>>>>> with respect to other identity focused efforts in IETF. >>>>>>>>         Also, inclusion of attributes that don't have semantics >>>>>>>> that reasonably relate to trust should not be of interest to a >>>>>>>> working group focused on attestation. >>>>>>>>         -Ned >>>>>>>>         On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" >>>>>>>> >>>>>>>> on >>>>>>>> behalf of henk.birkholz@sit.fraunhofer.de >>>>>>>> >>>>>>>> >>>>>>>> > wrote: >>>>>>>>             Hi Jeremy & Denis, >>>>>>>>             all these points of view have merit, I think. >>>>>>>>             Please have a look at these quotes: >>>>>>>>> knowing the provenance of the device >>>>>>>>> having the entity creator/manufacturer provide a set of claims >>>>>>>>> which can be verified >>>>>>>>> to know the characteristics of a device by issuing to the >>>>>>>>> device a public key certificate which will only be issued to >>>>>>>>> the device if it fulfills an expected set of functionalities. >>>>>>>>             To me, these descriptions seem to have different >>>>>>>> intents, scope or >>>>>>>>        audience and require most certainly different work-flows, but >>>>>>>>        semantically and in consequence representation-wise they >>>>>>>> also seem quite >>>>>>>>        related. >>>>>>>>             If you think of an identity document as a set of >>>>>>>> claims (potentially >>>>>>>>        including a public key), that is signed and that can >>>>>>>> match one or more >>>>>>>>        things, maybe all three types highlighted above are >>>>>>>> actually covered by >>>>>>>>        the same identity document concept? >>>>>>>>             With respect to identity documents, I think it is >>>>>>>> safe so say that we >>>>>>>>        can find common ground here rather easily. That said, the >>>>>>>> way how these >>>>>>>>        identity documents come into existence, when and how they >>>>>>>> are deployed >>>>>>>>        on the thing or associated with multiple things is >>>>>>>> another question. We >>>>>>>>        most certainly do not want to end up with a "signing >>>>>>>> fool" that does not >>>>>>>>        add value to the level of confidence (I am quoting Ned >>>>>>>> Smith here). >>>>>>>>             This has to be fleshed out explicitly for each >>>>>>>> scenario and the parts >>>>>>>>        that are reused in every scenario should get special >>>>>>>> attention in the >>>>>>>>        upcoming RATS architecture draft. >>>>>>>>             Identifying claims aggregated in an identity >>>>>>>> document most certainly can >>>>>>>>        include device characteristics, public key(s), or claims >>>>>>>> about the >>>>>>>>        intended functions and capabilities of the thing. Claims >>>>>>>> can even >>>>>>>>        originate from Claimants that are not the thing itself, >>>>>>>> but external >>>>>>>>        entities providing an assertion (e.g. these things are >>>>>>>> CC-certified). >>>>>>>>             All different composites of identifying claims have >>>>>>>> a specific shared >>>>>>>>        intend in this context though, I think: expressing >>>>>>>> Attestation >>>>>>>>        Provenance (again - one for one or more things of the >>>>>>>> same kind). And >>>>>>>>        all of them originate from Claimants and therefore use a >>>>>>>> root of trust >>>>>>>>        of measurement, I think. >>>>>>>>             That said, establishing trustworthy knowledge about >>>>>>>> attestation >>>>>>>>        provenance is only the first step and provides the >>>>>>>> foundation for more >>>>>>>>        complex attestation procedures. In any case, this seem to >>>>>>>> be required by >>>>>>>>        every scenario that was highlighted so far and therefore >>>>>>>> will most >>>>>>>>        certainly be covered in a deliverable. >>>>>>>>             IHTH, >>>>>>>>             Henk >>>>>>>>                  On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: >>>>>>>>> On 12 Oct 2018, at 14:33, Denis >>>>>>>> >>>>>>>>> >>>>>>>>> > wrote: >>>>>>>>>> The "Problem Statement" continues as follows: >>>>>>>>>> >>>>>>>>>> (2) Today, there is no common, standard way for Relying Parties to >>>>>>>>>> know the provenance and characteristics of a device (e.g., an >>>>>>>>>> end-user >>>>>>>>>> device, >>>>>>>>>> platform or endpoint, servers, IoT devices, device subsystems and >>>>>>>>>> sub-modules) that may be requesting services. >>>>>>>>>> >>>>>>>>>> Knowing the provenance of the device is not always necessary. >>>>>>>>>> What is >>>>>>>>>> important is to know that a specific set of functions is >>>>>>>>>> (securely) >>>>>>>>>> supported by the device. >>>>>>>>>> There already exists a common way to know the characteristics of a >>>>>>>>>> device by issuing to the device a public key certificate which >>>>>>>>>> will >>>>>>>>>> only be issued to the device >>>>>>>>>> if it fulfills an expected set of functionalities. In such a >>>>>>>>>> case a >>>>>>>>>> syntax for a trusted claim sets**is not needed. >>>>>>>>>> >>>>>>>>> This is indeed a possible way to address the problem, but >>>>>>>>> suffers from >>>>>>>>> challenges which come down to: >>>>>>>>> >>>>>>>>> - Who issues such certificates. An option is that there is some >>>>>>>>> form of >>>>>>>>> security certification behind this issuance otherwise it is of very >>>>>>>>> limited value. >>>>>>>>> - In order to capture the wide variety of different devices (I >>>>>>>>> prefer >>>>>>>>> "entity" here as it is more general than "device"), many >>>>>>>>> different forms >>>>>>>>> of such certificates would be required. This ends up being much >>>>>>>>> the same >>>>>>>>> thing as a set of claims. >>>>>>>>> >>>>>>>>> Given the multiplicity of entities for which attestation might be >>>>>>>>> useful, it seems to me that having the entity creator/manufacturer >>>>>>>>> provide a set of claims which can be verified is more flexible than >>>>>>>>> requiring a certificate. It seems likely to me that where a formal >>>>>>>>> security certification is needed there will be a certificate >>>>>>>>> issued by >>>>>>>>> the Certifying Body as one of the claims about an entity, but I can >>>>>>>>> think of many cases (supply chain management, to take just one >>>>>>>>> example) >>>>>>>>> where provenance is by far the most useful information. >>>>>>>>> >>>>>>>>> I'm not in favour of changes to the charter in this direction. >>>>>>>>>> >>>>>>>>>> The simplest cases should also be part of the framework. >>>>>>>>>> >>>>>>>>>> Note: I personally appreciate that privacy is an aspect that >>>>>>>>>> will/should be taken into consideration. >>>>>>>>>> >>>>>>>>>> Denis >>>>>>>>>> >>>>>>>>>>> As with the earlier draft, there are many references to >>>>>>>>>>> verify and >>>>>>>>>>> verifier in the lead up to the deliverable but no >>>>>>>>>>> deliverables describing >>>>>>>>>>> verification rules. I'd like to see rules in one of these >>>>>>>>>>> documents and >>>>>>>>>>> think it worth citing in the deliverables. Are bindings to >>>>>>>>>>> certificate >>>>>>>>>>> management protocols out of scope? >>>>>>>>>>> >>>>>>>>>>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> on behalf of henk.birkholz@sit.fraunhofer.de >>>>>>>>>>> >>>>>>>>>>> >>>>>>>>>>> >  wrote: >>>>>>>>>>> >>>>>>>>>>>> Hi all, >>>>>>>>>>>> >>>>>>>>>>>> sorry for the delay. Please find an updated charter proposal >>>>>>>>>>>> here: >>>>>>>>>>>> >>>>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_ietf-2Drats_charter_blob_RC2_ietf-2Drats-2Dcharter.md&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=rPzmwhcwy8eob4eMiwWzDg5DY-mcC5HYgQqhUGCZ2RI&e= >>>>>>>>>>>> The BoF proponents tried to merge all comments and proposals on >>>>>>>>>>>> keystores, existing solutions, provenance & device >>>>>>>>>>>> characteristics, etc >>>>>>>>>>>> that were raised on the list - and align them in homogeneous >>>>>>>>>>>> fashion. >>>>>>>>>>>> >>>>>>>>>>>> This draft is intended to focus the discussion and improve >>>>>>>>>>>> the wording. >>>>>>>>>>>> >>>>>>>>>>>> Viele Grüße, >>>>>>>>>>>> >>>>>>>>>>>> Henk >>>>>>>>>>>> >>>>>>>>>>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >>>>>>>>>>>>> Hi Henk, >>>>>>>>>>>>> >>>>>>>>>>>>> Bangkok IETF is getting close, will you be able to update >>>>>>>>>>>>> the charter >>>>>>>>>>>>> for the attestation BoF to properly include EAT?  I sent >>>>>>>>>>>>> you some text >>>>>>>>>>>>> that just needs to be pasted along with some comments. It >>>>>>>>>>>>> doesn’t look >>>>>>>>>>>>> like there’s been any updates. >>>>>>>>>>>>> >>>>>>>>>>>>> LL >>>>>>>>>>>>> >>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>> RATS mailing list >>>>>>>>>>>> RATS@ietf.org >>>>>>>>>>>> >>>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_rats&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=xThsQTXgadltVkHTYpOWknadi7puxZt8O6XOIUm_bzo&e= >>>>>>>>>>> _______________________________________________ >>>>>>>>>>> EAT mailing list >>>>>>>>>>> EAT@ietf.org >>>>>>>>>>> >>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> _______________________________________________ >>>>>>>>>> EAT mailing list >>>>>>>>>> EAT@ietf.org >>>>>>>>>> >>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> _______________________________________________ >>>>>>>>> EAT mailing list >>>>>>>>> EAT@ietf.org >>>>>>>>> >>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>>> >>>>>>>>             _______________________________________________ >>>>>>>>        EAT mailing list >>>>>>>> EAT@ietf.org >>>>>>>> >>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>>              _______________________________________________ >>>>>>>>    EAT mailing list >>>>>>>> EAT@ietf.org >>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>>    IMPORTANT NOTICE: The contents of this email and any >>>>>>>> attachments are confidential and may also be privileged. If you >>>>>>>> are not the intended recipient, please notify the sender >>>>>>>> immediately and do not disclose the contents to any other >>>>>>>> person, use it for any purpose, or store or copy the information >>>>>>>> in any medium. Thank you. >>>>>>>> >>>>>>> _______________________________________________ >>>>>>> EAT mailing list >>>>>>> EAT@ietf.org >>>>>>> >>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>> >>>>>> _______________________________________________ >>>>>> EAT mailing list >>>>>> EAT@ietf.org >>>>>> >>>>>> https://www.ietf.org/mailman/listinfo/eat >>>> >>>> _______________________________________________ >>>> EAT mailing list >>>> EAT@ietf.org >>>> https://www.ietf.org/mailman/listinfo/eat >> >> _______________________________________________ >> EAT mailing list >> EAT@ietf.org >> https://www.ietf.org/mailman/listinfo/eat > From nobody Sat Oct 20 08:22:04 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4F13012D4F0 for ; Sat, 20 Oct 2018 08:22:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q0afXj_qgsDu for ; Sat, 20 Oct 2018 08:22:00 -0700 (PDT) Received: from p3plsmtpa07-03.prod.phx3.secureserver.net (p3plsmtpa07-03.prod.phx3.secureserver.net [173.201.192.232]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2BF87129BBF for ; Sat, 20 Oct 2018 08:22:00 -0700 (PDT) Received: from [192.168.0.101] ([121.46.87.45]) by :SMTPAUTH: with ESMTPSA id Dt4cgnq49q2NHDt4egIwqm; Sat, 20 Oct 2018 08:21:59 -0700 From: Laurence Lundblade Message-Id: <59606D5D-F49B-4552-B479-1A7D5BEA0F93@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_EEBF7BC4-07E5-409C-9C1B-8F357E0BA068" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Sat, 20 Oct 2018 20:51:52 +0530 In-Reply-To: Cc: "rats@ietf.org" , Guy Fedorkow , Hannes Tschofenig , "Smith, Ned" , Jeremy O'Donoghue , "eat@ietf.org" , Denis To: Henk Birkholz References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> <9c73f9b7-9129-c273-254e-465f92ab3650@sit.fraunhofer.de> <09818298-9FE1-430A-8045-A9A7E76ED64C@island-resort.com> <35F3F15E-5B24-4CBA-921E-FAC50A1F3122@island-resort.com> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfDtcKwNYuiNiS74DDljJE1fbosTqsnRZw/5bfZy3epy6YY7IbhkKegwGEAW7JvVThM3jCZAlYNtblYITeRS6EwlRNAjl2CzyUk+1Ng7SCGdQZa6ER75K meWubW5YaJGR9xvGaPVcc9kgMimS0sC3Uwd4Ouk+6jt3/8tY55r6goJ2eDF/IrnGVeEP9hbbyZpU2g0VmP98r/RCaI51MlgBni3B2wrey3avvHDp89NAnw4D fhctAZ1TYHLmZkXEnM+tPK0MY7qX9aI0dxBRUj4Z99lJU086TZOahUtwOWyXejM5oG8SEommNswi+0UMyDh7fu18W51UaNjEeoS8hRPTSS1roCSTBb9H/ARN si/ak22RrAb2HETWIruO9qIN9nddF8Q1nxXJ7p+1ZyltZloOZGc= Archived-At: Subject: Re: [Rats] [EAT] Device Identity (was Re: [EXTERNAL] Re: Attestation BoF charter updates?) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Oct 2018 15:22:02 -0000 --Apple-Mail=_EEBF7BC4-07E5-409C-9C1B-8F357E0BA068 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 20, 2018, at 8:26 PM, Henk Birkholz = wrote: >=20 > Hello Laurence, >=20 > And I am perplexed how you think I was implying that EAT or CoID are = insecure. How did I make the impression to have suggested that? You have characterized EAT as only proof-of-possesion. It is not. >=20 > Wrt the "verification keys" I am not so sure, what the diagram means = by that. With an asymmetric key-pair these would probably be public keys = to check the signature by (I assume)? It is an open-ended range of things: An ECDAA interaction with service (Maybe like Intel=E2=80=99s) A verification request of an Android Attestation from a Google Service An IEEE-802.1AR CA and Sub-CAs (mostly standard X.509) A public key fetch based on any reasonable / useful key ID (e.g. Subject = Key ID) A submission of the EAT token signed by a symmetric key to a service = that verifies it (and rather carefully protects the private verification = keys with high quality HSMs) A redirect through a privacy CA Some custom manufacturer defined scheme I strongly believe this flexibility is necessary for real deployments = especially for the high investment already made by platform and chip = vendors. There is an assumption that the device manufacturer will only put = attestation keys in devices that are configured correctly. Typically the = attestation key will only be usable to sign attestation if the device = booted code that was verified, debug was turned off and such. (I know = TCG does this in a more elaborate thorough way, and that is good and = well and can be put to use with EAT for appropriate use cases).=20 LL --Apple-Mail=_EEBF7BC4-07E5-409C-9C1B-8F357E0BA068 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Oct 20, 2018, at 8:26 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hello = Laurence,

 And I am perplexed how you = think I was implying that EAT or CoID are insecure. How did I make the = impression to have suggested that?

You have characterized EAT as only= proof-of-possesion. It is not.


Wrt the "verification keys" I am not so sure, what the = diagram means by that. With an asymmetric key-pair these would probably = be public keys to check the signature by (I assume)?

It is = an open-ended range of things:
  • An ECDAA interaction with service (Maybe like = Intel=E2=80=99s)
  • A verification request of an Android = Attestation from a Google Service
  • An IEEE-802.1AR CA = and Sub-CAs (mostly standard X.509)
  • A public key = fetch based on any reasonable / useful key ID (e.g. Subject Key = ID)
  • A submission of the EAT token signed by a = symmetric key to a service that verifies it (and rather carefully = protects the private verification keys with high quality HSMs)
  • A redirect through a privacy CA
  • Some = custom manufacturer defined scheme

I strongly believe this flexibility is = necessary for real deployments especially for the high investment = already made by platform and chip vendors.

There is an assumption that the device = manufacturer will only put attestation keys in devices that are = configured correctly. Typically the attestation key will only be usable = to sign attestation if the device booted code that was verified, debug = was turned off and such. (I know TCG does this in a more elaborate = thorough way, and that is good and well and can be put to use with EAT = for appropriate use cases). 

LL


= --Apple-Mail=_EEBF7BC4-07E5-409C-9C1B-8F357E0BA068-- From nobody Sat Oct 20 08:44:07 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03474130E69; Sat, 20 Oct 2018 08:44:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XsxIo4N9HXfA; Sat, 20 Oct 2018 08:43:57 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4F6B9130E63; Sat, 20 Oct 2018 08:43:55 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9KFhoED009391 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 20 Oct 2018 17:43:51 +0200 Received: from [10.77.151.213] (80.187.109.127) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Sat, 20 Oct 2018 17:43:44 +0200 Date: Sat, 20 Oct 2018 16:43:38 +0100 User-Agent: K-9 Mail for Android In-Reply-To: <59606D5D-F49B-4552-B479-1A7D5BEA0F93@island-resort.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> <9c73f9b7-9129-c273-254e-465f92ab3650@sit.fraunhofer.de> <09818298-9FE1-430A-8045-A9A7E76ED64C@island-resort.com> <35F3F15E-5B24-4CBA-921E-FAC50A1F3122@island-resort.com> <59606D5D-F49B-4552-B479-1A7D5BEA0F93@island-resort.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----TRP3JB0JH0DXO4SLJG52JJ8RZUDE77" Content-Transfer-Encoding: 7bit To: Laurence Lundblade CC: "rats@ietf.org" , Guy Fedorkow , Hannes Tschofenig , "Smith, Ned" , "Jeremy O'Donoghue" , "eat@ietf.org" , Denis From: Henk Birkholz Message-ID: <695FBEC5-4A2F-4E0B-B4A8-77A2DA18DD5B@sit.fraunhofer.de> X-Originating-IP: [80.187.109.127] Archived-At: Subject: Re: [Rats] [EAT] Device Identity (was Re: [EXTERNAL] Re: Attestation BoF charter updates?) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Oct 2018 15:44:00 -0000 ------TRP3JB0JH0DXO4SLJG52JJ8RZUDE77 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello Laurence, what I understood now, I think, is that the processes that will eventually= make use of EATs - "in the bigger picture" - are intended to be based on m= ore than proof-of-possession=2E The EAT that is the signed claim set is relying on the "assumption that th= e device manufacturer will only put attestation keys in devices that are co= nfigured correctly"=2E And that is exactly what I meant=2E The key material deployed on the thing= has meaning: if it is there, you trust the assumption that the thing is co= nfigured correctly=2E Do we agree on this? :-) The reoccurring reference to TCG seems to exclude other more thorough appr= oaches on how to conduct remote integrity verification a bit, I think=2E I = am carefully highlighting this, because the reasoning behind an IETF WG is = the demand for network protocols that are able to consolidate the different= "inbox-api" and "out-of-band" concepts used in various domains=2E Viele Gr=C3=BC=C3=9Fe, Henk On October 20, 2018 4:21:52 PM GMT+01:00, Laurence Lundblade wrote: > >> On Oct 20, 2018, at 8:26 PM, Henk Birkholz > wrote: >>=20 >> Hello Laurence, >>=20 >> And I am perplexed how you think I was implying that EAT or CoID are >insecure=2E How did I make the impression to have suggested that? > >You have characterized EAT as only proof-of-possesion=2E It is not=2E > >>=20 >> Wrt the "verification keys" I am not so sure, what the diagram means >by that=2E With an asymmetric key-pair these would probably be public >keys to check the signature by (I assume)? > >It is an open-ended range of things: >An ECDAA interaction with service (Maybe like Intel=E2=80=99s) >A verification request of an Android Attestation from a Google Service >An IEEE-802=2E1AR CA and Sub-CAs (mostly standard X=2E509) >A public key fetch based on any reasonable / useful key ID (e=2Eg=2E >Subject Key ID) >A submission of the EAT token signed by a symmetric key to a service >that verifies it (and rather carefully protects the private >verification keys with high quality HSMs) >A redirect through a privacy CA >Some custom manufacturer defined scheme > >I strongly believe this flexibility is necessary for real deployments >especially for the high investment already made by platform and chip >vendors=2E > >There is an assumption that the device manufacturer will only put >attestation keys in devices that are configured correctly=2E Typically >the attestation key will only be usable to sign attestation if the >device booted code that was verified, debug was turned off and such=2E (I >know TCG does this in a more elaborate thorough way, and that is good >and well and can be put to use with EAT for appropriate use cases)=2E=20 > >LL --=20 Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E ------TRP3JB0JH0DXO4SLJG52JJ8RZUDE77 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello Laurence,

what I understood now, I think, is that the processes that will eventually= make use of EATs - "in the bigger picture" - are intended to be = based on more than proof-of-possession=2E
The EAT that is the signed claim set is relying on the "assumption th= at the device manufacturer will only put attestation keys in devices that a= re configured correctly"=2E

And that is exactly what I meant=2E The key material deployed on the thing= has meaning: if it is there, you trust the assumption that the thing is co= nfigured correctly=2E

Do we agree on this? :-)

The reoccurring reference to TCG seems to exclude other more thorough appr= oaches on how to conduct remote integrity verification a bit, I think=2E I = am carefully highlighting this, because the reasoning behind an IETF WG is = the demand for network protocols that are able to consolidate the different= "inbox-api" and "out-of-band" concepts used in various= domains=2E

Viele Gr=C3=BC=C3=9Fe,

Henk

On October 20, 2018 4:21:52 PM GMT+= 01:00, Laurence Lundblade <lgl@island-resort=2Ecom> wrote:
On Oct 20, 2018, at 8:26 PM, Henk Birkholz <henk=2Ebirkholz@sit=2Efraunhofer= =2Ede> wrote:

Hello Laurence,

&= nbsp;And I am perplexed how you think I was implying that EAT or CoID are i= nsecure=2E How did I make the impression to have suggested that?

You have characterized EAT a= s only proof-of-possesion=2E It is not=2E


Wrt the "verification keys" I am not= so sure, what the diagram means by that=2E With an asymmetric key-pair the= se would probably be public keys to check the signature by (I assume)?

It is= an open-ended range of things:
  • An ECDAA interaction with service (Maybe like Intel’s)
    • A verification request of an Android Attestation from a Google= Service
  • An IEEE-802=2E1AR CA and Sub-CAs (mostly standa= rd X=2E509)
  • A public key fetch based on any reasonable /= useful key ID (e=2Eg=2E Subject Key ID)
  • A submission of= the EAT token signed by a symmetric key to a service that verifies it (and= rather carefully protects the private verification keys with high quality = HSMs)
  • A redirect through a privacy CA
  • Some custom manufacturer defined scheme

I strongly believe this flexibility is necess= ary for real deployments especially for the high investment already made by= platform and chip vendors=2E

T= here is an assumption that the device manufacturer will only put attestatio= n keys in devices that are configured correctly=2E Typically the attestatio= n key will only be usable to sign attestation if the device booted code tha= t was verified, debug was turned off and such=2E (I know TCG does this in a= more elaborate thorough way, and that is good and well and can be put to u= se with EAT for appropriate use cases)=2E 

=
LL



--
Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E ------TRP3JB0JH0DXO4SLJG52JJ8RZUDE77-- From nobody Sat Oct 20 09:00:10 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63A9B130E6C for ; Sat, 20 Oct 2018 09:00:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NUOqhRqLetuH for ; Sat, 20 Oct 2018 09:00:05 -0700 (PDT) Received: from p3plsmtpa11-02.prod.phx3.secureserver.net (p3plsmtpa11-02.prod.phx3.secureserver.net [68.178.252.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7450E130E63 for ; Sat, 20 Oct 2018 09:00:04 -0700 (PDT) Received: from [192.168.0.101] ([121.46.87.45]) by :SMTPAUTH: with ESMTPSA id DtfSgPm5QOmMwDtfUgraJt; Sat, 20 Oct 2018 09:00:03 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_57FB3170-01ED-4DAD-9AD5-284066FCDEA4" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Sat, 20 Oct 2018 21:29:57 +0530 In-Reply-To: <695FBEC5-4A2F-4E0B-B4A8-77A2DA18DD5B@sit.fraunhofer.de> Cc: Guy Fedorkow , "Smith, Ned" , Jeremy O'Donoghue , "eat@ietf.org" , "rats@ietf.org" , Denis , Hannes Tschofenig To: Henk Birkholz References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> <9c73f9b7-9129-c273-254e-465f92ab3650@sit.fraunhofer.de> <09818298-9FE1-430A-8045-A9A7E76ED64C@island-resort.com> <35F3F15E-5B24-4CBA-921E-FAC50A1F3122@island-resort.com> <59606D5D-F49B-4552-B479-1A7D5BEA0F93@island-resort.com> <695FBEC5-4A2F-4E0B-B4A8-77A2DA18DD5B@sit.fraunhofer.de> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfPM8Xnpw7KJNSE3KsSNZyga4mWpbSzqmrEeMPsZP93FbS+Ug6iAwLNXf2G86qJxxUdFTRrU7guYWF3eOsbEe5muMVWZ7aw+ICDgJI6b3XFvN4LN8S4vk RLWnHYIy5kT6E2OXWtvoPcphKjZ+UEfV4TVfsTL+zU2kN4kOQ/r7WZXmdpxU7nnoI2CKIZELo7QXzVYgm4uxes4x9o/7E3n6u0Q+12sXti8Ql9TUGQ20zb9X 75lLVVi4/wCNXcbR9WjSFBgZ+w1YXADqT3m8vCJq6Dtx/QAeLsi9pQTF7toADw0eR5PD5qm6Gee3M1VXLEKoP96RXirNqisKd+1fVb3dBbtohF1B7Z3amkaF VTbItdNo66O0kSXCOolptwWUSajeBe5AOYRab+MCggV8E3WFBiY= Archived-At: Subject: Re: [Rats] [EAT] Device Identity (was Re: [EXTERNAL] Re: Attestation BoF charter updates?) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Oct 2018 16:00:08 -0000 --Apple-Mail=_57FB3170-01ED-4DAD-9AD5-284066FCDEA4 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 20, 2018, at 9:13 PM, Henk Birkholz = wrote: >=20 > Hello Laurence, >=20 > what I understood now, I think, is that the processes that will = eventually make use of EATs - "in the bigger picture" - are intended to = be based on more than proof-of-possession. > The EAT that is the signed claim set is relying on the "assumption = that the device manufacturer will only put attestation keys in devices = that are configured correctly". >=20 > And that is exactly what I meant. The key material deployed on the = thing has meaning: if it is there, you trust the assumption that the = thing is configured correctly. Seems to me that there is always some implied trust in the behavior of = some part of the device you put the key in. It might be a tiny bit of = HW, but it is something. No matter how many layers of measurement and = roots-of-trust there are, the bottom that hold the key has to be trusted = to have some behavior before you put the key in during manufacture. >=20 > Do we agree on this? :-) >=20 Well probably, but we haven=E2=80=99t spend enough time together yet to = know for sure. :-) > The reoccurring reference to TCG seems to exclude other more thorough = approaches on how to conduct remote integrity verification a bit, I = think. I am carefully highlighting this, because the reasoning behind an = IETF WG is the demand for network protocols that are able to consolidate = the different "inbox-api" and "out-of-band" concepts used in various = domains. I added a few lines below.=20 Not sure what an inbox-api and such are yet... LL >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > On October 20, 2018 4:21:52 PM GMT+01:00, Laurence Lundblade = wrote: >=20 >> On Oct 20, 2018, at 8:26 PM, Henk Birkholz = > wrote: >>=20 >> Hello Laurence, >>=20 >> And I am perplexed how you think I was implying that EAT or CoID are = insecure. How did I make the impression to have suggested that? >=20 > You have characterized EAT as only proof-of-possesion. It is not. >=20 >>=20 >> Wrt the "verification keys" I am not so sure, what the diagram means = by that. With an asymmetric key-pair these would probably be public keys = to check the signature by (I assume)? >=20 > It is an open-ended range of things: > An ECDAA interaction with service (Maybe like Intel=E2=80=99s) > A verification request of an Android Attestation from a Google Service > An IEEE-802.1AR CA and Sub-CAs (mostly standard X.509) > A public key fetch based on any reasonable / useful key ID (e.g. = Subject Key ID) > A submission of the EAT token signed by a symmetric key to a service = that verifies it (and rather carefully protects the private verification = keys with high quality HSMs) > A redirect through a privacy CA > Some custom manufacturer defined scheme * A RATS Procedure based on TCG stuff * A RATS Procedure not using TCG stuff >=20 > I strongly believe this flexibility is necessary for real deployments = especially for the high investment already made by platform and chip = vendors. >=20 > There is an assumption that the device manufacturer will only put = attestation keys in devices that are configured correctly. Typically the = attestation key will only be usable to sign attestation if the device = booted code that was verified, debug was turned off and such. (I know = TCG does this in a more elaborate thorough way, and that is good and = well and can be put to use with EAT for appropriate use cases).=20 >=20 > LL >=20 >=20 >=20 > --=20 > Sent from my Android device with K-9 Mail. Please excuse my brevity. > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat --Apple-Mail=_57FB3170-01ED-4DAD-9AD5-284066FCDEA4 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Oct 20, 2018, at 9:13 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hello Laurence,

what I understood now, I think, is that the processes that will = eventually make use of EATs - "in the bigger picture" - are intended to = be based on more than proof-of-possession.
The EAT that is the signed claim set is relying on the "assumption that = the device manufacturer will only put attestation keys in devices that = are configured correctly".

And that is exactly what I meant. The key material deployed on the thing = has meaning: if it is there, you trust the assumption that the thing is = configured correctly.

Seems to me that there is always some implied = trust in the behavior of some part of the device you put the key in. It = might be a tiny bit of HW, but it is something. No matter how many = layers of measurement and roots-of-trust there are, the bottom that hold = the key has to be trusted to have some behavior before you put the key = in during manufacture.


Do we agree on this? :-)


Well probably, but we haven=E2=80=99t spend enough = time together yet to know for sure. :-)

The reoccurring reference to TCG seems to exclude other more thorough = approaches on how to conduct remote integrity verification a bit, I = think. I am carefully highlighting this, because the reasoning behind an = IETF WG is the demand for network protocols that are able to consolidate = the different "inbox-api" and "out-of-band" concepts used in various = domains.

I added a few = lines = below. 

Not sure what an = inbox-api and such are yet...

LL



Viele Gr=C3=BC=C3=9Fe,

Henk

On October = 20, 2018 4:21:52 PM GMT+01:00, Laurence Lundblade <lgl@island-resort.com> wrote:

On Oct 20, 2018, at 8:26 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Hello = Laurence,

 And I am perplexed how you = think I was implying that EAT or CoID are insecure. How did I make the = impression to have suggested that?

You have characterized = EAT as only proof-of-possesion. It is not.


Wrt the "verification keys" I = am not so sure, what the diagram means by that. With an asymmetric = key-pair these would probably be public keys to check the signature by = (I assume)?

It is an open-ended range of = things:
  • An = ECDAA interaction with service (Maybe like Intel=E2=80=99s)
  • A verification request of an Android Attestation from a = Google Service
  • An IEEE-802.1AR CA and Sub-CAs (mostly = standard X.509)
  • A public key fetch based on any = reasonable / useful key ID (e.g. Subject Key ID)
  • A = submission of the EAT token signed by a symmetric key to a service that = verifies it (and rather carefully protects the private verification keys = with high quality HSMs)
  • A redirect through a privacy = CA
  • Some custom manufacturer defined = scheme

* A RATS = Procedure based on TCG stuff
* A RATS Procedure not using TCG stuff




I = strongly believe this flexibility is necessary for real deployments = especially for the high investment already made by platform and chip = vendors.

There is an assumption that the device manufacturer will only = put attestation keys in devices that are configured correctly. Typically = the attestation key will only be usable to sign attestation if the = device booted code that was verified, debug was turned off and such. (I = know TCG does this in a more elaborate thorough way, and that is good = and well and can be put to use with EAT for appropriate use = cases). 

LL



--
Sent from my Android device with K-9 Mail. Please excuse my = brevity.
_______________________________________________
EAT mailing list
EAT@ietf.org
https://www.ietf.org/mailman/listinfo/eat

= --Apple-Mail=_57FB3170-01ED-4DAD-9AD5-284066FCDEA4-- From nobody Sat Oct 20 09:21:21 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4FC34128CF2; Sat, 20 Oct 2018 09:21:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mgmWyY4Vqarx; Sat, 20 Oct 2018 09:21:10 -0700 (PDT) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60089.outbound.protection.outlook.com [40.107.6.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E05E128D68; Sat, 20 Oct 2018 09:21:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=H1G7Azm3Zr331bE4O6e+uNvZ5TKY6HhNeAaTZqCMQRE=; b=CtpaGx58m7vLqUflP9xuNSBhuXwRaJfeL4wpdkd65eCplGFp889H5eOOOLfrOtScUtBsqWg7a9UuAImVFe4F3Kp1y1RggUXXcZgLlo3nlhR7fAcphTSsjivbsDkDzeELTLrwm+cStrWysUspgNEJmeQcfPi9bRbzlqtc+P63yj8= Received: from AM5PR0801MB2097.eurprd08.prod.outlook.com (10.168.158.151) by AM5PR0801MB1764.eurprd08.prod.outlook.com (10.169.247.18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1250.30; Sat, 20 Oct 2018 16:21:08 +0000 Received: from AM5PR0801MB2097.eurprd08.prod.outlook.com ([fe80::15e6:1b13:9bae:f7a2]) by AM5PR0801MB2097.eurprd08.prod.outlook.com ([fe80::15e6:1b13:9bae:f7a2%9]) with mapi id 15.20.1250.028; Sat, 20 Oct 2018 16:21:08 +0000 From: Hannes Tschofenig To: Henk Birkholz , "rats@ietf.org" CC: "eat@ietf.org" Thread-Topic: [EAT] Preliminary RATS BoF Agenda Thread-Index: AQHUaGGNvCYySbrjaE+BAKDogaa266UoT+Vg Date: Sat, 20 Oct 2018 16:21:07 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [24.104.115.126] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM5PR0801MB1764; 6:MT0S1xKaIF/eNboSHFUbKidwC2zkKs6jXQtaxMT27tlRvDwLH89bTxe8Yfye/o0cCtqugbcMdS5v2PFqEBmcM0nef2Il0ppfQwZtuaXJ3E9yaHfc+cirB81+J/klPkOzihMY/iur9knu9FWXxq22quc2t2fn5w93p6qxR3XViorRa07zqEjbVzwCjnhxQURsTHoZRLVJgjjfrYMgAIlZ8m6Ez/4nKylyuYwdqtH1xlDOAEDKRYkNKo2EDRQxv0sbI2Xo4wAeuBaxL2dSq6GNY1RlTlLMKg1VaLNz0DcB5+DW8gNd6L+GUS/drwEuTC1dpyxtFGB+VUcfXW2uSmB/sPX91x0Ap3W7ZWuMTya0LQ21OteKeKN31BfO0Hr/eib4IlxDhuPBQQ/2EyPRWQ8fYcTL8W8+58nCVqUdEkL0zVUkZg/RRoZ3905XrIkglHA9O+3dxsv5tDBpEEXXs1KavQ==; 5:ggrrov2wuItycvPnqKLzuOAdKYodoYvEntuliEjZaBxv5uKvdk/ZGrdbhBDkOENvMk8+KcoMIJxKbYIzdeNjkPdXmR5xoLxfg3VSDOjySsApVi122VLda+4N/RdchfvmmPC5DpHF/jtkW+Rm/Hdkq/AiT7jmCMsQo4KUSZvL+W0=; 7:0qJrdUmGJ9/CNvyF+Fjfp6bdZAQRzZ+Ta+1dbfDKrS8p69lxF2AtqhWqZIpUj4qM+n9wzZtMWUyZiNew6QHXHSI9LMY7DvTojbY6FP3/UKXUq7rSfGxF2L+EensU9BgAjUA6RKFpcwVk6WzCDOrsNtMmkYeO9L3MnEoe/DL+4rrpLzkA7DWwb3JkGCJV9vI+giogcK0GMI+/mlzB7WNua6BTCBaFM1ICvAgSJPUO48gqdA+LXtX8aQmhq1CLcyyO x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: d581e178-c161-4262-16bd-08d636a80aa3 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(5600074)(711020)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:AM5PR0801MB1764; x-ms-traffictypediagnostic: AM5PR0801MB1764: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3231355)(944501410)(52105095)(3002001)(93006095)(93001095)(10201501046)(6055026)(148016)(149066)(150057)(6041310)(20161123558120)(20161123560045)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991095); SRVR:AM5PR0801MB1764; BCL:0; PCL:0; RULEID:; SRVR:AM5PR0801MB1764; x-forefront-prvs: 0831C25939 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(346002)(396003)(39850400004)(366004)(376002)(53754006)(189003)(40434004)(13464003)(199004)(446003)(74316002)(6436002)(106356001)(105586002)(486006)(476003)(33656002)(25786009)(5660300001)(26005)(305945005)(186003)(11346002)(7736002)(229853002)(4326008)(102836004)(478600001)(966005)(14454004)(72206003)(2906002)(97736004)(3846002)(6116002)(6246003)(5250100002)(66066001)(2501003)(110136005)(6506007)(53546011)(71200400001)(71190400001)(99286004)(76176011)(7696005)(316002)(2900100001)(6306002)(53936002)(9686003)(8676002)(8936002)(256004)(81166006)(55016002)(14444005)(5024004)(86362001)(81156014)(68736007); DIR:OUT; SFP:1101; SCL:1; SRVR:AM5PR0801MB1764; H:AM5PR0801MB2097.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: sJQpR2DnIfv6AiXg061Gl93Me/jIAJ5zrhZIvqxGryUtQSYEm7O9Ugd8qnBubCBnf/9WeyL/dhGm+FtoFmEo5njtu6+liaEZ7jlDNcug8i73JZUjYItjvwjQnvgvAfrmx3swsppE2nk8ACRzQoDcOwOXP4tHGWAsdQ/xhARBo7Os/Q0NjzGDrH1aqQ/NQTy4F9Eqo7teMxeApepJId7P1aEqFpLJcxMksqPSwHOOZQGEsGVUPxjanQx0ikENcOw4bumabCgC/mWHDRHr/HiIFGBq0r7BtFWCHm04oV1aR6taz+khs7UBBNRpRLHIETmzmJoy5WSVS3ZzbZbD6ZMlLGlxESZyckWBT1Kr2rGb4nU= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: d581e178-c161-4262-16bd-08d636a80aa3 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Oct 2018 16:21:07.8848 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5PR0801MB1764 Archived-At: Subject: Re: [Rats] [EAT] Preliminary RATS BoF Agenda X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Oct 2018 16:21:13 -0000 SGkgSGVuaywNCg0KQ291bGQgeW91IHNheSBzb21ldGhpbmcgbW9yZSBhYm91dCBhZ2VuZGEgaXRl bSAjNCBjYWxsZWQgIkNvbXByb21pc2UgVHJ1c3R3b3J0aHkgVmlzaWJpbGl0eSBpbiBXb3JraW5n IFN5c3RlbXMiPw0KDQpBZ2VuZGEgaXRlbSAjMiBzb3VuZHMgYSBiaXQgbGlrZSB5b3Ugd291bGQg YmUgdGFsa2luZyBhYm91dCBSQVRTIGRyYWZ0cz8gQ29ycmVjdD8NCg0KSSBhbSBtaXNzaW5nIGEg IkhlcmUgaXMgdGhlIHByb2JsZW0gd2UgYXJlIHNvbHZpbmcgYW5kIHRoaXMgaXMgd2h5IHdlIHdp bGwgbWFrZSB0aGUgSW50ZXJuZXQgd29yayBiZXR0ZXIiIHByZXNlbnRhdGlvbi4NCg0KQ2lhbw0K SGFubmVzDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBFQVQgPGVhdC1ib3Vu Y2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgSGVuayBCaXJraG9seg0KU2VudDogU2F0dXJkYXks IE9jdG9iZXIgMjAsIDIwMTggMzo0MiBBTQ0KVG86IHJhdHNAaWV0Zi5vcmcNCkNjOiBlYXRAaWV0 Zi5vcmcNClN1YmplY3Q6IFtFQVRdIFByZWxpbWluYXJ5IFJBVFMgQm9GIEFnZW5kYQ0KDQpIaSBh bGwsDQoNCnBsZWFzZSBmaW5kIGJlbG93IGEgZmlyc3QgYWdlbmRhIGRyYWZ0IGZvciB0aGUgUkFU UyBCb0YgKCJtYXkgYmUgc3ViamVjdCB0byBjaGFuZ2UiKSBjcmVhdGUgYnkgdGhlIEJvRiBwcm9w b25lbnRzLiBJbiBvcmRlciB0byBzdXBwb3J0IHRoZSBkaXNjdXNzaW9uIGFib3V0IGludGVyc2Vj dGlvbiBvZiBSQVRTIGFuZCBFQVQsIHdlIHJlc2VydmVkIGEgcHJlc2VudGF0aW9uIHNsb3QgZm9y IHRoZSBFQVQgZHJhZnQuDQoNCj4gUkFUUyBCT0YgQWdlbmRhIGF0IElFVEYgMTAzIGluIEJhbmdr b2ssIFRoYWlsYW5kIFR1ZXNkYXksIE5vdmVtYmVyDQo+IDZ0aCwgMjAxOCwgQ2hpdGxhZGEgMiBB ZnRlcm5vb24gU2Vzc2lvbiBJIDEzNTAtMTU1MCAoVVRDKzcpDQo+DQo+IGh0dHBzOi8vZGF0YXRy YWNrZXIuaWV0Zi5vcmcvbWVldGluZy8xMDMvZmxvb3ItcGxhbj9yb29tPWNoaXRsYWRhLTINCj4N Cj4gMCkgIE1pbnV0ZSBUYWtlcnMsIEphYmJlciBTY3JpYmUsIEJsdWVzaGVldHMgKGNoYWlycykN Cj4NCj4gMSkgIEhlbGxvIFJvb20gJiBBZ2VuZGEgQmFzaCAoY2hhaXJzKQ0KPg0KPiAyKSAgSW50 cm9kdWN0aW9uICYgU3VtbWFyeSBvZiBDdXJyZW50IElFVEYgV29yayAoTmVkICYgSGVuaykNCj4N Cj4gMykgIFRoZSBFbnRpdHkgQXR0ZXN0YXRpb24gVG9rZW4gKFRCRCkNCj4NCj4gNCkgIENvbXBy b21pc2UgVHJ1c3R3b3J0aHkgVmlzaWJpbGl0eSBpbiBXb3JraW5nIFN5c3RlbXMgKEVyaWMpDQo+ DQo+IDUpICBDaGFydGVyIFRleHQgRGlzY3Vzc2lvbiAoTmVkICYgSGVuaykNCj4NCj4gNikgIFdy YXAgVXAgKGNoYWlycykNCg0KVGhlIGN1cnJlbnQgcGxhbiBpcyB0byBsaW1pdCBwcmVzZW50YXRp b25zIHRvIGFwcHJveC4gMTUgbWluIG9yIHNob3J0ZXINCi0gaXRlbSA1IGlzIGFuIGV4Y2VwdGlv biB0byB0aGlzIHJ1bGUgYXMgaXQgaXMgaW50ZW5kZWQgdG8gYmUgYSBraWNrLW9mZiBwcmVzZW50 YXRpb24gdG8gc3RhcnQgY2hhcnRlciBkaXNjdXNzaW9ucyBpbiB0aGUgdGltZSByZW1haW5pbmcg dW50aWwgd3JhcCB1cC4NCg0KVmllbGUgR3LDvMOfZSwNCg0KSGVuaw0KDQpfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KRUFUIG1haWxpbmcgbGlzdA0KRUFU QGlldGYub3JnDQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KSU1Q T1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2ht ZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3Ug YXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIg aW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVy IHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5m b3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K From nobody Sun Oct 21 06:20:19 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5C9E8130DE8; Sun, 21 Oct 2018 06:20:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.501 X-Spam-Level: X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h0qI6KlzRKqO; Sun, 21 Oct 2018 06:20:08 -0700 (PDT) Received: from rcdn-iport-1.cisco.com (rcdn-iport-1.cisco.com [173.37.86.72]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 40E2F12D4EA; Sun, 21 Oct 2018 06:20:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4500; q=dns/txt; s=iport; t=1540128008; x=1541337608; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=nb2c+0e4X45GRDjhLlKdF/3hrT9P6Xhg7kO/zoFpwSc=; b=bHeJy2esNIB02dtPJSIY2IwH6ls2KHk3cGmmDQb6S4yWaU+yy7aRuGMg JMDdFiM3UX7iFIDIc6sskbQMY6476CzSpzBzry9jt7YOWCmldD4p8b75B ZwS7ekjNz6LN3HikQat4noMcKCPk0zsfVRWjVRaOKSqxZh4tc478Zysoj c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ARAACgfMxb/5FdJa1kGgEBAQEBAgE?= =?us-ascii?q?BAQEHAgEBAQGBUQUBAQEBCwGBWipmfygKg2uIGIwYgg2DP5NWFIFmCwEBGAi?= =?us-ascii?q?ETAIXhHEhNA0NAQMBAQIBAQJtHAyFOgEBAQEBAQEBASEROgIJBQcEAgEGAhE?= =?us-ascii?q?EAQEDAiYCAgIlCxUICAIEAQ0FCIMagXkID4hTm02BLoQsARFAhQ8FgQuJKoE?= =?us-ascii?q?dF4FBPyZrgxKDGwEBAQEBF4EUAQwGATaCbIJXAohSlXYJAoZggx2DFoNVH4F?= =?us-ascii?q?SIoRRiWmMWIleAhEUgSYdOGRxcBU7gmyDOgECgkiFFIU+bwGIaw4XgQiBHwE?= =?us-ascii?q?B?= X-IronPort-AV: E=Sophos;i="5.54,408,1534809600"; d="scan'208";a="469503666" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by rcdn-iport-1.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 21 Oct 2018 13:19:36 +0000 Received: from XCH-RTP-013.cisco.com (xch-rtp-013.cisco.com [64.101.220.153]) by rcdn-core-9.cisco.com (8.15.2/8.15.2) with ESMTPS id w9LDJaqT020061 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 21 Oct 2018 13:19:36 GMT Received: from xch-rtp-013.cisco.com (64.101.220.153) by XCH-RTP-013.cisco.com (64.101.220.153) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Sun, 21 Oct 2018 09:19:36 -0400 Received: from xch-rtp-013.cisco.com ([64.101.220.153]) by XCH-RTP-013.cisco.com ([64.101.220.153]) with mapi id 15.00.1395.000; Sun, 21 Oct 2018 09:19:35 -0400 From: "Eric Voit (evoit)" To: Hannes Tschofenig , Henk Birkholz , "rats@ietf.org" CC: "eat@ietf.org" Thread-Topic: [EAT] Preliminary RATS BoF Agenda Thread-Index: AQHUaGGNvCYySbrjaE+BAKDogaa266UoT+VggAFc2DA= Date: Sun, 21 Oct 2018 13:19:35 +0000 Message-ID: <45f29705a33140c58c03ddadf65f6a7f@XCH-RTP-013.cisco.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.56.234] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.153, xch-rtp-013.cisco.com X-Outbound-Node: rcdn-core-9.cisco.com Archived-At: Subject: Re: [Rats] [EAT] Preliminary RATS BoF Agenda X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Oct 2018 13:20:11 -0000 PiBGcm9tOiBIYW5uZXMgVHNjaG9mZW5pZywgT2N0b2JlciAyMCwgMjAxOCAxMjoyMSBQTQ0KPiAN Cj4gSGkgSGVuaywNCj4gDQo+IENvdWxkIHlvdSBzYXkgc29tZXRoaW5nIG1vcmUgYWJvdXQgYWdl bmRhIGl0ZW0gIzQgY2FsbGVkICJDb21wcm9taXNlDQo+IFRydXN0d29ydGh5IFZpc2liaWxpdHkg aW4gV29ya2luZyBTeXN0ZW1zIj8NCg0KSGkgSGFubmVzLA0KDQpJIHdpbGwgYmUgZG9pbmcgYWdl bmRhIGl0ZW0gIzQuICBCYXNpY2FsbHkgdGhpcyBhZ2VuZGEgaXRlbSB3YXMgYWRkZWQgdG8gYWRk cmVzcyBhIHF1ZXN0aW9uIHJhaXNlZCBvbiBlYXJsaWVyIG9uIHRoZSBSQVRTL0VBVCB0aHJlYWRz OiBpcyB0aGVyZSBhIHJlYWwgYnVzaW5lc3MgcHJvYmxlbSBoZXJlPw0KDQpUbyBtZSB0aGUgYW5z d2VyIGlzIHllcy4gIEZvciBvdmVyIGEgeWVhciBDaXNjbyBoYXMgb2ZmZXJlZCBhIGNvbnRyb2xs ZXIgYmFzZWQgSW50ZWdyaXR5IFZlcmlmaWNhdGlvbiBhcHBsaWNhdGlvbi4gIFRoaXMgYXBwbGlj YXRpb24gZG9lcyByZW1vdGUgYXR0ZXN0YXRpb24gZm9yIHJvdXRlcnMuICBTZWU6DQpodHRwczov L3d3dy5jaXNjby5jb20vYy9kYW0vZW4vdXMvdGQvZG9jcy9jbG91ZC1zeXN0ZW1zLW1hbmFnZW1l bnQvYXBwbGljYXRpb24tcG9saWN5LWluZnJhc3RydWN0dXJlLWNvbnRyb2xsZXItZW50ZXJwcmlz ZS1tb2R1bGUvMS01LXgvaW50ZWdyaXR5X3ZlcmlmaWNhdGlvbi91c2VyLWd1aWRlL0Npc2NvX0lu dGVncml0eV9WZXJpZmljYXRpb25fQXBwbGljYXRpb25fQVBJQy1FTV9Vc2VyX0d1aWRlXzFfNV8w X3gucGRmDQoNCkFnZW5kYSBpdGVtICM0IHdpbGwgZ2l2ZSBhIGJyaWVmIGRlbW8gb2YgcHJvZHVj dGlvbiBQQ1IgcmVzdWx0cyBmbG93aW5nIHVwIHRvIGEgbW9uaXRvcmluZyBhcHBsaWNhdGlvbiwg dGFsayBhYm91dCBzb21lIGxlc3NvbnMgbGVhcm5lZCwgYW5kIGdpdmUgYW4gaWRlYSBvZiB3aGVy ZSBwcm9wb3NlZCBXRyBlZmZvcnRzIG1pZ2h0IGhlbHAgZnV0dXJlIHR5cGVzIG9mIHJvdXRlciB0 byBjb250cm9sbGVyIGNvbW11bmljYXRpb25zLg0KDQpFcmljDQoNCj4gQWdlbmRhIGl0ZW0gIzIg c291bmRzIGEgYml0IGxpa2UgeW91IHdvdWxkIGJlIHRhbGtpbmcgYWJvdXQgUkFUUyBkcmFmdHM/ DQo+IENvcnJlY3Q/DQo+IA0KPiBJIGFtIG1pc3NpbmcgYSAiSGVyZSBpcyB0aGUgcHJvYmxlbSB3 ZSBhcmUgc29sdmluZyBhbmQgdGhpcyBpcyB3aHkgd2Ugd2lsbCBtYWtlDQo+IHRoZSBJbnRlcm5l dCB3b3JrIGJldHRlciIgcHJlc2VudGF0aW9uLg0KPiANCj4gQ2lhbw0KPiBIYW5uZXMNCj4gDQo+ IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IEVBVCA8ZWF0LWJvdW5jZXNAaWV0 Zi5vcmc+IE9uIEJlaGFsZiBPZiBIZW5rIEJpcmtob2x6DQo+IFNlbnQ6IFNhdHVyZGF5LCBPY3Rv YmVyIDIwLCAyMDE4IDM6NDIgQU0NCj4gVG86IHJhdHNAaWV0Zi5vcmcNCj4gQ2M6IGVhdEBpZXRm Lm9yZw0KPiBTdWJqZWN0OiBbRUFUXSBQcmVsaW1pbmFyeSBSQVRTIEJvRiBBZ2VuZGENCj4gDQo+ IEhpIGFsbCwNCj4gDQo+IHBsZWFzZSBmaW5kIGJlbG93IGEgZmlyc3QgYWdlbmRhIGRyYWZ0IGZv ciB0aGUgUkFUUyBCb0YgKCJtYXkgYmUgc3ViamVjdCB0bw0KPiBjaGFuZ2UiKSBjcmVhdGUgYnkg dGhlIEJvRiBwcm9wb25lbnRzLiBJbiBvcmRlciB0byBzdXBwb3J0IHRoZSBkaXNjdXNzaW9uDQo+ IGFib3V0IGludGVyc2VjdGlvbiBvZiBSQVRTIGFuZCBFQVQsIHdlIHJlc2VydmVkIGEgcHJlc2Vu dGF0aW9uIHNsb3QgZm9yIHRoZQ0KPiBFQVQgZHJhZnQuDQo+IA0KPiA+IFJBVFMgQk9GIEFnZW5k YSBhdCBJRVRGIDEwMyBpbiBCYW5na29rLCBUaGFpbGFuZCBUdWVzZGF5LCBOb3ZlbWJlcg0KPiA+ IDZ0aCwgMjAxOCwgQ2hpdGxhZGEgMiBBZnRlcm5vb24gU2Vzc2lvbiBJIDEzNTAtMTU1MCAoVVRD KzcpDQo+ID4NCj4gPiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL21lZXRpbmcvMTAzL2Zs b29yLXBsYW4/cm9vbT1jaGl0bGFkYS0yDQo+ID4NCj4gPiAwKSAgTWludXRlIFRha2VycywgSmFi YmVyIFNjcmliZSwgQmx1ZXNoZWV0cyAoY2hhaXJzKQ0KPiA+DQo+ID4gMSkgIEhlbGxvIFJvb20g JiBBZ2VuZGEgQmFzaCAoY2hhaXJzKQ0KPiA+DQo+ID4gMikgIEludHJvZHVjdGlvbiAmIFN1bW1h cnkgb2YgQ3VycmVudCBJRVRGIFdvcmsgKE5lZCAmIEhlbmspDQo+ID4NCj4gPiAzKSAgVGhlIEVu dGl0eSBBdHRlc3RhdGlvbiBUb2tlbiAoVEJEKQ0KPiA+DQo+ID4gNCkgIENvbXByb21pc2UgVHJ1 c3R3b3J0aHkgVmlzaWJpbGl0eSBpbiBXb3JraW5nIFN5c3RlbXMgKEVyaWMpDQo+ID4NCj4gPiA1 KSAgQ2hhcnRlciBUZXh0IERpc2N1c3Npb24gKE5lZCAmIEhlbmspDQo+ID4NCj4gPiA2KSAgV3Jh cCBVcCAoY2hhaXJzKQ0KPiANCj4gVGhlIGN1cnJlbnQgcGxhbiBpcyB0byBsaW1pdCBwcmVzZW50 YXRpb25zIHRvIGFwcHJveC4gMTUgbWluIG9yIHNob3J0ZXINCj4gLSBpdGVtIDUgaXMgYW4gZXhj ZXB0aW9uIHRvIHRoaXMgcnVsZSBhcyBpdCBpcyBpbnRlbmRlZCB0byBiZSBhIGtpY2stb2ZmDQo+ IHByZXNlbnRhdGlvbiB0byBzdGFydCBjaGFydGVyIGRpc2N1c3Npb25zIGluIHRoZSB0aW1lIHJl bWFpbmluZyB1bnRpbCB3cmFwIHVwLg0KPiANCj4gVmllbGUgR3LDvMOfZSwNCj4gDQo+IEhlbmsN Cj4gDQo+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ IEVBVCBtYWlsaW5nIGxpc3QNCj4gRUFUQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vZWF0DQo+IElNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBv ZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlDQo+IGNvbmZpZGVudGlhbCBhbmQg bWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lw aWVudCwNCj4gcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3Qg ZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueQ0KPiBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3Ig YW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueQ0KPiBt ZWRpdW0uIFRoYW5rIHlvdS4NCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCj4gRUFUIG1haWxpbmcgbGlzdA0KPiBFQVRAaWV0Zi5vcmcNCj4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCg== From nobody Sun Oct 21 07:32:25 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C88412F295 for ; Sun, 21 Oct 2018 07:32:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d1CIiRKxH9Dm for ; Sun, 21 Oct 2018 07:32:16 -0700 (PDT) Received: from p3plsmtpa08-06.prod.phx3.secureserver.net (p3plsmtpa08-06.prod.phx3.secureserver.net [173.201.193.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E7B33130E61 for ; Sun, 21 Oct 2018 07:32:14 -0700 (PDT) Received: from [192.168.0.101] ([121.46.87.45]) by :SMTPAUTH: with ESMTPSA id EEm1gQwZR2sYoEEm2g6bsO; Sun, 21 Oct 2018 07:32:13 -0700 From: Laurence Lundblade Message-Id: <511F4AEC-F374-44D7-A0DE-FD1201732639@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_72C371AE-A79F-4FE9-9B0D-C00AF39BB564" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Sun, 21 Oct 2018 20:02:08 +0530 In-Reply-To: <45f29705a33140c58c03ddadf65f6a7f@XCH-RTP-013.cisco.com> Cc: Hannes Tschofenig , Henk Birkholz , "rats@ietf.org" , "eat@ietf.org" To: "Eric Voit (evoit)" References: <45f29705a33140c58c03ddadf65f6a7f@XCH-RTP-013.cisco.com> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfJlepEoe3lO+SXBBLUNYoNxto/VFUUIV1H9X7ZpP3cT6MCvr210YC3+D209tbyhvPpwsWkXZuG5YwFahAKVQHmujyNq/+Rh/w75bU3k9TsVtPCnvwkZ3 Bir42iszijs406f4augtHHppp3E+E5pbyH9XwYCYDULZNq9GWCAeLYpoc5tLzLX1H0ZXzfzN6NxtY7vQDykckLnC+Xrl8N0XpOhPalibPwRbzlrdtf6F3Y+I nWTch8DmrIRH5+OJB7SQGcN+5CiNKirzzR1IWu+ssDMTwX/jbSdJkDG0ZzzNCsLd Archived-At: Subject: Re: [Rats] [EAT] Preliminary RATS BoF Agenda X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Oct 2018 14:32:18 -0000 --Apple-Mail=_72C371AE-A79F-4FE9-9B0D-C00AF39BB564 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 21, 2018, at 6:49 PM, Eric Voit (evoit) = wrote: >=20 > To me the answer is yes. For over a year Cisco has offered a = controller based Integrity Verification application. This application = does remote attestation for routers. See: > = https://www.cisco.com/c/dam/en/us/td/docs/cloud-systems-management/applica= tion-policy-infrastructure-controller-enterprise-module/1-5-x/integrity_ve= rification/user-guide/Cisco_Integrity_Verification_Application_APIC-EM_Use= r_Guide_1_5_0_x.pdf = Eric, thanks for sharing that. I read it carefully and that helps me = understand quite a lot in a more concrete way. Even looked at the KGV = tar ball. In a lot of ways this isn=E2=80=99t too different some EAT = uses on mobile phones where the idea is to use TrustZone, virtualization = and other HW architectures to measure Android. I=E2=80=99m guessing a lot of this is implemented with TPMs and TCG = ideas. Is that right? If you can share implementation HW specifics, = then I won=E2=80=99t have to guess and have a lower probability of = saying dumb things, but understand if that is highly proprietary.=20 LL --Apple-Mail=_72C371AE-A79F-4FE9-9B0D-C00AF39BB564 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Oct 21, 2018, at 6:49 PM, Eric Voit (evoit) <evoit@cisco.com> = wrote:

To me the answer is yes. =  For over a year Cisco has offered a controller based Integrity = Verification application.  This application does remote attestation = for routers.  See:
https://www.cisco.com/c/dam/en/us/td/docs/cloud-systems-managem= ent/application-policy-infrastructure-controller-enterprise-module/1-5-x/i= ntegrity_verification/user-guide/Cisco_Integrity_Verification_Application_= APIC-EM_User_Guide_1_5_0_x.pdf


Eric, = thanks for sharing that. I read it carefully and that helps me = understand quite a lot in a more concrete way. Even looked at the KGV = tar ball. In a lot of ways this isn=E2=80=99t too different some EAT = uses on mobile phones where the idea is to use TrustZone, virtualization = and other HW architectures to measure Android.

I=E2=80=99m guessing a lot of this is = implemented with TPMs and TCG ideas.  Is that right? If you can = share implementation HW specifics, then I won=E2=80=99t have to guess = and have a lower probability of saying dumb things, but understand if = that is highly proprietary. 

LL

= --Apple-Mail=_72C371AE-A79F-4FE9-9B0D-C00AF39BB564-- From nobody Sun Oct 21 10:32:46 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 64DCE12D4ED; Sun, 21 Oct 2018 10:32:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.563 X-Spam-Level: X-Spam-Status: No, score=-14.563 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.064, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CKf1IHnirpvn; Sun, 21 Oct 2018 10:32:34 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52CDC1277C8; Sun, 21 Oct 2018 10:32:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=10976; q=dns/txt; s=iport; t=1540143154; x=1541352754; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=tpjy8dlyDNtnWIDulqqytUtyKHFmrNrC0MzYBro5hLA=; b=muQDqE2MOmD/2uN7nO0gxeg7WnHILx9bONJGP9+tDT2KeFKRou6ZVndl 4M4fuP9/+LY7GfpYCq9PXZPXzqgR7++CX5IZ5uAT2WFJjnJPgMe4H8bZu iPTm1eUUSiTdZ9FSUzBqok5okJHWM4rcBq9lMW51ndD22FhN502vDo/cp 0=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AJAAAvt8xb/5pdJa1iGgEBAQEBAgE?= =?us-ascii?q?BAQEHAgEBAQGBUgQBAQEBCwGBDXdmfygKg2uUMYINkU2FSIF6CwEBIIFXgnU?= =?us-ascii?q?CF4RxITUMDQEDAQECAQECbRwMhToBAQECAiMKTBACAQgOByoDAgICMBQRAgQ?= =?us-ascii?q?OBQgXgwOBHWQPpAaBLoQ+QIUQBYtSF4FBP4ERgxKDGwEBAYFuCR+CTYJXAok?= =?us-ascii?q?MhSmQEwkCkGgfgVKIB4ZVljYCERSBJh8BNYFVcBWDJ4YFilJvAYpKgR8BAQ?= X-IronPort-AV: E=Sophos;i="5.54,408,1534809600"; d="scan'208,217";a="188732482" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-7.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 21 Oct 2018 17:32:33 +0000 Received: from XCH-RTP-011.cisco.com (xch-rtp-011.cisco.com [64.101.220.151]) by rcdn-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id w9LHWWuL010435 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Sun, 21 Oct 2018 17:32:33 GMT Received: from xch-rtp-013.cisco.com (64.101.220.153) by XCH-RTP-011.cisco.com (64.101.220.151) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Sun, 21 Oct 2018 13:32:32 -0400 Received: from xch-rtp-013.cisco.com ([64.101.220.153]) by XCH-RTP-013.cisco.com ([64.101.220.153]) with mapi id 15.00.1395.000; Sun, 21 Oct 2018 13:32:32 -0400 From: "Eric Voit (evoit)" To: Laurence Lundblade CC: Hannes Tschofenig , Henk Birkholz , "rats@ietf.org" , "eat@ietf.org" Thread-Topic: [EAT] Preliminary RATS BoF Agenda Thread-Index: AQHUaGGNvCYySbrjaE+BAKDogaa266UoT+VggAFc2DCAAFs+AP//7Yhg Date: Sun, 21 Oct 2018 17:32:32 +0000 Message-ID: <28e484a41ae14f5882bea36031d691bd@XCH-RTP-013.cisco.com> References: <45f29705a33140c58c03ddadf65f6a7f@XCH-RTP-013.cisco.com> <511F4AEC-F374-44D7-A0DE-FD1201732639@island-resort.com> In-Reply-To: <511F4AEC-F374-44D7-A0DE-FD1201732639@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.56.234] Content-Type: multipart/alternative; boundary="_000_28e484a41ae14f5882bea36031d691bdXCHRTP013ciscocom_" MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.151, xch-rtp-011.cisco.com X-Outbound-Node: rcdn-core-3.cisco.com Archived-At: Subject: Re: [Rats] [EAT] Preliminary RATS BoF Agenda X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Oct 2018 17:32:37 -0000 --_000_28e484a41ae14f5882bea36031d691bdXCHRTP013ciscocom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpGcm9tOiBMYXVyZW5jZSBMdW5kYmxhZGUsIE9jdG9iZXIgMjEsIDIwMTggMTA6MzIgQU0NCg0K T24gT2N0IDIxLCAyMDE4LCBhdCA2OjQ5IFBNLCBFcmljIFZvaXQgKGV2b2l0KSA8ZXZvaXRAY2lz Y28uY29tPG1haWx0bzpldm9pdEBjaXNjby5jb20+PiB3cm90ZToNCg0KVG8gbWUgdGhlIGFuc3dl ciBpcyB5ZXMuICBGb3Igb3ZlciBhIHllYXIgQ2lzY28gaGFzIG9mZmVyZWQgYSBjb250cm9sbGVy IGJhc2VkIEludGVncml0eSBWZXJpZmljYXRpb24gYXBwbGljYXRpb24uICBUaGlzIGFwcGxpY2F0 aW9uIGRvZXMgcmVtb3RlIGF0dGVzdGF0aW9uIGZvciByb3V0ZXJzLiAgU2VlOg0KaHR0cHM6Ly93 d3cuY2lzY28uY29tL2MvZGFtL2VuL3VzL3RkL2RvY3MvY2xvdWQtc3lzdGVtcy1tYW5hZ2VtZW50 L2FwcGxpY2F0aW9uLXBvbGljeS1pbmZyYXN0cnVjdHVyZS1jb250cm9sbGVyLWVudGVycHJpc2Ut bW9kdWxlLzEtNS14L2ludGVncml0eV92ZXJpZmljYXRpb24vdXNlci1ndWlkZS9DaXNjb19JbnRl Z3JpdHlfVmVyaWZpY2F0aW9uX0FwcGxpY2F0aW9uX0FQSUMtRU1fVXNlcl9HdWlkZV8xXzVfMF94 LnBkZg0KDQoNCkVyaWMsIHRoYW5rcyBmb3Igc2hhcmluZyB0aGF0LiBJIHJlYWQgaXQgY2FyZWZ1 bGx5IGFuZCB0aGF0IGhlbHBzIG1lIHVuZGVyc3RhbmQgcXVpdGUgYSBsb3QgaW4gYSBtb3JlIGNv bmNyZXRlIHdheS4gRXZlbiBsb29rZWQgYXQgdGhlIEtHViB0YXIgYmFsbC4gSW4gYSBsb3Qgb2Yg d2F5cyB0aGlzIGlzbuKAmXQgdG9vIGRpZmZlcmVudCBzb21lIEVBVCB1c2VzIG9uIG1vYmlsZSBw aG9uZXMgd2hlcmUgdGhlIGlkZWEgaXMgdG8gdXNlIFRydXN0Wm9uZSwgdmlydHVhbGl6YXRpb24g YW5kIG90aGVyIEhXIGFyY2hpdGVjdHVyZXMgdG8gbWVhc3VyZSBBbmRyb2lkLg0KDQpJ4oCZbSBn dWVzc2luZyBhIGxvdCBvZiB0aGlzIGlzIGltcGxlbWVudGVkIHdpdGggVFBNcyBhbmQgVENHIGlk ZWFzLiAgSXMgdGhhdCByaWdodD8gSWYgeW91IGNhbiBzaGFyZSBpbXBsZW1lbnRhdGlvbiBIVyBz cGVjaWZpY3MsIHRoZW4gSSB3b27igJl0IGhhdmUgdG8gZ3Vlc3MgYW5kIGhhdmUgYSBsb3dlciBw cm9iYWJpbGl0eSBvZiBzYXlpbmcgZHVtYiB0aGluZ3MsIGJ1dCB1bmRlcnN0YW5kIGlmIHRoYXQg aXMgaGlnaGx5IHByb3ByaWV0YXJ5Lg0KDQo8RXJpYz4NCg0KSGkgTGF3cmVuY2UsDQoNCkNpc2Nv IGhhcyBhIHZhcmlldHkgb2Ygb2ZmLXRoZS1zaGVsZiBhbmQgY3VzdG9tIGhhcmR3YXJlIGltcGxl bWVudGF0aW9ucyBvZiB0aGUgVENHIGlkZWFzIGFjcm9zcyBkb3plbnMgb2YgaXRzIHByb2R1Y3Rz LiAgSSBiZWxpZXZlIHRoaXMgZWZmb3J0IGhhcyB0aGUgcG90ZW50aWFsIHRvIG5vcm1hbGl6ZSBt dWNoIG9mIHRoZSBzb2Z0d2FyZSBiZXR3ZWVuIHRoZXNlIHZhcmlhdGlvbnMgb2YgaGFyZHdhcmUg YW5kIHRoZSBhcHBsaWNhdGlvbiBsYXllci4NCg0KRXJpYw0KDQoNCkxMDQoNCg== --_000_28e484a41ae14f5882bea36031d691bdXCHRTP013ciscocom_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K YTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1z b25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1l Om1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGlu Ow0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250 LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNw YW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERl ZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9 DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGlu IDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlv bjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVs dHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0t W2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlk bWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2Vu ZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJw dXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0 O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4g MGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3Nw YW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+IExhdXJlbmNlIEx1bmRibGFkZSwgT2N0b2JlciAyMSwg MjAxOCAxMDozMiBBTTxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2lu LWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gT2N0IDIxLCAy MDE4LCBhdCA2OjQ5IFBNLCBFcmljIFZvaXQgKGV2b2l0KSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmV2 b2l0QGNpc2NvLmNvbSI+ZXZvaXRAY2lzY28uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPlRvIG1lIHRoZSBh bnN3ZXIgaXMgeWVzLiAmbmJzcDtGb3Igb3ZlciBhIHllYXIgQ2lzY28gaGFzIG9mZmVyZWQgYSBj b250cm9sbGVyIGJhc2VkIEludGVncml0eSBWZXJpZmljYXRpb24gYXBwbGljYXRpb24uICZuYnNw O1RoaXMgYXBwbGljYXRpb24gZG9lcyByZW1vdGUgYXR0ZXN0YXRpb24gZm9yIHJvdXRlcnMuICZu YnNwO1NlZTo8YnI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly93d3cuY2lzY28uY29tL2MvZGFt L2VuL3VzL3RkL2RvY3MvY2xvdWQtc3lzdGVtcy1tYW5hZ2VtZW50L2FwcGxpY2F0aW9uLXBvbGlj eS1pbmZyYXN0cnVjdHVyZS1jb250cm9sbGVyLWVudGVycHJpc2UtbW9kdWxlLzEtNS14L2ludGVn cml0eV92ZXJpZmljYXRpb24vdXNlci1ndWlkZS9DaXNjb19JbnRlZ3JpdHlfVmVyaWZpY2F0aW9u X0FwcGxpY2F0aW9uX0FQSUMtRU1fVXNlcl9HdWlkZV8xXzVfMF94LnBkZiI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1z ZXJpZiI+aHR0cHM6Ly93d3cuY2lzY28uY29tL2MvZGFtL2VuL3VzL3RkL2RvY3MvY2xvdWQtc3lz dGVtcy1tYW5hZ2VtZW50L2FwcGxpY2F0aW9uLXBvbGljeS1pbmZyYXN0cnVjdHVyZS1jb250cm9s bGVyLWVudGVycHJpc2UtbW9kdWxlLzEtNS14L2ludGVncml0eV92ZXJpZmljYXRpb24vdXNlci1n dWlkZS9DaXNjb19JbnRlZ3JpdHlfVmVyaWZpY2F0aW9uX0FwcGxpY2F0aW9uX0FQSUMtRU1fVXNl cl9HdWlkZV8xXzVfMF94LnBkZjwvc3Bhbj48L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv YmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5FcmljLCB0aGFua3MgZm9yIHNo YXJpbmcgdGhhdC4gSSByZWFkIGl0IGNhcmVmdWxseSBhbmQgdGhhdCBoZWxwcyBtZSB1bmRlcnN0 YW5kIHF1aXRlIGEgbG90IGluIGEgbW9yZSBjb25jcmV0ZSB3YXkuIEV2ZW4gbG9va2VkIGF0IHRo ZSBLR1YgdGFyIGJhbGwuIEluIGEgbG90IG9mIHdheXMgdGhpcyBpc27igJl0IHRvbyBkaWZmZXJl bnQgc29tZSBFQVQgdXNlcyBvbiBtb2JpbGUgcGhvbmVzIHdoZXJlIHRoZSBpZGVhDQogaXMgdG8g dXNlIFRydXN0Wm9uZSwgdmlydHVhbGl6YXRpb24gYW5kIG90aGVyIEhXIGFyY2hpdGVjdHVyZXMg dG8gbWVhc3VyZSBBbmRyb2lkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5J4oCZbSBndWVzc2luZyBhIGxvdCBvZiB0aGlzIGlzIGltcGxlbWVu dGVkIHdpdGggVFBNcyBhbmQgVENHIGlkZWFzLiAmbmJzcDtJcyB0aGF0IHJpZ2h0PyBJZiB5b3Ug Y2FuIHNoYXJlIGltcGxlbWVudGF0aW9uIEhXIHNwZWNpZmljcywgdGhlbiBJIHdvbuKAmXQgaGF2 ZSB0byBndWVzcyBhbmQgaGF2ZSBhIGxvd2VyIHByb2JhYmlsaXR5IG9mIHNheWluZyBkdW1iIHRo aW5ncywgYnV0IHVuZGVyc3RhbmQgaWYgdGhhdCBpcyBoaWdobHkNCiBwcm9wcmlldGFyeS4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jmx0O0Vy aWMmZ3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5IaSBMYXdy ZW5jZSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkNpc2NvIGhh cyBhIHZhcmlldHkgb2Ygb2ZmLXRoZS1zaGVsZiBhbmQgY3VzdG9tIGhhcmR3YXJlIGltcGxlbWVu dGF0aW9ucyBvZiB0aGUgVENHIGlkZWFzIGFjcm9zcyBkb3plbnMgb2YgaXRzIHByb2R1Y3RzLiZu YnNwOyBJIGJlbGlldmUgdGhpcyBlZmZvcnQgaGFzIHRoZSBwb3RlbnRpYWwNCiB0byBub3JtYWxp emUgbXVjaCBvZiB0aGUgc29mdHdhcmUgYmV0d2VlbiB0aGVzZSB2YXJpYXRpb25zIG9mIGhhcmR3 YXJlIGFuZCB0aGUgYXBwbGljYXRpb24gbGF5ZXIuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjojMUY0OTdEIj5FcmljDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkxMPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_28e484a41ae14f5882bea36031d691bdXCHRTP013ciscocom_-- From nobody Mon Oct 22 03:02:06 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3C9B127332; Mon, 22 Oct 2018 03:01:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2EYps4W6Nmp2; Mon, 22 Oct 2018 03:01:48 -0700 (PDT) Received: from smtp6-g21.free.fr (smtp6-g21.free.fr [212.27.42.6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 40DAE130EAE; Mon, 22 Oct 2018 03:01:48 -0700 (PDT) Received: from [192.168.0.13] (unknown [88.182.125.39]) by smtp6-g21.free.fr (Postfix) with ESMTP id 1BC4B78032A; Mon, 22 Oct 2018 12:01:43 +0200 (CEST) To: Henk Birkholz , Laurence Lundblade , "rats@ietf.org" Cc: Guy Fedorkow , Hannes Tschofenig , "Smith, Ned" , Jeremy O'Donoghue , "eat@ietf.org" References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> <9c73f9b7-9129-c273-254e-465f92ab3650@sit.fraunhofer.de> <09818298-9FE1-430A-8045-A9A7E76ED64C@island-resort.com> From: Denis Message-ID: <92abc587-6657-dcad-1222-611d5e8b78af@free.fr> Date: Mon, 22 Oct 2018 12:01:41 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------91C40C4D5DFD6DA0E9E048A6" Content-Language: en-US Archived-At: Subject: Re: [Rats] Device Identity (was Re: [EAT] [EXTERNAL] Re: Attestation BoF charter updates?) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Oct 2018 10:01:58 -0000 This is a multi-part message in MIME format. --------------91C40C4D5DFD6DA0E9E048A6 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Hello  Henk, draft-birkholz-core-coid-00 states:* * **An identity document - a certificate - can be conveyed to other system entities in order to prove the identity of the owner of the identity document. The wording "identity document" should not be used in the charter, since the most important characteristic when using attestations is to be able to know the characteristics of a device, i.e.that it operates as expected, does what is required and does not do other (bad) things. Knowing the identity of a device (e.g. the name of its manufacturer and a unique serial number given by that manufacturer) may certainly be useful in some cases, but it is not always necessary, nor desirable (e.g. because of privacy issues). draft-birkholz-core-coid-00 then states: "Trust in the proof can be established by mutual trust of the provider and assessor of the identity in a third party verification (TVP) provided, for example, by a certificate authority (CA) or its subsidiaries (sub CA)". A trust relationship is always unilateral : someone trusts somebody for something. A reciprocity in a trust relationship is never implied. A given device MAY disclose /more than one/ attestation, for example: * an attestation where only the characteristics of the device are certified, or * an attestation where both the characteristics of the device and the manufacturer identity are certified, or * an attestation where the characteristics of the device, the manufacturer identity and a unique device serial number are certified. Such a case could be modeled by using a sequence of three claims included in the attestation, namely in that order : (1) the characteristics of the device, (2) the manufacturer identity and (3) the device serial number which would be disclosed by the device to a verifier "when appropriate". Another example: a given device MAY disclose /more than one/ attestation: * an attestation where only the characteristics of the hardware device are certified, or * an attestation where both the characteristics of the hardware device and of the software running on top of that hardware device are certified, In the general case, an ordered set of claims or a SEQUENCE of claims can be supported. This is currently not apparent on the current proposals. Denis > Hello Laurence, > > unfortunately, I am traveling at the moment, but let me try to address > an eclectically chosen topic. > > In an attempt to answer your question "What is the definition of an > “identity document” I will just reference > >> https://tools.ietf.org/html/draft-birkholz-core-coid-00#section-1 > > for now (instead of writing a wall of text again. Sorry, if I do that > sometimes, that does not always help...) > > Based on the reference text, the important principle here is that an > identity document is signed using secret keys issued by a (sub) > certificate authority that one or more entities *can* put trust into. > > In comparison, if a CWT is signed with key material deployed on the > device in question, what you provide is proof-of-possession of that > signing (most likely intended to be secret) key. > > Again, you *can* put trust into that proof-of-possession, but the > trust relationships here can have vastly different semantics. In both > cases though, putting trust into, for example, CoID (via TVP) or EAT > (via PoP) is a decision, I think. If you choose to put trust into the > signature of these CWT, both are Trusted Claim Sets - to you. > > This trust has unfortunately nothing to do with the actual > trustworthiness of the thing in question. As Ned illustrated already, > "in a closed ecosystem, the trust characteristics and properties may > be implied". In consequence, if you choose to trust that possession of > a key provides an appropriate level of confidence in trustworthiness - > that is a decision you make. > > This does not provide actual evidence that a thing is really > trustworthy. And providing this evidence via interoperable network > protocols is the gap that RATS intent to address - not only in closed > ecosystems, but also the Internet in general. > > IHTH, > > Henk > > > On 10/20/2018 08:19 AM, Laurence Lundblade wrote: >> I consider /device identity/ an absolute critical part of our work. >> It is a critical part of most EAT use cases such as enrollment of IoT >> devices with IoT management systems. It is the first claim defined in >> EAT. >> >> What is the definition of an “identity document”? Maybe you are >> thinking of it specifically as what was defined for IEEE Dev ID. If I >> recall, the identification claims for the device are in the subject >> DN of an X.509 certificate. >> >> Seems like any EAT with an EUID in it could server well as an >> identity document too. It provides signed, secured proof of the >> identity of the device. It can include manufacturer info in addition >> to the EUID. The EAT style identity could be as tiny as 150 bytes in >> CBOR syntax. All you need to store on the device is the EUID and the >> signing key. Maybe they are even deterministically KDF’d from the >> same seed so you maybe you only need to store 32 bytes on the device. >> >> EAT’s mention of X.509 in 1.4.2 is as one of many ways to establish >> key material so the remote / relying / verifying party can verify the >> signature. So yes, I think you have it correct below. (Technically >> speaking the private key associated with the X.509 cert is used to >> sign, not the X.509 cert or keys in the cert. The X.509 is only to >> help the verifier find and verify the verification key. You might >> even have a means to get it from some service based on a key ID and >> not even store it on the device). >> >> It is an EAT design goal to keep /all/ the claims in the signed >> payload. That includes identity of the device, identity of the >> manufacturer and so on. That way you can use many different signing >> schemes (ECDAA, symmetric key, non-X.509 public key, X.509 pubic key, >> simple public key with just a key id…) with the same claims. >> >> LL >> >> >> >> >>> On Oct 17, 2018, at 5:49 PM, Henk Birkholz >>> >> > wrote: >>> >>> Hi Laurence, >>> >>> maybe I understand now where the general confusion is originating from. >>> >>> I dug through some parts of the EAT draft again and could it be that >>> UIED are identifier and not an identities? They literally are claims >>> (aka assertions) that can be signed as content of a CWT as >>> illustrated in >>> >>>> https://tools.ietf.org/html/draft-mandyam-eat-00#section-1.4.2 >>> >>> 1.4.2. talks about identity documents by mentioning "X.509 >>> certificate chains or something similar but different". But as you >>> highlighted anything with regard to that is explicitly intended >>> _not_ to go into the EAT claim set as content, but is stored on the >>> thing (or maybe on a thing that signs "on behalf of" the thing the >>> EAT is about?) and consequently is only used to potentially sign the >>> EAT claim set (via COSE). Is that correct? >>> >>> As a result, an EAT would never be able to act as an identity >>> document itself, but the key material that comes along with an x.509 >>> certificate (as one example of many highlighted) could be used to >>> sign the EAT. >>> >>> RATS are able to use the "X.509 certificate chains or something >>> similar but different" and the corresponding key material comes >>> along with a certificate (as one example amongst others) to >>> establish Attestation Provenance. >>> >>> Viele Grüße, >>> >>> Henk >>> >>> On 10/17/2018 01:19 PM, Laurence Lundblade wrote: >>>> Wasn’t saying there was ambiguity in the TCG case. Not being a >>>> TCGer, was just was trying to understand what the TCG definition is. >>>> Your mentioning 802.1AR DevID helps a lot as I have some knowledge >>>> of it. >>>> I see now that my speculation about SW / config version was wrong. >>>> That’s fine. I only wrote it to try to get to clarity. >>>> Thanks for help clarifying. >>>> In EAT, we defined a UEID for what TCGer’s mean by “identity": >>>>    UEID's identify individual manufactured entities / devices such >>>> as a >>>>    mobile phone, a water meter, a Bluetooth speaker or a networked >>>>    security camera.  It may identify the entire device or a >>>> submodule or >>>>    subsystem.  It does not identify types, models or classes of >>>> devices. >>>>    It is akin to a serial number, though it does not have to be >>>>    sequential. >>>> See here >>>> for >>>> more on UEID. >>>> In EAT there is a strong desire to separate the signing key >>>> material from UEID to have flexibility in the signing scheme. For >>>> example FIDO and Android both have privacy-preserving schemes were >>>> a signing key is shared by 100,000 devices. (Some use cases need >>>> privacy, some don’t, perhaps because of legal agreements with >>>> customers, and correlation between use cases and privacy schemes >>>> can’t be counted on for high-volume devices like mobile phones). >>>> I don’t know what the right answer(s) is(are) in the design yet... >>>> LL >>>>> On Oct 17, 2018, at 4:26 PM, Guy Fedorkow >>>> > wrote: >>>>> >>>>> Hi Laurence, >>>>>  I don't think there's ambiguity in the TCG case...  current work >>>>> in attestation focuses on using the 802.1AR DevID spec, which >>>>> corresponds exactly to one of your cases below -- it's a vendor, >>>>> model and serial number. >>>>>  It's true that TCG technology can be used to validate software >>>>> integrity, but that's hardly the same as identity. >>>>>  Considerations of user privacy commonly accepted in TCG would >>>>> preclude the inclusion of software state as part of identity, >>>>> practicalities aside.  In general, privacy considerations lead TCG >>>>> to carefully avoid unauthorized disclosure of either software or >>>>> hardware based assertions. >>>>>  Let me know if I'm missing the point... >>>>> Thanks >>>>> /guy fedorkow, juniper networks >>>>> >>>>> -----Original Message----- >>>>> From: Laurence Lundblade >>>> > >>>>> Sent: Wednesday, October 17, 2018 12:31 AM >>>>> To: Henk Birkholz >>>> >>>>> > >>>>> Cc: Smith, Ned >>>>> >; Hannes Tschofenig >>>>> >>>>> >; rats@ietf.org >>>>> ; Jeremy O'Donoghue >>>>> >>>>> >; Denis >>>> >; >>>>> eat@ietf.org >>>>> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter >>>>> updates? >>>>> >>>>> I think the TCG has a certain developed notion of identity that is >>>>> different from others.  A way to get sharper about what a >>>>> particular identity means is to describe the space and how the >>>>> identifier selects in the space.  Here’s a few examples: >>>>> >>>>> - The space is physical human beings with fingers. A fingerprint >>>>> scanner select one of these humans. This is typical biometric auth. >>>>> - The space is humans that know a password. A password >>>>> authenticator selects the humans that know the password. Typical >>>>> authentication. >>>>> - The space is humans as legal entities / citizens with criminal >>>>> records, passports and such. A national ID selects. >>>>> - The space is physical manufactured devices from one maker.  A >>>>> serial number narrows it down to one physical device. >>>>> - The space is physical devices from one maker. A model number or >>>>> version, narrows down to a subset of these devices. >>>>> >>>>> My understanding of the TCG world is that identities goes beyond >>>>> any of the above because they include things like the version of >>>>> the SW and configuration of the device. The identity is largely a >>>>> hash of an identifier of the physical device, various SW >>>>> components and various configuration states.  The point being that >>>>> a change in any of these is a change in the security >>>>> characteristics of the device and if it was trusted with a >>>>> particular key or particular data in the past, that trust should >>>>> be revoked until re established. >>>>> >>>>> - The space is physical devices from any maker >>>>>  + Measurement of the SW (the SW versions) >>>>>     + Measurements of some configuration >>>>> >>>>> Changing any of these change the identity of the device. >>>>> >>>>> I know I hardly need to ask, but TCG folks, did I describe this >>>>> correctly? >>>>> >>>>> >>>>> So that said, many, perhaps most, use cases for EAT do not want >>>>> this kind of device identity. It is not a prerequisite for >>>>> trusting  claims coming from the device. In some cases this level >>>>> of identity seems extremely disruptive as small SW upgrades could >>>>> result in re enrollment of biometrics. We already are annoyed when >>>>> we have to answer security questions when start using a service >>>>> from a new device. >>>>> >>>>> I think this WG needs to address both this very tight TCG-style >>>>> device identity and the more heuristic EAT-style >>>>> claims-for-risk-engines. I could see multi-decade evolution where >>>>> risk engine use cases want more and more of the tight TCG-style >>>>> device identity as criminals become more adept at forging >>>>> EAT-style claims. (Today risk engines work off of unsecured >>>>> browser parameters). >>>>> >>>>> The Introduction in the charter seems entirely focused on the >>>>> TCG-based identity use case. I think text should be added for >>>>> EAT-style attestation. I will write some after some comments on >>>>> this message. >>>>> >>>>> LL >>>>> >>>>> >>>>> >>>>> >>>>> >>>>>> On Oct 16, 2018, at 8:24 PM, Henk Birkholz >>>>>> >>>>> >>>>>> > wrote: >>>>>> >>>>>> To quote Carsten, there is "the usual terminology problem about >>>>>> identity". >>>>>> >>>>>> Identifying vs. Identity brings back memories about an extensive >>>>>> discussion in SACM that in the end resulted in using Profiles... >>>>>> >>>>>> Profiles are the "things" that you can aggregate identity claims >>>>>> in (in SACM these claims are "Target Endpoint Characteristics", >>>>>> which are pretty much the same thing as Device Characteristics) - >>>>>> and you use the Profiles to (re-)identify target endpoints. >>>>>> >>>>>> In the scope of remote attestation procedures, I think that "just >>>>>> not calling" claim sets that are composed (amongst others) of >>>>>> identifying claims "identity documents" might just end up in >>>>>> making up another name for something that is effectively >>>>>> composing identity documents anyways. If calling the same thing >>>>>> something else helps in some way, I am all for it. But I am >>>>>> really not sure. >>>>>> >>>>>> That said, Ned's elaboration on the relationship of identity and >>>>>> attestation claims and corresponding claim semantics / trust >>>>>> semantics is spot on, I think. >>>>>> >>>>>> Viele Grüße, >>>>>> >>>>>> Henk >>>>>> >>>>>> On 10/16/2018 03:51 PM, Smith, Ned wrote: >>>>>>> Agree with Hannes that identity discussion can lead to confusion >>>>>>> as identity is often highly dependent on some sort of context >>>>>>> (domain of interpretation). >>>>>>> In order to have productive conversation about attestation and >>>>>>> identity, it may be important to understand that attestation >>>>>>> semantics sets the context for identity. >>>>>>> * Attestation attributes have trust semantics (and trust >>>>>>> semantics are interpreted through the eyes of the verifier). >>>>>>> Identity attributes may also have trust semantics (in addition >>>>>>> to identity semantics) hence can be regarded as playing a role >>>>>>> in both identity and attestation. Since RATS should be >>>>>>> interested primarily in trust semantics, it makes sense to >>>>>>> understand, discuss and consider identity in terms of its trust >>>>>>> semantics. Hence identity attributes are only interesting to >>>>>>> RATS if they are useful for evaluating trust semantics. >>>>>>> * In a closed ecosystem, the trust characteristics and >>>>>>> properties may be implied because there often exists out-of-band >>>>>>> processes that ensure the characteristics are applied (for >>>>>>> example, if an IT organization sets a policy that all asymmetric >>>>>>> keys are to be hardened using a smartcard, they can apply a >>>>>>> deployment process where the IT professional verifies the >>>>>>> smartcard is used during enrollment.) But in a non-closed >>>>>>> ecosystem, there isn't an assumption that out-of-band processes >>>>>>> exist. Attestation attempts to make explicit what otherwise is >>>>>>> implicit and therefore subject to misinterpretation if the >>>>>>> verifier, relying party and attester are not part of the same >>>>>>> closed ecosystem. Implicit attestation therefore can lead to >>>>>>> semantic confusion if we're not careful. Therefore, the rigor of >>>>>>> treating implicit attestation claims (assertions assumed to >>>>>>> exist but not explicitly named) should nevertheless be defined >>>>>>> explicitly. Then, if there is a need for implicit attestation, >>>>>>> the specifications that describe them can describe them in terms >>>>>>> of an explicit definition. >>>>>>> * In the context of asserting trust characteristics, the >>>>>>> verifier needs to know that a set of characteristics applies to >>>>>>> the instance of the endpoint being evaluated (aka the attester). >>>>>>> (Otherwise a MITM could supply characteristics that may be >>>>>>> valid, but don’t apply to the specific instance). Consequently, >>>>>>> it makes sense to consider that *attestation* keys are needed to >>>>>>> authenticate the endpoint being evaluated. This doesn't imply an >>>>>>> identity key couldn't double as an attestation key. But if it >>>>>>> does, we care about its relevance to the attester endpoint. >>>>>>> -Ned >>>>>>> On 10/15/18, 6:49 PM, "Hannes Tschofenig" >>>>>>> >>>>>>> > wrote: >>>>>>>    Here are my 5 cents on the term 'identity'. >>>>>>>         I have been working on identity management for many >>>>>>> years (partially because of my OAuth co-chair role) and I have >>>>>>> noticed that the use of the term "identity" tends to confuse >>>>>>> more than it helps (even more so when the term is applied to >>>>>>> devices and software rather than humans). >>>>>>>         I believe we could get away with describing what we want >>>>>>> without ever using the term. >>>>>>>         In this context I would argue that we are about >>>>>>> identifying different components, such as hardware and software. >>>>>>>         Ciao >>>>>>>    Hannes >>>>>>>         -----Original Message----- >>>>>>>    From: EAT >>>>>>> > On Behalf Of Smith, Ned >>>>>>>    Sent: Monday, October 15, 2018 9:00 AM >>>>>>>    To: Henk Birkholz >>>>>> >>>>>>> >; rats@ietf.org >>>>>>> ; Jeremy O'Donoghue >>>>>>> >>>>>>> >; Denis >>>>>> > >>>>>>>    Cc: eat@ietf.org >>>>>>>    Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF >>>>>>> charter updates? >>>>>>>         I agree with Henk's observation that there is >>>>>>> opportunity to find common ground on identity as identity can be >>>>>>> a collection of attributes, that if signed, becomes a set of >>>>>>> verifiable claims (about identity attributes). Attestation has a >>>>>>> similar structure in that it consists of a set of attributes, >>>>>>> that if signed becomes a set of verifiable claims. The main >>>>>>> difference between identity and attestation attributes is >>>>>>> whether the attribute semantically relate to trust (vs. >>>>>>> identity). For example, claims of security certification >>>>>>> compliance resonates as attestation. >>>>>>>         It may be possible to combine a set of attestation >>>>>>> attributes in such a way that the combination uniquely >>>>>>> identifies an entity. But that doesn't make it an identity >>>>>>> system per se and shouldn't cause a conflict in charter goals >>>>>>> with respect to other identity focused efforts in IETF. >>>>>>>         Also, inclusion of attributes that don't have semantics >>>>>>> that reasonably relate to trust should not be of interest to a >>>>>>> working group focused on attestation. >>>>>>>         -Ned >>>>>>>         On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" >>>>>>> >>>>>>> on behalf of >>>>>>> henk.birkholz@sit.fraunhofer.de >>>>>>> >>>>>>> > wrote: >>>>>>>             Hi Jeremy & Denis, >>>>>>>             all these points of view have merit, I think. >>>>>>>             Please have a look at these quotes: >>>>>>>> knowing the provenance of the device >>>>>>>> having the entity creator/manufacturer provide a set of claims >>>>>>>> which can be verified >>>>>>>> to know the characteristics of a device by issuing to the >>>>>>>> device a public key certificate which will only be issued to >>>>>>>> the device if it fulfills an expected set of functionalities. >>>>>>>             To me, these descriptions seem to have different >>>>>>> intents, scope or >>>>>>>        audience and require most certainly different work-flows, >>>>>>> but >>>>>>>        semantically and in consequence representation-wise they >>>>>>> also seem quite >>>>>>>        related. >>>>>>>             If you think of an identity document as a set of >>>>>>> claims (potentially >>>>>>>        including a public key), that is signed and that can >>>>>>> match one or more >>>>>>>        things, maybe all three types highlighted above are >>>>>>> actually covered by >>>>>>>        the same identity document concept? >>>>>>>             With respect to identity documents, I think it is >>>>>>> safe so say that we >>>>>>>        can find common ground here rather easily. That said, the >>>>>>> way how these >>>>>>>        identity documents come into existence, when and how they >>>>>>> are deployed >>>>>>>        on the thing or associated with multiple things is >>>>>>> another question. We >>>>>>>        most certainly do not want to end up with a "signing >>>>>>> fool" that does not >>>>>>>        add value to the level of confidence (I am quoting Ned >>>>>>> Smith here). >>>>>>>             This has to be fleshed out explicitly for each >>>>>>> scenario and the parts >>>>>>>        that are reused in every scenario should get special >>>>>>> attention in the >>>>>>>        upcoming RATS architecture draft. >>>>>>>             Identifying claims aggregated in an identity >>>>>>> document most certainly can >>>>>>>        include device characteristics, public key(s), or claims >>>>>>> about the >>>>>>>        intended functions and capabilities of the thing. Claims >>>>>>> can even >>>>>>>        originate from Claimants that are not the thing itself, >>>>>>> but external >>>>>>>        entities providing an assertion (e.g. these things are >>>>>>> CC-certified). >>>>>>>             All different composites of identifying claims have >>>>>>> a specific shared >>>>>>>        intend in this context though, I think: expressing >>>>>>> Attestation >>>>>>>        Provenance (again - one for one or more things of the >>>>>>> same kind). And >>>>>>>        all of them originate from Claimants and therefore use a >>>>>>> root of trust >>>>>>>        of measurement, I think. >>>>>>>             That said, establishing trustworthy knowledge about >>>>>>> attestation >>>>>>>        provenance is only the first step and provides the >>>>>>> foundation for more >>>>>>>        complex attestation procedures. In any case, this seem to >>>>>>> be required by >>>>>>>        every scenario that was highlighted so far and therefore >>>>>>> will most >>>>>>>        certainly be covered in a deliverable. >>>>>>>             IHTH, >>>>>>>             Henk >>>>>>>                  On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: >>>>>>>> On 12 Oct 2018, at 14:33, Denis >>>>>>> >>>>>>>> > wrote: >>>>>>>>> The "Problem Statement" continues as follows: >>>>>>>>> >>>>>>>>> (2) Today, there is no common, standard way for Relying >>>>>>>>> Parties to >>>>>>>>> know the provenance and characteristics of a device (e.g., an >>>>>>>>> end-user >>>>>>>>> device, >>>>>>>>> platform or endpoint, servers, IoT devices, device subsystems and >>>>>>>>> sub-modules) that may be requesting services. >>>>>>>>> >>>>>>>>> Knowing the provenance of the device is not always necessary. >>>>>>>>> What is >>>>>>>>> important is to know that a specific set of functions is >>>>>>>>> (securely) >>>>>>>>> supported by the device. >>>>>>>>> There already exists a common way to know the characteristics >>>>>>>>> of a >>>>>>>>> device by issuing to the device a public key certificate which >>>>>>>>> will >>>>>>>>> only be issued to the device >>>>>>>>> if it fulfills an expected set of functionalities. In such a >>>>>>>>> case a >>>>>>>>> syntax for a trusted claim sets**is not needed. >>>>>>>>> >>>>>>>> This is indeed a possible way to address the problem, but >>>>>>>> suffers from >>>>>>>> challenges which come down to: >>>>>>>> >>>>>>>> - Who issues such certificates. An option is that there is some >>>>>>>> form of >>>>>>>> security certification behind this issuance otherwise it is of >>>>>>>> very >>>>>>>> limited value. >>>>>>>> - In order to capture the wide variety of different devices (I >>>>>>>> prefer >>>>>>>> "entity" here as it is more general than "device"), many >>>>>>>> different forms >>>>>>>> of such certificates would be required. This ends up being much >>>>>>>> the same >>>>>>>> thing as a set of claims. >>>>>>>> >>>>>>>> Given the multiplicity of entities for which attestation might be >>>>>>>> useful, it seems to me that having the entity creator/manufacturer >>>>>>>> provide a set of claims which can be verified is more flexible >>>>>>>> than >>>>>>>> requiring a certificate. It seems likely to me that where a formal >>>>>>>> security certification is needed there will be a certificate >>>>>>>> issued by >>>>>>>> the Certifying Body as one of the claims about an entity, but I >>>>>>>> can >>>>>>>> think of many cases (supply chain management, to take just one >>>>>>>> example) >>>>>>>> where provenance is by far the most useful information. >>>>>>>> >>>>>>>> I'm not in favour of changes to the charter in this direction. >>>>>>>>> >>>>>>>>> The simplest cases should also be part of the framework. >>>>>>>>> >>>>>>>>> Note: I personally appreciate that privacy is an aspect that >>>>>>>>> will/should be taken into consideration. >>>>>>>>> >>>>>>>>> Denis >>>>>>>>> >>>>>>>>>> As with the earlier draft, there are many references to >>>>>>>>>> verify and >>>>>>>>>> verifier in the lead up to the deliverable but no >>>>>>>>>> deliverables describing >>>>>>>>>> verification rules. I'd like to see rules in one of these >>>>>>>>>> documents and >>>>>>>>>> think it worth citing in the deliverables. Are bindings to >>>>>>>>>> certificate >>>>>>>>>> management protocols out of scope? >>>>>>>>>> >>>>>>>>>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" >>>>>>>>>> >>>>>>>>>> on behalf of >>>>>>>>>> henk.birkholz@sit.fraunhofer.de >>>>>>>>>> >>>>>>>>>> >  wrote: >>>>>>>>>> >>>>>>>>>>> Hi all, >>>>>>>>>>> >>>>>>>>>>> sorry for the delay. Please find an updated charter proposal >>>>>>>>>>> here: >>>>>>>>>>> >>>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_ietf-2Drats_charter_blob_RC2_ietf-2Drats-2Dcharter.md&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=rPzmwhcwy8eob4eMiwWzDg5DY-mcC5HYgQqhUGCZ2RI&e= >>>>>>>>>>>> >>>>>>>>>>> The BoF proponents tried to merge all comments and proposals on >>>>>>>>>>> keystores, existing solutions, provenance & device >>>>>>>>>>> characteristics, etc >>>>>>>>>>> that were raised on the list - and align them in homogeneous >>>>>>>>>>> fashion. >>>>>>>>>>> >>>>>>>>>>> This draft is intended to focus the discussion and improve >>>>>>>>>>> the wording. >>>>>>>>>>> >>>>>>>>>>> Viele Grüße, >>>>>>>>>>> >>>>>>>>>>> Henk >>>>>>>>>>> >>>>>>>>>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >>>>>>>>>>>> Hi Henk, >>>>>>>>>>>> >>>>>>>>>>>> Bangkok IETF is getting close, will you be able to update >>>>>>>>>>>> the charter >>>>>>>>>>>> for the attestation BoF to properly include EAT?  I sent >>>>>>>>>>>> you some text >>>>>>>>>>>> that just needs to be pasted along with some comments. It >>>>>>>>>>>> doesn’t look >>>>>>>>>>>> like there’s been any updates. >>>>>>>>>>>> >>>>>>>>>>>> LL >>>>>>>>>>>> >>>>>>>>>>> _______________________________________________ >>>>>>>>>>> RATS mailing list >>>>>>>>>>> RATS@ietf.org >>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_rats&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=xThsQTXgadltVkHTYpOWknadi7puxZt8O6XOIUm_bzo&e= >>>>>>>>>>> >>>>>>>>>> _______________________________________________ >>>>>>>>>> EAT mailing list >>>>>>>>>> EAT@ietf.org >>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> _______________________________________________ >>>>>>>>> EAT mailing list >>>>>>>>> EAT@ietf.org >>>>>>>>> >>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> _______________________________________________ >>>>>>>> EAT mailing list >>>>>>>> EAT@ietf.org >>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>> >>>>>>>> >>>>>>>             _______________________________________________ >>>>>>>        EAT mailing list >>>>>>> EAT@ietf.org >>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>> >>>>>>>              _______________________________________________ >>>>>>>    EAT mailing list >>>>>>> EAT@ietf.org >>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>> >>>>>>>    IMPORTANT NOTICE: The contents of this email and any >>>>>>> attachments are confidential and may also be privileged. If you >>>>>>> are not the intended recipient, please notify the sender >>>>>>> immediately and do not disclose the contents to any other >>>>>>> person, use it for any purpose, or store or copy the information >>>>>>> in any medium. Thank you. >>>>>>> >>>>>> _______________________________________________ >>>>>> EAT mailing list >>>>>> EAT@ietf.org >>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>> >>>>> >>>>> _______________________________________________ >>>>> EAT mailing list >>>>> EAT@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/eat >>> >>> _______________________________________________ >>> EAT mailing list >>> EAT@ietf.org >>> https://www.ietf.org/mailman/listinfo/eat >> --------------91C40C4D5DFD6DA0E9E048A6 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit
Hello  Henk,

draft-birkholz-core-coid-00 states:
An identity document - a certificate - can be conveyed to other system entities in order to prove the identity of the owner of the identity document.
The wording "identity document" should not be used in the charter, since the most important characteristic when using attestations is to be able to know
the characteristics of a device, i.e. that it operates as expected, does what is required and does not do other (bad) things. Knowing the identity of a device
(e.g. the name of its manufacturer and a unique serial number given by that manufacturer) may certainly be useful in some cases, but it is not always necessary,
nor desirable (e.g. because of privacy issues).

draft-birkholz-core-coid-00 then states:
"Trust in the proof can be established by mutual trust of the provider and assessor of the identity in a third party verification (TVP) provided,
for example, by a certificate authority (CA) or its subsidiaries (sub CA)".
A trust relationship is always unilateral : someone trusts somebody for something. A reciprocity in a trust relationship is never implied.

A given device MAY disclose more than one attestation, for example:
  • an attestation where only the characteristics of the device are certified, or
  • an attestation where both the characteristics of the device and the manufacturer identity are certified, or
  • an attestation where the characteristics of the device, the manufacturer identity and a unique device serial number are certified.
Such a case could be modeled by using a sequence of three claims included in the attestation, namely in that order :
(1) the characteristics of the device, (2) the manufacturer identity and (3) the device serial number which would be disclosed by the device
to a verifier "when appropriate".

Another example: a given device MAY disclose more than one attestation:
  • an attestation where only the characteristics of the hardware device are certified, or
  • an attestation where both the characteristics of the hardware device and of the software running on top of that hardware device are certified,
In the general case, an ordered set of claims or a SEQUENCE of claims can be supported. This is currently not apparent on the current proposals.

Denis

Hello Laurence,

unfortunately, I am traveling at the moment, but let me try to address an eclectically chosen topic.

In an attempt to answer your question "What is the definition of an “identity document” I will just reference

https://tools.ietf.org/html/draft-birkholz-core-coid-00#section-1

for now (instead of writing a wall of text again. Sorry, if I do that sometimes, that does not always help...)

Based on the reference text, the important principle here is that an identity document is signed using secret keys issued by a (sub) certificate authority that one or more entities *can* put trust into.

In comparison, if a CWT is signed with key material deployed on the device in question, what you provide is proof-of-possession of that signing (most likely intended to be secret) key.

Again, you *can* put trust into that proof-of-possession, but the trust relationships here can have vastly different semantics. In both cases though, putting trust into, for example, CoID (via TVP) or EAT (via PoP) is a decision, I think. If you choose to put trust into the signature of these CWT, both are Trusted Claim Sets - to you.

This trust has unfortunately nothing to do with the actual trustworthiness of the thing in question. As Ned illustrated already, "in a closed ecosystem, the trust characteristics and properties may be implied". In consequence, if you choose to trust that possession of a key provides an appropriate level of confidence in trustworthiness - that is a decision you make.

This does not provide actual evidence that a thing is really trustworthy. And providing this evidence via interoperable network protocols is the gap that RATS intent to address - not only in closed ecosystems, but also the Internet in general.

IHTH,

Henk


On 10/20/2018 08:19 AM, Laurence Lundblade wrote:
I consider /device identity/ an absolute critical part of our work. It is a critical part of most EAT use cases such as enrollment of IoT devices with IoT management systems. It is the first claim defined in EAT.

What is the definition of an “identity document”? Maybe you are thinking of it specifically as what was defined for IEEE Dev ID. If I recall, the identification claims for the device are in the subject DN of an X.509 certificate.

Seems like any EAT with an EUID in it could server well as an identity document too. It provides signed, secured proof of the identity of the device. It can include manufacturer info in addition to the EUID. The EAT style identity could be as tiny as 150 bytes in CBOR syntax. All you need to store on the device is the EUID and the signing key. Maybe they are even deterministically KDF’d from the same seed so you maybe you only need to store 32 bytes on the device.

EAT’s mention of X.509 in 1.4.2 is as one of many ways to establish key material so the remote / relying / verifying party can verify the signature. So yes, I think you have it correct below. (Technically speaking the private key associated with the X.509 cert is used to sign, not the X.509 cert or keys in the cert. The X.509 is only to help the verifier find and verify the verification key. You might even have a means to get it from some service based on a key ID and not even store it on the device).

It is an EAT design goal to keep /all/ the claims in the signed payload. That includes identity of the device, identity of the manufacturer and so on. That way you can use many different signing schemes (ECDAA, symmetric key, non-X.509 public key, X.509 pubic key, simple public key with just a key id…) with the same claims.

LL




On Oct 17, 2018, at 5:49 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de>> wrote:

Hi Laurence,

maybe I understand now where the general confusion is originating from.

I dug through some parts of the EAT draft again and could it be that UIED are identifier and not an identities? They literally are claims (aka assertions) that can be signed as content of a CWT as illustrated in

https://tools.ietf.org/html/draft-mandyam-eat-00#section-1.4.2

1.4.2. talks about identity documents by mentioning "X.509 certificate chains or something similar but different". But as you highlighted anything with regard to that is explicitly intended _not_ to go into the EAT claim set as content, but is stored on the thing (or maybe on a thing that signs "on behalf of" the thing the EAT is about?) and consequently is only used to potentially sign the EAT claim set (via COSE). Is that correct?

As a result, an EAT would never be able to act as an identity document itself, but the key material that comes along with an x.509 certificate (as one example of many highlighted) could be used to sign the EAT.

RATS are able to use the "X.509 certificate chains or something similar but different" and the corresponding key material comes along with a certificate (as one example amongst others) to establish Attestation Provenance.

Viele Grüße,

Henk

On 10/17/2018 01:19 PM, Laurence Lundblade wrote:
Wasn’t saying there was ambiguity in the TCG case. Not being a TCGer, was just was trying to understand what the TCG definition is.
Your mentioning 802.1AR DevID helps a lot as I have some knowledge of it.
I see now that my speculation about SW / config version was wrong. That’s fine. I only wrote it to try to get to clarity.
Thanks for help clarifying.
In EAT, we defined a UEID for what TCGer’s mean by “identity":
   UEID's identify individual manufactured entities / devices such as a
   mobile phone, a water meter, a Bluetooth speaker or a networked
   security camera.  It may identify the entire device or a submodule or
   subsystem.  It does not identify types, models or classes of devices.
   It is akin to a serial number, though it does not have to be
   sequential.
See here <https://tools.ietf.org/html/draft-mandyam-eat-00#section-3.1> for more on UEID.
In EAT there is a strong desire to separate the signing key material from UEID to have flexibility in the signing scheme. For example FIDO and Android both have privacy-preserving schemes were a signing key is shared by 100,000 devices. (Some use cases need privacy, some don’t, perhaps because of legal agreements with customers, and correlation between use cases and privacy schemes can’t be counted on for high-volume devices like mobile phones).
I don’t know what the right answer(s) is(are) in the design yet...
LL
On Oct 17, 2018, at 4:26 PM, Guy Fedorkow <gfedorkow@juniper.net <mailto:gfedorkow@juniper.net> <mailto:gfedorkow@juniper.net>> wrote:

Hi Laurence,
 I don't think there's ambiguity in the TCG case...  current work in attestation focuses on using the 802.1AR DevID spec, which corresponds exactly to one of your cases below -- it's a vendor, model and serial number.
 It's true that TCG technology can be used to validate software integrity, but that's hardly the same as identity.
 Considerations of user privacy commonly accepted in TCG would preclude the inclusion of software state as part of identity, practicalities aside.  In general, privacy considerations lead TCG to carefully avoid unauthorized disclosure of either software or hardware based assertions.
 Let me know if I'm missing the point...
Thanks
/guy fedorkow, juniper networks

-----Original Message-----
From: Laurence Lundblade <lgl@island-resort.com <mailto:lgl@island-resort.com> <mailto:lgl@island-resort.com>>
Sent: Wednesday, October 17, 2018 12:31 AM
To: Henk Birkholz <henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de> <mailto:henk.birkholz@sit.fraunhofer.de>>
Cc: Smith, Ned <ned.smith@intel.com <mailto:ned.smith@intel.com> <mailto:ned.smith@intel.com>>; Hannes Tschofenig <Hannes.Tschofenig@arm.com <mailto:Hannes.Tschofenig@arm.com> <mailto:Hannes.Tschofenig@arm.com>>; rats@ietf.org <mailto:rats@ietf.org> <mailto:rats@ietf.org>; Jeremy O'Donoghue <jodonogh@qti.qualcomm.com <mailto:jodonogh@qti.qualcomm.com> <mailto:jodonogh@qti.qualcomm.com>>; Denis <denis.ietf@free.fr <mailto:denis.ietf@free.fr> <mailto:denis.ietf@free.fr>>; eat@ietf.org <mailto:eat@ietf.org> <mailto:eat@ietf.org>
Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates?

I think the TCG has a certain developed notion of identity that is different from others.  A way to get sharper about what a particular identity means is to describe the space and how the identifier selects in the space.  Here’s a few examples:

- The space is physical human beings with fingers. A fingerprint scanner select one of these humans. This is typical biometric auth.
- The space is humans that know a password. A password authenticator selects the humans that know the password. Typical authentication.
- The space is humans as legal entities / citizens with criminal records, passports and such. A national ID selects.
- The space is physical manufactured devices from one maker.  A serial number narrows it down to one physical device.
- The space is physical devices from one maker. A model number or version, narrows down to a subset of these devices.

My understanding of the TCG world is that identities goes beyond any of the above because they include things like the version of the SW and configuration of the device. The identity is largely a hash of an identifier of the physical device, various SW components and various configuration states.  The point being that a change in any of these is a change in the security characteristics of the device and if it was trusted with a particular key or particular data in the past, that trust should be revoked until re established.

- The space is physical devices from any maker
 + Measurement of the SW (the SW versions)
    + Measurements of some configuration

Changing any of these change the identity of the device.

I know I hardly need to ask, but TCG folks, did I describe this correctly?


So that said, many, perhaps most, use cases for EAT do not want this kind of device identity. It is not a prerequisite for trusting  claims coming from the device. In some cases this level of identity seems extremely disruptive as small SW upgrades could result in re enrollment of biometrics. We already are annoyed when we have to answer security questions when start using a service from a new device.

I think this WG needs to address both this very tight TCG-style device identity and the more heuristic EAT-style claims-for-risk-engines. I could see multi-decade evolution where risk engine use cases want more and more of the tight TCG-style device identity as criminals become more adept at forging EAT-style claims. (Today risk engines work off of unsecured browser parameters).

The Introduction in the charter seems entirely focused on the TCG-based identity use case. I think text should be added for EAT-style attestation. I will write some after some comments on this message.

LL





On Oct 16, 2018, at 8:24 PM, Henk Birkholz <henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de> <mailto:henk.birkholz@sit.fraunhofer.de>> wrote:

To quote Carsten, there is "the usual terminology problem about identity".

Identifying vs. Identity brings back memories about an extensive discussion in SACM that in the end resulted in using Profiles...

Profiles are the "things" that you can aggregate identity claims in (in SACM these claims are "Target Endpoint Characteristics", which are pretty much the same thing as Device Characteristics) - and you use the Profiles to (re-)identify target endpoints.

In the scope of remote attestation procedures, I think that "just not calling" claim sets that are composed (amongst others) of identifying claims "identity documents" might just end up in making up another name for something that is effectively composing identity documents anyways. If calling the same thing something else helps in some way, I am all for it. But I am really not sure.

That said, Ned's elaboration on the relationship of identity and attestation claims and corresponding claim semantics / trust semantics is spot on, I think.

Viele Grüße,

Henk

On 10/16/2018 03:51 PM, Smith, Ned wrote:
Agree with Hannes that identity discussion can lead to confusion as identity is often highly dependent on some sort of context (domain of interpretation).
In order to have productive conversation about attestation and identity, it may be important to understand that attestation semantics sets the context for identity.
* Attestation attributes have trust semantics (and trust semantics are interpreted through the eyes of the verifier). Identity attributes may also have trust semantics (in addition to identity semantics) hence can be regarded as playing a role in both identity and attestation. Since RATS should be interested primarily in trust semantics, it makes sense to understand, discuss and consider identity in terms of its trust semantics. Hence identity attributes are only interesting to RATS if they are useful for evaluating trust semantics.
* In a closed ecosystem, the trust characteristics and properties may be implied because there often exists out-of-band processes that ensure the characteristics are applied (for example, if an IT organization sets a policy that all asymmetric keys are to be hardened using a smartcard, they can apply a deployment process where the IT professional verifies the smartcard is used during enrollment.) But in a non-closed ecosystem, there isn't an assumption that out-of-band processes exist. Attestation attempts to make explicit what otherwise is implicit and therefore subject to misinterpretation if the verifier, relying party and attester are not part of the same closed ecosystem. Implicit attestation therefore can lead to semantic confusion if we're not careful. Therefore, the rigor of treating implicit attestation claims (assertions assumed to exist but not explicitly named) should nevertheless be defined explicitly. Then, if there is a need for implicit attestation, the specifications that describe them can describe them in terms of an explicit definition.
* In the context of asserting trust characteristics, the verifier needs to know that a set of characteristics applies to the instance of the endpoint being evaluated (aka the attester). (Otherwise a MITM could supply characteristics that may be valid, but don’t apply to the specific instance). Consequently, it makes sense to consider that *attestation* keys are needed to authenticate the endpoint being evaluated. This doesn't imply an identity key couldn't double as an attestation key. But if it does, we care about its relevance to the attester endpoint.
-Ned
On 10/15/18, 6:49 PM, "Hannes Tschofenig" <Hannes.Tschofenig@arm.com <mailto:Hannes.Tschofenig@arm.com> <mailto:Hannes.Tschofenig@arm.com>> wrote:
   Here are my 5 cents on the term 'identity'.
        I have been working on identity management for many years (partially because of my OAuth co-chair role) and I have noticed that the use of the term "identity" tends to confuse more than it helps (even more so when the term is applied to devices and software rather than humans).
        I believe we could get away with describing what we want without ever using the term.
        In this context I would argue that we are about identifying different components, such as hardware and software.
        Ciao
   Hannes
        -----Original Message-----
   From: EAT <eat-bounces@ietf.org <mailto:eat-bounces@ietf.org> <mailto:eat-bounces@ietf.org>> On Behalf Of Smith, Ned
   Sent: Monday, October 15, 2018 9:00 AM
   To: Henk Birkholz <henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de> <mailto:henk.birkholz@sit.fraunhofer.de>>; rats@ietf.org <mailto:rats@ietf.org> <mailto:rats@ietf.org>; Jeremy O'Donoghue <jodonogh@qti.qualcomm.com <mailto:jodonogh@qti.qualcomm.com> <mailto:jodonogh@qti.qualcomm.com>>; Denis <denis.ietf@free.fr <mailto:denis.ietf@free.fr> <mailto:denis.ietf@free.fr>>
   Cc: eat@ietf.org <mailto:eat@ietf.org> <mailto:eat@ietf.org>
   Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter updates?
        I agree with Henk's observation that there is opportunity to find common ground on identity as identity can be a collection of attributes, that if signed, becomes a set of verifiable claims (about identity attributes). Attestation has a similar structure in that it consists of a set of attributes, that if signed becomes a set of verifiable claims. The main difference between identity and attestation attributes is whether the attribute semantically relate to trust (vs. identity). For example, claims of security certification compliance resonates as attestation.
        It may be possible to combine a set of attestation attributes in such a way that the combination uniquely identifies an entity. But that doesn't make it an identity system per se and shouldn't cause a conflict in charter goals with respect to other identity focused efforts in IETF.
        Also, inclusion of attributes that don't have semantics that reasonably relate to trust should not be of interest to a working group focused on attestation.
        -Ned
        On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" <eat-bounces@ietf.org <mailto:eat-bounces@ietf.org> <mailto:eat-bounces@ietf.org> on behalf of henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de> <mailto:henk.birkholz@sit.fraunhofer.de>> wrote:
            Hi Jeremy & Denis,
            all these points of view have merit, I think.
            Please have a look at these quotes:
knowing the provenance of the device
having the entity creator/manufacturer provide a set of claims which can be verified
to know the characteristics of a device by issuing to the device a public key certificate which will only be issued to the device if it fulfills an expected set of functionalities.
            To me, these descriptions seem to have different intents, scope or
       audience and require most certainly different work-flows, but
       semantically and in consequence representation-wise they also seem quite
       related.
            If you think of an identity document as a set of claims (potentially
       including a public key), that is signed and that can match one or more
       things, maybe all three types highlighted above are actually covered by
       the same identity document concept?
            With respect to identity documents, I think it is safe so say that we
       can find common ground here rather easily. That said, the way how these
       identity documents come into existence, when and how they are deployed
       on the thing or associated with multiple things is another question. We
       most certainly do not want to end up with a "signing fool" that does not
       add value to the level of confidence (I am quoting Ned Smith here).
            This has to be fleshed out explicitly for each scenario and the parts
       that are reused in every scenario should get special attention in the
       upcoming RATS architecture draft.
            Identifying claims aggregated in an identity document most certainly can
       include device characteristics, public key(s), or claims about the
       intended functions and capabilities of the thing. Claims can even
       originate from Claimants that are not the thing itself, but external
       entities providing an assertion (e.g. these things are CC-certified).
            All different composites of identifying claims have a specific shared
       intend in this context though, I think: expressing Attestation
       Provenance (again - one for one or more things of the same kind). And
       all of them originate from Claimants and therefore use a root of trust
       of measurement, I think.
            That said, establishing trustworthy knowledge about attestation
       provenance is only the first step and provides the foundation for more
       complex attestation procedures. In any case, this seem to be required by
       every scenario that was highlighted so far and therefore will most
       certainly be covered in a deliverable.
            IHTH,
            Henk
                 On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote:
On 12 Oct 2018, at 14:33, Denis <denis.ietf@free.fr <mailto:denis.ietf@free.fr> <mailto:denis.ietf@free.fr>
<mailto:denis.ietf@free.fr>> wrote:
The "Problem Statement" continues as follows:

(2) Today, there is no common, standard way for Relying Parties to
know the provenance and characteristics of a device (e.g., an end-user
device,
platform or endpoint, servers, IoT devices, device subsystems and
sub-modules) that may be requesting services.

Knowing the provenance of the device is not always necessary. What is
important is to know that a specific set of functions is (securely)
supported by the device.
There already exists a common way to know the characteristics of a
device by issuing to the device a public key certificate which will
only be issued to the device
if it fulfills an expected set of functionalities. In such a case a
syntax for a trusted claim sets**is not needed.

This is indeed a possible way to address the problem, but suffers from
challenges which come down to:

- Who issues such certificates. An option is that there is some form of
security certification behind this issuance otherwise it is of very
limited value.
- In order to capture the wide variety of different devices (I prefer
"entity" here as it is more general than "device"), many different forms
of such certificates would be required. This ends up being much the same
thing as a set of claims.

Given the multiplicity of entities for which attestation might be
useful, it seems to me that having the entity creator/manufacturer
provide a set of claims which can be verified is more flexible than
requiring a certificate. It seems likely to me that where a formal
security certification is needed there will be a certificate issued by
the Certifying Body as one of the claims about an entity, but I can
think of many cases (supply chain management, to take just one example)
where provenance is by far the most useful information.

I'm not in favour of changes to the charter in this direction.

The simplest cases should also be part of the framework.

Note: I personally appreciate that privacy is an aspect that
will/should be taken into consideration.

Denis

As with the earlier draft, there are many references to verify and
verifier in the lead up to the deliverable but no deliverables describing
verification rules. I'd like to see rules in one of these documents and
think it worth citing in the deliverables. Are bindings to certificate
management protocols out of scope?

On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz"
<rats-bounces@ietf.org <mailto:rats-bounces@ietf.org> <mailto:rats-bounces@ietf.org> on behalf of henk.birkholz@sit.fraunhofer.de <mailto:henk.birkholz@sit.fraunhofer.de> <mailto:henk.birkholz@sit.fraunhofer.de>>  wrote:

Hi all,

sorry for the delay. Please find an updated charter proposal here:

https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_ietf-2Drats_charter_blob_RC2_ietf-2Drats-2Dcharter.md&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=rPzmwhcwy8eob4eMiwWzDg5DY-mcC5HYgQqhUGCZ2RI&e=
The BoF proponents tried to merge all comments and proposals on
keystores, existing solutions, provenance & device characteristics, etc
that were raised on the list - and align them in homogeneous fashion.

This draft is intended to focus the discussion and improve the wording.

Viele Grüße,

Henk

On 10/06/2018 08:23 AM, Laurence Lundblade wrote:
Hi Henk,

Bangkok IETF is getting close, will you be able to update the charter
for the attestation BoF to properly include EAT?  I sent you some text
that just needs to be pasted along with some comments. It doesn’t look
like there’s been any updates.

LL

_______________________________________________
RATS mailing list
RATS@ietf.org <mailto:RATS@ietf.org> <mailto:RATS@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_rats&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=xThsQTXgadltVkHTYpOWknadi7puxZt8O6XOIUm_bzo&e=
_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org> <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=


_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org> <mailto:EAT@ietf.org> <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=



_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org> <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=

            _______________________________________________
       EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org> <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=
             _______________________________________________
   EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=
   IMPORTANT NOTICE: The contents of this email and any attachments are confidential and may also be privileged. If you are not the intended recipient, please notify the sender immediately and do not disclose the contents to any other person, use it for any purpose, or store or copy the information in any medium. Thank you.

_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org> <mailto:EAT@ietf.org>
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e=

_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org> <mailto:EAT@ietf.org>
https://www.ietf.org/mailman/listinfo/eat

_______________________________________________
EAT mailing list
EAT@ietf.org <mailto:EAT@ietf.org>
https://www.ietf.org/mailman/listinfo/eat


--------------91C40C4D5DFD6DA0E9E048A6-- From nobody Mon Oct 22 03:26:59 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CE6B130E11; Mon, 22 Oct 2018 03:26:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m5tNJBHnqW0j; Mon, 22 Oct 2018 03:26:51 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A310C130E05; Mon, 22 Oct 2018 03:26:49 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9MAQhCB026336 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 22 Oct 2018 12:26:44 +0200 Received: from [134.102.162.77] (134.102.162.77) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Mon, 22 Oct 2018 12:26:38 +0200 To: Denis , Laurence Lundblade , "rats@ietf.org" CC: Guy Fedorkow , Hannes Tschofenig , "Smith, Ned" , "Jeremy O'Donoghue" , "eat@ietf.org" References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> <9c73f9b7-9129-c273-254e-465f92ab3650@sit.fraunhofer.de> <09818298-9FE1-430A-8045-A9A7E76ED64C@island-resort.com> <92abc587-6657-dcad-1222-611d5e8b78af@free.fr> From: Henk Birkholz Message-ID: <8f0470b6-89e0-259e-c1cb-19f611f78701@sit.fraunhofer.de> Date: Mon, 22 Oct 2018 12:26:37 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <92abc587-6657-dcad-1222-611d5e8b78af@free.fr> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.162.77] Archived-At: Subject: Re: [Rats] Device Identity (was Re: [EAT] [EXTERNAL] Re: Attestation BoF charter updates?) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Oct 2018 10:26:59 -0000 Hello Denis, I have to admit that I disagree to some degree here. De facto, identity documents are used today as a basis for Attestation Provenance - they are either deployed with key material on things or they are requested based on key material. That is not always the best solution, it is not a MUST, but it is a widely spread common method that we cannot ignore, I am afraid. That said, the deployment of key material or identity documents is out-of-scope of this phase for now ("may be subject to change"). We have to address "what has to be / can be" on the thing, though, in order to have a believable source for knowledge about Attestation Provenance. Also, an IEEE 802.1AR DevID is an example of an identity document that is widely used and about device characteristics. I am aware that a lot of very... creative things have been done to x.509 in the last decades, some of them quite arcane. There might be better ways to address this... solution space, CoID is a first step into that direction. Having said that, CoID is not intended to be a RATS WG document and I would very much like to address your general comments with respect to that draft - but not in this scope right now. Would that be okay? Viele Grüße, Henk On 10/22/2018 12:01 PM, Denis wrote: > Hello  Henk, > > draft-birkholz-core-coid-00 states:* > * > > **An identity document - a certificate - can be conveyed to other > system entities in order to prove the identity of the owner of the > identity document. > > The wording "identity document" should not be used in the charter, since > the most important characteristic when using attestations is to be able > to know > the characteristics of a device, i.e.that it operates as expected, does > what is required and does not do other (bad) things. Knowing the > identity of a device > (e.g. the name of its manufacturer and a unique serial number given by > that manufacturer) may certainly be useful in some cases, but it is not > always necessary, > nor desirable (e.g. because of privacy issues). Very correct, this will be part of deliverable three. A few stakeholders argue that network equipment is not as prone to privacy requirements as would be a end-user device. The charter includes to address this topic, but is not intended to bias the outcome of an analysis. > > draft-birkholz-core-coid-00 then states: > > "Trust in the proof can be established by mutual trust of the > provider and assessor of the identity in a third party verification > (TVP) provided, > for example, by a certificate authority (CA) or its subsidiaries > (sub CA)". The mutual trust assumption is a tad bit more complex and I cannot go into detail right now, but we can and will address comments on this later due to start of moratorium at EoD. > > A trust relationship is always unilateral : someone trusts somebody for > something. A reciprocity in a trust relationship is never implied. > > A given device MAY disclose /more than one/ attestation, for example: > > * an attestation where only the characteristics of the device are > certified, or > * an attestation where both the characteristics of the device and the > manufacturer identity are certified, or > * an attestation where the characteristics of the device, the > manufacturer identity and a unique device serial number are certified. This will eventually be part of the templates that are part of deliverable two. > > Such a case could be modeled by using a sequence of three claims > included in the attestation, namely in that order : > (1) the characteristics of the device, (2) the manufacturer identity and > (3) the device serial number which would be disclosed by the device > to a verifier "when appropriate". > > Another example: a given device MAY disclose /more than one/ attestation: > > * an attestation where only the characteristics of the hardware device > are certified, or > * an attestation where both the characteristics of the hardware device > and of the software running on top of that hardware device are > certified, > > In the general case, an ordered set of claims or a SEQUENCE of claims > can be supported. This is currently not apparent on the current proposals. Claim Semantics will be part of deliverable one (maybe two, due to architecture). > > Denis Viele Grüße, Henk > >> Hello Laurence, >> >> unfortunately, I am traveling at the moment, but let me try to address >> an eclectically chosen topic. >> >> In an attempt to answer your question "What is the definition of an >> “identity document” I will just reference >> >>> https://tools.ietf.org/html/draft-birkholz-core-coid-00#section-1 >> >> for now (instead of writing a wall of text again. Sorry, if I do that >> sometimes, that does not always help...) >> >> Based on the reference text, the important principle here is that an >> identity document is signed using secret keys issued by a (sub) >> certificate authority that one or more entities *can* put trust into. >> >> In comparison, if a CWT is signed with key material deployed on the >> device in question, what you provide is proof-of-possession of that >> signing (most likely intended to be secret) key. >> >> Again, you *can* put trust into that proof-of-possession, but the >> trust relationships here can have vastly different semantics. In both >> cases though, putting trust into, for example, CoID (via TVP) or EAT >> (via PoP) is a decision, I think. If you choose to put trust into the >> signature of these CWT, both are Trusted Claim Sets - to you. >> >> This trust has unfortunately nothing to do with the actual >> trustworthiness of the thing in question. As Ned illustrated already, >> "in a closed ecosystem, the trust characteristics and properties may >> be implied". In consequence, if you choose to trust that possession of >> a key provides an appropriate level of confidence in trustworthiness - >> that is a decision you make. >> >> This does not provide actual evidence that a thing is really >> trustworthy. And providing this evidence via interoperable network >> protocols is the gap that RATS intent to address - not only in closed >> ecosystems, but also the Internet in general. >> >> IHTH, >> >> Henk >> >> >> On 10/20/2018 08:19 AM, Laurence Lundblade wrote: >>> I consider /device identity/ an absolute critical part of our work. >>> It is a critical part of most EAT use cases such as enrollment of IoT >>> devices with IoT management systems. It is the first claim defined in >>> EAT. >>> >>> What is the definition of an “identity document”? Maybe you are >>> thinking of it specifically as what was defined for IEEE Dev ID. If I >>> recall, the identification claims for the device are in the subject >>> DN of an X.509 certificate. >>> >>> Seems like any EAT with an EUID in it could server well as an >>> identity document too. It provides signed, secured proof of the >>> identity of the device. It can include manufacturer info in addition >>> to the EUID. The EAT style identity could be as tiny as 150 bytes in >>> CBOR syntax. All you need to store on the device is the EUID and the >>> signing key. Maybe they are even deterministically KDF’d from the >>> same seed so you maybe you only need to store 32 bytes on the device. >>> >>> EAT’s mention of X.509 in 1.4.2 is as one of many ways to establish >>> key material so the remote / relying / verifying party can verify the >>> signature. So yes, I think you have it correct below. (Technically >>> speaking the private key associated with the X.509 cert is used to >>> sign, not the X.509 cert or keys in the cert. The X.509 is only to >>> help the verifier find and verify the verification key. You might >>> even have a means to get it from some service based on a key ID and >>> not even store it on the device). >>> >>> It is an EAT design goal to keep /all/ the claims in the signed >>> payload. That includes identity of the device, identity of the >>> manufacturer and so on. That way you can use many different signing >>> schemes (ECDAA, symmetric key, non-X.509 public key, X.509 pubic key, >>> simple public key with just a key id…) with the same claims. >>> >>> LL >>> >>> >>> >>> >>>> On Oct 17, 2018, at 5:49 PM, Henk Birkholz >>>> >>> > wrote: >>>> >>>> Hi Laurence, >>>> >>>> maybe I understand now where the general confusion is originating from. >>>> >>>> I dug through some parts of the EAT draft again and could it be that >>>> UIED are identifier and not an identities? They literally are claims >>>> (aka assertions) that can be signed as content of a CWT as >>>> illustrated in >>>> >>>>> https://tools.ietf.org/html/draft-mandyam-eat-00#section-1.4.2 >>>> >>>> 1.4.2. talks about identity documents by mentioning "X.509 >>>> certificate chains or something similar but different". But as you >>>> highlighted anything with regard to that is explicitly intended >>>> _not_ to go into the EAT claim set as content, but is stored on the >>>> thing (or maybe on a thing that signs "on behalf of" the thing the >>>> EAT is about?) and consequently is only used to potentially sign the >>>> EAT claim set (via COSE). Is that correct? >>>> >>>> As a result, an EAT would never be able to act as an identity >>>> document itself, but the key material that comes along with an x.509 >>>> certificate (as one example of many highlighted) could be used to >>>> sign the EAT. >>>> >>>> RATS are able to use the "X.509 certificate chains or something >>>> similar but different" and the corresponding key material comes >>>> along with a certificate (as one example amongst others) to >>>> establish Attestation Provenance. >>>> >>>> Viele Grüße, >>>> >>>> Henk >>>> >>>> On 10/17/2018 01:19 PM, Laurence Lundblade wrote: >>>>> Wasn’t saying there was ambiguity in the TCG case. Not being a >>>>> TCGer, was just was trying to understand what the TCG definition is. >>>>> Your mentioning 802.1AR DevID helps a lot as I have some knowledge >>>>> of it. >>>>> I see now that my speculation about SW / config version was wrong. >>>>> That’s fine. I only wrote it to try to get to clarity. >>>>> Thanks for help clarifying. >>>>> In EAT, we defined a UEID for what TCGer’s mean by “identity": >>>>>    UEID's identify individual manufactured entities / devices such >>>>> as a >>>>>    mobile phone, a water meter, a Bluetooth speaker or a networked >>>>>    security camera.  It may identify the entire device or a >>>>> submodule or >>>>>    subsystem.  It does not identify types, models or classes of >>>>> devices. >>>>>    It is akin to a serial number, though it does not have to be >>>>>    sequential. >>>>> See here >>>>> for >>>>> more on UEID. >>>>> In EAT there is a strong desire to separate the signing key >>>>> material from UEID to have flexibility in the signing scheme. For >>>>> example FIDO and Android both have privacy-preserving schemes were >>>>> a signing key is shared by 100,000 devices. (Some use cases need >>>>> privacy, some don’t, perhaps because of legal agreements with >>>>> customers, and correlation between use cases and privacy schemes >>>>> can’t be counted on for high-volume devices like mobile phones). >>>>> I don’t know what the right answer(s) is(are) in the design yet... >>>>> LL >>>>>> On Oct 17, 2018, at 4:26 PM, Guy Fedorkow >>>>> > wrote: >>>>>> >>>>>> Hi Laurence, >>>>>>  I don't think there's ambiguity in the TCG case...  current work >>>>>> in attestation focuses on using the 802.1AR DevID spec, which >>>>>> corresponds exactly to one of your cases below -- it's a vendor, >>>>>> model and serial number. >>>>>>  It's true that TCG technology can be used to validate software >>>>>> integrity, but that's hardly the same as identity. >>>>>>  Considerations of user privacy commonly accepted in TCG would >>>>>> preclude the inclusion of software state as part of identity, >>>>>> practicalities aside.  In general, privacy considerations lead TCG >>>>>> to carefully avoid unauthorized disclosure of either software or >>>>>> hardware based assertions. >>>>>>  Let me know if I'm missing the point... >>>>>> Thanks >>>>>> /guy fedorkow, juniper networks >>>>>> >>>>>> -----Original Message----- >>>>>> From: Laurence Lundblade >>>>> > >>>>>> Sent: Wednesday, October 17, 2018 12:31 AM >>>>>> To: Henk Birkholz >>>>> >>>>>> > >>>>>> Cc: Smith, Ned >>>>>> >; Hannes Tschofenig >>>>>> >>>>>> >; rats@ietf.org >>>>>> ; Jeremy O'Donoghue >>>>>> >>>>>> >; Denis >>>>> >; >>>>>> eat@ietf.org >>>>>> Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF charter >>>>>> updates? >>>>>> >>>>>> I think the TCG has a certain developed notion of identity that is >>>>>> different from others.  A way to get sharper about what a >>>>>> particular identity means is to describe the space and how the >>>>>> identifier selects in the space.  Here’s a few examples: >>>>>> >>>>>> - The space is physical human beings with fingers. A fingerprint >>>>>> scanner select one of these humans. This is typical biometric auth. >>>>>> - The space is humans that know a password. A password >>>>>> authenticator selects the humans that know the password. Typical >>>>>> authentication. >>>>>> - The space is humans as legal entities / citizens with criminal >>>>>> records, passports and such. A national ID selects. >>>>>> - The space is physical manufactured devices from one maker.  A >>>>>> serial number narrows it down to one physical device. >>>>>> - The space is physical devices from one maker. A model number or >>>>>> version, narrows down to a subset of these devices. >>>>>> >>>>>> My understanding of the TCG world is that identities goes beyond >>>>>> any of the above because they include things like the version of >>>>>> the SW and configuration of the device. The identity is largely a >>>>>> hash of an identifier of the physical device, various SW >>>>>> components and various configuration states.  The point being that >>>>>> a change in any of these is a change in the security >>>>>> characteristics of the device and if it was trusted with a >>>>>> particular key or particular data in the past, that trust should >>>>>> be revoked until re established. >>>>>> >>>>>> - The space is physical devices from any maker >>>>>>  + Measurement of the SW (the SW versions) >>>>>>     + Measurements of some configuration >>>>>> >>>>>> Changing any of these change the identity of the device. >>>>>> >>>>>> I know I hardly need to ask, but TCG folks, did I describe this >>>>>> correctly? >>>>>> >>>>>> >>>>>> So that said, many, perhaps most, use cases for EAT do not want >>>>>> this kind of device identity. It is not a prerequisite for >>>>>> trusting  claims coming from the device. In some cases this level >>>>>> of identity seems extremely disruptive as small SW upgrades could >>>>>> result in re enrollment of biometrics. We already are annoyed when >>>>>> we have to answer security questions when start using a service >>>>>> from a new device. >>>>>> >>>>>> I think this WG needs to address both this very tight TCG-style >>>>>> device identity and the more heuristic EAT-style >>>>>> claims-for-risk-engines. I could see multi-decade evolution where >>>>>> risk engine use cases want more and more of the tight TCG-style >>>>>> device identity as criminals become more adept at forging >>>>>> EAT-style claims. (Today risk engines work off of unsecured >>>>>> browser parameters). >>>>>> >>>>>> The Introduction in the charter seems entirely focused on the >>>>>> TCG-based identity use case. I think text should be added for >>>>>> EAT-style attestation. I will write some after some comments on >>>>>> this message. >>>>>> >>>>>> LL >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>>> On Oct 16, 2018, at 8:24 PM, Henk Birkholz >>>>>>> >>>>>> >>>>>>> > wrote: >>>>>>> >>>>>>> To quote Carsten, there is "the usual terminology problem about >>>>>>> identity". >>>>>>> >>>>>>> Identifying vs. Identity brings back memories about an extensive >>>>>>> discussion in SACM that in the end resulted in using Profiles... >>>>>>> >>>>>>> Profiles are the "things" that you can aggregate identity claims >>>>>>> in (in SACM these claims are "Target Endpoint Characteristics", >>>>>>> which are pretty much the same thing as Device Characteristics) - >>>>>>> and you use the Profiles to (re-)identify target endpoints. >>>>>>> >>>>>>> In the scope of remote attestation procedures, I think that "just >>>>>>> not calling" claim sets that are composed (amongst others) of >>>>>>> identifying claims "identity documents" might just end up in >>>>>>> making up another name for something that is effectively >>>>>>> composing identity documents anyways. If calling the same thing >>>>>>> something else helps in some way, I am all for it. But I am >>>>>>> really not sure. >>>>>>> >>>>>>> That said, Ned's elaboration on the relationship of identity and >>>>>>> attestation claims and corresponding claim semantics / trust >>>>>>> semantics is spot on, I think. >>>>>>> >>>>>>> Viele Grüße, >>>>>>> >>>>>>> Henk >>>>>>> >>>>>>> On 10/16/2018 03:51 PM, Smith, Ned wrote: >>>>>>>> Agree with Hannes that identity discussion can lead to confusion >>>>>>>> as identity is often highly dependent on some sort of context >>>>>>>> (domain of interpretation). >>>>>>>> In order to have productive conversation about attestation and >>>>>>>> identity, it may be important to understand that attestation >>>>>>>> semantics sets the context for identity. >>>>>>>> * Attestation attributes have trust semantics (and trust >>>>>>>> semantics are interpreted through the eyes of the verifier). >>>>>>>> Identity attributes may also have trust semantics (in addition >>>>>>>> to identity semantics) hence can be regarded as playing a role >>>>>>>> in both identity and attestation. Since RATS should be >>>>>>>> interested primarily in trust semantics, it makes sense to >>>>>>>> understand, discuss and consider identity in terms of its trust >>>>>>>> semantics. Hence identity attributes are only interesting to >>>>>>>> RATS if they are useful for evaluating trust semantics. >>>>>>>> * In a closed ecosystem, the trust characteristics and >>>>>>>> properties may be implied because there often exists out-of-band >>>>>>>> processes that ensure the characteristics are applied (for >>>>>>>> example, if an IT organization sets a policy that all asymmetric >>>>>>>> keys are to be hardened using a smartcard, they can apply a >>>>>>>> deployment process where the IT professional verifies the >>>>>>>> smartcard is used during enrollment.) But in a non-closed >>>>>>>> ecosystem, there isn't an assumption that out-of-band processes >>>>>>>> exist. Attestation attempts to make explicit what otherwise is >>>>>>>> implicit and therefore subject to misinterpretation if the >>>>>>>> verifier, relying party and attester are not part of the same >>>>>>>> closed ecosystem. Implicit attestation therefore can lead to >>>>>>>> semantic confusion if we're not careful. Therefore, the rigor of >>>>>>>> treating implicit attestation claims (assertions assumed to >>>>>>>> exist but not explicitly named) should nevertheless be defined >>>>>>>> explicitly. Then, if there is a need for implicit attestation, >>>>>>>> the specifications that describe them can describe them in terms >>>>>>>> of an explicit definition. >>>>>>>> * In the context of asserting trust characteristics, the >>>>>>>> verifier needs to know that a set of characteristics applies to >>>>>>>> the instance of the endpoint being evaluated (aka the attester). >>>>>>>> (Otherwise a MITM could supply characteristics that may be >>>>>>>> valid, but don’t apply to the specific instance). Consequently, >>>>>>>> it makes sense to consider that *attestation* keys are needed to >>>>>>>> authenticate the endpoint being evaluated. This doesn't imply an >>>>>>>> identity key couldn't double as an attestation key. But if it >>>>>>>> does, we care about its relevance to the attester endpoint. >>>>>>>> -Ned >>>>>>>> On 10/15/18, 6:49 PM, "Hannes Tschofenig" >>>>>>>> >>>>>>>> > wrote: >>>>>>>>    Here are my 5 cents on the term 'identity'. >>>>>>>>         I have been working on identity management for many >>>>>>>> years (partially because of my OAuth co-chair role) and I have >>>>>>>> noticed that the use of the term "identity" tends to confuse >>>>>>>> more than it helps (even more so when the term is applied to >>>>>>>> devices and software rather than humans). >>>>>>>>         I believe we could get away with describing what we want >>>>>>>> without ever using the term. >>>>>>>>         In this context I would argue that we are about >>>>>>>> identifying different components, such as hardware and software. >>>>>>>>         Ciao >>>>>>>>    Hannes >>>>>>>>         -----Original Message----- >>>>>>>>    From: EAT >>>>>>>> > On Behalf Of Smith, Ned >>>>>>>>    Sent: Monday, October 15, 2018 9:00 AM >>>>>>>>    To: Henk Birkholz >>>>>>> >>>>>>>> >; rats@ietf.org >>>>>>>> ; Jeremy O'Donoghue >>>>>>>> >>>>>>>> >; Denis >>>>>>> > >>>>>>>>    Cc: eat@ietf.org >>>>>>>>    Subject: Re: [EAT] [EXTERNAL] Re: [Rats] Attestation BoF >>>>>>>> charter updates? >>>>>>>>         I agree with Henk's observation that there is >>>>>>>> opportunity to find common ground on identity as identity can be >>>>>>>> a collection of attributes, that if signed, becomes a set of >>>>>>>> verifiable claims (about identity attributes). Attestation has a >>>>>>>> similar structure in that it consists of a set of attributes, >>>>>>>> that if signed becomes a set of verifiable claims. The main >>>>>>>> difference between identity and attestation attributes is >>>>>>>> whether the attribute semantically relate to trust (vs. >>>>>>>> identity). For example, claims of security certification >>>>>>>> compliance resonates as attestation. >>>>>>>>         It may be possible to combine a set of attestation >>>>>>>> attributes in such a way that the combination uniquely >>>>>>>> identifies an entity. But that doesn't make it an identity >>>>>>>> system per se and shouldn't cause a conflict in charter goals >>>>>>>> with respect to other identity focused efforts in IETF. >>>>>>>>         Also, inclusion of attributes that don't have semantics >>>>>>>> that reasonably relate to trust should not be of interest to a >>>>>>>> working group focused on attestation. >>>>>>>>         -Ned >>>>>>>>         On 10/15/18, 3:53 PM, "EAT on behalf of Henk Birkholz" >>>>>>>> >>>>>>>> on behalf of >>>>>>>> henk.birkholz@sit.fraunhofer.de >>>>>>>> >>>>>>>> > wrote: >>>>>>>>             Hi Jeremy & Denis, >>>>>>>>             all these points of view have merit, I think. >>>>>>>>             Please have a look at these quotes: >>>>>>>>> knowing the provenance of the device >>>>>>>>> having the entity creator/manufacturer provide a set of claims >>>>>>>>> which can be verified >>>>>>>>> to know the characteristics of a device by issuing to the >>>>>>>>> device a public key certificate which will only be issued to >>>>>>>>> the device if it fulfills an expected set of functionalities. >>>>>>>>             To me, these descriptions seem to have different >>>>>>>> intents, scope or >>>>>>>>        audience and require most certainly different work-flows, >>>>>>>> but >>>>>>>>        semantically and in consequence representation-wise they >>>>>>>> also seem quite >>>>>>>>        related. >>>>>>>>             If you think of an identity document as a set of >>>>>>>> claims (potentially >>>>>>>>        including a public key), that is signed and that can >>>>>>>> match one or more >>>>>>>>        things, maybe all three types highlighted above are >>>>>>>> actually covered by >>>>>>>>        the same identity document concept? >>>>>>>>             With respect to identity documents, I think it is >>>>>>>> safe so say that we >>>>>>>>        can find common ground here rather easily. That said, the >>>>>>>> way how these >>>>>>>>        identity documents come into existence, when and how they >>>>>>>> are deployed >>>>>>>>        on the thing or associated with multiple things is >>>>>>>> another question. We >>>>>>>>        most certainly do not want to end up with a "signing >>>>>>>> fool" that does not >>>>>>>>        add value to the level of confidence (I am quoting Ned >>>>>>>> Smith here). >>>>>>>>             This has to be fleshed out explicitly for each >>>>>>>> scenario and the parts >>>>>>>>        that are reused in every scenario should get special >>>>>>>> attention in the >>>>>>>>        upcoming RATS architecture draft. >>>>>>>>             Identifying claims aggregated in an identity >>>>>>>> document most certainly can >>>>>>>>        include device characteristics, public key(s), or claims >>>>>>>> about the >>>>>>>>        intended functions and capabilities of the thing. Claims >>>>>>>> can even >>>>>>>>        originate from Claimants that are not the thing itself, >>>>>>>> but external >>>>>>>>        entities providing an assertion (e.g. these things are >>>>>>>> CC-certified). >>>>>>>>             All different composites of identifying claims have >>>>>>>> a specific shared >>>>>>>>        intend in this context though, I think: expressing >>>>>>>> Attestation >>>>>>>>        Provenance (again - one for one or more things of the >>>>>>>> same kind). And >>>>>>>>        all of them originate from Claimants and therefore use a >>>>>>>> root of trust >>>>>>>>        of measurement, I think. >>>>>>>>             That said, establishing trustworthy knowledge about >>>>>>>> attestation >>>>>>>>        provenance is only the first step and provides the >>>>>>>> foundation for more >>>>>>>>        complex attestation procedures. In any case, this seem to >>>>>>>> be required by >>>>>>>>        every scenario that was highlighted so far and therefore >>>>>>>> will most >>>>>>>>        certainly be covered in a deliverable. >>>>>>>>             IHTH, >>>>>>>>             Henk >>>>>>>>                  On 10/15/2018 12:22 PM, Jeremy O'Donoghue wrote: >>>>>>>>> On 12 Oct 2018, at 14:33, Denis >>>>>>>> >>>>>>>>> > wrote: >>>>>>>>>> The "Problem Statement" continues as follows: >>>>>>>>>> >>>>>>>>>> (2) Today, there is no common, standard way for Relying >>>>>>>>>> Parties to >>>>>>>>>> know the provenance and characteristics of a device (e.g., an >>>>>>>>>> end-user >>>>>>>>>> device, >>>>>>>>>> platform or endpoint, servers, IoT devices, device subsystems and >>>>>>>>>> sub-modules) that may be requesting services. >>>>>>>>>> >>>>>>>>>> Knowing the provenance of the device is not always necessary. >>>>>>>>>> What is >>>>>>>>>> important is to know that a specific set of functions is >>>>>>>>>> (securely) >>>>>>>>>> supported by the device. >>>>>>>>>> There already exists a common way to know the characteristics >>>>>>>>>> of a >>>>>>>>>> device by issuing to the device a public key certificate which >>>>>>>>>> will >>>>>>>>>> only be issued to the device >>>>>>>>>> if it fulfills an expected set of functionalities. In such a >>>>>>>>>> case a >>>>>>>>>> syntax for a trusted claim sets**is not needed. >>>>>>>>>> >>>>>>>>> This is indeed a possible way to address the problem, but >>>>>>>>> suffers from >>>>>>>>> challenges which come down to: >>>>>>>>> >>>>>>>>> - Who issues such certificates. An option is that there is some >>>>>>>>> form of >>>>>>>>> security certification behind this issuance otherwise it is of >>>>>>>>> very >>>>>>>>> limited value. >>>>>>>>> - In order to capture the wide variety of different devices (I >>>>>>>>> prefer >>>>>>>>> "entity" here as it is more general than "device"), many >>>>>>>>> different forms >>>>>>>>> of such certificates would be required. This ends up being much >>>>>>>>> the same >>>>>>>>> thing as a set of claims. >>>>>>>>> >>>>>>>>> Given the multiplicity of entities for which attestation might be >>>>>>>>> useful, it seems to me that having the entity creator/manufacturer >>>>>>>>> provide a set of claims which can be verified is more flexible >>>>>>>>> than >>>>>>>>> requiring a certificate. It seems likely to me that where a formal >>>>>>>>> security certification is needed there will be a certificate >>>>>>>>> issued by >>>>>>>>> the Certifying Body as one of the claims about an entity, but I >>>>>>>>> can >>>>>>>>> think of many cases (supply chain management, to take just one >>>>>>>>> example) >>>>>>>>> where provenance is by far the most useful information. >>>>>>>>> >>>>>>>>> I'm not in favour of changes to the charter in this direction. >>>>>>>>>> >>>>>>>>>> The simplest cases should also be part of the framework. >>>>>>>>>> >>>>>>>>>> Note: I personally appreciate that privacy is an aspect that >>>>>>>>>> will/should be taken into consideration. >>>>>>>>>> >>>>>>>>>> Denis >>>>>>>>>> >>>>>>>>>>> As with the earlier draft, there are many references to >>>>>>>>>>> verify and >>>>>>>>>>> verifier in the lead up to the deliverable but no >>>>>>>>>>> deliverables describing >>>>>>>>>>> verification rules. I'd like to see rules in one of these >>>>>>>>>>> documents and >>>>>>>>>>> think it worth citing in the deliverables. Are bindings to >>>>>>>>>>> certificate >>>>>>>>>>> management protocols out of scope? >>>>>>>>>>> >>>>>>>>>>> On 10/11/18, 9:49 AM, "RATS on behalf of Henk Birkholz" >>>>>>>>>>> >>>>>>>>>>> on behalf of >>>>>>>>>>> henk.birkholz@sit.fraunhofer.de >>>>>>>>>>> >>>>>>>>>>> >  wrote: >>>>>>>>>>> >>>>>>>>>>>> Hi all, >>>>>>>>>>>> >>>>>>>>>>>> sorry for the delay. Please find an updated charter proposal >>>>>>>>>>>> here: >>>>>>>>>>>> >>>>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__github.com_ietf-2Drats_charter_blob_RC2_ietf-2Drats-2Dcharter.md&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=rPzmwhcwy8eob4eMiwWzDg5DY-mcC5HYgQqhUGCZ2RI&e= >>>>>>>>>>>>> >>>>>>>>>>>> The BoF proponents tried to merge all comments and proposals on >>>>>>>>>>>> keystores, existing solutions, provenance & device >>>>>>>>>>>> characteristics, etc >>>>>>>>>>>> that were raised on the list - and align them in homogeneous >>>>>>>>>>>> fashion. >>>>>>>>>>>> >>>>>>>>>>>> This draft is intended to focus the discussion and improve >>>>>>>>>>>> the wording. >>>>>>>>>>>> >>>>>>>>>>>> Viele Grüße, >>>>>>>>>>>> >>>>>>>>>>>> Henk >>>>>>>>>>>> >>>>>>>>>>>> On 10/06/2018 08:23 AM, Laurence Lundblade wrote: >>>>>>>>>>>>> Hi Henk, >>>>>>>>>>>>> >>>>>>>>>>>>> Bangkok IETF is getting close, will you be able to update >>>>>>>>>>>>> the charter >>>>>>>>>>>>> for the attestation BoF to properly include EAT?  I sent >>>>>>>>>>>>> you some text >>>>>>>>>>>>> that just needs to be pasted along with some comments. It >>>>>>>>>>>>> doesn’t look >>>>>>>>>>>>> like there’s been any updates. >>>>>>>>>>>>> >>>>>>>>>>>>> LL >>>>>>>>>>>>> >>>>>>>>>>>> _______________________________________________ >>>>>>>>>>>> RATS mailing list >>>>>>>>>>>> RATS@ietf.org >>>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_rats&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=xThsQTXgadltVkHTYpOWknadi7puxZt8O6XOIUm_bzo&e= >>>>>>>>>>>> >>>>>>>>>>> _______________________________________________ >>>>>>>>>>> EAT mailing list >>>>>>>>>>> EAT@ietf.org >>>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>>>>> >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> _______________________________________________ >>>>>>>>>> EAT mailing list >>>>>>>>>> EAT@ietf.org >>>>>>>>>> >>>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> >>>>>>>>> _______________________________________________ >>>>>>>>> EAT mailing list >>>>>>>>> EAT@ietf.org >>>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>>> >>>>>>>>> >>>>>>>>             _______________________________________________ >>>>>>>>        EAT mailing list >>>>>>>> EAT@ietf.org >>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>> >>>>>>>>              _______________________________________________ >>>>>>>>    EAT mailing list >>>>>>>> EAT@ietf.org >>>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>>> >>>>>>>>    IMPORTANT NOTICE: The contents of this email and any >>>>>>>> attachments are confidential and may also be privileged. If you >>>>>>>> are not the intended recipient, please notify the sender >>>>>>>> immediately and do not disclose the contents to any other >>>>>>>> person, use it for any purpose, or store or copy the information >>>>>>>> in any medium. Thank you. >>>>>>>> >>>>>>> _______________________________________________ >>>>>>> EAT mailing list >>>>>>> EAT@ietf.org >>>>>>> https://urldefense.proofpoint.com/v2/url?u=https-3A__www.ietf.org_mailman_listinfo_eat&d=DwIFaQ&c=HAkYuh63rsuhr6Scbfh0UjBXeMK-ndb3voDTXcWzoCI&r=sebUyXCidr_CEuZObmOub9NX0cE_5cRieGL_7VXhmfk&m=p5eO1iMTXM4ZfeXvFBU57-xCILnJh-EOaxl5AUwyWGM&s=N7kKkDdCvl_MNmB3Guyg9HC-kQnMrX1cP5w44SbDsAw&e= >>>>>>> >>>>>> >>>>>> _______________________________________________ >>>>>> EAT mailing list >>>>>> EAT@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/eat >>>> >>>> _______________________________________________ >>>> EAT mailing list >>>> EAT@ietf.org >>>> https://www.ietf.org/mailman/listinfo/eat >>> > From nobody Mon Oct 22 04:46:31 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A810A130E17; Mon, 22 Oct 2018 04:46:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RxAyYbtNCZWm; Mon, 22 Oct 2018 04:46:12 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 951EF130E30; Mon, 22 Oct 2018 04:46:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost2.informatik.uni-bremen.de [IPv6:2001:638:708:30c8:406a:91ff:fe74:f2b7]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w9MBk12a024192; Mon, 22 Oct 2018 13:46:06 +0200 (CEST) Received: from [192.168.217.102] (p54A6CA9F.dip0.t-ipconnect.de [84.166.202.159]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 42dvqF2d44z1Bqf; Mon, 22 Oct 2018 13:46:01 +0200 (CEST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: <92abc587-6657-dcad-1222-611d5e8b78af@free.fr> Date: Mon, 22 Oct 2018 13:46:00 +0200 Cc: Henk Birkholz , Laurence Lundblade , "rats@ietf.org" , Hannes Tschofenig , Guy Fedorkow , "Smith, Ned" , "Jeremy O'Donoghue" , "eat@ietf.org" X-Mao-Original-Outgoing-Id: 561901558.288903-8225da9f9962033a1f11862f6477cd0c Content-Transfer-Encoding: quoted-printable Message-Id: References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> <9c73f9b7-9129-c273-254e-465f92ab3650@sit.fraunhofer.de> <09818298-9FE1-430A-8045-A9A7E76ED64C@island-resort.com> <92abc587-6657-dcad-1222-611d5e8b78af@free.fr> To: Denis X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [Rats] [EAT] Device Identity (was Re: [EXTERNAL] Re: Attestation BoF charter updates?) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Oct 2018 11:46:22 -0000 On Oct 22, 2018, at 12:01, Denis wrote: >=20 > The wording "identity document" should not be used in the charter, = since the most important characteristic when using attestations is to be = able to know=20 > the characteristics of a device, i.e. that it operates as expected, = does what is required and does not do other (bad) things. Knowing the = identity of a device=20 > (e.g. the name of its manufacturer and a unique serial number given by = that manufacturer) may certainly be useful in some cases, but it is not = always necessary,=20 > nor desirable (e.g. because of privacy issues). Henk forecasted that I would say =E2=80=9Cthe usual identity = confusion=E2=80=9D earlier=E2=80=A6 This is indeed the usual identity confusion. RFC 4949 says: $ identity (I) The collective aspect of a set of attribute values (i.e., a set of characteristics) by which a system user or other system entity is recognizable or known. (See: authenticate, registration. Compare: identifier.) In other words: A set of claims. When I buy cigarettes from a vending machine in Germany (I don=E2=80=99t, = so please excuse inaccuracies), it needs an identity document with = exactly one claim on it: age =E2=89=A5 18 years. For a cash buyer, = that is the entire identity the vending machine cares about. = (Obviously, the asserter of that claim needs to be authorized to do so = by the operator of a vending machine =E2=80=94 that set of = authorizations is probably something that is honed by a procession of = court cases.) Since even the identity of the entity authorized to make a claim may be = subject to privacy, the actual identity may be mixed together through a = number of verification services. It is useful to have a protocol that = can be used to convey identities through such a mixer; the actual = relying party may not need to understand much about what is happening as = long as it trusts the verification services. Or, in the above example, = the vending machine may use a claim from a bank card that I=E2=80=99m = =E2=89=A5 18yo, without understanding how the bank came to that = conclusion. Maybe we should replace the term =E2=80=9Cidentity=E2=80=9D with =E2=80=9C= set of claims useful for recognizing something or somebody=E2=80=9D, = hmm, SOCUFRSOS? =E2=80=9CIdentity=E2=80=9D might be easier to say. I=E2=80=99m not sure I understand the part about SEQUENCE =E2=80=94 I = don=E2=80=99t see any (ordered) sequences in the rest of your message. What I do see is claims that have different kinds; and that is of course = important. It is also sometimes important that we can have multiple = claims of the same kind, something that JWTs are not very good at yet = (we could fix that in CWT). Gr=C3=BC=C3=9Fe, Carsten From nobody Mon Oct 22 06:14:42 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC6E0130E21; Mon, 22 Oct 2018 06:14:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SAiIsNYWq9vj; Mon, 22 Oct 2018 06:14:35 -0700 (PDT) Received: from alexa-out-ams-01.qualcomm.com (alexa-out-ams-01.qualcomm.com [185.23.61.162]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 07DF7130E10; Mon, 22 Oct 2018 06:14:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1540214075; x=1571750075; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=5dEDDdP+sHByKqllyYPsr5D0SMzaOE8mSxF9cZAapO4=; b=oSi9xMgIw7L8ob6gwfQn7x1nOS2qM1W/fpGQAAPItlv3HcY08jB93kXE KE2aVSOdP0YIFQuKkc18hK6AkHv/ITRqIypXqgORfOPNOxtTbo0FOKhko hMQ/+JHBr62DL7vl8vwIAvmrKCtHR0L2f/4wMGKEAFNskoo3jo6vZ77YF 8=; X-IronPort-AV: E=Sophos;i="5.54,412,1534802400"; d="scan'208,217";a="1374602" Received: from ironmsg01-ams.qualcomm.com ([10.251.56.2]) by alexa-out-ams-01.qualcomm.com with ESMTP; 22 Oct 2018 15:14:32 +0200 X-IronPort-AV: E=McAfee;i="5900,7806,9053"; a="6060488" Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by ironmsg01-ams.qualcomm.com with ESMTP/TLS/AES256-SHA; 22 Oct 2018 15:14:32 +0200 Received: from euamsexm01a.eu.qualcomm.com (10.251.127.40) by euamsexm01a.eu.qualcomm.com (10.251.127.40) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Mon, 22 Oct 2018 15:14:30 +0200 Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by euamsexm01a.eu.qualcomm.com ([10.251.127.40]) with mapi id 15.00.1365.000; Mon, 22 Oct 2018 15:14:30 +0200 From: Jeremy O'Donoghue To: Henk Birkholz CC: "rats@ietf.org" , Laurence Lundblade , "eat@ietf.org" Thread-Topic: [EAT] Attestation BoF charter updates? Thread-Index: AQHUaDl7oJCVy1SmWEy2j20ofanQ0qUrIFoA Date: Mon, 22 Oct 2018 13:14:30 +0000 Message-ID: <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> In-Reply-To: <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.9.1) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.251.52.12] Content-Type: multipart/alternative; boundary="_000_570FEF0CFD3A4EBFB8E67B13D2FD8E22qtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Oct 2018 13:14:40 -0000 --_000_570FEF0CFD3A4EBFB8E67B13D2FD8E22qtiqualcommcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhpcyBpcyBhIHZlcnkgdXNlZnVsIGNvbnRyaWJ1dGlvbiwgTGF1cmVuY2UuDQoNClRoZSBjdXJy ZW50IGRyYWZ0IHRleHQgaXMgdG9vIHN0cm9uZ2x5IGJpYXNlZCB0b3dhcmRzIGF0dGVzdGF0aW9u IGJhc2VkIG9uIG1lYXN1cmVtZW50LCBhbmQgZG9lcyBub3QgYWRlcXVhdGVseSBjb3ZlciBvdGhl ciBtZWNoYW5pc21zIHdoaWNoIGFyZSBhbHJlYWR5IGJyb2FkbHkgZGVwbG95ZWQgaW4gcHJvcHJp ZXRhcnkgZm9ybSwgYW5kIHdoaWNoIHNob3VsZCBiZSBzdXBwb3J0ZWQgaW4gYW4gaW50ZXJvcGVy YWJsZSBzdGFuZGFyZHMgYmFzZWQgbWFubmVyLg0KDQpGcm9tIG15IHBlcnNwZWN0aXZlLCB0aGVy ZSBhcmUgYSBudW1iZXIgb2YgaXNzdWVzIHdoaWNoIGxlYWQgdG8gdGhlIG5lZWQgZm9yIGNoYXJ0 ZXIgdGV4dCB3aGljaCBpcyBtb3JlIGluY2x1c2l2ZSBvZiBkaWZmZXJlbnQgYXBwcm9hY2hlcyB0 byBhdHRlc3RhdGlvbjoNCg0KDQogICogICBUUE0gYW5kIHN5c3RlbXMgYmFzZWQgb24gbWVhc3Vy ZWQgZmlsZSBleGVjdXRpb24gcHJvY2VkdXJlcyBoYXZlIHZlcnkgbGltaXRlZCBwcmVzZW5jZSBp biB0aGUgbW9iaWxlIGVjb3N5c3RlbSwgYW5kIGFueSBhdHRlc3RhdGlvbiBzdGFuZGFyZCBvZiBp bnRlcmVzdCBuZWVkcyB0byBiZSB1c2VmdWwgaW4gdGhlIG1vYmlsZSBzcGFjZSBhbmQgaGlnaGx5 IGNvbnN0cmFpbmVkIChtaWNyb2NvbnRyb2xsZXItY2xhc3MgYW5kIHNtYWxsZXIpIElvVCBpZiB3 ZSBhcmUgdG8gYXZvaWQgZnJhZ21lbnRhdGlvbiBpbiBmdXR1cmUuIFRoZSBmbGV4aWJpbGl0eSBv ZiBFQVQgaXMgYSBncmVhdCBzdHJlbmd0aCBoZXJlLg0KICAqICAgSW4gZGV2aWNlcyB3aGVyZSB0 aGUgdGhyZWF0IG1vZGVsIG1heSBpbmNsdWRlIHRoZSBkZXZpY2Ugb3duZXIgLSBzdWNoIGFzIG1h bnkgbW9iaWxlIGFuZCBJb1QgZGV2aWNlcyAtIGF0dGVzdGF0aW9uIGJvdW5kIHRvIHRoZSBSRUUs IGFzIGlzIHR5cGljYWwgaW4gdGhlIFRQTSB1c2UtY2FzZSwgaGFzIHNvbWUgY2hhbGxlbmdlcy4g aHR0cHM6Ly93d3cuYmxhY2toYXQuY29tL2RvY3MvZXUtMTcvbWF0ZXJpYWxzL2V1LTE3LU11bGxp bmVyLUluc2lkZS1BbmRyb2lkcy1TYWZldHlOZXQtQXR0ZXN0YXRpb24ucGRmIHByb3ZpZGVzIGFu IGV4YW1wbGUgd2hpY2ggaXMgaW4gdGhlIHB1YmxpYyBkb21haW4uDQogICogICBTeXN0ZW1zIGJh c2VkIG9uIHJ1bi10aW1lIChhcyBvcHBvc2VkIHRvIGJvb3QgdGltZSkgaW50ZWdyaXR5IG1lYXN1 cmVtZW50IGFkZHJlc3MgdHJ1c3R3b3J0aGluZXNzIG92ZXIgdGltZSAtIHNlZSBodHRwczovL2Rs LmFjbS5vcmcvY2l0YXRpb24uY2ZtP2lkPTI2NjAzNTAuIFRoZXJlIGFyZSBjb21tZXJjaWFsIGV4 YW1wbGVzIG9mIHN1Y2ggc3lzdGVtcyBpbiBtYXNzIHByb2R1Y3Rpb24gb24gc2V2ZXJhbCBkaWZm ZXJlbnQgbW9iaWxlIFNvQ3MuIEluZm9ybWF0aW9uIGF2YWlsYWJsZSB0byB0aGUgcHVibGljIGlu Y2x1ZGVzIGh0dHBzOi8vc2VhcC5zYW1zdW5nLmNvbS9mYXEvd2hhdC1rbm94LXRpbWEta2V5c3Rv cmUuIEVyaWMgVm9pdCBoYXMgYWxyZWFkeSBzaGFyZWQgdGhhdCBzdWNoIHN5c3RlbXMgYXJlIGFs c28gZGVwbG95ZWQgaW4gdGhlIG5ldHdvcmsgaW5mcmFzdHJ1Y3R1cmUgc3BhY2UsIHNvIGl0IHNl ZW1zIHRvIG1lIHRoYXQgdGhlIGNoYXJ0ZXIgdGV4dCBzaG91bGQgY292ZXIgdGhpcyBjYXNlLg0K ICAqICAgQXMgbm90ZWQgaW4gcHJldmlvdXMgbWFpbCB0byB0aGUgbGlzdCwgdGhlcmUgaXMgb25n b2luZyB3b3JrIGluIEdsb2JhbFBsYXRmb3JtIHdoaWNoIHBsYW5zIHRvIG1ha2UgdXNlIG9mIHRo ZSBhcHByb2FjaCBkZXNjcmliZWQgaW4gdGhlIEVBVCBkcmFmdC4gSSBhbHNvIGhhdmUgZ29vZCBy ZWFzb24gdG8gYmVsaWV2ZSB0aGF0IG90aGVyIGluZHVzdHJ5IGJvZGllcyBhcmUgY29uc2lkZXJp bmcgdGhpcyBhcHByb2FjaCwgd2hpY2ggcHJvdmlkZXMgYSBncmVhdCBvcHBvcnR1bml0eSB0byBw cm9tb3RlIGludGVyb3BlcmFiaWxpdHkgdGhyb3VnaCB0aGUgb3V0cHV0IG9mIHRoZSBldmVudHVh bCBXRy4NCg0KQXMgaXQgc3RhbmRzLCB0aGUgdGV4dCBpcyB0b28gc3BlY2lmaWMgdG8gYSBwYXJ0 aWN1bGFyIGFwcHJvYWNoIGZvciBtZSB0byBiZSBhYmxlIHRvIHN1cHBvcnQgaXQuIFRoYXQgc2Fp ZCwgYW5kIHdpc2hpbmcgdG8gYmUgY29uc3RydWN0aXZlLCBJIGhhdmUgYXR0ZW1wdGVkIHRvIG1l cmdlIHRoZSBjdXJyZW50IGNoYXJ0ZXIgdGV4dCAoY29tbWl0IDI2N2IxNjYpIHdpdGggTGF1cmVu Y2UnIGNvbnRyaWJ1dGlvbiBiZWxvdy4gQmxhY2sgdGV4dCBpcyB0aGUgY3VycmVudCBkcmFmdDsg cmVkIHRleHQgaXMgbWluZSBhbmQgYmx1ZSB0ZXh0IGlzIGZyb20gTGF1cmVuY2UuDQoNCg0KUmVt b3RlIEFUdGVzdGF0aW9uIFByb2NlZHVyZVMgKFJBVFMpIGFyZSBpbmNsdWRlZCBpbiBuZXR3b3Jr IHByb3RvY29scyB0byBwcm92aWRlIHRoZSBiYXNpcyBmb3IgZXN0YWJsaXNoaW5nIGNsYWltcyBh Ym91dCBhIGRldmljZSBpbiBhIHRydXN0d29ydGh5IG1hbm5lciBleGNoYW5nZXMgd2l0aCBhIGRl dmljZSwgc3VjaCBjbGFpbXMgbWF5IGluY2x1ZGUsIGJ1dCBhcmUgbm90IGxpbWl0ZWQgdG8sIGRl dmljZSBpZGVudGl0eSwgbWFudWZhY3R1cmluZyBvcmlnaW4sIHN5c3RlbSBpbnRlZ3JpdHksIGNv bmZpZ3VyYXRpb24sIG9wZXJhdGlvbmFsIHN0YXRlIGFuZCBtZWFzdXJlbWVudHMgb2Ygc3RlcHMg d2hpY2ggbGVkIHRvIHRoZSBvcGVyYXRpb25hbCBzdGF0ZS4gUkFUUyBleHBvc2Ugc3VjaCBkZXZp Y2UgY2hhcmFjdGVyaXN0aWNzIGluIHRoZSBmb3JtIG9mIHRydXN0ZWQgY2xhaW0gc2V0cyB3aGlj aCBhbGxvdyByZW1vdGUgcGFydGllcyB0byBldmFsdWF0ZSAoYmFzZWQgb24gUHJvb2Ytb2YtUG9z c2Vzc2lvbikgdG8gZGV0YWlsZWQgQXR0ZXN0YXRpb24gRXZpZGVuY2UgKFByb29mLW9mLVByb3Rl Y3Rpb24pIHRoYXQgZW5hYmxlIGEgVmVyaWZ5aW5nIFBhcnRpZXMgdG8gcmV0cmFjZSBldmVyeSBz dGVwIHRoYXQgbGVkIHRvIGl0cyBjdXJyZW50IE9wZXJhdGlvbmFsIFN0YXRlLiBBIGNvbnNlcXVl bmNlIG9mIHRoaXMgcmV0cmFjaW5nIGlzIHRoYXQgaXQgaXMgcG9zc2libGUgdG8gYXBwcmFpc2Ug dGhlIHRydXN0d29ydGhpbmVzcyBvZiBhIGRldmljZS4gUkFUUyBwcm92aWRlIGV2aWRlbmNlIHRo YXQgYSBkZXZpY2Ugc3VwcG9ydHMgYSBjZXJ0YWluIHNldCBvZiBvcGVyYXRpb25zIGFuZCBmdW5j dGlvbnMgYW5kL29yIHRoYXQgaXQgaXMgYWN0dWFsbHkgdGhlIGV4YWN0IGRldmljZSBpdCBpcyBz dXBwb3NlZCB0byBiZSAoQXR0ZXN0YXRpb24gUHJvdmVuYW5jZSkgdmlhIGlkZW50aXR5IGRvY3Vt ZW50cyBvciBwYXNzZXMuIFJBVFMgZW5zdXJlIHRoYXQgdGhlIGluZm9ybWF0aW9uIGNvbnZleWVk IGlzIHVuaXF1ZSwgY29tcGxldGUsIGFuZCBmcmVzaCAoZXhwb3NpbmcgdGFtcGVyaW5nLCByZXBs YXksIGFuZC9vciByZWxheSBhdHRhY2tzKS4NCg0KUkFUUyBtYXkgaW5jbHVkZSBkZWZpbml0aW9u IG9mIHByb2NlZHVyZXMgYnkgd2hpY2ggYSByZW1vdGUgcGFydHkgZXZhbHVhdGVzIGNlcnRhaW4g Y2xhaW1zLiBGb3IgZXhhbXBsZSwgaG93IHNvbWUgbWVhc3VyZW1lbnQgb3Igb3RoZXIgY2xhaW1z IGFyZSBjb21wYXJlZCB0byBleHBlY3RlZCB2YWx1ZXMgdG8gZXZhbHVhdGUgdGhlIHRydXN0d29y dGhpbmVzcyBvZiB0aGUgZGV2aWNlLiBSQVRTIGZ1cnRoZXIgc3VwcG9ydHMgVmFyaW91cyBSb290 cyBvZiBUcnVzdCAoZS5nLiBmb3IgTWVhc3VyZW1lbnQsIGZvciBSZXBvcnRpbmcsIG9yIGZvciBW ZXJpZmljYXRpb24pIHByb3ZpZGUgdGhlIGZvdW5kYXRpb24gdG8gZW5hYmxlIEltcGxpY2l0IFJl bW90ZSBBdHRlc3RhdGlvbiAodGhlIGZhY3QgdGhhdCBhIHNlY3JldCBrZXkgaXMgYWNjZXNzaWJs ZSBpbXBsaWVzIGEgc3BlY2lmaWMgbWVhbmluZyBhbmQgc3BlY2lmaWMgZGVmaW5lZCBzZXQgb2Yg Y2hhcmFjdGVyaXN0aWNzIHdoaWNoIHRoZXJlZm9yZSBuZWVkIG5vdCBiZSBzdXBwbGllZCBleHBs aWNpdGx5KS4gYXNzZXJ0aW9ucyBhcmUgb3B0aW9uYWwpIGFuZCBFeHBsaWNpdCBSZW1vdGUgQXR0 ZXN0YXRpb24sIHdoaWNoIHVzZXMgdGhlICBvdXRwdXQgb2YgbWVhc3VyZWQgZmlsZSBleGVjdXRp b24gYXMgQXR0ZXN0YXRpb24gRXZpZGVuY2Ugd2hpY2ggY2FuIGJlIHVzZWQgKGFsb25nIHdpdGgg ZXZlbnQgbG9nIGRldGFpbHMpIHRvIHJhdGlmeSB0aGF0IHRoZSBkZXZpY2UgaXMgYWN0dWFsbHkg YSBUcnVzdGVkIFN5c3RlbS4NCg0KUkFUUyBtYXkgaW5jbHVkZSB0aGUgZGVmaW5pdGlvbiBvZiBu ZXcgcHJvdG9jb2xzIGFuZC9vciB0aGUgZGVmaW5pdGlvbiBvZiBzZWN1cmVkIGRhdGEgc3RydWN0 dXJlcyAoZS5nLiBzaWduZWQpIHRoYXQgYXJlIGNhcnJpZWQgaW4gZXhpc3RpbmcgcHJvdG9jb2xz Lg0KDQpSQVRTIGlzIGdlbmVyYWwgcHVycG9zZSBhbmQgYWltcyB0byBhZGRyZXNzIGEgYnJvYWQg cmFuZ2Ugb2YgdXNlLWNhc2VzIGluY2x1ZGluZyBvbmxpbmUgYmFua2luZywgcGF5bWVudCB0cmFu c2FjdGlvbnMsIGNyaXRpY2FsIGluZnJhc3RydWN0dXJlLCBuZXR3b3JrIHNlY3VyaXR5IGZ1bmN0 aW9ucywgY29uc3RyYWluZWQtbm9kZSBkZXZpY2VzLCBidXNpbmVzcyBhbmQgZ292ZXJubWVudCBl bnRlcnByaXNlcyBhbmQgb3IgdGhlIG1hbmFnZW1lbnQgb2YgZW5kLXVzZXIgZGV2aWNlcywgaW5j bHVkaW5nIHNjZW5hcmlvcyB3aGVyZSBkZXZpY2UgYW5kL29yIGVuZC11c2VyIHByaXZhY3kgYXJl IHJlcXVpcmVkLg0KDQpMaWtlIExhdXJlbmNlLCBJIHdvdWxkIHByZWZlciBhIG5ldyBuYW1lIHRv IHJlZmxlY3QgdGhlIGZhY3QgdGhhdCB3ZSBhcmUgbWVyZ2luZyBkaWZmZXJlbnQgY29udHJpYnV0 aW9ucywgYnV0IEkgaGF2ZSByZXRhaW5lZCBSQVRTIGluIHRoZSBhYm92ZSB0byBmb2N1cyBvbiB0 aGUgY2hhbmdlcyB0byB0aGUgdGV4dC4NCg0KQmVzdCByZWdhcmRzDQpKZXJlbXkNCg0KT24gMjAg T2N0IDIwMTgsIGF0IDA2OjU0LCBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0 LmNvbTxtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tPj4gd3JvdGU6DQoNCknigJlkIGxpa2Ug dG8gcHJvcG9zZSB0aGlzIGZvciB0aGUgSW50cm9kdWN0aW9uIGluIHRoZSBjaGFydGVyLiBJIHRy aWVkIHByZXR0eSBoYXJkIHRvIHdyaXRlIHdoYXQgSSB3YW50ZWQgdGhyb3VnaCBlZGl0cyB0byB0 aGUgZXhpc3RpbmcgaW50cm8sIGJ1dCByZWFsbHkgY291bGRu4oCZdCBtYWtlIGl0IHdvcmssIHNv IHRoaXMgaXMgbW9zdGx5IG5ldyB0ZXh0LiBTb21lIHBocmFzZXMgYXJlIHJlIHVzZWQuIEFwb2xv Z2llcyBmb3Igbm90IGZpbmRpbmcgYSBiZXR0ZXIgd2F5IHRvIGRvIHRoaXMuIEkgaGF2ZSB0cmll ZCB0byBwdXQgYWxsIHRoZSBpZGVhcyBhbmQgY29uY2VwdHMgaW4gSGVua+KAmXMgb3JpZ2luYWwg Y2hhcnRlciBpbnRybyBpbiBoZXJlLCB0aG91Z2ggSSBoYXZlIGdvbmUgZm9yIGEgbW9yZSBhYnN0 cmFjdCBjb25jZXB0dWFsIGxldmVsLiBBIGZldyBtb3JlIG5vdGVzIGJlbG93Lg0KDQoNClJBVFMg ZW5hYmxlcyByZW1vdGUgcGFydGllcyBjb21tdW5pY2F0aW5nIHdpdGggYSBkZXZpY2UgdG8gZXZh bHVhdGUgdGhlIHRydXN0d29ydGhpbmVzcywgZGV2aWNlIGlkZW50aXR5LCBvcmlnaW4gb2YgbWFu dWZhY3R1cmUsIHN5c3RlbSBpbnRlZ3JpdHksIGNvbmZpZ3VyYXRpb24sIG9wZXJhdGlvbmFsIHN0 YXRlIGFuZCBvdGhlciBjaGFyYWN0ZXJpc3RpY3Mgb2YgdGhhdCBkZXZpY2UuIENvbmNlcHR1YWxs eSwgdGhlIHJlbW90ZSBwYXJ0eSBlbmRzIHVwIGtub3dpbmcgYSBzZXQgb2YgY2xhaW1zIGFib3V0 IHRoZSBkZXZpY2UgYW5kIHVzaW5nIHRoZW0gdG8gbWFrZSB0aGUgZXZhbHVhdGlvbi4gVGhlIGNs YWltcyBtYXkgZXhwbGljaXRseSBiZSB0cmFuc21pdHRlZCBvciBpbXBsaWNpdGx5IGRlcml2ZWQg ZnJvbSBvdGhlciB0aGluZ3Mga25vd24gYWJvdXQgdGhlIGRldmljZS4gVmFyaW91cyBtZWFucyBh cmUgdXNlZCB0byBzZWN1cmUsIG9yIHByb3ZlIHRoZSBzZWN1cml0eSBvZiwgY2xhaW1zIGZvciB0 aGUgcmVtb3RlIHBhcnR5LiBTaWduaW5nIG9mIHRoZSBjbGFpbXMgaXMgdGhlIG1vc3QgaW1wb3J0 YW50IGJ1dCBtYXkgbm90IGJlIHRoZSBvbmx5IG1lYW5zIG9mIHNlY3VyaW5nIHRoZSBjbGFpbXMu IFRoZXNlIGNsYWltcyBjYW4gcHJvdmlkZSBldmlkZW5jZSB0aGF0IGEgZGV2aWNlIHN1cHBvcnRz IGEgY2VydGFpbiBzZXQgb2Ygb3BlcmF0aW9ucyBhbmQgZnVuY3Rpb25zIGFuZC9vciB0aGF0IGl0 IGlzIGFjdHVhbGx5IHRoZSBleGFjdCBkZXZpY2UgaXQgaXMgc3VwcG9zZWQgdG8gYmUuDQoNClJB VFMgaW5jbHVkZXMgdGhlIG1lYXN1cmVtZW50IG9mIFNXIHJ1bm5pbmcgb24gdGhlIGRldmljZSBh bmQgc2VjdXJlbHkgY29udmV5aW5nIHRob3NlIG1lYXN1cmVtZW50cyB0byB0aGUgcmVtb3RlIHBh cnR5LiAgVGhlc2UgbWVhc3VyZW1lbnRzIGVuYWJsZSB0amUgcmVtb3RlIHBhcnR5IHRvIGV2YWx1 YXRlIGRldmljZSB0cnVzdHdvcnRoaW5lc3MsIHRoYXQgaXQgb3BlcmF0ZXMgYXMgZXhwZWN0ZWQs IGRvZXMgd2hhdCBpcyByZXF1aXJlZCBhbmQgZG9lcyBub3QgZG8gb3RoZXIgdGhpbmdzLg0KDQpS QVRTIG1heSBpbmNsdWRlIGRlZmluaXRpb24gb2YgcHJvY2VkdXJlcyBieSB3aGljaCBhIHJlbW90 ZSBwYXJ0eSBldmFsdWF0ZXMgY2VydGFpbiBjbGFpbXMuIEZvciBleGFtcGxlLCBob3cgc29tZSBt ZWFzdXJlbWVudCBvciBvdGhlciBjbGFpbXMgYXJlIGNvbXBhcmVkIHRvIGV4cGVjdGVkIHZhbHVl cyB0byBldmFsdWF0ZSB0cnVzdHdvcnRoaW5lc3Mgb2YgdGhlIGRldmljZS4NCg0KUkFUUyBtYXkg aW5jbHVkZSB0aGUgZGVmaW5pdGlvbiBuZXcgcHJvdG9jb2xzIGFuZC9vciBkZWZpbml0aW9uIG9m IHNlY3VyZWQgZGF0YSBzdHJ1Y3R1cmVzIChlLmcuLCBzaWduZWQpIHRoYXQgYXJlIGNhcnJpZWQg aW4gZXhpc3RpbmcgcHJvdG9jb2xzLg0KDQpSQVRTIGlzIGdlbmVyYWwgcHVycG9zZSBhbmQgYWlt cyB0byBhZGRyZXNzIGEgYnJvYWQgcmFuZ2Ugb2YgdXNlcyBjYXNlcyBpbmNsdWRpbmcgb24tbGlu ZSBiYW5raW5nLCBwYXltZW50IHRyYW5zYWN0aW9ucywgY3JpdGljYWwgaW5mcmFzdHJ1Y3R1cmUs IG5ldHdvcmsgc2VjdXJpdHkgZnVuY3Rpb25zLCBjb25zdHJhaW5lZCBkZXZpY2VzLCBidXNpbmVz cyBhbmQgZ292ZXJubWVudCBlbnRlcnByaXNlcyBhbmQgbWFuYWdlbWVudCBvZiBlbmQtdXNlciBk ZXZpY2VzLg0KDQpOb3RlczoNCg0KDQogICogICBJIGhhdmUgYXZvaWRlZCB0aGUgdXNlIG9mIHRo ZSBmb3JtYWxseSBkZWZpbmVkIHRlcm1zIGluIHRoZSBpbnRyb2R1Y3Rpb24gc28gaXQgY2FuIHN0 YW5kIG1vcmUgb24gaXRzIG93biwgaXMgZWFzaWVyIHRvIHVuZGVyc3RhbmQgYW5kIGlzIGxlc3Mg cHJlc3VtcHRpb24gYWJvdXQgYXJjaGl0ZWN0dXJlcyBhbmQgZGVzaWducy4gU2VlbXMgbGlrZSBp dCBpcyB3b3JrIGZvciB0aGUgV0cgdG8gZGVmaW5lIHRoZSB0ZXJtcyBhbmQgY3JlYXRlIHRoZSBk ZXNpZ25zLg0KICAqICAgTXkgdXNlIG9mIHRoZSBsb3dlciBjYXNlIOKAnGRldmljZeKAnSwg4oCc Y2xhaW3igJ0gYW5kIOKAnHJlbW90ZSBwYXJ0eeKAnSBhcmUganVzdCBhcyBicm9hZCBjb25jZXB0 cyB0byBiZSBhYmxlIHRvIGdldCB0aGUgZ2VuZXJhbCBpZGVhIGFjcm9zcy4gVGhlIFdHIGRvY3Vt ZW50cyBzaG91bGQgdXNlIHRoZSBtb3JlIGZvcm1hbCBhbmQgc3BlY2lmaWMgZGVmaW5pdGlvbnMu DQogICogICBIb3BlIEnigJl2ZSBjb3ZlcmVkIGJvdGggRUFUIGFuZCBSQVRTIGNvbmNlcHRzIGhl cmUuIEl0IHdhcyBteSBnb2FsLg0KICAqICAgV2hpbGUgSSB1c2VkIHRoZSB0ZXJtIFJBVFMsIEkg c3RpbGwgd2FudCB0aGUgV0cgbmFtZSBjaGFuZ2UgdG8gQ1JFQVRFLg0KDQpMTA0KDQoNCk9uIE9j dCAxMSwgMjAxOCwgYXQgMTA6MTkgUE0sIEhlbmsgQmlya2hvbHogPGhlbmsuYmlya2hvbHpAc2l0 LmZyYXVuaG9mZXIuZGU8bWFpbHRvOmhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+PiB3 cm90ZToNCg0KSGkgYWxsLA0KDQpzb3JyeSBmb3IgdGhlIGRlbGF5LiBQbGVhc2UgZmluZCBhbiB1 cGRhdGVkIGNoYXJ0ZXIgcHJvcG9zYWwgaGVyZToNCg0KaHR0cHM6Ly9naXRodWIuY29tL2lldGYt cmF0cy9jaGFydGVyL2Jsb2IvUkMyL2lldGYtcmF0cy1jaGFydGVyLi5tZDxodHRwczovL2dpdGh1 Yi5jb20vaWV0Zi1yYXRzL2NoYXJ0ZXIvYmxvYi9SQzIvaWV0Zi1yYXRzLWNoYXJ0ZXIubWQ+DQoN ClRoZSBCb0YgcHJvcG9uZW50cyB0cmllZCB0byBtZXJnZSBhbGwgY29tbWVudHMgYW5kIHByb3Bv c2FscyBvbiBrZXlzdG9yZXMsIGV4aXN0aW5nIHNvbHV0aW9ucywgcHJvdmVuYW5jZSAmIGRldmlj ZSBjaGFyYWN0ZXJpc3RpY3MsIGV0YyB0aGF0IHdlcmUgcmFpc2VkIG9uIHRoZSBsaXN0IC0gYW5k IGFsaWduIHRoZW0gaW4gaG9tb2dlbmVvdXMgZmFzaGlvbi4NCg0KVGhpcyBkcmFmdCBpcyBpbnRl bmRlZCB0byBmb2N1cyB0aGUgZGlzY3Vzc2lvbiBhbmQgaW1wcm92ZSB0aGUgd29yZGluZy4NCg0K VmllbGUgR3LDvMOfZSwNCg0KSGVuaw0KDQpPbiAxMC8wNi8yMDE4IDA4OjIzIEFNLCBMYXVyZW5j ZSBMdW5kYmxhZGUgd3JvdGU6DQpIaSBIZW5rLA0KQmFuZ2tvayBJRVRGIGlzIGdldHRpbmcgY2xv c2UsIHdpbGwgeW91IGJlIGFibGUgdG8gdXBkYXRlIHRoZSBjaGFydGVyIGZvciB0aGUgYXR0ZXN0 YXRpb24gQm9GIHRvIHByb3Blcmx5IGluY2x1ZGUgRUFUPyAgSSBzZW50IHlvdSBzb21lIHRleHQg dGhhdCBqdXN0IG5lZWRzIHRvIGJlIHBhc3RlZCBhbG9uZyB3aXRoIHNvbWUgY29tbWVudHMuIEl0 IGRvZXNu4oCZdCBsb29rIGxpa2UgdGhlcmXigJlzIGJlZW4gYW55IHVwZGF0ZXMuDQpMTA0KDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KRUFUIG1haWxp bmcgbGlzdA0KRUFUQGlldGYub3JnPG1haWx0bzpFQVRAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KDQpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KRUFUIG1haWxpbmcgbGlzdA0KRUFUQGlldGYub3JnPG1h aWx0bzpFQVRAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2VhdA0KDQo= --_000_570FEF0CFD3A4EBFB8E67B13D2FD8E22qtiqualcommcom_ Content-Type: text/html; charset="utf-8" Content-ID: <343057F8FE128D4F8632A1D075EF2536@qualcomm.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+VGhpcyBpcyBhIHZlcnkg dXNlZnVsIGNvbnRyaWJ1dGlvbiwgTGF1cmVuY2UuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5UaGUgY3VycmVudCBkcmFmdCB0ZXh0IGlz IHRvbyBzdHJvbmdseSBiaWFzZWQgdG93YXJkcyBhdHRlc3RhdGlvbiBiYXNlZCBvbiBtZWFzdXJl bWVudCwgYW5kIGRvZXMgbm90IGFkZXF1YXRlbHkgY292ZXIgb3RoZXIgbWVjaGFuaXNtcyB3aGlj aCBhcmUgYWxyZWFkeSBicm9hZGx5IGRlcGxveWVkIGluIHByb3ByaWV0YXJ5IGZvcm0sIGFuZCB3 aGljaCBzaG91bGQgYmUgc3VwcG9ydGVkIGluIGFuIGludGVyb3BlcmFibGUgc3RhbmRhcmRzDQog YmFzZWQgbWFubmVyLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+RnJvbSBteSBwZXJzcGVjdGl2ZSwgdGhlcmUgYXJlIGEgbnVtYmVyIG9m IGlzc3VlcyB3aGljaCBsZWFkIHRvIHRoZSBuZWVkIGZvciBjaGFydGVyIHRleHQgd2hpY2ggaXMg bW9yZSBpbmNsdXNpdmUgb2YgZGlmZmVyZW50IGFwcHJvYWNoZXMgdG8gYXR0ZXN0YXRpb246PC9k aXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4N Cjx1bCBjbGFzcz0iTWFpbE91dGxpbmUiPg0KPGxpIGNsYXNzPSIiPlRQTSBhbmQgc3lzdGVtcyBi YXNlZCBvbiBtZWFzdXJlZCBmaWxlIGV4ZWN1dGlvbiBwcm9jZWR1cmVzIGhhdmUgdmVyeSBsaW1p dGVkIHByZXNlbmNlIGluIHRoZSBtb2JpbGUgZWNvc3lzdGVtLCBhbmQgYW55IGF0dGVzdGF0aW9u IHN0YW5kYXJkIG9mIGludGVyZXN0IG5lZWRzIHRvIGJlIHVzZWZ1bCBpbiB0aGUgbW9iaWxlIHNw YWNlIGFuZCBoaWdobHkgY29uc3RyYWluZWQgKG1pY3JvY29udHJvbGxlci1jbGFzcyBhbmQgc21h bGxlcikNCiBJb1QgaWYgd2UgYXJlIHRvIGF2b2lkIGZyYWdtZW50YXRpb24gaW4gZnV0dXJlLiBU aGUgZmxleGliaWxpdHkgb2YgRUFUIGlzIGEgZ3JlYXQgc3RyZW5ndGggaGVyZS48L2xpPjxsaSBj bGFzcz0iIj5JbiBkZXZpY2VzIHdoZXJlIHRoZSB0aHJlYXQgbW9kZWwgbWF5IGluY2x1ZGUgdGhl IGRldmljZSBvd25lciAtIHN1Y2ggYXMgbWFueSBtb2JpbGUgYW5kIElvVCBkZXZpY2VzIC0gYXR0 ZXN0YXRpb24gYm91bmQgdG8gdGhlIFJFRSwgYXMgaXMgdHlwaWNhbCBpbiB0aGUgVFBNIHVzZS1j YXNlLCBoYXMgc29tZSBjaGFsbGVuZ2VzLiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vd3d3LmJsYWNr aGF0LmNvbS9kb2NzL2V1LTE3L21hdGVyaWFscy9ldS0xNy1NdWxsaW5lci1JbnNpZGUtQW5kcm9p ZHMtU2FmZXR5TmV0LUF0dGVzdGF0aW9uLnBkZiIgY2xhc3M9IiI+aHR0cHM6Ly93d3cuYmxhY2to YXQuY29tL2RvY3MvZXUtMTcvbWF0ZXJpYWxzL2V1LTE3LU11bGxpbmVyLUluc2lkZS1BbmRyb2lk cy1TYWZldHlOZXQtQXR0ZXN0YXRpb24ucGRmPC9hPiZuYnNwO3Byb3ZpZGVzDQogYW4gZXhhbXBs ZSB3aGljaCBpcyBpbiB0aGUgcHVibGljIGRvbWFpbi48L2xpPjxsaSBjbGFzcz0iIj5TeXN0ZW1z IGJhc2VkIG9uIHJ1bi10aW1lIChhcyBvcHBvc2VkIHRvIGJvb3QgdGltZSkgaW50ZWdyaXR5IG1l YXN1cmVtZW50IGFkZHJlc3MgdHJ1c3R3b3J0aGluZXNzIG92ZXIgdGltZSAtIHNlZSZuYnNwOzxh IGhyZWY9Imh0dHBzOi8vZGwuYWNtLm9yZy9jaXRhdGlvbi5jZm0/aWQ9MjY2MDM1MCIgY2xhc3M9 IiI+aHR0cHM6Ly9kbC5hY20ub3JnL2NpdGF0aW9uLmNmbT9pZD0yNjYwMzUwPC9hPi4gVGhlcmUg YXJlIGNvbW1lcmNpYWwNCiBleGFtcGxlcyBvZiBzdWNoIHN5c3RlbXMgaW4gbWFzcyBwcm9kdWN0 aW9uIG9uIHNldmVyYWwgZGlmZmVyZW50IG1vYmlsZSBTb0NzLiBJbmZvcm1hdGlvbiBhdmFpbGFi bGUgdG8gdGhlIHB1YmxpYyBpbmNsdWRlcyZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vc2VhcC5zYW1z dW5nLmNvbS9mYXEvd2hhdC1rbm94LXRpbWEta2V5c3RvcmUiIGNsYXNzPSIiPmh0dHBzOi8vc2Vh cC5zYW1zdW5nLmNvbS9mYXEvd2hhdC1rbm94LXRpbWEta2V5c3RvcmU8L2E+LiBFcmljDQogVm9p dCBoYXMgYWxyZWFkeSBzaGFyZWQgdGhhdCBzdWNoIHN5c3RlbXMgYXJlIGFsc28gZGVwbG95ZWQg aW4gdGhlIG5ldHdvcmsgaW5mcmFzdHJ1Y3R1cmUgc3BhY2UsIHNvIGl0IHNlZW1zIHRvIG1lIHRo YXQgdGhlIGNoYXJ0ZXIgdGV4dCBzaG91bGQgY292ZXIgdGhpcyBjYXNlLjwvbGk+PGxpIGNsYXNz PSIiPkFzIG5vdGVkIGluIHByZXZpb3VzIG1haWwgdG8gdGhlIGxpc3QsIHRoZXJlIGlzIG9uZ29p bmcgd29yayBpbiBHbG9iYWxQbGF0Zm9ybSB3aGljaCBwbGFucyB0byBtYWtlIHVzZSBvZiB0aGUg YXBwcm9hY2ggZGVzY3JpYmVkIGluIHRoZSBFQVQgZHJhZnQuIEkgYWxzbyBoYXZlIGdvb2QgcmVh c29uIHRvIGJlbGlldmUgdGhhdCBvdGhlciBpbmR1c3RyeSBib2RpZXMgYXJlIGNvbnNpZGVyaW5n IHRoaXMgYXBwcm9hY2gsIHdoaWNoDQogcHJvdmlkZXMgYSBncmVhdCBvcHBvcnR1bml0eSB0byBw cm9tb3RlIGludGVyb3BlcmFiaWxpdHkgdGhyb3VnaCB0aGUgb3V0cHV0IG9mIHRoZSBldmVudHVh bCBXRy48L2xpPjwvdWw+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPkFzIGl0IHN0YW5kcywgdGhlIHRleHQgaXMgdG9vIHNwZWNpZmlj IHRvIGEgcGFydGljdWxhciBhcHByb2FjaCBmb3IgbWUgdG8gYmUgYWJsZSB0byBzdXBwb3J0IGl0 LiBUaGF0IHNhaWQsIGFuZCB3aXNoaW5nIHRvIGJlIGNvbnN0cnVjdGl2ZSwgSSBoYXZlIGF0dGVt cHRlZCB0byBtZXJnZSB0aGUgY3VycmVudCBjaGFydGVyIHRleHQgKGNvbW1pdCAyNjdiMTY2KSB3 aXRoIExhdXJlbmNlJyBjb250cmlidXRpb24gYmVsb3cuDQogQmxhY2sgdGV4dCBpcyB0aGUgY3Vy cmVudCBkcmFmdDsgcmVkIHRleHQgaXMgbWluZSBhbmQgYmx1ZSB0ZXh0IGlzIGZyb20gTGF1cmVu Y2UuJm5ic3A7PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbjogMCAwIDAgNDBw eDsgYm9yZGVyOiBub25lOyBwYWRkaW5nOiAwcHg7IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+ DQo8ZGl2IGNsYXNzPSIiPg0KPHAgc3R5bGU9Im1hcmdpbjogMHB4IDBweCAxMnB4OyBmb250LXN0 cmV0Y2g6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5 bGU9Ii13ZWJraXQtZm9udC1rZXJuaW5nOiBub25lOyIgY2xhc3M9IiI+PGZvbnQgZmFjZT0iVGlt ZXMiIGNsYXNzPSIiPlJlbW90ZSBBVHRlc3RhdGlvbiBQcm9jZWR1cmVTIChSQVRTKSBhcmUgaW5j bHVkZWQgaW4gbmV0d29yayBwcm90b2NvbHMgdG8gcHJvdmlkZSB0aGUgYmFzaXMgZm9yIGVzdGFi bGlzaGluZw0KPC9mb250Pjxmb250IGNvbG9yPSIjZmYyNjAwIiBzdHlsZT0iZm9udC1mYW1pbHk6 IFRpbWVzOyIgY2xhc3M9IiI+Y2xhaW1zIGFib3V0IGEgZGV2aWNlIGluIGEmbmJzcDs8L2ZvbnQ+ PGZvbnQgZmFjZT0iVGltZXMiIGNsYXNzPSIiPnRydXN0d29ydGh5DQo8L2ZvbnQ+PGZvbnQgY29s b3I9IiNmZjI2MDAiIHN0eWxlPSJmb250LWZhbWlseTogVGltZXM7IiBjbGFzcz0iIj5tYW5uZXI8 c3RyaWtlIGNsYXNzPSIiPg0KPC9zdHJpa2U+PC9mb250PjxzdHJpa2Ugc3R5bGU9ImZvbnQtZmFt aWx5OiBUaW1lczsiIGNsYXNzPSIiPmV4Y2hhbmdlcyB3aXRoIGEgZGV2aWNlPC9zdHJpa2U+PGZv bnQgY29sb3I9IiNmZjI2MDAiIHN0eWxlPSJmb250LWZhbWlseTogVGltZXM7IiBjbGFzcz0iIj4s IHN1Y2ggY2xhaW1zIG1heSBpbmNsdWRlLCBidXQgYXJlIG5vdCBsaW1pdGVkIHRvLA0KPC9mb250 Pjxmb250IHN0eWxlPSJmb250LWZhbWlseTogVGltZXM7IiBjb2xvcj0iIzA0MzNmZiIgY2xhc3M9 IiI+ZGV2aWNlIGlkZW50aXR5LCBtYW51ZmFjdHVyaW5nIG9yaWdpbiwgc3lzdGVtIGludGVncml0 eSwgY29uZmlndXJhdGlvbiwgb3BlcmF0aW9uYWwgc3RhdGU8L2ZvbnQ+PGZvbnQgY29sb3I9IiNm ZjI2MDAiIHN0eWxlPSJmb250LWZhbWlseTogVGltZXM7IiBjbGFzcz0iIj4gYW5kIG1lYXN1cmVt ZW50cyBvZiBzdGVwcyB3aGljaCBsZWQNCiB0byB0aGUgb3BlcmF0aW9uYWwgc3RhdGU8L2ZvbnQ+ PGZvbnQgZmFjZT0iVGltZXMiIGNsYXNzPSIiPi4gUkFUUyBleHBvc2UgPC9mb250Pg0KPGZvbnQg Y29sb3I9IiNmZjI2MDAiIHN0eWxlPSJmb250LWZhbWlseTogVGltZXM7IiBjbGFzcz0iIj5zdWNo PC9mb250Pjxmb250IGZhY2U9IlRpbWVzIiBjbGFzcz0iIj4gZGV2aWNlIGNoYXJhY3RlcmlzdGlj cyBpbiB0aGUgZm9ybSBvZiB0cnVzdGVkIGNsYWltIHNldHM8L2ZvbnQ+PGZvbnQgY29sb3I9IiNm ZjI2MDAiIGNsYXNzPSIiPjxmb250IGZhY2U9IlRpbWVzIiBjbGFzcz0iIj4mbmJzcDt3aGljaCBh bGxvdyByZW1vdGUgcGFydGllcyB0byBldmFsdWF0ZQ0KPC9mb250PjwvZm9udD48c3RyaWtlIHN0 eWxlPSJmb250LWZhbWlseTogVGltZXM7IiBjbGFzcz0iIj4oYmFzZWQgb24gUHJvb2Ytb2YtUG9z c2Vzc2lvbikgdG8gZGV0YWlsZWQgQXR0ZXN0YXRpb24gRXZpZGVuY2UgKFByb29mLW9mLVByb3Rl Y3Rpb24pIHRoYXQgZW5hYmxlIGEgVmVyaWZ5aW5nIFBhcnRpZXMgdG8gcmV0cmFjZSBldmVyeSBz dGVwIHRoYXQgbGVkIHRvIGl0cyBjdXJyZW50IE9wZXJhdGlvbmFsIFN0YXRlLiBBIGNvbnNlcXVl bmNlIG9mDQogdGhpcyByZXRyYWNpbmcgaXMgdGhhdCBpdCBpcyBwb3NzaWJsZSB0byBhcHByYWlz ZSA8L3N0cmlrZT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IFRpbWVzOyIgY2xhc3M9IiI+dGhl IHRydXN0d29ydGhpbmVzcyBvZiBhIGRldmljZTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6IFRpbWVzOyIgY2xhc3M9IiI+Lg0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTog VGltZXM7IiBjbGFzcz0iIj5SQVRTIHByb3ZpZGUgZXZpZGVuY2UgdGhhdDwvc3Bhbj48Zm9udCBm YWNlPSJUaW1lcyIgY2xhc3M9IiI+IGEgZGV2aWNlIHN1cHBvcnRzIGEgY2VydGFpbiBzZXQgb2Yg b3BlcmF0aW9ucyBhbmQgZnVuY3Rpb25zIGFuZC9vciB0aGF0IGl0IGlzIGFjdHVhbGx5IHRoZSBl eGFjdCBkZXZpY2UgaXQgaXMgc3VwcG9zZWQgdG8gYmU8L2ZvbnQ+PHN0cmlrZSBzdHlsZT0iZm9u dC1mYW1pbHk6IFRpbWVzOyIgY2xhc3M9IiI+DQogKEF0dGVzdGF0aW9uIFByb3ZlbmFuY2UpIHZp YSBpZGVudGl0eSBkb2N1bWVudHMgb3IgcGFzc2VzPC9zdHJpa2U+PGZvbnQgZmFjZT0iVGltZXMi IGNsYXNzPSIiPi4gUkFUUyBlbnN1cmUgdGhhdCB0aGUgaW5mb3JtYXRpb24gY29udmV5ZWQgaXMg dW5pcXVlLCBjb21wbGV0ZSwgYW5kIGZyZXNoIChleHBvc2luZyB0YW1wZXJpbmcsIHJlcGxheSwg YW5kL29yIHJlbGF5IGF0dGFja3MpLjwvZm9udD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8cCBzdHlsZT0ibWFyZ2luOiAwcHggMHB4IDEycHg7IGZvbnQtc3Ry ZXRjaDogbm9ybWFsOyBsaW5lLWhlaWdodDogbm9ybWFsOyBmb250LWZhbWlseTogVGltZXM7IiBj bGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDQsIDUxLCAyNTUpOyIgY2xhc3M9IiI+ UkFUUyBtYXkgaW5jbHVkZSBkZWZpbml0aW9uIG9mIHByb2NlZHVyZXMgYnkgd2hpY2ggYSByZW1v dGUgcGFydHkgZXZhbHVhdGVzIGNlcnRhaW4gY2xhaW1zLiBGb3IgZXhhbXBsZSwgaG93IHNvbWUg bWVhc3VyZW1lbnQgb3Igb3RoZXImbmJzcDtjbGFpbXMgYXJlIGNvbXBhcmVkIHRvIGV4cGVjdGVk IHZhbHVlcyB0byZuYnNwO2V2YWx1YXRlIHRoZSB0cnVzdHdvcnRoaW5lc3Mgb2YgdGhlDQogZGV2 aWNlLiZuYnNwOzwvc3Bhbj48Zm9udCBjb2xvcj0iI2ZmMjYwMCIgY2xhc3M9IiI+UkFUUyBmdXJ0 aGVyIHN1cHBvcnRzJm5ic3A7PC9mb250PjxzdHJpa2UgY2xhc3M9IiI+VmFyaW91cyBSb290cyBv ZiBUcnVzdCAoZS5nLiBmb3IgTWVhc3VyZW1lbnQsIGZvciBSZXBvcnRpbmcsIG9yIGZvciBWZXJp ZmljYXRpb24pIHByb3ZpZGUgdGhlIGZvdW5kYXRpb24gdG8gZW5hYmxlJm5ic3A7PC9zdHJpa2U+ PGZvbnQgZmFjZT0iVGltZXMiIGNsYXNzPSIiPkltcGxpY2l0IFJlbW90ZQ0KIEF0dGVzdGF0aW9u ICh0aGUgZmFjdCB0aGF0IGEgc2VjcmV0IGtleSBpcyBhY2Nlc3NpYmxlIGltcGxpZXMmbmJzcDs8 L2ZvbnQ+PGZvbnQgY29sb3I9IiNmZjI2MDAiIGNsYXNzPSIiPmE8L2ZvbnQ+Jm5ic3A7PHN0cmlr ZSBjbGFzcz0iIj5zcGVjaWZpYyBtZWFuaW5nIGFuZCBzcGVjaWZpYzwvc3RyaWtlPjxmb250IGNv bG9yPSIjZmYyNjAwIiBjbGFzcz0iIj48Zm9udCBmYWNlPSJUaW1lcyIgY2xhc3M9IiI+Jm5ic3A7 ZGVmaW5lZCBzZXQgb2YgY2hhcmFjdGVyaXN0aWNzIHdoaWNoDQogdGhlcmVmb3JlIG5lZWQgbm90 IGJlJm5ic3A7c3VwcGxpZWQmbmJzcDtleHBsaWNpdGx5KS48c3RyaWtlIGNsYXNzPSIiPiZuYnNw Ozwvc3RyaWtlPjwvZm9udD48L2ZvbnQ+PGZvbnQgZmFjZT0iVGltZXMiIGNsYXNzPSIiPjxzdHJp a2UgY2xhc3M9IiI+YXNzZXJ0aW9ucyBhcmUgb3B0aW9uYWwpIGFuZCBFeHBsaWNpdCBSZW1vdGUg QXR0ZXN0YXRpb24sIHdoaWNoIHVzZXMgdGhlICZuYnNwO291dHB1dCBvZiBtZWFzdXJlZCBmaWxl IGV4ZWN1dGlvbiBhcyBBdHRlc3RhdGlvbiBFdmlkZW5jZQ0KIHdoaWNoIGNhbiBiZSB1c2VkIChh bG9uZyB3aXRoIGV2ZW50IGxvZyBkZXRhaWxzKSB0byByYXRpZnkgdGhhdCB0aGUgZGV2aWNlIGlz IGFjdHVhbGx5IGEgVHJ1c3RlZCBTeXN0ZW08L3N0cmlrZT4uPC9mb250PjwvcD4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoNCwg NTEsIDI1NSk7IGZvbnQtZmFtaWx5OiBUaW1lczsiIGNsYXNzPSIiPlJBVFMgbWF5IGluY2x1ZGUg dGhlIGRlZmluaXRpb24gb2YgbmV3IHByb3RvY29scyBhbmQvb3IgdGhlIGRlZmluaXRpb24gb2Yg c2VjdXJlZCBkYXRhIHN0cnVjdHVyZXMgKGUuZy4gc2lnbmVkKSB0aGF0IGFyZSBjYXJyaWVkIGlu IGV4aXN0aW5nJm5ic3A7cHJvdG9jb2xzLiZuYnNwOzwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IlRpbWVzIiBjbGFzcz0i Ij48Zm9udCBjb2xvcj0iIzA0MzNmZiIgY2xhc3M9IiI+UkFUUyBpcyBnZW5lcmFsIHB1cnBvc2Ug YW5kIGFpbXMgdG8gYWRkcmVzcyBhIGJyb2FkIHJhbmdlIG9mIHVzZS1jYXNlcyBpbmNsdWRpbmcg b25saW5lIGJhbmtpbmcsIHBheW1lbnQgdHJhbnNhY3Rpb25zLA0KPC9mb250PmNyaXRpY2FsIGlu ZnJhc3RydWN0dXJlLCZuYnNwO25ldHdvcmsgc2VjdXJpdHkgZnVuY3Rpb25zLCBjb25zdHJhaW5l ZDxzdHJpa2UgY2xhc3M9IiI+LW5vZGU8L3N0cmlrZT4gZGV2aWNlcyw8Zm9udCBjb2xvcj0iIzA0 MzNmZiIgY2xhc3M9IiI+IGJ1c2luZXNzIGFuZCZuYnNwO2dvdmVybm1lbnQmbmJzcDtlbnRlcnBy aXNlcyBhbmQ8L2ZvbnQ+Jm5ic3A7PHN0cmlrZSBjbGFzcz0iIj5vciB0aGUNCjwvc3RyaWtlPm1h bmFnZW1lbnQgb2YgZW5kLXVzZXIgZGV2aWNlczxmb250IGNvbG9yPSIjZmYyNjAwIiBjbGFzcz0i Ij4sIGluY2x1ZGluZyBzY2VuYXJpb3Mgd2hlcmUgZGV2aWNlIGFuZC9vciBlbmQtdXNlciBwcml2 YWN5IGFyZSByZXF1aXJlZDwvZm9udD4uPC9mb250PjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0K PC9kaXY+DQo8ZGl2Pkxpa2UgTGF1cmVuY2UsIEkgd291bGQgcHJlZmVyIGEgbmV3IG5hbWUgdG8g cmVmbGVjdCB0aGUgZmFjdCB0aGF0IHdlIGFyZSBtZXJnaW5nIGRpZmZlcmVudCBjb250cmlidXRp b25zLCBidXQgSSBoYXZlIHJldGFpbmVkIFJBVFMgaW4gdGhlIGFib3ZlIHRvIGZvY3VzIG9uIHRo ZSBjaGFuZ2VzIHRvIHRoZSB0ZXh0LjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXY+QmVzdCByZWdhcmRzPC9kaXY+DQo8ZGl2PkplcmVteTwvZGl2Pg0KPGRpdj48YnIgY2xh c3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+ T24gMjAgT2N0IDIwMTgsIGF0IDA2OjU0LCBMYXVyZW5jZSBMdW5kYmxhZGUgJmx0OzxhIGhyZWY9 Im1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20iIGNsYXNzPSIiPmxnbEBpc2xhbmQtcmVzb3J0 LmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1u ZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJ3b3JkLXdyYXA6IGJyZWFrLXdv cmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0ZXItd2hpdGUtc3Bh Y2U7IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+SeKAmWQgbGlrZSB0byBwcm9wb3NlIHRoaXMg Zm9yIHRoZSBJbnRyb2R1Y3Rpb24gaW4gdGhlIGNoYXJ0ZXIuIEkgdHJpZWQgcHJldHR5IGhhcmQg dG8gd3JpdGUgd2hhdCBJIHdhbnRlZCB0aHJvdWdoIGVkaXRzIHRvIHRoZSBleGlzdGluZyBpbnRy bywgYnV0IHJlYWxseSBjb3VsZG7igJl0IG1ha2UgaXQgd29yaywgc28gdGhpcyBpcyBtb3N0bHkg bmV3IHRleHQuIFNvbWUgcGhyYXNlcyBhcmUgcmUgdXNlZC4gQXBvbG9naWVzIGZvcg0KIG5vdCBm aW5kaW5nIGEgYmV0dGVyIHdheSB0byBkbyB0aGlzLiBJIGhhdmUgdHJpZWQgdG8gcHV0IGFsbCB0 aGUgaWRlYXMgYW5kIGNvbmNlcHRzIGluIEhlbmvigJlzIG9yaWdpbmFsIGNoYXJ0ZXIgaW50cm8g aW4gaGVyZSwgdGhvdWdoIEkgaGF2ZSBnb25lIGZvciBhIG1vcmUgYWJzdHJhY3QgY29uY2VwdHVh bCBsZXZlbC4gQSBmZXcgbW9yZSBub3RlcyBiZWxvdy48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luOiAwIDAgMCA0MHB4 OyBib3JkZXI6IG5vbmU7IHBhZGRpbmc6IDBweDsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj4N CjxwIHN0eWxlPSJtYXJnaW4tdG9wOjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206 MTIuMHB0O21hcmdpbi1sZWZ0Og0KMGluO2JhY2tncm91bmQ6d2hpdGUiIGNsYXNzPSIiPg0KPHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmOw0KbXNvLWFzY2lpLXRoZW1lLWZvbnQ6bWlub3ItbGF0aW47bXNvLWhhbnNp LXRoZW1lLWZvbnQ6bWlub3ItbGF0aW47bXNvLWJpZGktdGhlbWUtZm9udDoNCm1pbm9yLWxhdGlu O2NvbG9yOiMyNDI5MkUiIGNsYXNzPSIiPlJBVFMgZW5hYmxlcyByZW1vdGUgcGFydGllcyBjb21t dW5pY2F0aW5nIHdpdGggYSBkZXZpY2UgdG8gZXZhbHVhdGUNCiB0aGUgdHJ1c3R3b3J0aGluZXNz LCBkZXZpY2UgaWRlbnRpdHksIG9yaWdpbiBvZiBtYW51ZmFjdHVyZSwgc3lzdGVtIGludGVncml0 eSwgY29uZmlndXJhdGlvbiwgb3BlcmF0aW9uYWwgc3RhdGUgYW5kIG90aGVyIGNoYXJhY3Rlcmlz dGljcyBvZiB0aGF0IGRldmljZS4gQ29uY2VwdHVhbGx5LCB0aGUgcmVtb3RlIHBhcnR5IGVuZHMg dXAga25vd2luZyBhIHNldCBvZiBjbGFpbXMgYWJvdXQgdGhlIGRldmljZSBhbmQgdXNpbmcgdGhl bSB0byBtYWtlDQogdGhlIGV2YWx1YXRpb24uIFRoZSBjbGFpbXMgbWF5IGV4cGxpY2l0bHkgYmUg dHJhbnNtaXR0ZWQgb3IgaW1wbGljaXRseSBkZXJpdmVkIGZyb20gb3RoZXIgdGhpbmdzIGtub3du IGFib3V0IHRoZSBkZXZpY2UuIFZhcmlvdXMgbWVhbnMgYXJlIHVzZWQgdG8gc2VjdXJlLCBvciBw cm92ZSB0aGUgc2VjdXJpdHkgb2YsIGNsYWltcyBmb3IgdGhlIHJlbW90ZSBwYXJ0eS4gU2lnbmlu ZyBvZiB0aGUgY2xhaW1zIGlzIHRoZSBtb3N0IGltcG9ydGFudCBidXQNCiBtYXkgbm90IGJlIHRo ZSBvbmx5IG1lYW5zIG9mIHNlY3VyaW5nIHRoZSBjbGFpbXMuIFRoZXNlIGNsYWltcyBjYW4gcHJv dmlkZSBldmlkZW5jZSB0aGF0IGEgZGV2aWNlIHN1cHBvcnRzIGEgY2VydGFpbiBzZXQgb2Ygb3Bl cmF0aW9ucyBhbmQgZnVuY3Rpb25zIGFuZC9vciB0aGF0IGl0IGlzIGFjdHVhbGx5IHRoZSBleGFj dCBkZXZpY2UgaXQgaXMgc3VwcG9zZWQgdG8gYmUuPC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4NCjxwIHN0eWxlPSJtYXJnaW4tdG9wOjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdp bi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0Og0KMGluO2JhY2tncm91bmQ6d2hpdGUiIGNsYXNz PSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmOw0KbXNvLWFzY2lpLXRoZW1lLWZvbnQ6bWlub3ItbGF0aW47 bXNvLWhhbnNpLXRoZW1lLWZvbnQ6bWlub3ItbGF0aW47bXNvLWJpZGktdGhlbWUtZm9udDoNCm1p bm9yLWxhdGluO2NvbG9yOiMyNDI5MkUiIGNsYXNzPSIiPlJBVFMgaW5jbHVkZXMgdGhlIG1lYXN1 cmVtZW50IG9mIFNXIHJ1bm5pbmcgb24gdGhlIGRldmljZSBhbmQgc2VjdXJlbHkNCiBjb252ZXlp bmcgdGhvc2UgbWVhc3VyZW1lbnRzIHRvIHRoZSByZW1vdGUgcGFydHkuICZuYnNwO1RoZXNlIG1l YXN1cmVtZW50cyBlbmFibGUgdGplIHJlbW90ZSBwYXJ0eSB0byBldmFsdWF0ZSBkZXZpY2UgdHJ1 c3R3b3J0aGluZXNzLCB0aGF0IGl0IG9wZXJhdGVzIGFzIGV4cGVjdGVkLCBkb2VzIHdoYXQgaXMg cmVxdWlyZWQgYW5kIGRvZXMgbm90IGRvIG90aGVyIHRoaW5ncy48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPg0KPHAgc3R5bGU9Im1hcmdpbi10b3A6MGluO21hcmdpbi1yaWdodDow aW47bWFyZ2luLWJvdHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6DQowaW47YmFja2dyb3VuZDp3aGl0 ZSIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7DQptc28tYXNjaWktdGhlbWUtZm9udDptaW5v ci1sYXRpbjttc28taGFuc2ktdGhlbWUtZm9udDptaW5vci1sYXRpbjttc28tYmlkaS10aGVtZS1m b250Og0KbWlub3ItbGF0aW47Y29sb3I6IzI0MjkyRSIgY2xhc3M9IiI+UkFUUyBtYXkgaW5jbHVk ZSBkZWZpbml0aW9uIG9mIHByb2NlZHVyZXMgYnkgd2hpY2ggYSByZW1vdGUgcGFydHkgZXZhbHVh dGVzDQogY2VydGFpbiBjbGFpbXMuIEZvciBleGFtcGxlLCBob3cgc29tZSBtZWFzdXJlbWVudCBv ciBvdGhlciBjbGFpbXMgYXJlIGNvbXBhcmVkIHRvIGV4cGVjdGVkIHZhbHVlcyB0byBldmFsdWF0 ZSB0cnVzdHdvcnRoaW5lc3Mgb2YgdGhlIGRldmljZS48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPg0KPHAgc3R5bGU9Im1hcmdpbi10b3A6MGluO21hcmdpbi1yaWdodDowaW47bWFy Z2luLWJvdHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6DQowaW47YmFja2dyb3VuZDp3aGl0ZSIgY2xh c3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7DQptc28tYXNjaWktdGhlbWUtZm9udDptaW5vci1sYXRp bjttc28taGFuc2ktdGhlbWUtZm9udDptaW5vci1sYXRpbjttc28tYmlkaS10aGVtZS1mb250Og0K bWlub3ItbGF0aW47Y29sb3I6IzI0MjkyRSIgY2xhc3M9IiI+UkFUUyBtYXkgaW5jbHVkZSB0aGUg ZGVmaW5pdGlvbiBuZXcgcHJvdG9jb2xzIGFuZC9vciBkZWZpbml0aW9uIG9mIHNlY3VyZWQNCiBk YXRhIHN0cnVjdHVyZXMgKGUuZy4sIHNpZ25lZCkgdGhhdCBhcmUgY2FycmllZCBpbiBleGlzdGlu ZyBwcm90b2NvbHMuPC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxwIHN0eWxl PSJtYXJnaW4tdG9wOjBpbjttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MTIuMHB0O21h cmdpbi1sZWZ0Og0KMGluO2JhY2tncm91bmQ6d2hpdGUiIGNsYXNzPSIiPg0KPGZvbnQgY29sb3I9 IiMwMDAwMDAiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFt aWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+UkFUUyBpcyBnZW5lcmFsIHB1cnBv c2UgYW5kIGFpbXMgdG8gYWRkcmVzcyBhIGJyb2FkIHJhbmdlIG9mIHVzZXMgY2FzZXMgaW5jbHVk aW5nIG9uLWxpbmUgYmFua2luZywgcGF5bWVudCB0cmFuc2FjdGlvbnMsPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIg Y2xhc3M9IiI+DQogY3JpdGljYWwgaW5mcmFzdHJ1Y3R1cmUsIDwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNz PSIiPm5ldHdvcmsgc2VjdXJpdHkgZnVuY3Rpb25zPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6IDEwcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+LCBj b25zdHJhaW5lZCBkPC9zcGFuPjwvZm9udD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7DQptc28tYXNjaWktdGhl bWUtZm9udDptaW5vci1sYXRpbjttc28taGFuc2ktdGhlbWUtZm9udDptaW5vci1sYXRpbjttc28t YmlkaS10aGVtZS1mb250Og0KbWlub3ItbGF0aW47Y29sb3I6IzI0MjkyRSIgY2xhc3M9IiI+ZXZp Y2VzLA0KIGJ1c2luZXNzIGFuZCBnb3Zlcm5tZW50IGVudGVycHJpc2VzIGFuZCBtYW5hZ2VtZW50 IG9mIGVuZC11c2VyIGRldmljZXMuPC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0K Tm90ZXM6DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IiBjbGFz cz0iIj48YnIgY2xhc3M9IiI+DQo8L3NwYW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPHVsIGNs YXNzPSJNYWlsT3V0bGluZSI+DQo8bGkgY2xhc3M9IiI+PGZvbnQgc2l6ZT0iMiIgY2xhc3M9IiI+ SSBoYXZlIGF2b2lkZWQgdGhlIHVzZSBvZiB0aGUgZm9ybWFsbHkgZGVmaW5lZCB0ZXJtcyBpbiB0 aGUgaW50cm9kdWN0aW9uIHNvIGl0IGNhbiBzdGFuZCBtb3JlIG9uIGl0cyBvd24sIGlzIGVhc2ll ciB0byB1bmRlcnN0YW5kIGFuZCBpcyBsZXNzIHByZXN1bXB0aW9uIGFib3V0IGFyY2hpdGVjdHVy ZXMgYW5kIGRlc2lnbnMuIFNlZW1zIGxpa2UgaXQgaXMgd29yayBmb3IgdGhlIFdHDQogdG8gZGVm aW5lIHRoZSB0ZXJtcyBhbmQgY3JlYXRlIHRoZSBkZXNpZ25zLjwvZm9udD48L2xpPjxsaSBjbGFz cz0iIj5NeSB1c2Ugb2YgdGhlIGxvd2VyIGNhc2Ug4oCcZGV2aWNl4oCdLCDigJxjbGFpbeKAnSBh bmQg4oCccmVtb3RlIHBhcnR54oCdIGFyZSBqdXN0IGFzIGJyb2FkIGNvbmNlcHRzIHRvIGJlIGFi bGUgdG8gZ2V0IHRoZSBnZW5lcmFsIGlkZWEgYWNyb3NzLiBUaGUgV0cgZG9jdW1lbnRzIHNob3Vs ZCB1c2UgdGhlIG1vcmUgZm9ybWFsIGFuZCBzcGVjaWZpYyBkZWZpbml0aW9ucy48L2xpPjxsaSBj bGFzcz0iIj5Ib3BlIEnigJl2ZSBjb3ZlcmVkIGJvdGggRUFUIGFuZCBSQVRTIGNvbmNlcHRzIGhl cmUuIEl0IHdhcyBteSBnb2FsLiZuYnNwOzwvbGk+PGxpIGNsYXNzPSIiPjxmb250IHNpemU9IjIi IGNsYXNzPSIiPldoaWxlIEkgdXNlZCB0aGUgdGVybSBSQVRTLCBJIHN0aWxsIHdhbnQgdGhlIFdH IG5hbWUgY2hhbmdlIHRvIENSRUFURS48L2ZvbnQ+PC9saT48L3VsPg0KPGRpdiBjbGFzcz0iIj48 YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCkxMPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIg Y2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIE9jdCAxMSwgMjAxOCwgYXQgMTA6MTkgUE0sIEhl bmsgQmlya2hvbHogJmx0OzxhIGhyZWY9Im1haWx0bzpoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhv ZmVyLmRlIiBjbGFzcz0iIj5oZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPC9hPiZndDsg d3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+SGkgYWxsLDxiciBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NCnNvcnJ5IGZvciB0aGUgZGVsYXkuIFBsZWFzZSBmaW5kIGFuIHVwZGF0ZWQgY2hhcnRl ciBwcm9wb3NhbCBoZXJlOjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3Rl IHR5cGU9ImNpdGUiIGNsYXNzPSIiPjxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJh dHMvY2hhcnRlci9ibG9iL1JDMi9pZXRmLXJhdHMtY2hhcnRlci5tZCIgY2xhc3M9IiI+aHR0cHM6 Ly9naXRodWIuY29tL2lldGYtcmF0cy9jaGFydGVyL2Jsb2IvUkMyL2lldGYtcmF0cy1jaGFydGVy Li5tZDwvYT48YnIgY2xhc3M9IiI+DQo8L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiI+DQpUaGUg Qm9GIHByb3BvbmVudHMgdHJpZWQgdG8gbWVyZ2UgYWxsIGNvbW1lbnRzIGFuZCBwcm9wb3NhbHMg b24ga2V5c3RvcmVzLCBleGlzdGluZyBzb2x1dGlvbnMsIHByb3ZlbmFuY2UgJmFtcDsgZGV2aWNl IGNoYXJhY3RlcmlzdGljcywgZXRjIHRoYXQgd2VyZSByYWlzZWQgb24gdGhlIGxpc3QgLSBhbmQg YWxpZ24gdGhlbSBpbiBob21vZ2VuZW91cyBmYXNoaW9uLjxiciBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NClRoaXMgZHJhZnQgaXMgaW50ZW5kZWQgdG8gZm9jdXMgdGhlIGRpc2N1c3Npb24gYW5k IGltcHJvdmUgdGhlIHdvcmRpbmcuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KVmllbGUg R3LDvMOfZSw8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpIZW5rPGJyIGNsYXNzPSIiPg0K PGJyIGNsYXNzPSIiPg0KT24gMTAvMDYvMjAxOCAwODoyMyBBTSwgTGF1cmVuY2UgTHVuZGJsYWRl IHdyb3RlOjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPkhp IEhlbmssPGJyIGNsYXNzPSIiPg0KQmFuZ2tvayBJRVRGIGlzIGdldHRpbmcgY2xvc2UsIHdpbGwg eW91IGJlIGFibGUgdG8gdXBkYXRlIHRoZSBjaGFydGVyIGZvciB0aGUgYXR0ZXN0YXRpb24gQm9G IHRvIHByb3Blcmx5IGluY2x1ZGUgRUFUPyAmbmJzcDtJIHNlbnQgeW91IHNvbWUgdGV4dCB0aGF0 IGp1c3QgbmVlZHMgdG8gYmUgcGFzdGVkIGFsb25nIHdpdGggc29tZSBjb21tZW50cy4gSXQgZG9l c27igJl0IGxvb2sgbGlrZSB0aGVyZeKAmXMgYmVlbiBhbnkgdXBkYXRlcy48YnIgY2xhc3M9IiI+ DQpMTDxiciBjbGFzcz0iIj4NCjwvYmxvY2txdW90ZT4NCjxiciBjbGFzcz0iIj4NCl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyIGNsYXNzPSIiPg0KRUFU IG1haWxpbmcgbGlzdDxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpFQVRAaWV0Zi5vcmci IGNsYXNzPSIiPkVBVEBpZXRmLm9yZzwvYT48YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdCIgY2xhc3M9IiI+aHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQ8L2E+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8L2Rp dj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyIGNs YXNzPSIiPg0KRUFUIG1haWxpbmcgbGlzdDxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpF QVRAaWV0Zi5vcmciIGNsYXNzPSIiPkVBVEBpZXRmLm9yZzwvYT48YnIgY2xhc3M9IiI+DQpodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdDxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9ib2R5Pg0KPC9odG1sPg0K --_000_570FEF0CFD3A4EBFB8E67B13D2FD8E22qtiqualcommcom_-- From nobody Mon Oct 22 06:22:05 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF9F612D7F8; Mon, 22 Oct 2018 05:58:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cVrQPH2WsWKq; Mon, 22 Oct 2018 05:58:11 -0700 (PDT) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-db5eur03on0618.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe0a::618]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5B1B2128D0C; Mon, 22 Oct 2018 05:58:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=3tm8vSHCI+fw2849YMY24v46MAlBYnEAYtRj0Eq4IPk=; b=kzNALQpL/QbsG00/Hvrxj5k/V/DWk5q34B/5/4MNreVBgIjJcfhirmUYPbLvrCLmaB+35CILjs7K7VUM713mNKuWxqXdJjG2jwNtWvhU3o87PMBjE9pe/jHOOVUoxyDGoaWClKHuxLb5RSihYqkNUC7UV0uDOEYHsg/E//LeUx4= Received: from AM0PR08MB3265.eurprd08.prod.outlook.com (52.134.94.22) by AM0PR08MB3266.eurprd08.prod.outlook.com (52.134.94.23) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1250.29; Mon, 22 Oct 2018 12:58:07 +0000 Received: from AM0PR08MB3265.eurprd08.prod.outlook.com ([fe80::a883:b5bd:c8a9:f8f5]) by AM0PR08MB3265.eurprd08.prod.outlook.com ([fe80::a883:b5bd:c8a9:f8f5%4]) with mapi id 15.20.1250.028; Mon, 22 Oct 2018 12:58:07 +0000 From: Marcus Streets To: Carsten Bormann , Denis CC: Hannes Tschofenig , "Smith, Ned" , Henk Birkholz , "eat@ietf.org" , "rats@ietf.org" , Laurence Lundblade , Guy Fedorkow , Jeremy O'Donoghue Thread-Topic: [EAT] Device Identity (was Re: [EXTERNAL] Re: [Rats] Attestation BoF charter updates?) Thread-Index: AQHUaDz1tiAlZ8A1+USOAe2egdM0g6Un48yAgAMoL4CAAB0lAIAAA7QQ Date: Mon, 22 Oct 2018 12:58:07 +0000 Message-ID: References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <73EF502E-B68C-4106-8311-4897B4F2DF8C@qti.qualcomm.com> <615BB1D3-29E3-468B-B988-84852F47742C@intel.com> <71A01CDA-380F-4A57-B601-02F9A2699471@intel.com> <6f28e6a4-1930-84b2-1399-8aed75e3a6b4@sit.fraunhofer.de> <04976C31-F18C-4F99-847D-110641DCDE80@island-resort.com> <9c73f9b7-9129-c273-254e-465f92ab3650@sit.fraunhofer.de> <09818298-9FE1-430A-8045-A9A7E76ED64C@island-resort.com> <92abc587-6657-dcad-1222-611d5e8b78af@free.fr> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Marcus.Streets@arm.com; x-originating-ip: [217.140.106.51] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM0PR08MB3266; 6:gkOV70OONr/98nFYih7qgNNAM3cbfhYWil3vsrW7AeDa2SdIuuoIRCVaZh78oCoZ5uDlRD9+/mIlgoXBRWkmYTRq68Kl+a/4c9/iCyKrN+AQPh3KiqfHe+Fq66eqOcCmrEJPdTE5td4p+QGl0xGmAI5uyDxSyMkyM2zyypiky2v2UN3iyJeHk3IPj179cawlBZRh7xIsZvNnCepxujo312VlHMLnblrl6P96NJwNpf9v1dKoOKqsmCUKHiYTwUKZdR9XxjbvYZfuuz4TEfTStzI7ST9GBvUwSiQc+QlWKms6H7XKbNQly8wZs3xa9phaL49cV0PsoxYpMWp2lyB0EiHFZMJeCUqg8APM97fiQyntFkAIlnQT5N3WERs3Z1yMMW2jxiPNq90jaEArS40HzZHgxHQrtuvEbKhhZ5+hM0GhnpQmJnYevleWjZZ1/QzLgu52LeqPCMDZ03jVDPS78A==; 5:Rt42nbUVNEDUUJy0+9/Ax782NuBJyYgcyrtQqtMi3YPqfD8VeyeY8SgBE41Rf25Cs7hpV9C8Z+vMGaO/cAZRSg1OAb+qfQXyWwqWjuIOibZ0yKEo4tk7PY17a0SNBV4MExYeNfMtvvTLz5k09UVPpfqfeggKYv3cpe4voeSQlc0=; 7:T7IC4wCY7i/rXPGEZenYqK9Z+VlwaaSfef/WBG3WoKb7rycF+PaVclwluuEOJlM932j4BDOSbY2gdWbYJP7FGyTfEOY1lDzqqXBeDep/v6EmXJRKOszI1ZGjxg4Fg6CXGKYLUfK/285rEIbH9AN1vUrdzG8XySIC0pYuDz0nZRPDHPW8q64fyQT0v/p1ptQKJxmUTV2vFB7i9DHUyRzsaZl278N3unTlId++c5kaMfg0omA7jqPHw0c0Zrna275E x-ms-exchange-antispam-srfa-diagnostics: SOS;SOR; x-ms-office365-filtering-correlation-id: f90e0b23-13cc-46f0-5b6f-08d6381e031d x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:AM0PR08MB3266; x-ms-traffictypediagnostic: AM0PR08MB3266: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(105169848403564)(788757137089)(191636701735510)(180628864354917)(228905959029699)(138986009662008); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3231355)(944501410)(52105095)(3002001)(6055026)(148016)(149066)(150057)(6041310)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(201708071742011)(7699051)(76991095); SRVR:AM0PR08MB3266; BCL:0; PCL:0; RULEID:; SRVR:AM0PR08MB3266; x-forefront-prvs: 08331F819E x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(376002)(396003)(136003)(366004)(346002)(13464003)(199004)(189003)(40224003)(40434004)(476003)(102836004)(4326008)(25786009)(7736002)(74316002)(305945005)(71200400001)(71190400001)(76176011)(99286004)(5660300001)(7696005)(110136005)(316002)(54906003)(105586002)(8676002)(106356001)(81156014)(478600001)(229853002)(8936002)(68736007)(966005)(72206003)(81166006)(33656002)(11346002)(14444005)(18074004)(6246003)(256004)(86362001)(6306002)(9686003)(446003)(5024004)(6506007)(5250100002)(53546011)(14454004)(93886005)(10750500005)(2900100001)(2906002)(15650500001)(53936002)(66066001)(26005)(186003)(55016002)(575854001)(97736004)(6116002)(486006)(3846002)(6436002)(15866825006); DIR:OUT; SFP:1101; SCL:1; SRVR:AM0PR08MB3266; H:AM0PR08MB3265.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: yEbYjFC6z8Fu07M7y8rOfJyQ3e43QGy+p8xJILAIIaegMs4Q+VuFASXFu2I+V8fwata9NWm8tldmmLyavG/NAp8LBFx/jYz30IT3hHuQmCXfD+Ds4xg0JhFHR7n6BPOcolsRF3S0TLPEAFs3sm6DzqRnBjJ0l5AIboul0QmqLbG4MMpZscdt/lUpbULQlMNGI5lCF7OmXLhXZNRucR4DZrjvKJKWGBmASrFb4EF6x2mWwx74Fx0claJOKgUJ/xsRubD9K+ylTbbFTSBNxl8dlLSBZ9piFUXV32jhI+Rpl2l3DpVoTCXwqMoTnFSbDwATKZwIVqVs/ml/J8k9tT604qh1vhZdedcAZBiTOyCTjvU= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: f90e0b23-13cc-46f0-5b6f-08d6381e031d X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Oct 2018 12:58:07.0682 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB3266 Archived-At: X-Mailman-Approved-At: Mon, 22 Oct 2018 06:22:04 -0700 Subject: Re: [Rats] [EAT] Device Identity (was Re: [EXTERNAL] Re: Attestation BoF charter updates?) X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Oct 2018 12:58:14 -0000 VXAgdG8gYSBwb2ludCBMb3JkIENvcHBlci4NCg0KQXMgd2VsbCBhcyBwcm92aW5nIHlvdSBhcmUg b3ZlciAxOCwgeW91IGFsc28gbmVlZCB0byBwcm92ZSB5b3UgaGF2ZSBzdWZmaWNpZW50IGZ1bmRz IHRvIHBheSBmb3IgdGhlIGNpZ2FyZXR0ZXMuDQpBbnMgaWYgeW91IHVzZSB5b3VyIGJhbmsgY2Fy ZCB0byBwYXkgZGlyZWN0IGZyb20geW91ciBhY2NvdW50IHRoZW4geW91IGhhdmUgbGVmdCB0cmFj ZWFibGUgaWRlbnRpdHkuDQoNCkV2ZW4gaWYgeW91IHBheSBpbiBjYXNoLCBoYXZpbmcgdGhlIGJh bmsgcHJvdmlkZSB0aGF0IGNsYWltIGNvdWxkIGxlYWsgaWRlbnRpdHkuDQpQZXJoYXBzIG5vdCBt ZWFuaW5nZnVsbHkgaWYgeW91IGJhbmsgd2l0aCBEdWV0c2NoZSBCYW5rIC0gYnV0IHdoYXQgaWYg eW91IGJhbmsgd2l0aCBCZXJlbmJlcmcuDQoNCkJ1dCB0aGUgY29uY2VwdCB0aGF0IGEgYnJva2Vy IG1pZ2h0IHByb3ZpZGUgZXBoZW1lcmFsIGlkZW50aXRpZXMgYW5kIHZlcmlmeSB0aGVpciB0cnVz dHdvcnRoaW5lc3MgdG8gbWFrZSBjZXJ0YWluIGNsYWltcyBpcyB1c2VmdWwuDQpCdXQgYm90aCB0 aGUgZW50aXR5IHdhbnRpbmcgdGhlIGVwaGVtZXJhbCBpZGVudGl0eSBhbmQgdGhlIHZlcmlmaWVy IG5lZWQgdG8gdHJ1c3QgdGhlIGJyb2tlci4NClRoZSBlbnRpdHkgdG8gYmUgdmVyaWZpZWQgbmVl ZHMgdG8gZXN0YWJsaXNoIGEgc2VjcmV0IGNoYW5uZWwgdG8gdGhlIGJyb2tlciBhbmQgcHJvdmlk ZSB0aGVuIHN1ZmZpY2llbnQgaW5mb3JtYXRpb24gdG8gcHJvdmUNCg0KDQotLS0tLU9yaWdpbmFs IE1lc3NhZ2UtLS0tLQ0KRnJvbTogRUFUIDxlYXQtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxm IE9mIENhcnN0ZW4gQm9ybWFubg0KU2VudDogTW9uZGF5LCBPY3RvYmVyIDIyLCAyMDE4IDEyOjQ2 IFBNDQpUbzogRGVuaXMgPGRlbmlzLmlldGZAZnJlZS5mcj4NCkNjOiBIYW5uZXMgVHNjaG9mZW5p ZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbT47IFNtaXRoLCBOZWQgPG5lZC5zbWl0aEBpbnRl bC5jb20+OyBIZW5rIEJpcmtob2x6IDxoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPjsg ZWF0QGlldGYub3JnOyByYXRzQGlldGYub3JnOyBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xh bmQtcmVzb3J0LmNvbT47IEd1eSBGZWRvcmtvdyA8Z2ZlZG9ya293QGp1bmlwZXIubmV0PjsgSmVy ZW15IE8nRG9ub2dodWUgPGpvZG9ub2doQHF0aS5xdWFsY29tbS5jb20+DQpTdWJqZWN0OiBSZTog W0VBVF0gRGV2aWNlIElkZW50aXR5ICh3YXMgUmU6IFtFWFRFUk5BTF0gUmU6IFtSYXRzXSBBdHRl c3RhdGlvbiBCb0YgY2hhcnRlciB1cGRhdGVzPykNCg0KT24gT2N0IDIyLCAyMDE4LCBhdCAxMjow MSwgRGVuaXMgPGRlbmlzLmlldGZAZnJlZS5mcj4gd3JvdGU6DQo+DQo+IFRoZSB3b3JkaW5nICJp ZGVudGl0eSBkb2N1bWVudCIgc2hvdWxkIG5vdCBiZSB1c2VkIGluIHRoZSBjaGFydGVyLA0KPiBz aW5jZSB0aGUgbW9zdCBpbXBvcnRhbnQgY2hhcmFjdGVyaXN0aWMgd2hlbiB1c2luZyBhdHRlc3Rh dGlvbnMgaXMgdG8NCj4gYmUgYWJsZSB0byBrbm93IHRoZSBjaGFyYWN0ZXJpc3RpY3Mgb2YgYSBk ZXZpY2UsIGkuZS4gdGhhdCBpdCBvcGVyYXRlcw0KPiBhcyBleHBlY3RlZCwgZG9lcyB3aGF0IGlz IHJlcXVpcmVkIGFuZCBkb2VzIG5vdCBkbyBvdGhlciAoYmFkKSB0aGluZ3MuIEtub3dpbmcgdGhl IGlkZW50aXR5IG9mIGEgZGV2aWNlIChlLmcuIHRoZSBuYW1lIG9mIGl0cyBtYW51ZmFjdHVyZXIg YW5kIGEgdW5pcXVlIHNlcmlhbCBudW1iZXIgZ2l2ZW4gYnkgdGhhdCBtYW51ZmFjdHVyZXIpIG1h eSBjZXJ0YWlubHkgYmUgdXNlZnVsIGluIHNvbWUgY2FzZXMsIGJ1dCBpdCBpcyBub3QgYWx3YXlz IG5lY2Vzc2FyeSwgbm9yIGRlc2lyYWJsZSAoZS5nLiBiZWNhdXNlIG9mIHByaXZhY3kgaXNzdWVz KS4NCg0KSGVuayBmb3JlY2FzdGVkIHRoYXQgSSB3b3VsZCBzYXkg4oCcdGhlIHVzdWFsIGlkZW50 aXR5IGNvbmZ1c2lvbuKAnSBlYXJsaWVy4oCmDQoNClRoaXMgaXMgaW5kZWVkIHRoZSB1c3VhbCBp ZGVudGl0eSBjb25mdXNpb24uDQoNClJGQyA0OTQ5IHNheXM6DQoNCiAgICQgaWRlbnRpdHkNCiAg ICAgIChJKSBUaGUgY29sbGVjdGl2ZSBhc3BlY3Qgb2YgYSBzZXQgb2YgYXR0cmlidXRlIHZhbHVl cyAoaS5lLiwgYQ0KICAgICAgc2V0IG9mIGNoYXJhY3RlcmlzdGljcykgYnkgd2hpY2ggYSBzeXN0 ZW0gdXNlciBvciBvdGhlciBzeXN0ZW0NCiAgICAgIGVudGl0eSBpcyByZWNvZ25pemFibGUgb3Ig a25vd24uIChTZWU6IGF1dGhlbnRpY2F0ZSwgcmVnaXN0cmF0aW9uLg0KICAgICAgQ29tcGFyZTog aWRlbnRpZmllci4pDQoNCkluIG90aGVyIHdvcmRzOiBBIHNldCBvZiBjbGFpbXMuDQoNCldoZW4g SSBidXkgY2lnYXJldHRlcyBmcm9tIGEgdmVuZGluZyBtYWNoaW5lIGluIEdlcm1hbnkgKEkgZG9u 4oCZdCwgc28gcGxlYXNlIGV4Y3VzZSBpbmFjY3VyYWNpZXMpLCBpdCBuZWVkcyBhbiBpZGVudGl0 eSBkb2N1bWVudCB3aXRoIGV4YWN0bHkgb25lIGNsYWltIG9uIGl0OiAgYWdlIOKJpSAxOCB5ZWFy cy4gIEZvciBhIGNhc2ggYnV5ZXIsIHRoYXQgaXMgdGhlIGVudGlyZSBpZGVudGl0eSB0aGUgdmVu ZGluZyBtYWNoaW5lIGNhcmVzIGFib3V0LiAgKE9idmlvdXNseSwgdGhlIGFzc2VydGVyIG9mIHRo YXQgY2xhaW0gbmVlZHMgdG8gYmUgYXV0aG9yaXplZCB0byBkbyBzbyBieSB0aGUgb3BlcmF0b3Ig b2YgYSB2ZW5kaW5nIG1hY2hpbmUg4oCUIHRoYXQgc2V0IG9mIGF1dGhvcml6YXRpb25zIGlzIHBy b2JhYmx5IHNvbWV0aGluZyB0aGF0IGlzIGhvbmVkIGJ5IGEgcHJvY2Vzc2lvbiBvZiBjb3VydCBj YXNlcy4pDQoNClNpbmNlIGV2ZW4gdGhlIGlkZW50aXR5IG9mIHRoZSBlbnRpdHkgYXV0aG9yaXpl ZCB0byBtYWtlIGEgY2xhaW0gbWF5IGJlIHN1YmplY3QgdG8gcHJpdmFjeSwgdGhlIGFjdHVhbCBp ZGVudGl0eSBtYXkgYmUgbWl4ZWQgdG9nZXRoZXIgdGhyb3VnaCBhIG51bWJlciBvZiB2ZXJpZmlj YXRpb24gc2VydmljZXMuICBJdCBpcyB1c2VmdWwgdG8gaGF2ZSBhIHByb3RvY29sIHRoYXQgY2Fu IGJlIHVzZWQgdG8gY29udmV5IGlkZW50aXRpZXMgdGhyb3VnaCBzdWNoIGEgbWl4ZXI7IHRoZSBh Y3R1YWwgcmVseWluZyBwYXJ0eSBtYXkgbm90IG5lZWQgdG8gdW5kZXJzdGFuZCBtdWNoIGFib3V0 IHdoYXQgaXMgaGFwcGVuaW5nIGFzIGxvbmcgYXMgaXQgdHJ1c3RzIHRoZSB2ZXJpZmljYXRpb24g c2VydmljZXMuICBPciwgaW4gdGhlIGFib3ZlIGV4YW1wbGUsIHRoZSB2ZW5kaW5nIG1hY2hpbmUg bWF5IHVzZSBhIGNsYWltIGZyb20gYSBiYW5rIGNhcmQgdGhhdCBJ4oCZbSDiiaUgMTh5bywgd2l0 aG91dCB1bmRlcnN0YW5kaW5nIGhvdyB0aGUgYmFuayBjYW1lIHRvIHRoYXQgY29uY2x1c2lvbi4N Cg0KTWF5YmUgd2Ugc2hvdWxkIHJlcGxhY2UgdGhlIHRlcm0g4oCcaWRlbnRpdHnigJ0gd2l0aCDi gJxzZXQgb2YgY2xhaW1zIHVzZWZ1bCBmb3IgcmVjb2duaXppbmcgc29tZXRoaW5nIG9yIHNvbWVi b2R54oCdLCBobW0sIFNPQ1VGUlNPUz8gIOKAnElkZW50aXR54oCdIG1pZ2h0IGJlIGVhc2llciB0 byBzYXkuDQoNCknigJltIG5vdCBzdXJlIEkgdW5kZXJzdGFuZCB0aGUgcGFydCBhYm91dCBTRVFV RU5DRSDigJQgSSBkb27igJl0IHNlZSBhbnkgKG9yZGVyZWQpIHNlcXVlbmNlcyBpbiB0aGUgcmVz dCBvZiB5b3VyIG1lc3NhZ2UuDQpXaGF0IEkgZG8gc2VlIGlzIGNsYWltcyB0aGF0IGhhdmUgZGlm ZmVyZW50IGtpbmRzOyBhbmQgdGhhdCBpcyBvZiBjb3Vyc2UgaW1wb3J0YW50LiAgSXQgaXMgYWxz byBzb21ldGltZXMgaW1wb3J0YW50IHRoYXQgd2UgY2FuIGhhdmUgbXVsdGlwbGUgY2xhaW1zIG9m IHRoZSBzYW1lIGtpbmQsIHNvbWV0aGluZyB0aGF0IEpXVHMgYXJlIG5vdCB2ZXJ5IGdvb2QgYXQg eWV0ICh3ZSBjb3VsZCBmaXggdGhhdCBpbiBDV1QpLg0KDQpHcsO8w59lLCBDYXJzdGVuDQoNCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpFQVQgbWFpbGlu ZyBsaXN0DQpFQVRAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vZWF0DQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQg YW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVn ZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkg dGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0 byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBj b3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQo= From nobody Mon Oct 22 14:02:09 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA90C130ED8; Mon, 22 Oct 2018 14:02:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IQMfC78WEqdP; Mon, 22 Oct 2018 14:01:58 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 59750130EA1; Mon, 22 Oct 2018 14:01:58 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id D034F20008; Mon, 22 Oct 2018 17:01:54 -0400 (EDT) Received: by sandelman.ca (Postfix, from userid 179) id 283AF2363; Mon, 22 Oct 2018 17:01:57 -0400 (EDT) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 2666D22D5; Mon, 22 Oct 2018 17:01:57 -0400 (EDT) From: Michael Richardson To: "rats\@ietf.org" , "eat\@ietf.org" In-Reply-To: <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Oct 2018 21:02:08 -0000 --=-=-= Content-Type: text/plain Jeremy O'Donoghue wrote: > This is a very useful contribution, Laurence. > The current draft text is too strongly biased towards attestation based > on measurement, and does not adequately cover other mechanisms which > are already But, it's for the charter, for the WG, it's not a treatise on attestation itself. This is all supposed to be *meta* text about attestation, about what we want to say about attestation in the documents, not about what attestation is. Please go read some other IETF charters: https://datatracker.ietf.org/wg/6lo/about/ https://datatracker.ietf.org/wg/6tisch/about/ https://datatracker.ietf.org/wg/suit/about/ Notice how by about the second paragraph (6tisch takes a bit longer), each gets into what the WG will do? -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlvOOsQACgkQgItw+93Q 3WW8Fgf/eMxuFwlE6HHFKzkwNJ2LFeVd9LbrFj+qzaBnN7hN2epB5ukzpNCiFPPE q2VgIGygBy6V96XLtZ0y3h4/HBU+O+zyPe/0c+48erx2agF5WCXMhaz4Y7xUPMpj MYfcteDaS/cUtAwJNj47ziAoRF8OuoPIfGdF2tpvgWn2cAjVhcwjNtRRFirzDUx5 gcs6ENR2KMFt3i1RJhca30ngSYfvKzohfMBg/O93+KJ2FpMOTKB24lW2Fd8460yt 5d6wQdNzA0of9oKaQOCEVB3QmTtbjmLL4JUdxQyobPajKJQKnpK2gdnM9Acop4ry UZ01lRL/g6nsW7zMivZVGCdph4K2gg== =XeRR -----END PGP SIGNATURE----- --=-=-=-- From nobody Mon Oct 22 14:17:32 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FD25128CB7; Mon, 22 Oct 2018 14:17:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LjrjXySS0fcj; Mon, 22 Oct 2018 14:17:28 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B549D1292AD; Mon, 22 Oct 2018 14:17:17 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 71EAC20008; Mon, 22 Oct 2018 17:17:14 -0400 (EDT) Received: by sandelman.ca (Postfix, from userid 179) id BB3862363; Mon, 22 Oct 2018 17:17:16 -0400 (EDT) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id B96E222D5; Mon, 22 Oct 2018 17:17:16 -0400 (EDT) From: Michael Richardson To: Hannes Tschofenig cc: Henk Birkholz , "rats\@ietf.org" , "eat\@ietf.org" In-Reply-To: References: X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] [EAT] Preliminary RATS BoF Agenda X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Oct 2018 21:17:31 -0000 --=-=-= Content-Type: text/plain Hannes Tschofenig wrote: > I am missing a "Here is the problem we are solving and this is why we > will make the Internet work better" presentation. +1. Background material is welcome, but I'm not seeing a charter. I keep seeing introductory text that belongs in an overview, roadmap or requirements document (but I don't know which, because the charter hasn't told me how we are running things) Also, I don't know how eat@ and rats@ differ, so maybe we can just get rid of one of these lists? -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlvOPlwACgkQgItw+93Q 3WWDrgf/T6XFfYbmj5+l4vE6gKBI8DAWGHlXEeMK1m0so6LjlYrrvQrtdJtcwJMV VzQ7ak9WFO5wz2rvI5Hw1uLGwJ7aSe4JTz9DcEcAFY02vb3wZmXeuC02d4yfMAJp ZKWS9Nvr1yRNucZH3P6vFOVCGL/CMdbXELLc4ATmAuSY9CutoW0ZorOSOQn15RtH KGFdj/5g+db9NrJZwtKvo7bcmkb6uL7TGMkkfczer3bTRHeLMGR/CWY8FdwTWMyt PBxjEkVTdFUkR/GdE/cAj3tKoc1p9tvt0h0jzkb87oNd4ibv8vc3F+YegaSYrtD9 MlR6UYljwe37swhmW89seDcd1jQLTA== =/W8w -----END PGP SIGNATURE----- --=-=-=-- From nobody Mon Oct 22 14:36:05 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1D6AE12D4F1; Mon, 22 Oct 2018 14:35:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 96chTGHTCM9h; Mon, 22 Oct 2018 14:35:56 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A4569130E99; Mon, 22 Oct 2018 14:35:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost2.informatik.uni-bremen.de [IPv6:2001:638:708:30c8:406a:91ff:fe74:f2b7]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id w9MLZkD8013044; Mon, 22 Oct 2018 23:35:51 +0200 (CEST) Received: from [192.168.217.114] (p54A6CA9F.dip0.t-ipconnect.de [84.166.202.159]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 42f8vk0fdhz1Bqf; Mon, 22 Oct 2018 23:35:46 +0200 (CEST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: <11236.1540243036@localhost> Date: Mon, 22 Oct 2018 23:35:45 +0200 Cc: Hannes Tschofenig , "rats@ietf.org" , Henk Birkholz , "eat@ietf.org" X-Mao-Original-Outgoing-Id: 561936943.518659-5d1aa2950c71e9b25d3af51f52d40c12 Content-Transfer-Encoding: quoted-printable Message-Id: References: <11236.1540243036@localhost> To: Michael Richardson X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [Rats] [EAT] Preliminary RATS BoF Agenda X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Oct 2018 21:36:04 -0000 > Background material is welcome, but I=E2=80=99m not seeing a charter. One problem with writing a charter in an area without accepted = terminology is that you need a source of that terminology. The IESG generally frowns upon a WG defining the terminology used in the = charter in an I-D, as this means the WG can change the meaning of the = charter unilaterally. So there is a need for some terminology = definitions, more than usually in a charter. > I keep seeing introductory text that belongs in an overview, roadmap = or > requirements document (but I don't know which, because the charter = hasn't > told me how we are running things) Now that looks like a problem, indeed. > Also, I don=E2=80=99t know how eat@ and rats@ differ, EAT is one technical approach (put claim sets into CWTs), which I like. =20= RATS has some additional requirements that are harder to do in a CWT (of = course, anything can be packaged in a CWT if you really want =E2=80=94 = RATS is really more about workflows that involve evidence and tend to be = more complicated than just signing a few CWTs and checking those = signatures). > so maybe we can just get rid of > one of these lists? Whenever we know the name of the new WG, we can get rid of both. Gr=C3=BC=C3=9Fe, Carsten From nobody Tue Oct 23 07:40:38 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4CF1D1294D0; Tue, 23 Oct 2018 07:40:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.299 X-Spam-Level: X-Spam-Status: No, score=-4.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JyrREMIEn5cU; Tue, 23 Oct 2018 07:40:32 -0700 (PDT) Received: from alexa-out-ams-02.qualcomm.com (alexa-out-ams-02.qualcomm.com [185.23.61.163]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0E54128DFD; Tue, 23 Oct 2018 07:40:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1540305631; x=1571841631; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=RNMZ5LSbRsmxlRbTDPdEAikkEuRh5EQ+gzdqAgtr8Uo=; b=kj14bFRaBQZ2JaoxZN2OPDh0kOLS2eG54uVqo2b9E/ooWbv/u46NdRzm m0HSGvAi765E7POmgN7NjOuVPKWY9TsKpax8q3noE0EKlHqcAn9YGA+35 9xW2sAsR6R8z3AX2NQVQNXADfeEddLQp4Kd8vKlsmYA0zJpdj2V+tLpMw Q=; X-IronPort-AV: E=Sophos;i="5.54,416,1534802400"; d="scan'208,217";a="1381821" Received: from ironmsg01-ams.qualcomm.com ([10.251.56.2]) by alexa-out-ams-02.qualcomm.com with ESMTP; 23 Oct 2018 16:40:28 +0200 X-IronPort-AV: E=McAfee;i="5900,7806,9054"; a="6071811" Received: from euamsexm01e.eu.qualcomm.com ([10.251.127.42]) by ironmsg01-ams.qualcomm.com with ESMTP/TLS/AES256-SHA; 23 Oct 2018 16:40:28 +0200 Received: from euamsexm01a.eu.qualcomm.com (10.251.127.40) by euamsexm01e.eu.qualcomm.com (10.251.127.42) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Tue, 23 Oct 2018 16:40:26 +0200 Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by euamsexm01a.eu.qualcomm.com ([10.251.127.40]) with mapi id 15.00.1365.000; Tue, 23 Oct 2018 16:40:26 +0200 From: Jeremy O'Donoghue To: Michael Richardson CC: "rats@ietf.org" , "eat@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUakqqBJn3KZZVPEe4vVODtnqbzKUsxo8A Date: Tue, 23 Oct 2018 14:40:26 +0000 Message-ID: <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> In-Reply-To: <7544.1540242117@localhost> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.9.1) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.251.52.12] Content-Type: multipart/alternative; boundary="_000_46150D6797E7457F9C8BD2B3060978CAqtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 14:40:35 -0000 --_000_46150D6797E7457F9C8BD2B3060978CAqtiqualcommcom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable On 22 Oct 2018, at 22:01, Michael Richardson > wrote: Jeremy O'Donoghue > wrote: This is a very useful contribution, Laurence. The current draft text is too strongly biased towards attestation based on measurement, and does not adequately cover other mechanisms which are already But, it's for the charter, for the WG, it's not a treatise on attestation itself. This is all supposed to be *meta* text about attestation, about what we wan= t to say about attestation in the documents, not about what attestation is. Please go read some other IETF charters: https://datatracker.ietf.org/wg/6lo/about/ https://datatracker.ietf.org/wg/6tisch/about/ https://datatracker.ietf.org/wg/suit/about/ Fair comment. We have two existing proposals - EAT and RATS - which address a similar pro= blem space but using different mechanisms. While I believe the RATS and EAT= contributors are in broad agreement that there is significant benefit in b= ringing both work streams under a single umbrella, trying to properly incor= porate EAT through incremental modification to the draft RATS WG charter te= xt is proving challenging. The below probably diverges too far from the current text for some tastes, = but it may address your point and provide a basis for discussion (at this p= oint the GitHub draft seems a long way behind the list). It is deliberately signif= icantly shorter than the current draft - I have tried to re-use as much exi= sting text as possible, but it is heavily re-organised and abridged. I have taken on board the comment from Carsten that perhaps a minimum level= of terminology is acceptable in charter text, but deliberately tried to ke= ep the language simple and fairly generic to enable the proper work of term= inology definition to take place in the requirements document as you sugges= t. Introduction ------------ Remote attestation procedures can be incorporated in network protocols to provide the basis for establishing claims about an entity in a trustworthy manner. Such claims may include, but are not limited to, device identity, manufacturing origin, system integrity, configuration, operational state an= d measurements of steps which led to the operational state. Such procedures expose entity characteristics in the form of claim sets which allow remote parties to establish the trustworthiness of a device, provide evidence that= a particular set of operations and functions are supported and/or that the entity is actually what it claims to be. In the absence of such procedures, while domain-specific attestation mechanisms such as TCG TPM, FIDO Alliance attestation and Android Keystore attestation exist, there is no common way for a remote party to tell if dat= a originates from a trustworthy device (e.g. a Trusted System designed to support a specific set of operations/functionalities) or not. The following minimal terminology is defined for the purposes of clarifying= the Working Group charter text: - attestation: a set of claims which can be verified as originating in an entity. - claim: as defined in RFC7519. - entity: a device or device sub-module that can generate a claim or set of claims which can be verified by a remote party. - remote party: an actor remote from an entity that wishes to verify whethe= r a claim or set of claims originated in a given entity. Description of the Working Group -------------------------------- The Working Group will define: - Standardized and interoperable mechanisms to establish a sufficient level of confidence that data originates from a trustworthy entity designed to support a specific set of operations/functionalities. - Standardized and interoperable mechanisms building on (1) to allow remote parties to know the provenance and characteristics of an entity that may = be requesting services. The Working Group will identify security goals which it expects a trustwort= hy execution context to address, which will assume the presence of Roots of Trust (as defined by NIST [SP800-164]). The detailed specification of such contexts is out of scope. The Working Group will maintain close relationships with bodies undertaking complementary work streams in the area of remote attestation such as GlobalPlatform, Trusted Computing Group and FIDO Alliance. The Working Group will cooperate with the TEEP Working Group, which may generate requirements for claims relevant to TEE. Work Items ---------- The Working Group will develop specifications supporting the creation of interoperable remote attestation procedures for entities which incorporate Roots of Trust. The main deliverables are as follows. - Produce a requirements document establishing a common vocabulary for remo= te attestation, identifying mechanisms which will be supported for establish= ing trust between an entity and a remote party, and enumerating sample use-ca= ses for remote attestation. - Produce specification text defining interoperable cross-platform claims w= hich provide information about an entity in support of the required use-cases,= and extending the set of claims defined in RFC7519 and RFC8392. The specifica= tion will describe the syntax for each claim in at least the following formats= : - CBOR [RFC7049] - JSON [RFC7159] - YANG [RFC6020] - Produce specification text defining procedures and corresponding architec= tures supporting verification of claims within an attestation based on measured= file execution procedures and supporting: - Explicit attestation wherein a set of claims is transported in the at= testation; - Implicit attestation wherein a set of claims is implied by possession= of a secret. - Produce specification text defining procedures and corresponding architec= tures supporting verification of claims encapsulated in: - CBOR Web Token structures [RFC8392] - JSON Web Token structures [RFC7519] - Perform privacy analysis of both claims and the cryptographic procedures = used to establish trust. This information will be included as appropriate in the deliverable specifications, and may imply extension of procedures defined= in other specifications in support of privacy goals. It seems to me that there are two ways to produce the main specification de= liverables. I have deliberately left the text above slightly vague on this. * A claims specification common to RATS and EAT with separate RATS and = EAT procedure specifications. * A claims specification also incorporating EAT procedures and a separa= te RATS procedure specification. This would be my preferred option. * I believe there are very few procedures needed for EAT other than = the possible need to support a nonce to ensure freshness Jeremy Notice how by about the second paragraph (6tisch takes a bit longer), each gets into what the WG will do? -- Michael Richardson >, S= andelman Software Works -=3D IPv6 IoT consulting =3D- _______________________________________________ EAT mailing list EAT@ietf.org https://www.ietf.org/mailman/listinfo/eat --_000_46150D6797E7457F9C8BD2B3060978CAqtiqualcommcom_ Content-Type: text/html; charset="us-ascii" Content-ID: <16DED7E1EC146248B1F9849D5D09BEDD@qualcomm.com> Content-Transfer-Encoding: quoted-printable On 22 Oct 2018, at 22:01, Michael Richardson <mcr+ietf@sandelman.ca> wrote:


Jeremy O'Donoghue <jodonogh@qti.qualcomm.com> wrote:
This is a very useful contribution, La= urence.

The current draft text is too strongly= biased towards attestation based
on measurement, and does not adequately cover other mechanisms which
are already

But, it's for the charter, for the WG, it's not a treatise on attestation itself.

This is all supposed to be *meta* text about attestation, about what we wan= t
to say about attestation in the documents, not about what attestation is.
Please go read some other IETF charters:

https://d= atatracker.ietf.org/wg/6lo/about/
https://datatracker.ietf.org/wg/6tisch/about/
https://= datatracker.ietf.org/wg/suit/about/

Fair comment.

We have two existing proposals - EAT and RATS - which address a simila= r problem space but using different mechanisms. While I believe the RATS an= d EAT contributors are in broad agreement that there is significant benefit= in bringing both work streams under a single umbrella, trying to properly incorporate EAT through incremental = modification to the draft RATS WG charter text is proving challenging.

The below probably diverges too far from the current text for some tas= tes, but it may address your point and provide a basis for discussion (at t= his point the GitHub draft seems a long way behind the list). It is deliberately signi= ficantly shorter than the current draft - I have tried to re-use as much ex= isting text as possible, but it is heavily re-organised and abridged.

I have taken on board the comment from Carsten that perhaps a minimum = level of terminology is acceptable in charter text, but deliberately tried = to keep the language simple and fairly generic to enable the proper work of= terminology definition to take place in the requirements document as you suggest.

Introduction

------------

Remote attestation procedures can be incorporated in network protocols to provide the basis for establishing claims about an entity in a trustworthy<= br class=3D""> manner. Such claims may include, but are not limited to, device identity, manufacturing origin, system integrity, configuration, operational state an= d
measurements of steps which led to the operational state. Such procedures expose entity characteristics in the form of claim sets which allow remote<= br class=3D""> parties to establish the trustworthiness of a device, provide evidence that= a
particular set of operations and functions are supported and/or that the entity is actually what it claims to be. 

In the absence of such procedures, while domain-specific attestation
mechanisms such as TCG TPM, FIDO Alliance attestation and Android Keystore<= br class=3D""> attestation exist, there is no common way for a remote party to tell if dat= a
originates from a trustworthy device (e.g. a Trusted System designed to
support a specific set of operations/functionalities) or not.

The following minimal terminology is defined for the purposes of clarifying= the
Working Group charter text:

- attestation: a set of claims which can be verified as originating in an           entity.

- claim:  as defined in RFC7519.

- entity: a device or device sub-module that can generate a claim or set of=
          claims which can be verified by a remote= party.

- remote party: an actor remote from an entity that wishes to verify whethe= r
          a claim or set of claims originated in a= given entity.

Description of the Working Group

--------------------------------

The Working Group will define:

- Standardized and interoperable mechanisms to establish a sufficient level=
  of confidence that data originates from a trustworthy entity designe= d to
  support a specific set of operations/functionalities.
- Standardized and interoperable mechanisms building on (1) to allow remote=
  parties to know the provenance and characteristics of an entity that= may be
  requesting services.

The Working Group will identify security goals which it expects a trustwort= hy
execution context to address, which will assume the presence of Roots of Trust (as defined by NIST [SP800-164]). The detailed specification of such<= br class=3D""> contexts is out of scope.

The Working Group will maintain close relationships with bodies undertaking=
complementary work streams in the area of remote attestation such as
GlobalPlatform, Trusted Computing Group and FIDO Alliance.

The Working Group will cooperate with the TEEP Working Group, which may
generate requirements for claims relevant to TEE.


Work Items

----------

The Working Group will develop specifications supporting the creation of interoperable remote attestation procedures for entities which incorporate&= nbsp;
Roots of Trust. The main deliverables are as follows. 

- Produce a requirements document establishing a common vocabulary for remo= te
  attestation, identifying mechanisms which will be supported for esta= blishing
  trust between an entity and a remote party, and enumerating sample u= se-cases
  for remote attestation.

- Produce specification text defining interoperable cross-platform claims w= hich
  provide information about an entity in support of the required use-c= ases, and
  extending the set of claims defined in RFC7519 and RFC8392. The spec= ification
  will describe the syntax for each claim in at least the following fo= rmats:
    - CBOR [RFC7049]
    - JSON [RFC7159]
    - YANG [RFC6020]

- Produce specification text defining procedures and corresponding architec= tures
  supporting verification of claims within an attestation based on mea= sured file
  execution procedures and supporting:
    - Explicit attestation wherein a set of claims is transported= in the attestation;
    - Implicit attestation wherein a set of claims is implied by = possession of a secret.

- Produce specification text defining procedures and corresponding architec= tures
  supporting verification of claims encapsulated in:

    - CBOR Web Token structures [RFC8392]
    - JSON Web Token structures [RFC7519]

- Perform privacy analysis of both claims and the cryptographic procedures = used to
  establish trust. This information will be included as appropriate in= the
  deliverable specifications, and may imply extension of procedures de= fined in
  other specifications in support of privacy goals.


It seems to me that there are two ways to produce the main specificati= on deliverables. I have deliberately left the text above slightly vague on = this.
  • A claims specification common to RATS and EAT with separate = RATS and EAT procedure specifications.
  • A claims specific= ation also incorporating EAT procedures and a separate RATS procedure speci= fication. This would be my preferred option.
    • I believe there are very few procedures needed for EAT other= than the possible need to support a nonce to ensure freshness

Jeremy

Notice how by about the second paragraph (6tisch takes a bit longer), each<= br class=3D""> gets into what the WG will do?

--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
-=3D IPv6 IoT consulting =3D-
_______________________________________________
EAT mailing list
EAT@ietf.org
https://www.ietf.org/mailman/listinfo/eat

--_000_46150D6797E7457F9C8BD2B3060978CAqtiqualcommcom_-- From nobody Tue Oct 23 08:15:09 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81F2D130E44 for ; Tue, 23 Oct 2018 08:15:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dfgxdwsAHmD5 for ; Tue, 23 Oct 2018 08:15:06 -0700 (PDT) Received: from mail-qt1-x835.google.com (mail-qt1-x835.google.com [IPv6:2607:f8b0:4864:20::835]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 56F8E130E37 for ; Tue, 23 Oct 2018 08:15:06 -0700 (PDT) Received: by mail-qt1-x835.google.com with SMTP id l9-v6so1865286qtj.12 for ; Tue, 23 Oct 2018 08:15:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :mime-version; bh=kkX/B9wgrL2SC0yO2xZYuyq41YcNmm7McaLej38Jtgk=; b=Pgcas4f5HW6Jz5phcfdyRrtCUNfm8hlND0Pp2O5dYqMRxOjgkFe+ie8jizqwPB9+nL F+ILZUxlG2bcJSE/XJ6hIahBepZxD2TOdz8yKmD8CgTWELrtv5c22Tc8xXqbzAR7g3rS ZdVP+lnNCBt1Fq+UsyuQy/wnjRcx13Zbcb6Qo= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:mime-version; bh=kkX/B9wgrL2SC0yO2xZYuyq41YcNmm7McaLej38Jtgk=; b=idqhjtx/ywgcIDdyXvPMpwOFKt42Kb0Ac6h2GzWZp+uEjil+6pJggvhEe0UtrxWnAC iYVaa3A8v2s5OgaQuOBds8Tdepe/v3mdmJ/v4CbomJVrBPGyt4BrwXVI3mMq+XN1aYxb MJwTs0n43duwhNfJKVAH+4sDzgxR4mBj6Vr//2nlnuqTP7JNgDHwI7+CWaFVwhO3Zb0V nK9fq/fuZPtgnr/AqK1mA6v6hjOAcwv6Mh+OPSylUeCeB8uNionZGOp7l6BYVDnmyrVF m0/DcBlCAK8V+Uq+BLOsy8I3fLOoUgHmBXO3bqsyH6bCD0HV08I7Z0coGWAVdDFLqYU6 MBxw== X-Gm-Message-State: AGRZ1gIinCTpTObiGkPzmQSrzbrxLUPwa6r5dNa5UYte7ztcYz7shR7V OnN3+BXYFOThlgEjxgQ6KRQQYA== X-Google-Smtp-Source: AJdET5dznXA4PRp80iwVZDKPntTicvAJYwo1bZdFOjY7B3UNFOeiWss3aSe8Sf68WriB2VbBV3+CNA== X-Received: by 2002:a0c:ed50:: with SMTP id v16mr1466321qvq.64.1540307705317; Tue, 23 Oct 2018 08:15:05 -0700 (PDT) Received: from [192.168.2.27] (pool-108-28-91-61.washdc.fios.verizon.net. [108.28.91.61]) by smtp.googlemail.com with ESMTPSA id m13-v6sm1267506qtm.20.2018.10.23.08.15.02 (version=TLS1 cipher=AES128-SHA bits=128/128); Tue, 23 Oct 2018 08:15:04 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Tue, 23 Oct 2018 11:14:59 -0400 From: Carl Wallace To: Jeremy O'Donoghue , Michael Richardson CC: "rats@ietf.org" , "eat@ietf.org" Message-ID: Thread-Topic: [Rats] [EAT] Attestation BoF charter updates? Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3623138104_16942883" Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 15:15:08 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3623138104_16942883 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: 7bit > > > > Work Items > > ---------- > > The Working Group will develop specifications supporting the creation of > interoperable remote attestation procedures for entities which incorporate > Roots of Trust. The main deliverables are as follows. > > - Produce a requirements document establishing a common vocabulary for remote > attestation, identifying mechanisms which will be supported for establishing > trust between an entity and a remote party, and enumerating sample use-cases > for remote attestation. > > - Produce specification text defining interoperable cross-platform claims > which > provide information about an entity in support of the required use-cases, > and > extending the set of claims defined in RFC7519 and RFC8392. The > specification > will describe the syntax for each claim in at least the following formats: > - CBOR [RFC7049] > - JSON [RFC7159] > - YANG [RFC6020] [CW] ASN.1 is already player for a number of attestation formats. Any reason to exclude it? > - Produce specification text defining procedures and corresponding > architectures > supporting verification of claims within an attestation based on measured > file > execution procedures and supporting: > - Explicit attestation wherein a set of claims is transported in the > attestation; > - Implicit attestation wherein a set of claims is implied by possession of > a secret. > > - Produce specification text defining procedures and corresponding > architectures > supporting verification of claims encapsulated in: > > - CBOR Web Token structures [RFC8392] > - JSON Web Token structures [RFC7519] [CW] As noted before, I'd like to see binding to certificate enrollment protocols included here as well. This is something we are doing today, without standards grounding (as illustrated in pile of attestations shared via Github a few weeks back). > - Perform privacy analysis of both claims and the cryptographic procedures > used to > establish trust. This information will be included as appropriate in the > deliverable specifications, and may imply extension of procedures defined in > other specifications in support of privacy goals. > > > It seems to me that there are two ways to produce the main specification > deliverables. I have deliberately left the text above slightly vague on this. > * A claims specification common to RATS and EAT with separate RATS and EAT > procedure specifications. > * A claims specification also incorporating EAT procedures and a separate RATS > procedure specification. This would be my preferred option. >> * I believe there are very few procedures needed for EAT other than the >> possible need to support a nonce to ensure freshness > > Jeremy >> >> Notice how by about the second paragraph (6tisch takes a bit longer), each >> gets into what the WG will do? >> >> -- >> Michael Richardson , Sandelman Software Works >> -= IPv6 IoT consulting =- >> _______________________________________________ >> EAT mailing list >> EAT@ietf.org >> https://www.ietf.org/mailman/listinfo/eat > > _______________________________________________ RATS mailing list > RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats --B_3623138104_16942883 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable


<snip>

Work Items

----------

The Working Group will develop specifications supporting the creation of interoperable remote attestation procedures for entities which incorporate&= nbsp;
Roots of Trust. The main deliverables are as follows. 

- Produce a requirements document establishing a common vocabulary for remo= te
  attestation, identifying mechanisms which will be supported for esta= blishing
  trust between an entity and a remote party, and enumerating sample u= se-cases
  for remote attestation.

- Produce specification text defining interoperable cross-platform claims w= hich
  provide information about an entity in support of the required use-c= ases, and
  extending the set of claims defined in RFC7519 and RFC8392. The spec= ification
  will describe the syntax for each claim in at least the following fo= rmats:
    - CBOR [RFC7049]
    - JSON [RFC7159]
    - YANG [RFC6020]

[CW] ASN.1 is already player for a number of attestation formats. An= y reason to exclude it?

=

- Produce specification text defining procedures and corresponding architec= tures
  supporting verification of claims within an attestation based on mea= sured file
  execution procedures and supporting:
    - Explicit attestation wherein a set of claims is transported= in the attestation;
    - Implicit attestation wherein a set of claims is implied by = possession of a secret.

- Produce specification text defining procedures and corresponding architec= tures
  supporting verification of claims encapsulated in:

    - CBOR Web Token structures [RFC8392]
    - JSON Web Token structures [RFC7519]

[CW] As noted before, I'd like to see binding t= o certificate enrollment protocols included here as well. This is something = we are doing today, without standards grounding (as illustrated in pile of a= ttestations shared via Github a few weeks back). 

<= span id=3D"OLK_SRC_BODY_SECTION">
=

- Perform privacy analysis of both claims and the cryptographic procedures = used to
  establish trust. This information will be included as appropriate in= the
  deliverable specifications, and may imply extension of procedures de= fined in
  other specifications in support of privacy goals.


It seems to me= that there are two ways to produce the main specification deliverables. I h= ave deliberately left the text above slightly vague on this.
  • A claims specification common to RATS and EAT with separate R= ATS and EAT procedure specifications.
  • A claims specificatio= n also incorporating EAT procedures and a separate RATS procedure specificat= ion. This would be my preferred option.
    • I believe there are very few procedures needed fo= r EAT other than the possible need to support a nonce to ensure freshness

Jeremy
Notice how by about the second paragraph (6tisch takes a bit longer), each<= br class=3D""> gets into what the WG will do?

--
Michael Richardson <mcr+= IETF@sandelman.ca>, Sandelman Software Works
-=3D IPv6 IoT consulting =3D-
_______________________________________________
EAT mailing list
EAT@iet= f.org
https://www.ietf.org/ma= ilman/listinfo/eat

_______________________________________________ RATS mailing list RATS@ietf.org https://www.ietf.org/mailman/listinfo/r= ats --B_3623138104_16942883-- From nobody Tue Oct 23 10:10:32 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA778130F90; Tue, 23 Oct 2018 10:10:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.299 X-Spam-Level: X-Spam-Status: No, score=-4.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J_EGVqNEIRAw; Tue, 23 Oct 2018 10:10:17 -0700 (PDT) Received: from alexa-out-ams-02.qualcomm.com (alexa-out-ams-02.qualcomm.com [185.23.61.163]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F174C130F62; Tue, 23 Oct 2018 10:10:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1540314617; x=1571850617; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=MQsDFz3H2oFKpvg47wXienkM7OEie/7TG61ZfMW0qdc=; b=Lz0F0wyMAu/DJWYV1hE+zEHGXWB8OFN4AzNhc18+WJfosx5wH4ABtkiu zyxjtTH5AI50IORH0Zhh/uEMhi3Oh8qLi00FyOO1CK0NXqy4M+RnfwL6j 6Vpq5iZMKCtsphemPOJEVB/nGR53Zp2lqbZxrP9UHXBqHWkxt8yfZ29g0 A=; X-IronPort-AV: E=Sophos;i="5.54,416,1534802400"; d="scan'208,217";a="1382484" Received: from ironmsg03-ams.qualcomm.com ([10.251.56.4]) by alexa-out-ams-02.qualcomm.com with ESMTP; 23 Oct 2018 19:10:15 +0200 X-IronPort-AV: E=McAfee;i="5900,7806,9055"; a="6099004" Received: from euamsexm01f.eu.qualcomm.com ([10.251.127.43]) by ironmsg03-ams.qualcomm.com with ESMTP/TLS/AES256-SHA; 23 Oct 2018 19:10:15 +0200 Received: from euamsexm01a.eu.qualcomm.com (10.251.127.40) by euamsexm01f.eu.qualcomm.com (10.251.127.43) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Tue, 23 Oct 2018 19:10:07 +0200 Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by euamsexm01a.eu.qualcomm.com ([10.251.127.40]) with mapi id 15.00.1365.000; Tue, 23 Oct 2018 19:10:06 +0200 From: Jeremy O'Donoghue To: Carl Wallace CC: Michael Richardson , "rats@ietf.org" , "eat@ietf.org" Thread-Topic: [Rats] [EAT] Attestation BoF charter updates? Thread-Index: AQHUauM1YZGxqVPSIk2WRVqX8pXQ8KUs7y8A Date: Tue, 23 Oct 2018 17:10:06 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.9.1) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.251.52.12] Content-Type: multipart/alternative; boundary="_000_D0C08E47DBB64AAD95EFF952155D3152qtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 17:10:24 -0000 --_000_D0C08E47DBB64AAD95EFF952155D3152qtiqualcommcom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable On 23 Oct 2018, at 16:14, Carl Wallace > wrote: Work Items ---------- The Working Group will develop specifications supporting the creation of interoperable remote attestation procedures for entities which incorporate Roots of Trust. The main deliverables are as follows. - Produce a requirements document establishing a common vocabulary for remo= te attestation, identifying mechanisms which will be supported for establish= ing trust between an entity and a remote party, and enumerating sample use-ca= ses for remote attestation. - Produce specification text defining interoperable cross-platform claims w= hich provide information about an entity in support of the required use-cases,= and extending the set of claims defined in RFC7519 and RFC8392. The specifica= tion will describe the syntax for each claim in at least the following formats= : - CBOR [RFC7049] - JSON [RFC7159] - YANG [RFC6020] [CW] ASN.1 is already player for a number of attestation formats. Any reaso= n to exclude it? None I can technically justify. It seems sensible to have ASN.1 in scope, a= t least in terms of defining the syntax of claims in ASN.1. I am less sure = whether it makes sense to define signing procedures for ASN1. (since these = are presumably defined elsewhere), but I could be persuaded (e.g. by the st= atement "no they aren't defined elsewhere - at least not for this important= use-case"). - Produce specification text defining procedures and corresponding architec= tures supporting verification of claims within an attestation based on measured= file execution procedures and supporting: - Explicit attestation wherein a set of claims is transported in the at= testation; - Implicit attestation wherein a set of claims is implied by possession= of a secret. - Produce specification text defining procedures and corresponding architec= tures supporting verification of claims encapsulated in: - CBOR Web Token structures [RFC8392] - JSON Web Token structures [RFC7519] [CW] As noted before, I'd like to see binding to certificate enrollment pro= tocols included here as well. This is something we are doing today, without= standards grounding (as illustrated in pile of attestations shared via Git= hub a few weeks back). It would be interesting to understand your thinking a bit further. At one l= evel it is fairly straightforward to define a claim whose value contains an= X.509 certificate, but I suspect that binding may imply more than that. - Perform privacy analysis of both claims and the cryptographic procedures = used to establish trust. This information will be included as appropriate in the deliverable specifications, and may imply extension of procedures defined= in other specifications in support of privacy goals. It seems to me that there are two ways to produce the main specification de= liverables. I have deliberately left the text above slightly vague on this. * A claims specification common to RATS and EAT with separate RATS and = EAT procedure specifications. * A claims specification also incorporating EAT procedures and a separa= te RATS procedure specification. This would be my preferred option. * I believe there are very few procedures needed for EAT other than = the possible need to support a nonce to ensure freshness Jeremy Notice how by about the second paragraph (6tisch takes a bit longer), each gets into what the WG will do? -- Michael Richardson >, S= andelman Software Works -=3D IPv6 IoT consulting =3D- _______________________________________________ EAT mailing list EAT@ietf.org https://www.ietf.org/mailman/listinfo/eat _______________________________________________ RATS mailing list RATS@ietf= .org https://www.ietf.org/mailman/listinfo/rats --_000_D0C08E47DBB64AAD95EFF952155D3152qtiqualcommcom_ Content-Type: text/html; charset="us-ascii" Content-ID: <1109187230A7A049B6F75175E20E9B21@qualcomm.com> Content-Transfer-Encoding: quoted-printable
On 23 Oct 2018, at 16:14, Carl Wallace <carl@redhoundsoftware.com> w= rote:

<snip>

Work Items

----------

The Working Group will develop specifications supporting the creation of interoperable remote attestation procedures for entities which incorporate&= nbsp;
Roots of Trust. The main deliverables are as follows. 

- Produce a requirements document establishing a common vocabulary for remo= te
  attestation, identifying mechanisms which will be supported for esta= blishing
  trust between an entity and a remote party, and enumerating sample u= se-cases
  for remote attestation.

- Produce specification text defining interoperable cross-platform claims w= hich
  provide information about an entity in support of the required use-c= ases, and
  extending the set of claims defined in RFC7519 and RFC8392. The spec= ification
  will describe the syntax for each claim in at least the following fo= rmats:
    - CBOR [RFC7049]
    - JSON [RFC7159]
    - YANG [RFC6020]
[CW] ASN.1 is already player for a number of attestation fo= rmats. Any reason to exclude it?

None I can technically justify. It seems sensible to have ASN.1 in sco= pe, at least in terms of defining the syntax of claims in ASN.1. I am less = sure whether it makes sense to define signing procedures for ASN1. (since t= hese are presumably defined elsewhere), but I could be persuaded (e.g. by the statement "no they aren't defin= ed elsewhere - at least not for this important use-case").

- Produce specification text defining procedures and corresponding architec= tures
  supporting verification of claims within an attestation based on mea= sured file
  execution procedures and supporting:
    - Explicit attestation wherein a set of claims is transported= in the attestation;
    - Implicit attestation wherein a set of claims is implied by = possession of a secret.

- Produce specification text defining procedures and corresponding architec= tures
  supporting verification of claims encapsulated in:

    - CBOR Web Token structures [RFC8392]
    - JSON Web Token structures [RFC7519]
[CW] As noted before, I'd like to see binding to certificat= e enrollment protocols included here as well. This is something we are doin= g today, without standards grounding (as illustrated in pile of attestation= s shared via Github a few weeks back).

It would be interesting to understand your thinking a bit further. At = one level it is fairly straightforward to define a claim whose value contai= ns an X.509 certificate, but I suspect that binding may imply more than tha= t. 

- Perform privacy analysis of both claims and the cryptographic procedures = used to
  establish trust. This information will be included as appropriate in= the
  deliverable specifications, and may imply extension of procedures de= fined in
  other specifications in support of privacy goals.


It seems to me that there are two ways to produce the main specification = deliverables. I have deliberately left the text above slightly vague on thi= s.
  • A claims specification common to RATS and EAT with separate = RATS and EAT procedure specifications.
  • A claims specific= ation also incorporating EAT procedures and a separate RATS procedure speci= fication. This would be my preferred option.
    • I believe there are very few procedures needed for EAT other= than the possible need to support a nonce to ensure freshness

Jeremy

Notice how by about the second paragraph (6tisch takes a bit longer), each<= br class=3D""> gets into what the WG will do?

--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
-=3D IPv6 IoT consulting =3D-
_______________________________________________
EAT mailing list
EAT@ietf.org
https://ww= w.ietf.org/mailman/listinfo/eat

______________________________= _________________ RATS mailing list RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats

--_000_D0C08E47DBB64AAD95EFF952155D3152qtiqualcommcom_-- From nobody Tue Oct 23 10:10:38 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5913E130E2B; Tue, 23 Oct 2018 10:10:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.899 X-Spam-Level: X-Spam-Status: No, score=-6.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9xZaN_6Uk7Fs; Tue, 23 Oct 2018 10:10:34 -0700 (PDT) Received: from mga14.intel.com (mga14.intel.com [192.55.52.115]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05CA6130F74; Tue, 23 Oct 2018 10:10:33 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga001.fm.intel.com ([10.253.24.23]) by fmsmga103.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 23 Oct 2018 10:10:33 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.54,416,1534834800"; d="scan'208,217";a="101798394" Received: from orsmsx101.amr.corp.intel.com ([10.22.225.128]) by fmsmga001.fm.intel.com with ESMTP; 23 Oct 2018 10:10:33 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.251]) by ORSMSX101.amr.corp.intel.com ([169.254.8.122]) with mapi id 14.03.0319.002; Tue, 23 Oct 2018 10:10:33 -0700 From: "Smith, Ned" To: Jeremy O'Donoghue , Michael Richardson CC: "rats@ietf.org" , "eat@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUat5gF5XODrEVOE6MFEmu1KniJaUtENuA Date: Tue, 23 Oct 2018 17:10:32 +0000 Message-ID: <048076C6-C8C4-4F14-961C-C990F154E174@intel.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> In-Reply-To: <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.3.181015 x-originating-ip: [10.24.14.158] Content-Type: multipart/alternative; boundary="_000_048076C6C8C44F14961CC990F154E174intelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 17:10:37 -0000 --_000_048076C6C8C44F14961CC990F154E174intelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 U1A4MDAtMTY0IGlzIGEgdXNlZnVsIHJlZmVyZW5jZSBmb3IgYm90aCBjb25jZXB0cyBhbmQgdGVy bWlub2xvZ3kuIEluIHBhcnRpY3VsYXIgaXQgZm9sbG93cyB0ZXJtaW5vbG9neSBjb252ZW50aW9u cyB0aGF0IHNsaWdodGx5IGRpZmZlciBmcm9tIHNvbWUgdGVybXMgc3VnZ2VzdGVkIGJ5IHRoaXMg bGlzdC4gSW4gcGFydGljdWxhciwNCg0KLSBhdHRlc3RhdGlvbjogYSBzZXQgb2YgY2xhaW1zIHdo aWNoIGNhbiBiZSB2ZXJpZmllZCBhcyBvcmlnaW5hdGluZyBpbiBhbiBlbnRpdHkuDQpTUDgwMC0x NjQuYXR0ZXN0OiDigJxSb290IG9mIFRydXN0IGZvciBNZWFzdXJlbWVudCAoUlRNKeKAlHByb3Zp ZGVzIHRydXN0ZWQgbWVhc3VyZW1lbnQgZnVuY3Rpb25zIHRvIGJlIHVzZWQgYnkgYXNzZXJ0aW9u cyB0aGF0IGFyZSBwcm90ZWN0ZWQgdmlhIHRoZSBSVEkgYW5kIGF0dGVzdGVkIHRvIHdpdGggdGhl IFJUUi7igJ0gW25tc10gTm90ZTogU1A4MDAtMTY0LmFzc2VydGlvbiBhcHBlYXJzIHRvIGJlIHN5 bm9ueW1vdXMgd2l0aCBTUDgwMC0xNjQuY2xhaW0gYW5kIFNQODAwLTE2NC5ldmlkZW5jZS4gVGhl IGRpc2N1c3Npb24gb24gcm9vdHMtb2YtdHJ1c3QgbWFrZXMgaXQgY2xlYXIgdGhhdCB0aGUgY2xh aW1zIChldmlkZW5jZSB8IGFzc2VydGlvbnMpIGFyZSB2ZXJpZmlhYmxlIHRvIGhhdmUgb3JpZ2lu YXRlZCBmcm9tIGEgcm9vdC1vZi10cnVzdC4NCg0KLSBjbGFpbTogIGFzIGRlZmluZWQgaW4gUkZD NzUxOS4NClNQODAwLTE2NC5jbGFpbTog4oCcQSBkZXZpY2Ugd2l0aCBpbnRlZ3JpdHkgaGFzIHRo ZSBhYmlsaXR5IHRvIGFzc2VydCBzcGVjaWZpYyBjbGFpbXMgYWJvdXQgaXRzIGNvbmZpZ3VyYXRp b24sIGhlYWx0aCwgb3Igb3BlcmF0aW5nIHN0YXR1cyBpbiBhIHdheSB0aGF0IEluZm9ybWF0aW9u IE93bmVycyBjYW4gY29uZmlkZW50bHkgcmVseSB1cG9uIHRvIG1ha2UgZGVjaXNpb25zIGFib3V0 IGludGVyYWN0aW5nIHdpdGggdGhlIGRldmljZSBhbmQgRGV2aWNlIE93bmVyLuKAnSBbbm1zXSBU aGUgU1A4MDAtMTY0LmNsYWltIGRvZXNu4oCZdCBhcHBlYXIgdG8gY29uZmxpY3Qgd2l0aCBSRkM3 NTE5LmNsYWltIHNlbWFudGljczsgYWx0aG91Z2ggUkZDNzUxOS5jbGFpbSBhbHNvIGRlZmluZXMg YSBwYXJ0aWN1bGFyIGVuY29kaW5nIHNjaGVtZS4gV2hlcmVhcyBTUDgwMC0xNjQuY2xhaW0gaXMg Y29uY2VwdHVhbCAob25seSkuIEl0IHNob3VsZCBiZSBwb3NzaWJsZSB0byBhbGxvdyBmb3IgdGhl IHVzZSBvZiDigJxjbGFpbeKAnSBpbiBjb250ZXh0cyB0aGF0IGNob3NlIHRvIGRlZmluZSBhbHRl cm5hdGl2ZSBlbmNvZGluZ3Mgc3VjaCBhcyBBU04uMS4gTm90ZTogU1A4MDAtMTY0LmFzc2VydGlv biBhcHBlYXJzIHRvIGJlIHN5bm9ueW1vdXMgd2l0aCBTUDgwMC0xNjQuY2xhaW0gYW5kIFNQODAw LTE2NC5ldmlkZW5jZS4NCg0KLSBlbnRpdHk6IGEgZGV2aWNlIG9yIGRldmljZSBzdWItbW9kdWxl IHRoYXQgY2FuIGdlbmVyYXRlIGEgY2xhaW0gb3Igc2V0IG9mDQogICAgICAgICAgY2xhaW1zIHdo aWNoIGNhbiBiZSB2ZXJpZmllZCBieSBhIHJlbW90ZSBwYXJ0eS4NClNQODAwLTE2NC5yb290IG9m IHRydXN0OiDigJxSb1RzIGFyZSBzZWN1cml0eSBwcmltaXRpdmVzIGNvbXBvc2VkIG9mIGhhcmR3 YXJlLCBmaXJtd2FyZSBhbmQvb3Igc29mdHdhcmUgdGhhdCBwcm92aWRlIGEgc2V0IG9mIHRydXN0 ZWQsIHNlY3VyaXR5LWNyaXRpY2FsIGZ1bmN0aW9ucy7igJ0gW25tc10gQSByb290IG9mIHRydXN0 IGFwcGVhcnMgdG8gYmUgYSDigJxzdWItbW9kdWxl4oCdIG9mIGEg4oCcZGV2aWNl4oCdLiBJdCBt aWdodCBoYXZlIGJlZW4gbW9yZSBjb3JyZWN0IGZvciB0aGUgc3VnZ2VzdGVkIGRlZmluaXRpb24g Zm9yIGF0dGVzdGF0aW9uIHRvIGhhdmUgdXNlZCB0aGUgdGVybSDigJxzdWItbW9kdWxl4oCdIGlu c3RlYWQgb2Yg4oCcZW50aXR54oCdIGdpdmVuIFNQODAwLTE2NC5yb290LW9mLXRydXN0IHRlcm0g bW9zdCBjbG9zZWx5IHJlc2VtYmxlcyB0aGUgc3VnZ2VzdGVkIOKAnHN1Yi1tb2R1bGXigJ0uIFBv c3NpYmx5IGl0IG1ha2VzIHNlbnNlIHRvIHVzZSB0aGUgdGVybSDigJxkZXZpY2XigJ0gdG8gcmVm ZXIgdG8gYSBkZXZpY2UgYW5kIOKAnHJvb3Qtb2YtdHJ1c3TigJ0gdG8gcmVmZXIgdG8gYSDigJxz dWItbW9kdWxl4oCdPw0KDQotIGVudGl0eTogYSBkZXZpY2Ugb3IgZGV2aWNlIHN1Yi1tb2R1bGUg dGhhdCBjYW4gZ2VuZXJhdGUgYSBjbGFpbSBvciBzZXQgb2YNCiAgICAgICAgICBjbGFpbXMgd2hp Y2ggY2FuIGJlIHZlcmlmaWVkIGJ5IGEgcmVtb3RlIHBhcnR5Lg0KU1A4MDAtMTY0LmVudGl0eTog 4oCcQW4gSW5mb3JtYXRpb24gT3duZXIgaXMgYW4gZW50aXR5IHdob3Nl4oCm4oCdIGFuZCDigJxh IERldmljZSBPd25lciBpcyBhbiBlbnRpdHkgdGhhdOKApuKAnSBbbm1zXSBTaW5jZSB0aGVyZSBp c27igJl0IGEgc3VnZ2VzdGVkIGFsdGVybmF0aXZlIGZvciBTUDgwMC0xNjQuZW50aXR5LCBwb3Nz aWJseSBpdCBtYWtlcyBzZW5zZSBub3QgdG8gb3ZlcmxvYWQg4oCcZW50aXR54oCdIHdpdGgg4oCc ZGV2aWNl4oCdIGFzIGVudGl0eSBhbHNvIGNhbiByZWZlciB0byBhIHBlcnNvbiBvciBvcmdhbml6 YXRpb24uDQoNCi0gcmVtb3RlIHBhcnR5OiBhbiBhY3RvciByZW1vdGUgZnJvbSBhbiBlbnRpdHkg dGhhdCB3aXNoZXMgdG8gdmVyaWZ5IHdoZXRoZXINCiAgICAgICAgICBhIGNsYWltIG9yIHNldCBv ZiBjbGFpbXMgb3JpZ2luYXRlZCBpbiBhIGdpdmVuIGVudGl0eS4NClNQODAwLTE2NCBkb2VzbuKA mXQgdXNlIHRoZSB0ZXJtIOKAnHJlbW90ZSBwYXJ0eeKAnSBpbnN0ZWFkIGl0IHVzZXMgYSBjb3Vw bGUgb2YgdGVybXMgdGhhdCBwb3RlbnRpYWxseSBjb3VsZCBiZSB1c2VkIGluIHBsYWNlIG9mIOKA nHJlbW90ZSBwYXJ0eeKAnS4gVGhlc2UgYXJlIOKAnHZlcmlmaWVy4oCdIGFuZCDigJxyZWx5aW5n IHBhcnR54oCdLg0KDQpTUDgwMC0xNjQudmVyaWZpZXI6IOKAnFRoZSBSVFIgd2lsbCBhcHBseSBp bnRlZ3JpdHkgYW5kIG5vbi1yZXB1ZGlhdGlvbiBwcm90ZWN0aW9ucyBvbiB0aGUgZGF0YSBzbyB0 aGF0IHN1YnNlcXVlbnQgc29mdHdhcmUgYWdlbnRzIGNhbm5vdCBhbHRlciBvciByZXBsYXkgdGhl IGRhdGEgd2l0aG91dCBkZXRlY3Rpb24uIFRoZSBlc3RhYmxpc2hlZCBpZGVudGl0aWVzIGFsbG93 IHZlcmlmaWVycyB0byB2ZXJpZnkgdGhlIHNvdXJjZSBvZiB0aGUgZGF0YSB1bmlxdWVseSBhbmQg d2l0aG91dCByZXB1ZGlhdGlvbi7igJ0NCg0KU1A4MDAtMTY0LnJlbHlpbmcgcGFydHk6IOKAnEEg ZGV2aWNlIGhhcyBpbnRlZ3JpdHkgaWYgaXRzIHNvZnR3YXJlLCBmaXJtd2FyZSwgYW5kIGhhcmR3 YXJlIGNvbmZpZ3VyYXRpb25zIGFyZSBpbiBhIHN0YXRlIHRoYXQgaXMgdHJ1c3RlZCBieSBhIHJl bHlpbmcgcGFydHku4oCdDQoNClNpbmNlIGl0IG1ha2VzIHNlbnNlIGZvciBJRVRGIGF0dGVzdGF0 aW9uIGVmZm9ydHMgdG8gYmUgYWxpZ25lZCB3aXRoIGFjY2VwdGVkIGFuZCBjaXRlZCBOSVNUIFNQ ODAwLTE2NCBkb2N1bWVudC4gUG9zc2libHksIHRoZSBjaGFydGVyIGNhbiB1c2UgdGVybWlub2xv Z3kgaW50cm9kdWNlZCB0aGVyZSBhbmQgc2VlayBub3QgdG8gcmVkZWZpbmUgb3IgY2xhcmlmeS4g QXMgbG9uZyBhcyB0aGUgY2hhcnRlciB0ZXJtaW5vbG9neSBpcyBhbGlnbmVkIHdpdGggdGhhdCBv ZiBTUDgwMC0xNjQsIGl0IHNob3VsZCBiZSBwb3NzaWJsZSBmb3IgdGhlIEF0dGVzdGF0aW9uIEJP RiB0byBkaXNjdXNzIGEgV0cgY2hhcnRlciB3aXRob3V0IG5lZWRsZXNzIGNvbmZ1c2lvbiBhbmQg bWlzaW50ZXJwcmV0YXRpb24gZHVlIHRvIGluY29uc2lzdGVudCBhbmQgYWx0ZXJuYXRpdmUgdXNl IG9mIHRlcm1pbm9sb2d5Lg0KDQotTmVkDQoNCg0KT24gMTAvMjMvMTgsIDc6NDAgQU0sICJFQVQg b24gYmVoYWxmIG9mIEplcmVteSBPJ0Rvbm9naHVlIiA8ZWF0LWJvdW5jZXNAaWV0Zi5vcmc8bWFp bHRvOmVhdC1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2Ygam9kb25vZ2hAcXRpLnF1YWxj b21tLmNvbTxtYWlsdG86am9kb25vZ2hAcXRpLnF1YWxjb21tLmNvbT4+IHdyb3RlOg0KDQpUaGUg V29ya2luZyBHcm91cCB3aWxsIGlkZW50aWZ5IHNlY3VyaXR5IGdvYWxzIHdoaWNoIGl0IGV4cGVj dHMgYSB0cnVzdHdvcnRoeQ0KZXhlY3V0aW9uIGNvbnRleHQgdG8gYWRkcmVzcywgd2hpY2ggd2ls bCBhc3N1bWUgdGhlIHByZXNlbmNlIG9mIFJvb3RzIG9mDQpUcnVzdCAoYXMgZGVmaW5lZCBieSBO SVNUIFtTUDgwMC0xNjRdKS4gVGhlIGRldGFpbGVkIHNwZWNpZmljYXRpb24gb2Ygc3VjaA0KY29u dGV4dHMgaXMgb3V0IG9mIHNjb3BlLg0K --_000_048076C6C8C44F14961CC990F154E174intelcom_ Content-Type: text/html; charset="utf-8" Content-ID: <8BF7792FA08B9B4CA27F325D8FAF07C2@intel.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpDb3VyaWVyOw0KCXBhbm9zZS0xOjIgMCA1IDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToy IDQgNSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6RGVuZ1hpYW47 DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiXEBEZW5nWGlhbiI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAx IDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OlRpbWVzTmV3Um9tYW5QU01UOw0KCXBh bm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpw Lk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJ bWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28t c3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJs aW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUt cHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7 fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5 bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJp Z2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47 DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9 DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglm b250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCglmb250LXZhcmlhbnQ6bm9ybWFsICFp bXBvcnRhbnQ7DQoJY29sb3I6d2luZG93dGV4dDsNCgl0ZXh0LXRyYW5zZm9ybTpub25lOw0KCW1z by1jb250ZXh0dWFsLWFsdGVybmF0ZXM6eWVzOw0KCWZvbnQtd2VpZ2h0Om5vcm1hbDsNCglmb250 LXN0eWxlOm5vcm1hbDsNCgl0ZXh0LWRlY29yYXRpb246bm9uZSBub25lOw0KCXZlcnRpY2FsLWFs aWduOmJhc2VsaW5lO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1v bmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41 aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNl Y3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBs aXN0IGwwDQoJe21zby1saXN0LWlkOjE1NTk1ODQzMzM7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRz Oi02NDIxOTAyOTA7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOi41aW47 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsN Cgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlz dCBsMDpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNp emU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQt ZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi4w aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpA bGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1s ZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250 LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZv bnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9 DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1m b250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDkN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0K CWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0KCXtt YXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4t VVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24x Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O21z by1jb250ZXh0dWFsLWFsdGVybmF0ZXM6eWVzIj5TUDgwMC0xNjQgaXMgYSB1c2VmdWwgcmVmZXJl bmNlIGZvciBib3RoIGNvbmNlcHRzIGFuZCB0ZXJtaW5vbG9neS4gSW4gcGFydGljdWxhciBpdCBm b2xsb3dzIHRlcm1pbm9sb2d5IGNvbnZlbnRpb25zIHRoYXQgc2xpZ2h0bHkgZGlmZmVyIGZyb20g c29tZSB0ZXJtcyBzdWdnZXN0ZWQgYnkgdGhpcyBsaXN0Lg0KIEluIHBhcnRpY3VsYXIsPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7bXNvLWNvbnRleHR1YWwtYWx0ZXJuYXRlczp5ZXMiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6MS41cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEuNXB0O21hcmdpbi1s ZWZ0OjBpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OkNvdXJp ZXI7Y29sb3I6YmxhY2siPi0gYXR0ZXN0YXRpb246IGEgc2V0IG9mIGNsYWltcyB3aGljaCBjYW4g YmUgdmVyaWZpZWQgYXMgb3JpZ2luYXRpbmcgaW4gYW4gZW50aXR5LjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MS41 cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEuNXB0O21hcmdpbi1sZWZ0OjBpbiI+ DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6 YmxhY2siPlNQODAwLTE2NC5hdHRlc3Q6IOKAnDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5Sb290IG9mIFRydXN0 IGZvciBNZWFzdXJlbWVudCAoUlRNKeKAlDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5wcm92aWRlcyB0cnVzdGVk DQogbWVhc3VyZW1lbnQgZnVuY3Rpb25zIHRvIGJlIHVzZWQgYnkgYXNzZXJ0aW9ucyB0aGF0IGFy ZSBwcm90ZWN0ZWQgdmlhIHRoZSBSVEkgYW5kIGF0dGVzdGVkIHRvIHdpdGggdGhlIFJUUi7igJ08 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1RpbWVzTmV3Um9tYW5QU01UJnF1 b3Q7LHNlcmlmIj4gW25tc10gTm90ZTogU1A4MDAtMTY0LmFzc2VydGlvbiBhcHBlYXJzIHRvIGJl IHN5bm9ueW1vdXMgd2l0aCBTUDgwMC0xNjQuY2xhaW0gYW5kIFNQODAwLTE2NC5ldmlkZW5jZS4N CiBUaGUgZGlzY3Vzc2lvbiBvbiByb290cy1vZi10cnVzdCBtYWtlcyBpdCBjbGVhciB0aGF0IHRo ZSBjbGFpbXMgKGV2aWRlbmNlIHwgYXNzZXJ0aW9ucykgYXJlIHZlcmlmaWFibGUgdG8gaGF2ZSBv cmlnaW5hdGVkIGZyb20gYSByb290LW9mLXRydXN0Ljwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjguNXB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6YmxhY2siPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 MS41cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEuNXB0O21hcmdpbi1sZWZ0OjBp biI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29s b3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MS41cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJn aW4tYm90dG9tOjEuNXB0O21hcmdpbi1sZWZ0OjBpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXpl OjguNXB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6YmxhY2siPi0gY2xhaW06Jm5ic3A7IGFz IGRlZmluZWQgaW4gUkZDNzUxOS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjEuNXB0O21hcmdpbi1yaWdodDowaW47 bWFyZ2luLWJvdHRvbToxLjVwdDttYXJnaW4tbGVmdDowaW4iPg0KPHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo4LjVwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5TUDgwMC0xNjQuY2xh aW06IDwvc3Bhbj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPuKAnDwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5BIGRl dmljZSB3aXRoIGludGVncml0eSBoYXMgdGhlIGFiaWxpdHkgdG8gYXNzZXJ0IHNwZWNpZmljIGNs YWltcyBhYm91dCBpdHMgY29uZmlndXJhdGlvbiwgaGVhbHRoLCBvciBvcGVyYXRpbmcgc3RhdHVz IGluIGEgd2F5DQogdGhhdCBJbmZvcm1hdGlvbiBPd25lcnMgY2FuIGNvbmZpZGVudGx5IHJlbHkg dXBvbiB0byBtYWtlIGRlY2lzaW9ucyBhYm91dCBpbnRlcmFjdGluZyB3aXRoIHRoZSBkZXZpY2Ug YW5kIERldmljZSBPd25lci7igJ08L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O1RpbWVzTmV3Um9tYW5QU01UJnF1b3Q7LHNlcmlmIj4gW25tc10gVGhlIFNQODAwLTE2NC5jbGFp bSBkb2VzbuKAmXQgYXBwZWFyIHRvIGNvbmZsaWN0IHdpdGggUkZDNzUxOS5jbGFpbSBzZW1hbnRp Y3M7DQogYWx0aG91Z2ggUkZDNzUxOS5jbGFpbSBhbHNvIGRlZmluZXMgYSBwYXJ0aWN1bGFyIGVu Y29kaW5nIHNjaGVtZS4gV2hlcmVhcyBTUDgwMC0xNjQuY2xhaW0gaXMgY29uY2VwdHVhbCAob25s eSkuIEl0IHNob3VsZCBiZSBwb3NzaWJsZSB0byBhbGxvdyBmb3IgdGhlIHVzZSBvZiDigJxjbGFp beKAnSBpbiBjb250ZXh0cyB0aGF0IGNob3NlIHRvIGRlZmluZSBhbHRlcm5hdGl2ZSBlbmNvZGlu Z3Mgc3VjaCBhcyBBU04uMS4gTm90ZTogU1A4MDAtMTY0LmFzc2VydGlvbg0KIGFwcGVhcnMgdG8g YmUgc3lub255bW91cyB3aXRoIFNQODAwLTE2NC5jbGFpbSBhbmQgU1A4MDAtMTY0LmV2aWRlbmNl LiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OjEuNXB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbToxLjVw dDttYXJnaW4tbGVmdDowaW4iPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZh bWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjEuNXB0O21hcmdp bi1yaWdodDowaW47bWFyZ2luLWJvdHRvbToxLjVwdDttYXJnaW4tbGVmdDowaW4iPg0KPHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj4t IGVudGl0eTogYSBkZXZpY2Ugb3IgZGV2aWNlIHN1Yi1tb2R1bGUgdGhhdCBjYW4gZ2VuZXJhdGUg YSBjbGFpbSBvciBzZXQgb2Y8YnI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 IGNsYWltcyB3aGljaCBjYW4gYmUgdmVyaWZpZWQgYnkgYSByZW1vdGUgcGFydHkuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDoxLjVwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MS41cHQ7bWFyZ2luLWxl ZnQ6MGluIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6OC41cHQ7Zm9udC1mYW1pbHk6Q291cmll cjtjb2xvcjpibGFjayI+U1A4MDAtMTY0LnJvb3Qgb2YgdHJ1c3Q6DQo8L3NwYW4+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztj b2xvcjpibGFjayI+4oCcPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPlJvVHMgYXJlIHNlY3VyaXR5IHByaW1pdGl2 ZXMgY29tcG9zZWQgb2YgaGFyZHdhcmUsIGZpcm13YXJlIGFuZC9vciBzb2Z0d2FyZSB0aGF0IHBy b3ZpZGUgYSBzZXQgb2YgdHJ1c3RlZCwgc2VjdXJpdHktY3JpdGljYWwNCiBmdW5jdGlvbnMu4oCd PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtUaW1lc05ld1JvbWFuUFNNVCZx dW90OyxzZXJpZiI+IFtubXNdIEEgcm9vdCBvZiB0cnVzdCBhcHBlYXJzIHRvIGJlIGEg4oCcc3Vi LW1vZHVsZeKAnSBvZiBhIOKAnGRldmljZeKAnS4gSXQgbWlnaHQgaGF2ZSBiZWVuIG1vcmUgY29y cmVjdCBmb3IgdGhlIHN1Z2dlc3RlZCBkZWZpbml0aW9uIGZvciBhdHRlc3RhdGlvbiB0byBoYXZl IHVzZWQgdGhlIHRlcm0g4oCcc3ViLW1vZHVsZeKAnSBpbnN0ZWFkDQogb2Yg4oCcZW50aXR54oCd IGdpdmVuIFNQODAwLTE2NC5yb290LW9mLXRydXN0IHRlcm0gbW9zdCBjbG9zZWx5IHJlc2VtYmxl cyB0aGUgc3VnZ2VzdGVkIOKAnHN1Yi1tb2R1bGXigJ0uIFBvc3NpYmx5IGl0IG1ha2VzIHNlbnNl IHRvIHVzZSB0aGUgdGVybSDigJxkZXZpY2XigJ0gdG8gcmVmZXIgdG8gYSBkZXZpY2UgYW5kIOKA nHJvb3Qtb2YtdHJ1c3TigJ0gdG8gcmVmZXIgdG8gYSDigJxzdWItbW9kdWxl4oCdPzwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6Ymxh Y2siPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6MS41cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEu NXB0O21hcmdpbi1sZWZ0OjBpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQt ZmFtaWx5OkNvdXJpZXI7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MS41cHQ7bWFy Z2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEuNXB0O21hcmdpbi1sZWZ0OjBpbiI+DQo8c3Bh biBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6YmxhY2si Pi0gZW50aXR5OiBhIGRldmljZSBvciBkZXZpY2Ugc3ViLW1vZHVsZSB0aGF0IGNhbiBnZW5lcmF0 ZSBhIGNsYWltIG9yIHNldCBvZjxicj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgY2xhaW1zIHdoaWNoIGNhbiBiZSB2ZXJpZmllZCBieSBhIHJlbW90ZSBwYXJ0eS48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OjEuNXB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbToxLjVwdDttYXJnaW4t bGVmdDowaW4iPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7bXNvLWNvbnRleHR1YWwt YWx0ZXJuYXRlczp5ZXMiPlNQODAwLTE2NC5lbnRpdHk6IDwvc3Bhbj4NCjxzcGFuIHN0eWxlPSJm b250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7bXNvLWNv bnRleHR1YWwtYWx0ZXJuYXRlczp5ZXMiPuKAnDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5BbiBJbmZvcm1hdGlv biBPd25lciBpcyBhbiBlbnRpdHkgd2hvc2XigKbigJ0NCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkNvdXJpZXIiPmFuZDwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4g4oCc YSBEZXZpY2UgT3duZXIgaXMgYW4gZW50aXR5IHRoYXTigKbigJ0NCjwvc3Bhbj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkNvdXJpZXIiPltubXNdIFNpbmNlIHRoZXJl IGlzbuKAmXQgYSBzdWdnZXN0ZWQgYWx0ZXJuYXRpdmUgZm9yIFNQODAwLTE2NC5lbnRpdHksIHBv c3NpYmx5IGl0IG1ha2VzIHNlbnNlIG5vdCB0byBvdmVybG9hZCDigJxlbnRpdHnigJ0gd2l0aCDi gJxkZXZpY2XigJ0gYXMgZW50aXR5IGFsc28gY2FuIHJlZmVyIHRvIGEgcGVyc29uIG9yIG9yZ2Fu aXphdGlvbi48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1RpbWVzTmV3Um9t YW5QU01UJnF1b3Q7LHNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjEuNXB0O21hcmdpbi1yaWdodDowaW47 bWFyZ2luLWJvdHRvbToxLjVwdDttYXJnaW4tbGVmdDowaW4iPg0KPHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo4LjVwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRv bTo5LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZhbWlseTpDb3VyaWVy O2NvbG9yOmJsYWNrIj4tIHJlbW90ZSBwYXJ0eTogYW4gYWN0b3IgcmVtb3RlIGZyb20gYW4gZW50 aXR5IHRoYXQgd2lzaGVzIHRvIHZlcmlmeSB3aGV0aGVyPGJyPg0KJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyBhIGNsYWltIG9yIHNldCBvZiBjbGFpbXMgb3JpZ2luYXRlZCBpbiBh IGdpdmVuIGVudGl0eS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWJvdHRvbTo5LjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjVw dDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5TUDgwMC0xNjQgZG9lc27igJl0IHVz ZSB0aGUgdGVybSDigJxyZW1vdGUgcGFydHnigJ0gaW5zdGVhZCBpdCB1c2VzIGEgY291cGxlIG9m IHRlcm1zIHRoYXQgcG90ZW50aWFsbHkgY291bGQgYmUgdXNlZCBpbiBwbGFjZSBvZiDigJxyZW1v dGUgcGFydHnigJ0uIFRoZXNlIGFyZQ0KIOKAnHZlcmlmaWVy4oCdIGFuZCDigJxyZWx5aW5nIHBh cnR54oCdLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 OC41cHQ7Zm9udC1mYW1pbHk6Q291cmllcjtjb2xvcjpibGFjayI+U1A4MDAtMTY0LnZlcmlmaWVy Og0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDs7Y29sb3I6YmxhY2siPuKAnDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5UaGUgUlRS IHdpbGwgYXBwbHkgaW50ZWdyaXR5IGFuZCBub24tcmVwdWRpYXRpb24gcHJvdGVjdGlvbnMgb24g dGhlIGRhdGEgc28gdGhhdCBzdWJzZXF1ZW50IHNvZnR3YXJlIGFnZW50cyBjYW5ub3QgYWx0ZXIN CiBvciByZXBsYXkgdGhlIGRhdGEgd2l0aG91dCBkZXRlY3Rpb24uIFRoZSBlc3RhYmxpc2hlZCBp ZGVudGl0aWVzIGFsbG93IHZlcmlmaWVycyB0byB2ZXJpZnkgdGhlIHNvdXJjZSBvZiB0aGUgZGF0 YSB1bmlxdWVseSBhbmQgd2l0aG91dCByZXB1ZGlhdGlvbi7igJ08bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cD48c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7 Y29sb3I6YmxhY2siPlNQODAwLTE2NC5yZWx5aW5nIHBhcnR5Og0KPC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDs7Y29s b3I6YmxhY2siPuKAnDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5BIGRldmljZSBoYXMgaW50ZWdyaXR5IGlmIGl0 cyBzb2Z0d2FyZSwgZmlybXdhcmUsIGFuZCBoYXJkd2FyZSBjb25maWd1cmF0aW9ucyBhcmUgaW4g YSBzdGF0ZSB0aGF0IGlzIHRydXN0ZWQgYnkgYSByZWx5aW5nDQogcGFydHku4oCdPC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHA+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1RpbWVzTmV3 Um9tYW5QU01UJnF1b3Q7LHNlcmlmIj5TaW5jZSBpdCBtYWtlcyBzZW5zZSBmb3IgSUVURiBhdHRl c3RhdGlvbiBlZmZvcnRzIHRvIGJlIGFsaWduZWQgd2l0aCBhY2NlcHRlZCBhbmQgY2l0ZWQgTklT VCBTUDgwMC0xNjQgZG9jdW1lbnQuIFBvc3NpYmx5LCB0aGUgY2hhcnRlciBjYW4gdXNlIHRlcm1p bm9sb2d5IGludHJvZHVjZWQgdGhlcmUgYW5kIHNlZWsgbm90IHRvIHJlZGVmaW5lIG9yIGNsYXJp ZnkuDQogQXMgbG9uZyBhcyB0aGUgY2hhcnRlciB0ZXJtaW5vbG9neSBpcyBhbGlnbmVkIHdpdGgg dGhhdCBvZiBTUDgwMC0xNjQsIGl0IHNob3VsZCBiZSBwb3NzaWJsZSBmb3IgdGhlIEF0dGVzdGF0 aW9uIEJPRiB0byBkaXNjdXNzIGEgV0cgY2hhcnRlciB3aXRob3V0IG5lZWRsZXNzIGNvbmZ1c2lv biBhbmQgbWlzaW50ZXJwcmV0YXRpb24gZHVlIHRvIGluY29uc2lzdGVudCBhbmQgYWx0ZXJuYXRp dmUgdXNlIG9mIHRlcm1pbm9sb2d5LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwPjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTomcXVvdDtUaW1lc05ld1JvbWFuUFNNVCZxdW90OyxzZXJpZiI+LU5l ZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O21zby1jb250ZXh0dWFsLWFsdGVybmF0ZXM6eWVzIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDttc28tY29udGV4dHVhbC1hbHRlcm5hdGVzOnllcyI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+T24gMTAvMjMvMTgsIDc6NDAgQU0sICZxdW90O0VBVCBv biBiZWhhbGYgb2YgSmVyZW15IE8nRG9ub2dodWUmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzpl YXQtYm91bmNlc0BpZXRmLm9yZyI+ZWF0LWJvdW5jZXNAaWV0Zi5vcmc8L2E+IG9uIGJlaGFsZiBv Zg0KPGEgaHJlZj0ibWFpbHRvOmpvZG9ub2doQHF0aS5xdWFsY29tbS5jb20iPmpvZG9ub2doQHF0 aS5xdWFsY29tbS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZh bWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5UaGUgV29ya2luZyBHcm91cCB3aWxsIGlkZW50aWZ5 IHNlY3VyaXR5IGdvYWxzIHdoaWNoIGl0IGV4cGVjdHMgYSB0cnVzdHdvcnRoeTxicj4NCmV4ZWN1 dGlvbiBjb250ZXh0IHRvIGFkZHJlc3MsIHdoaWNoIHdpbGwgYXNzdW1lIHRoZSBwcmVzZW5jZSBv ZiBSb290cyBvZjxicj4NClRydXN0IChhcyBkZWZpbmVkIGJ5IE5JU1QgW1NQODAwLTE2NF0pLiBU aGUgZGV0YWlsZWQgc3BlY2lmaWNhdGlvbiBvZiBzdWNoPGJyPg0KY29udGV4dHMgaXMgb3V0IG9m IHNjb3BlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_048076C6C8C44F14961CC990F154E174intelcom_-- From nobody Tue Oct 23 10:28:32 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BA8A127B92; Tue, 23 Oct 2018 10:28:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X4z8myZM5GkB; Tue, 23 Oct 2018 10:28:23 -0700 (PDT) Received: from mga02.intel.com (mga02.intel.com [134.134.136.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2BAE1274D0; Tue, 23 Oct 2018 10:28:22 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga008.jf.intel.com ([10.7.209.65]) by orsmga101.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 23 Oct 2018 10:28:22 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos; i="5.54,417,1534834800"; d="scan'208,217"; a="83822974" Received: from orsmsx104.amr.corp.intel.com ([10.22.225.131]) by orsmga008.jf.intel.com with ESMTP; 23 Oct 2018 10:28:22 -0700 Received: from orsmsx116.amr.corp.intel.com (10.22.240.14) by ORSMSX104.amr.corp.intel.com (10.22.225.131) with Microsoft SMTP Server (TLS) id 14.3.319.2; Tue, 23 Oct 2018 10:28:22 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.251]) by ORSMSX116.amr.corp.intel.com ([169.254.7.58]) with mapi id 14.03.0319.002; Tue, 23 Oct 2018 10:28:21 -0700 From: "Smith, Ned" To: Jeremy O'Donoghue , Carl Wallace CC: Michael Richardson , "eat@ietf.org" , "rats@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUavNRF3KZGpU4TEGGfYgrNJhz76UtFauA Date: Tue, 23 Oct 2018 17:28:21 +0000 Message-ID: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.3.181015 x-originating-ip: [10.24.14.158] Content-Type: multipart/alternative; boundary="_000_581DD29C85D94BD8A0EE41761ED773B4intelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 17:28:26 -0000 --_000_581DD29C85D94BD8A0EE41761ED773B4intelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 U2VlIGlubGluZSBbbm1zXS4NCg0KT24gMTAvMjMvMTgsIDEwOjEwIEFNLCAiRUFUIG9uIGJlaGFs ZiBvZiBKZXJlbXkgTydEb25vZ2h1ZSIgPGVhdC1ib3VuY2VzQGlldGYub3JnPG1haWx0bzplYXQt Ym91bmNlc0BpZXRmLm9yZz4gb24gYmVoYWxmIG9mIGpvZG9ub2doQHF0aS5xdWFsY29tbS5jb208 bWFpbHRvOmpvZG9ub2doQHF0aS5xdWFsY29tbS5jb20+PiB3cm90ZToNCg0KDQpPbiAyMyBPY3Qg MjAxOCwgYXQgMTY6MTQsIENhcmwgV2FsbGFjZSA8Y2FybEByZWRob3VuZHNvZnR3YXJlLmNvbTxt YWlsdG86Y2FybEByZWRob3VuZHNvZnR3YXJlLmNvbT4+IHdyb3RlOg0KPHNuaXA+DQpXb3JrIEl0 ZW1zDQotLS0tLS0tLS0tDQpUaGUgV29ya2luZyBHcm91cCB3aWxsIGRldmVsb3Agc3BlY2lmaWNh dGlvbnMgc3VwcG9ydGluZyB0aGUgY3JlYXRpb24gb2YNCmludGVyb3BlcmFibGUgcmVtb3RlIGF0 dGVzdGF0aW9uIHByb2NlZHVyZXMgZm9yIGVudGl0aWVzIHdoaWNoIGluY29ycG9yYXRlDQpSb290 cyBvZiBUcnVzdC4gVGhlIG1haW4gZGVsaXZlcmFibGVzIGFyZSBhcyBmb2xsb3dzLg0KLSBQcm9k dWNlIGEgcmVxdWlyZW1lbnRzIGRvY3VtZW50IGVzdGFibGlzaGluZyBhIGNvbW1vbiB2b2NhYnVs YXJ5IGZvciByZW1vdGUNCiAgYXR0ZXN0YXRpb24sIGlkZW50aWZ5aW5nIG1lY2hhbmlzbXMgd2hp Y2ggd2lsbCBiZSBzdXBwb3J0ZWQgZm9yIGVzdGFibGlzaGluZw0KICB0cnVzdCBiZXR3ZWVuIGFu IGVudGl0eSBhbmQgYSByZW1vdGUgcGFydHksIGFuZCBlbnVtZXJhdGluZyBzYW1wbGUgdXNlLWNh c2VzDQogIGZvciByZW1vdGUgYXR0ZXN0YXRpb24uDQotIFByb2R1Y2Ugc3BlY2lmaWNhdGlvbiB0 ZXh0IGRlZmluaW5nIGludGVyb3BlcmFibGUgY3Jvc3MtcGxhdGZvcm0gY2xhaW1zIHdoaWNoDQog IHByb3ZpZGUgaW5mb3JtYXRpb24gYWJvdXQgYW4gZW50aXR5IGluIHN1cHBvcnQgb2YgdGhlIHJl cXVpcmVkIHVzZS1jYXNlcywgYW5kDQogIGV4dGVuZGluZyB0aGUgc2V0IG9mIGNsYWltcyBkZWZp bmVkIGluIFJGQzc1MTkgYW5kIFJGQzgzOTIuIFRoZSBzcGVjaWZpY2F0aW9uDQogIHdpbGwgZGVz Y3JpYmUgdGhlIHN5bnRheCBmb3IgZWFjaCBjbGFpbSBpbiBhdCBsZWFzdCB0aGUgZm9sbG93aW5n IGZvcm1hdHM6DQogICAgLSBDQk9SIFtSRkM3MDQ5XQ0KICAgIC0gSlNPTiBbUkZDNzE1OV0NCiAg ICAtIFlBTkcgW1JGQzYwMjBdDQpbQ1ddIEFTTi4xIGlzIGFscmVhZHkgcGxheWVyIGZvciBhIG51 bWJlciBvZiBhdHRlc3RhdGlvbiBmb3JtYXRzLiBBbnkgcmVhc29uIHRvIGV4Y2x1ZGUgaXQ/DQoN Ck5vbmUgSSBjYW4gdGVjaG5pY2FsbHkganVzdGlmeS4gSXQgc2VlbXMgc2Vuc2libGUgdG8gaGF2 ZSBBU04uMSBpbiBzY29wZSwgYXQgbGVhc3QgaW4gdGVybXMgb2YgZGVmaW5pbmcgdGhlIHN5bnRh eCBvZiBjbGFpbXMgaW4gQVNOLjEuIEkgYW0gbGVzcyBzdXJlIHdoZXRoZXIgaXQgbWFrZXMgc2Vu c2UgdG8gZGVmaW5lIHNpZ25pbmcgcHJvY2VkdXJlcyBmb3IgQVNOMS4gKHNpbmNlIHRoZXNlIGFy ZSBwcmVzdW1hYmx5IGRlZmluZWQgZWxzZXdoZXJlKSwgYnV0IEkgY291bGQgYmUgcGVyc3VhZGVk IChlLmcuIGJ5IHRoZSBzdGF0ZW1lbnQgIm5vIHRoZXkgYXJlbid0IGRlZmluZWQgZWxzZXdoZXJl IC0gYXQgbGVhc3Qgbm90IGZvciB0aGlzIGltcG9ydGFudCB1c2UtY2FzZSIpLg0KW25tc10gVGhl IHJlbGV2YW50IHF1ZXN0aW9uIHRvIGNvbnNpZGVyIGlzIHdoZXRoZXIgb3Igbm90IHRoZSBzZW1h bnRpY3Mgb2YgZWxzZXdoZXJlIGRlZmluZWQgQVNOLjEgZXF1YWwgdGhhdCBvZiB0aGUgQ0JPUiB8 IEpTT04gfCBZQU5HIGRlZmluaXRpb25zLiBTaW5jZSBpdCBpcyBvZnRlbiB0aGUgY2FzZSB0aGF0 IHNlbWFudGljcyBhcmUgaW5mZXJyZWQgdGhyb3VnaCB0cmliYWwgdW5kZXJzdGFuZGluZyBhbmQv b3IgaHVtYW4gcmVhZGFibGUgZG9jdW1lbnRzLCB0aGUgZGF0YSBtb2RlbCBkZXNjcmlwdGlvbnMg Y291bGQgZGlzYWdyZWUgdW5sZXNzIGRvY3VtZW50ZWQgYXMgdGhlIGRhdGEgbW9kZWwgYmluZGlu Z3Mgb2YgYW4gaW5mb3JtYXRpb24gbW9kZWwgcmVwcmVzZW50YXRpb24gKHdoZXJlIHRoZSBpbmZv cm1hdGlvbiBtb2RlbCBsaWtlbHkgaXMgYWNjb21wYW5pZWQgYnkgaHVtYW4gcmVhZGFibGUgdGV4 dCB0aGF0IGNhcHR1cmVzIGludGVuZGVkIHNlbWFudGljcykuDQoNCi0gUHJvZHVjZSBzcGVjaWZp Y2F0aW9uIHRleHQgZGVmaW5pbmcgcHJvY2VkdXJlcyBhbmQgY29ycmVzcG9uZGluZyBhcmNoaXRl Y3R1cmVzDQogIHN1cHBvcnRpbmcgdmVyaWZpY2F0aW9uIG9mIGNsYWltcyB3aXRoaW4gYW4gYXR0 ZXN0YXRpb24gYmFzZWQgb24gbWVhc3VyZWQgZmlsZQ0KICBleGVjdXRpb24gcHJvY2VkdXJlcyBh bmQgc3VwcG9ydGluZzoNCiAgICAtIEV4cGxpY2l0IGF0dGVzdGF0aW9uIHdoZXJlaW4gYSBzZXQg b2YgY2xhaW1zIGlzIHRyYW5zcG9ydGVkIGluIHRoZSBhdHRlc3RhdGlvbjsNCiAgICAtIEltcGxp Y2l0IGF0dGVzdGF0aW9uIHdoZXJlaW4gYSBzZXQgb2YgY2xhaW1zIGlzIGltcGxpZWQgYnkgcG9z c2Vzc2lvbiBvZiBhIHNlY3JldC4NCltubXNdIE5vdGU6IHRoZSBTUDgwMC0xNjQudmVyaWZpZXIg bXVzdCByZWx5IG9uIHNvbWUgZm9ybSBvZiBvdXQtb2YtYmFuZHMgY29tbXVuaWNhdGlvbiBmcm9t IHRoZSBTUDgwMC0xNTQuZW50aXR5IHRoYXQgaXMga25vd2xlZGdlYWJsZSByZWdhcmRpbmcgdGhl IGNsYWltYWJsZSBjbGFpbXMgYXNzZXJ0ZWQgYnkgdGhlIFNQODAwLTE2NC5yb290LW9mLXRydXN0 IGZvciB0aGUgU1A4MDAtMTY0LnZlcmlmaWVyIHRvIGtub3cgd2hpY2ggY2xhaW1zIHNlbWFudGlj cyB0byBhc2NyaWJlIHRvIHRoZSBzZWNyZXQuDQotIFByb2R1Y2Ugc3BlY2lmaWNhdGlvbiB0ZXh0 IGRlZmluaW5nIHByb2NlZHVyZXMgYW5kIGNvcnJlc3BvbmRpbmcgYXJjaGl0ZWN0dXJlcw0KICBz dXBwb3J0aW5nIHZlcmlmaWNhdGlvbiBvZiBjbGFpbXMgZW5jYXBzdWxhdGVkIGluOg0KICAgIC0g Q0JPUiBXZWIgVG9rZW4gc3RydWN0dXJlcyBbUkZDODM5Ml0NCiAgICAtIEpTT04gV2ViIFRva2Vu IHN0cnVjdHVyZXMgW1JGQzc1MTldDQpbQ1ddIEFzIG5vdGVkIGJlZm9yZSwgSSdkIGxpa2UgdG8g c2VlIGJpbmRpbmcgdG8gY2VydGlmaWNhdGUgZW5yb2xsbWVudCBwcm90b2NvbHMgaW5jbHVkZWQg aGVyZSBhcyB3ZWxsLiBUaGlzIGlzIHNvbWV0aGluZyB3ZSBhcmUgZG9pbmcgdG9kYXksIHdpdGhv dXQgc3RhbmRhcmRzIGdyb3VuZGluZyAoYXMgaWxsdXN0cmF0ZWQgaW4gcGlsZSBvZiBhdHRlc3Rh dGlvbnMgc2hhcmVkIHZpYSBHaXRodWIgYSBmZXcgd2Vla3MgYmFjaykuDQoNCkl0IHdvdWxkIGJl IGludGVyZXN0aW5nIHRvIHVuZGVyc3RhbmQgeW91ciB0aGlua2luZyBhIGJpdCBmdXJ0aGVyLiBB dCBvbmUgbGV2ZWwgaXQgaXMgZmFpcmx5IHN0cmFpZ2h0Zm9yd2FyZCB0byBkZWZpbmUgYSBjbGFp bSB3aG9zZSB2YWx1ZSBjb250YWlucyBhbiBYLjUwOSBjZXJ0aWZpY2F0ZSwgYnV0IEkgc3VzcGVj dCB0aGF0IGJpbmRpbmcgbWF5IGltcGx5IG1vcmUgdGhhbiB0aGF0Lg0KW25tc10gSXQgaXMgYWxz byByZWFzb25hYmxlIHRvIGNvbnNpZGVyIGFuIFguNTA5IGNlcnRpZmljYXRlIGFzIGJlaW5nIGFu IG9iamVjdCB0aGF0IGNvbnRhaW5zIGEgc2V0IG9mIGNsYWltcyAocmF0aGVyIHRoYW4gdGhlIG90 aGVyIHdheSBhcm91bmQpLg0KDQotIFBlcmZvcm0gcHJpdmFjeSBhbmFseXNpcyBvZiBib3RoIGNs YWltcyBhbmQgdGhlIGNyeXB0b2dyYXBoaWMgcHJvY2VkdXJlcyB1c2VkIHRvDQogIGVzdGFibGlz aCB0cnVzdC4gVGhpcyBpbmZvcm1hdGlvbiB3aWxsIGJlIGluY2x1ZGVkIGFzIGFwcHJvcHJpYXRl IGluIHRoZQ0KICBkZWxpdmVyYWJsZSBzcGVjaWZpY2F0aW9ucywgYW5kIG1heSBpbXBseSBleHRl bnNpb24gb2YgcHJvY2VkdXJlcyBkZWZpbmVkIGluDQogIG90aGVyIHNwZWNpZmljYXRpb25zIGlu IHN1cHBvcnQgb2YgcHJpdmFjeSBnb2Fscy4NCg0KSXQgc2VlbXMgdG8gbWUgdGhhdCB0aGVyZSBh cmUgdHdvIHdheXMgdG8gcHJvZHVjZSB0aGUgbWFpbiBzcGVjaWZpY2F0aW9uIGRlbGl2ZXJhYmxl cy4gSSBoYXZlIGRlbGliZXJhdGVseSBsZWZ0IHRoZSB0ZXh0IGFib3ZlIHNsaWdodGx5IHZhZ3Vl IG9uIHRoaXMuDQrCtyAgICAgICAgIEEgY2xhaW1zIHNwZWNpZmljYXRpb24gY29tbW9uIHRvIFJB VFMgYW5kIEVBVCB3aXRoIHNlcGFyYXRlIFJBVFMgYW5kIEVBVCBwcm9jZWR1cmUgc3BlY2lmaWNh dGlvbnMuDQrCtyAgICAgICAgIEEgY2xhaW1zIHNwZWNpZmljYXRpb24gYWxzbyBpbmNvcnBvcmF0 aW5nIEVBVCBwcm9jZWR1cmVzIGFuZCBhIHNlcGFyYXRlIFJBVFMgcHJvY2VkdXJlIHNwZWNpZmlj YXRpb24uIFRoaXMgd291bGQgYmUgbXkgcHJlZmVycmVkIG9wdGlvbi4NCm8gICAgSSBiZWxpZXZl IHRoZXJlIGFyZSB2ZXJ5IGZldyBwcm9jZWR1cmVzIG5lZWRlZCBmb3IgRUFUIG90aGVyIHRoYW4g dGhlIHBvc3NpYmxlIG5lZWQgdG8gc3VwcG9ydCBhIG5vbmNlIHRvIGVuc3VyZSBmcmVzaG5lc3MN Cg0KSmVyZW15DQoNCk5vdGljZSBob3cgYnkgYWJvdXQgdGhlIHNlY29uZCBwYXJhZ3JhcGggKDZ0 aXNjaCB0YWtlcyBhIGJpdCBsb25nZXIpLCBlYWNoDQpnZXRzIGludG8gd2hhdCB0aGUgV0cgd2ls bCBkbz8NCg0KLS0NCk1pY2hhZWwgUmljaGFyZHNvbiA8bWNyK0lFVEZAc2FuZGVsbWFuLmNhPG1h aWx0bzptY3IrSUVURkBzYW5kZWxtYW4uY2E+PiwgU2FuZGVsbWFuIFNvZnR3YXJlIFdvcmtzDQot PSBJUHY2IElvVCBjb25zdWx0aW5nID0tDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KRUFUIG1haWxpbmcgbGlzdA0KRUFUQGlldGYub3JnPG1haWx0bzpF QVRAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0K DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXyBSQVRTIG1h aWxpbmcgbGlzdCBSQVRTQGlldGYub3JnPG1haWx0bzpSQVRTQGlldGYub3JnPiBodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMNCg0KDQo= --_000_581DD29C85D94BD8A0EE41761ED773B4intelcom_ Content-Type: text/html; charset="utf-8" Content-ID: <0C33CE44C293B24598885AE22AB5FD60@intel.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpDb3VyaWVyOw0KCXBhbm9zZS0xOjIgMCA1IDAgMCAwIDAgMCAwIDA7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAg MCAwIDAgMCAwIDAgMDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgi Ow0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZh bWlseTpEZW5nWGlhbjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIg NDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJcQERlbmdYaWFuIjsNCglwYW5vc2UtMToy IDEgNiAwIDMgMSAxIDEgMSAxO30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1h bCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJv dHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6 dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5tc29u b3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTpt c29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsN Cgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1z aXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVt YWlsU3R5bGUxOA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWls eToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCglmb250LXZhcmlhbnQ6bm9ybWFsICFpbXBvcnRhbnQ7 DQoJY29sb3I6d2luZG93dGV4dDsNCgl0ZXh0LXRyYW5zZm9ybTpub25lOw0KCW1zby1jb250ZXh0 dWFsLWFsdGVybmF0ZXM6eWVzOw0KCWZvbnQtd2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxlOm5v cm1hbDsNCgl0ZXh0LWRlY29yYXRpb246bm9uZSBub25lOw0KCXZlcnRpY2FsLWFsaWduOmJhc2Vs aW5lO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZv bnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGlu Ow0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJ e3BhZ2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJ e21zby1saXN0LWlkOjE1NzI2MTQ1MzY7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi0xMTkwMjEy ODM0O30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7 DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFu c2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2 ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpv Ow0KCW1zby1sZXZlbC10YWItc3RvcDoxLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7 DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgltc28tYmlkaS1mb250LWZhbWlseToiVGlt ZXMgTmV3IFJvbWFuIjt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS41 aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9 DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1z by1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1m b250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZl bDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C pzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0 Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwt dGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5 OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My41aW47 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsN Cgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpA bGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1s ZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250 LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDkN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0K CWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0K CXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0i RU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rp b24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O21zby1jb250ZXh0dWFsLWFsdGVybmF0ZXM6eWVzIj5TZWUgaW5saW5lIFtubXNdLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O21zby1jb250ZXh0dWFsLWFsdGVybmF0ZXM6eWVzIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj5PbiAxMC8yMy8xOCwgMTA6MTAgQU0sICZxdW90O0VBVCBvbiBiZWhh bGYgb2YgSmVyZW15IE8nRG9ub2dodWUmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzplYXQtYm91 bmNlc0BpZXRmLm9yZyI+ZWF0LWJvdW5jZXNAaWV0Zi5vcmc8L2E+IG9uIGJlaGFsZiBvZg0KPGEg aHJlZj0ibWFpbHRvOmpvZG9ub2doQHF0aS5xdWFsY29tbS5jb20iPmpvZG9ub2doQHF0aS5xdWFs Y29tbS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUg c3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPk9uIDIzIE9jdCAyMDE4 LCBhdCAxNjoxNCwgQ2FybCBXYWxsYWNlICZsdDs8YSBocmVmPSJtYWlsdG86Y2FybEByZWRob3Vu ZHNvZnR3YXJlLmNvbSI+Y2FybEByZWRob3VuZHNvZnR3YXJlLmNvbTwvYT4mZ3Q7IHdyb3RlOjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJt YXJnaW4tbGVmdDozLjc1cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDox LjVwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MS41cHQ7bWFyZ2luLWxlZnQ6LjVp biI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jmx0O3NuaXAmZ3Q7PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDoxLjVwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MS41cHQ7bWFyZ2luLWxl ZnQ6LjVpbjtmb250LXN0cmV0Y2g6IG5vcm1hbCI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjgu NXB0O2ZvbnQtZmFtaWx5OkNvdXJpZXIiPldvcmsgSXRlbXM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjEuNXB0O21h cmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbToxLjVwdDttYXJnaW4tbGVmdDouNWluO2ZvbnQt c3RyZXRjaDogbm9ybWFsIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6OC41cHQ7Zm9udC1mYW1p bHk6Q291cmllciI+LS0tLS0tLS0tLTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MS41cHQ7bWFyZ2luLXJpZ2h0OjBp bjttYXJnaW4tYm90dG9tOjEuNXB0O21hcmdpbi1sZWZ0Oi41aW47Zm9udC1zdHJldGNoOiBub3Jt YWwiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZhbWlseTpDb3VyaWVyIj5U aGUgV29ya2luZyBHcm91cCB3aWxsIGRldmVsb3Agc3BlY2lmaWNhdGlvbnMgc3VwcG9ydGluZyB0 aGUgY3JlYXRpb24gb2Y8YnI+DQppbnRlcm9wZXJhYmxlIHJlbW90ZSBhdHRlc3RhdGlvbiBwcm9j ZWR1cmVzIGZvciBlbnRpdGllcyB3aGljaCBpbmNvcnBvcmF0ZSZuYnNwOzxicj4NClJvb3RzIG9m IFRydXN0LiBUaGUgbWFpbiBkZWxpdmVyYWJsZXMgYXJlIGFzIGZvbGxvd3MuJm5ic3A7PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDoxLjVwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MS41cHQ7bWFyZ2lu LWxlZnQ6LjVpbjtmb250LXN0cmV0Y2g6IG5vcm1hbCI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXpl OjguNXB0O2ZvbnQtZmFtaWx5OkNvdXJpZXIiPi0gUHJvZHVjZSBhIHJlcXVpcmVtZW50cyBkb2N1 bWVudCBlc3RhYmxpc2hpbmcgYSBjb21tb24gdm9jYWJ1bGFyeSBmb3IgcmVtb3RlPGJyPg0KJm5i c3A7IGF0dGVzdGF0aW9uLCBpZGVudGlmeWluZyBtZWNoYW5pc21zIHdoaWNoIHdpbGwgYmUgc3Vw cG9ydGVkIGZvciBlc3RhYmxpc2hpbmc8YnI+DQombmJzcDsgdHJ1c3QgYmV0d2VlbiBhbiBlbnRp dHkgYW5kIGEgcmVtb3RlIHBhcnR5LCBhbmQgZW51bWVyYXRpbmcgc2FtcGxlIHVzZS1jYXNlczxi cj4NCiZuYnNwOyBmb3IgcmVtb3RlIGF0dGVzdGF0aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MS41cHQ7bWFy Z2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEuNXB0O21hcmdpbi1sZWZ0Oi41aW47Zm9udC1z dHJldGNoOiBub3JtYWwiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZhbWls eTpDb3VyaWVyIj4tIFByb2R1Y2Ugc3BlY2lmaWNhdGlvbiB0ZXh0IGRlZmluaW5nIGludGVyb3Bl cmFibGUgY3Jvc3MtcGxhdGZvcm0gY2xhaW1zIHdoaWNoPGJyPg0KJm5ic3A7IHByb3ZpZGUgaW5m b3JtYXRpb24gYWJvdXQgYW4gZW50aXR5IGluIHN1cHBvcnQgb2YgdGhlIHJlcXVpcmVkIHVzZS1j YXNlcywgYW5kPGJyPg0KJm5ic3A7IGV4dGVuZGluZyB0aGUgc2V0IG9mIGNsYWltcyBkZWZpbmVk IGluIFJGQzc1MTkgYW5kIFJGQzgzOTIuIFRoZSBzcGVjaWZpY2F0aW9uPGJyPg0KJm5ic3A7IHdp bGwgZGVzY3JpYmUgdGhlIHN5bnRheCBmb3IgZWFjaCBjbGFpbSBpbiBhdCBsZWFzdCB0aGUgZm9s bG93aW5nIGZvcm1hdHM6PGJyPg0KJm5ic3A7ICZuYnNwOyAtIENCT1IgW1JGQzcwNDldPGJyPg0K Jm5ic3A7ICZuYnNwOyAtIEpTT04gW1JGQzcxNTldPGJyPg0KJm5ic3A7ICZuYnNwOyAtIFlBTkcg W1JGQzYwMjBdPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5bQ1ddIEFT Ti4xIGlzIGFscmVhZHkgcGxheWVyIGZvciBhIG51bWJlciBvZiBhdHRlc3RhdGlvbiBmb3JtYXRz LiBBbnkgcmVhc29uIHRvIGV4Y2x1ZGUgaXQ/PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5O b25lIEkgY2FuIHRlY2huaWNhbGx5IGp1c3RpZnkuIEl0IHNlZW1zIHNlbnNpYmxlIHRvIGhhdmUg QVNOLjEgaW4gc2NvcGUsIGF0IGxlYXN0IGluIHRlcm1zIG9mIGRlZmluaW5nIHRoZSBzeW50YXgg b2YgY2xhaW1zIGluIEFTTi4xLiBJIGFtIGxlc3Mgc3VyZSB3aGV0aGVyIGl0IG1ha2VzIHNlbnNl IHRvIGRlZmluZSBzaWduaW5nIHByb2NlZHVyZXMgZm9yIEFTTjEuDQogKHNpbmNlIHRoZXNlIGFy ZSBwcmVzdW1hYmx5IGRlZmluZWQgZWxzZXdoZXJlKSwgYnV0IEkgY291bGQgYmUgcGVyc3VhZGVk IChlLmcuIGJ5IHRoZSBzdGF0ZW1lbnQgJnF1b3Q7bm8gdGhleSBhcmVuJ3QgZGVmaW5lZCBlbHNl d2hlcmUgLSBhdCBsZWFzdCBub3QgZm9yIHRoaXMgaW1wb3J0YW50IHVzZS1jYXNlJnF1b3Q7KS48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O21zby1jb250ZXh0dWFsLWFsdGVybmF0ZXM6eWVzIj5bbm1zXSBUaGUgcmVsZXZh bnQgcXVlc3Rpb24gdG8gY29uc2lkZXIgaXMgd2hldGhlciBvciBub3QgdGhlIHNlbWFudGljcyBv ZiBlbHNld2hlcmUgZGVmaW5lZCBBU04uMSBlcXVhbCB0aGF0IG9mIHRoZSBDQk9SIHwgSlNPTiB8 IFlBTkcgZGVmaW5pdGlvbnMuIFNpbmNlIGl0IGlzIG9mdGVuIHRoZSBjYXNlDQogdGhhdCBzZW1h bnRpY3MgYXJlIGluZmVycmVkIHRocm91Z2ggdHJpYmFsIHVuZGVyc3RhbmRpbmcgYW5kL29yIGh1 bWFuIHJlYWRhYmxlIGRvY3VtZW50cywgdGhlIGRhdGEgbW9kZWwgZGVzY3JpcHRpb25zIGNvdWxk IGRpc2FncmVlIHVubGVzcyBkb2N1bWVudGVkIGFzIHRoZSBkYXRhIG1vZGVsIGJpbmRpbmdzIG9m IGFuIGluZm9ybWF0aW9uIG1vZGVsIHJlcHJlc2VudGF0aW9uICh3aGVyZSB0aGUgaW5mb3JtYXRp b24gbW9kZWwgbGlrZWx5IGlzDQogYWNjb21wYW5pZWQgYnkgaHVtYW4gcmVhZGFibGUgdGV4dCB0 aGF0IGNhcHR1cmVzIGludGVuZGVkIHNlbWFudGljcykuIDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDou NWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1h cmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxibG9j a3F1b3RlIHN0eWxlPSJtYXJnaW4tbGVmdDozLjc1cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8ZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDoxLjVwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MS41cHQ7 bWFyZ2luLWxlZnQ6LjVpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFt aWx5OkNvdXJpZXIiPi0gUHJvZHVjZSBzcGVjaWZpY2F0aW9uIHRleHQgZGVmaW5pbmcgcHJvY2Vk dXJlcyBhbmQgY29ycmVzcG9uZGluZyBhcmNoaXRlY3R1cmVzPGJyPg0KJm5ic3A7IHN1cHBvcnRp bmcgdmVyaWZpY2F0aW9uIG9mIGNsYWltcyB3aXRoaW4gYW4gYXR0ZXN0YXRpb24gYmFzZWQgb24g bWVhc3VyZWQgZmlsZTxicj4NCiZuYnNwOyBleGVjdXRpb24gcHJvY2VkdXJlcyBhbmQgc3VwcG9y dGluZzo8YnI+DQombmJzcDsgJm5ic3A7IC0gRXhwbGljaXQgYXR0ZXN0YXRpb24gd2hlcmVpbiBh IHNldCBvZiBjbGFpbXMgaXMgdHJhbnNwb3J0ZWQgaW4gdGhlIGF0dGVzdGF0aW9uOzxicj4NCiZu YnNwOyAmbmJzcDsgLSBJbXBsaWNpdCBhdHRlc3RhdGlvbiB3aGVyZWluIGEgc2V0IG9mIGNsYWlt cyBpcyBpbXBsaWVkIGJ5IHBvc3Nlc3Npb24gb2YgYSBzZWNyZXQuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDoxLjVw dDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MS41cHQ7bWFyZ2luLWxlZnQ6MGluIj4N CjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O21zby1jb250ZXh0dWFsLWFsdGVybmF0ZXM6 eWVzIj5bbm1zXSBOb3RlOiB0aGUgU1A4MDAtMTY0LnZlcmlmaWVyIG11c3QgcmVseSBvbiBzb21l IGZvcm0gb2Ygb3V0LW9mLWJhbmRzIGNvbW11bmljYXRpb24gZnJvbSB0aGUgU1A4MDAtMTU0LmVu dGl0eSB0aGF0IGlzIGtub3dsZWRnZWFibGUgcmVnYXJkaW5nIHRoZSBjbGFpbWFibGUgY2xhaW1z IGFzc2VydGVkIGJ5IHRoZSBTUDgwMC0xNjQucm9vdC1vZi10cnVzdA0KIGZvciB0aGUgU1A4MDAt MTY0LnZlcmlmaWVyIHRvIGtub3cgd2hpY2ggY2xhaW1zIHNlbWFudGljcyB0byBhc2NyaWJlIHRv IHRoZSBzZWNyZXQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDoxLjVwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1i b3R0b206MS41cHQ7bWFyZ2luLWxlZnQ6LjVpbjtmb250LXN0cmV0Y2g6IG5vcm1hbCI+DQo8c3Bh biBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OkNvdXJpZXIiPi0gUHJvZHVjZSBz cGVjaWZpY2F0aW9uIHRleHQgZGVmaW5pbmcgcHJvY2VkdXJlcyBhbmQgY29ycmVzcG9uZGluZyBh cmNoaXRlY3R1cmVzPGJyPg0KJm5ic3A7IHN1cHBvcnRpbmcgdmVyaWZpY2F0aW9uIG9mIGNsYWlt cyBlbmNhcHN1bGF0ZWQgaW46PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDoxLjVwdDttYXJnaW4tcmlnaHQ6MGluO21h cmdpbi1ib3R0b206MS41cHQ7bWFyZ2luLWxlZnQ6LjVpbjtmb250LXN0cmV0Y2g6IG5vcm1hbCI+ DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OkNvdXJpZXIiPiZuYnNw OyAmbmJzcDsgLSBDQk9SIFdlYiBUb2tlbiBzdHJ1Y3R1cmVzIFtSRkM4MzkyXTxicj4NCiZuYnNw OyAmbmJzcDsgLSBKU09OIFdlYiBUb2tlbiBzdHJ1Y3R1cmVzIFtSRkM3NTE5XTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3Rl Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+W0NXXSBBcyBub3RlZCBiZWZvcmUsIEknZCBs aWtlIHRvIHNlZSBiaW5kaW5nIHRvIGNlcnRpZmljYXRlIGVucm9sbG1lbnQgcHJvdG9jb2xzIGlu Y2x1ZGVkIGhlcmUgYXMgd2VsbC4gVGhpcyBpcyBzb21ldGhpbmcgd2UgYXJlIGRvaW5nIHRvZGF5 LCB3aXRob3V0IHN0YW5kYXJkcyBncm91bmRpbmcgKGFzIGlsbHVzdHJhdGVkDQogaW4gcGlsZSBv ZiBhdHRlc3RhdGlvbnMgc2hhcmVkIHZpYSBHaXRodWIgYSBmZXcgd2Vla3MgYmFjaykuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj5JdCB3b3VsZCBiZSBpbnRlcmVzdGluZyB0byB1bmRlcnN0 YW5kIHlvdXIgdGhpbmtpbmcgYSBiaXQgZnVydGhlci4gQXQgb25lIGxldmVsIGl0IGlzIGZhaXJs eSBzdHJhaWdodGZvcndhcmQgdG8gZGVmaW5lIGEgY2xhaW0gd2hvc2UgdmFsdWUgY29udGFpbnMg YW4gWC41MDkgY2VydGlmaWNhdGUsIGJ1dCBJIHN1c3BlY3QgdGhhdCBiaW5kaW5nIG1heSBpbXBs eSBtb3JlDQogdGhhbiB0aGF0LjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij4mbmJzcDs8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDttc28tY29udGV4dHVhbC1hbHRlcm5hdGVzOnllcyI+W25tc10gSXQg aXMgYWxzbyByZWFzb25hYmxlIHRvIGNvbnNpZGVyIGFuIFguNTA5IGNlcnRpZmljYXRlIGFzIGJl aW5nIGFuIG9iamVjdCB0aGF0IGNvbnRhaW5zIGEgc2V0IG9mIGNsYWltcyAocmF0aGVyIHRoYW4g dGhlIG90aGVyIHdheSBhcm91bmQpLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4w cHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdp bi1sZWZ0OjMuNzVwdDttYXJnaW4tcmlnaHQ6MGluIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjEuNXB0 O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbToxLjVwdDttYXJnaW4tbGVmdDouNWluIj4N CjxzcGFuIHN0eWxlPSJmb250LXNpemU6OC41cHQ7Zm9udC1mYW1pbHk6Q291cmllciI+LSBQZXJm b3JtIHByaXZhY3kgYW5hbHlzaXMgb2YgYm90aCBjbGFpbXMgYW5kIHRoZSBjcnlwdG9ncmFwaGlj IHByb2NlZHVyZXMgdXNlZCB0bzxicj4NCiZuYnNwOyBlc3RhYmxpc2ggdHJ1c3QuIFRoaXMgaW5m b3JtYXRpb24gd2lsbCBiZSBpbmNsdWRlZCBhcyBhcHByb3ByaWF0ZSBpbiB0aGU8YnI+DQombmJz cDsgZGVsaXZlcmFibGUgc3BlY2lmaWNhdGlvbnMsIGFuZCBtYXkgaW1wbHkgZXh0ZW5zaW9uIG9m IHByb2NlZHVyZXMgZGVmaW5lZCBpbjxicj4NCiZuYnNwOyBvdGhlciBzcGVjaWZpY2F0aW9ucyBp biBzdXBwb3J0IG9mIHByaXZhY3kgZ29hbHMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPkl0IHNlZW1zIHRvIG1lIHRoYXQg dGhlcmUgYXJlIHR3byB3YXlzIHRvIHByb2R1Y2UgdGhlIG1haW4gc3BlY2lmaWNhdGlvbiBkZWxp dmVyYWJsZXMuIEkgaGF2ZSBkZWxpYmVyYXRlbHkgbGVmdCB0aGUgdGV4dCBhYm92ZSBzbGlnaHRs eSB2YWd1ZSBvbiB0aGlzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoxLjBpbjt0ZXh0LWluZGVudDotLjI1aW47 bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9sIj48c3BhbiBzdHlsZT0ibXNv LWxpc3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC41cHQiPkEgY2xhaW1zIHNwZWNpZmljYXRpb24gY29tbW9uIHRvIFJBVFMgYW5kIEVBVCB3 aXRoIHNlcGFyYXRlIFJBVFMgYW5kIEVBVCBwcm9jZWR1cmUgc3BlY2lmaWNhdGlvbnMuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEuMGlu O3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+DQo8IVtpZiAhc3Vw cG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1i b2wiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4w cHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhW2VuZGlmXT48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+QSBjbGFpbXMgc3BlY2lmaWNhdGlvbiBhbHNv IGluY29ycG9yYXRpbmcgRUFUIHByb2NlZHVyZXMgYW5kIGEgc2VwYXJhdGUgUkFUUyBwcm9jZWR1 cmUgc3BlY2lmaWNhdGlvbi4gVGhpcyB3b3VsZCBiZSBteSBwcmVmZXJyZWQgb3B0aW9uLg0KPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0OjEu NWluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDIgbGZvMSI+DQo8IVtpZiAh c3VwcG9ydExpc3RzXT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PHNwYW4gc3R5bGU9Im1zby1saXN0Oklnbm9yZSI+bzxz cGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7 Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQiPkkgYmVsaWV2ZSB0aGVyZSBhcmUgdmVyeSBmZXcgcHJvY2VkdXJl cyBuZWVkZWQgZm9yIEVBVCBvdGhlciB0aGFuIHRoZSBwb3NzaWJsZSBuZWVkIHRvIHN1cHBvcnQg YSBub25jZSB0byBlbnN1cmUgZnJlc2huZXNzPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQiPkplcmVteTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFy Z2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+PGJy Pg0KTm90aWNlIGhvdyBieSBhYm91dCB0aGUgc2Vjb25kIHBhcmFncmFwaCAoNnRpc2NoIHRha2Vz IGEgYml0IGxvbmdlciksIGVhY2g8YnI+DQpnZXRzIGludG8gd2hhdCB0aGUgV0cgd2lsbCBkbz88 YnI+DQo8YnI+DQotLTxicj4NCk1pY2hhZWwgUmljaGFyZHNvbiAmbHQ7PGEgaHJlZj0ibWFpbHRv Om1jciYjNDM7SUVURkBzYW5kZWxtYW4uY2EiPm1jciYjNDM7SUVURkBzYW5kZWxtYW4uY2E8L2E+ Jmd0OywgU2FuZGVsbWFuIFNvZnR3YXJlIFdvcmtzPGJyPg0KLT0gSVB2NiBJb1QgY29uc3VsdGlu ZyA9LTxicj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f PGJyPg0KRUFUIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpFQVRAaWV0Zi5vcmci PkVBVEBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL2VhdCI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9l YXQ8L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90 ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0Oi41aW4iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0Ij5fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXyBSQVRTIG1haWxpbmcgbGlzdA0KPGEgaHJl Zj0ibWFpbHRvOlJBVFNAaWV0Zi5vcmciPlJBVFNAaWV0Zi5vcmc8L2E+IDxhIGhyZWY9Imh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vcmF0cyI+DQpodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHM8L2E+IDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv YmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PGJyPg0KPGJyPg0KPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_581DD29C85D94BD8A0EE41761ED773B4intelcom_-- From nobody Tue Oct 23 10:31:52 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B2FD712F295 for ; Tue, 23 Oct 2018 10:31:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jdsD19QOt3-1 for ; Tue, 23 Oct 2018 10:31:41 -0700 (PDT) Received: from mail-qt1-x832.google.com (mail-qt1-x832.google.com [IPv6:2607:f8b0:4864:20::832]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E808D1274D0 for ; Tue, 23 Oct 2018 10:31:40 -0700 (PDT) Received: by mail-qt1-x832.google.com with SMTP id q40-v6so2486634qte.0 for ; Tue, 23 Oct 2018 10:31:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version; bh=Wm94JiG0vXiZ0RTGcMXG3tyulW37xTYpvUTmiPYMJVc=; b=bhTC2BDaW9xjJAJBf/UNP8ZUAL6HXgAhpuN0uie6CH4Sz7tGqiuRDtlnR7lcKCD8gK l04UmP2gsuhN1xNM/bGkY1bdQqkI7ydADcrT/1OYX8pI1jaUloqURGLf04YSbhJYT1mW KmxmBpjpTwMoozKFabyOX32noUH0x4V6PeQZQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version; bh=Wm94JiG0vXiZ0RTGcMXG3tyulW37xTYpvUTmiPYMJVc=; b=SRkd/lvvxRRBQ2Pm01v7pFv7ai/ML3zSNLsU+zeqhy/KyB+4lpJV3GDAGIpw1FM4rh imLoYONui9JBDbDG8U9NaTatYyNZjMiBsmMhqrwlH89pm5dVMTzubNKY1DjHJ0DvH2Wv wRuEDS6iKDCBVkSG60QswvGpPfiXQ06gJt/PNroLZYD5BuCJ8qANjQ2tgYSTEqxuarJE gcXbe2BY86VsJsILJIqnobVs7D3rnRz6itcCAFvemCDrH5wzeP9Xk1tHKdW+3Y8NNZ32 IOzMm/ksUJPaZEzGNlbCtgQfeT/hsiIYUgVJegQMLKWyp1jJjOO7ZrYuuckWPY6USkVy cr9g== X-Gm-Message-State: ABuFfoi9u9Qgbtml4UMquCctnCH2r9Fvg7u/9rTbZv5IFFS3qSLnVlGp 8IE25gDTqQxb5tXkucm8lT9G1sTBDSI= X-Google-Smtp-Source: ACcGV60vVyQAvH6d3P79bceUdXBgkEisVX5EECJB6Cn28NRAQqg1VS7B6cEszErcAhzrAI3m3TWZQg== X-Received: by 2002:a0c:d1d5:: with SMTP id k21mr25207176qvh.156.1540315899866; Tue, 23 Oct 2018 10:31:39 -0700 (PDT) Received: from [192.168.2.27] (pool-108-28-91-61.washdc.fios.verizon.net. [108.28.91.61]) by smtp.googlemail.com with ESMTPSA id c85-v6sm1152433qke.89.2018.10.23.10.31.35 (version=TLS1 cipher=AES128-SHA bits=128/128); Tue, 23 Oct 2018 10:31:39 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Tue, 23 Oct 2018 13:31:28 -0400 From: Carl Wallace To: Jeremy O'Donoghue CC: Michael Richardson , "rats@ietf.org" , "eat@ietf.org" Message-ID: Thread-Topic: [Rats] [EAT] Attestation BoF charter updates? References: In-Reply-To: Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3623146297_17402904" Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 17:31:44 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3623146297_17402904 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: 7bit From: Jeremy O'Donoghue Date: Tuesday, October 23, 2018 at 1:10 PM >> On 23 Oct 2018, at 16:14, Carl Wallace wrote: >>> >>> >>> Work Items >>> >>> ---------- >>> >>> The Working Group will develop specifications supporting the creation of >>> interoperable remote attestation procedures for entities which incorporate >>> Roots of Trust. The main deliverables are as follows. >>> >>> - Produce a requirements document establishing a common vocabulary for >>> remote >>> attestation, identifying mechanisms which will be supported for >>> establishing >>> trust between an entity and a remote party, and enumerating sample >>> use-cases >>> for remote attestation. >>> >>> - Produce specification text defining interoperable cross-platform claims >>> which >>> provide information about an entity in support of the required use-cases, >>> and >>> extending the set of claims defined in RFC7519 and RFC8392. The >>> specification >>> will describe the syntax for each claim in at least the following formats: >>> - CBOR [RFC7049] >>> - JSON [RFC7159] >>> - YANG [RFC6020] >> >> [CW] ASN.1 is already player for a number of attestation formats. Any reason >> to exclude it? > > None I can technically justify. It seems sensible to have ASN.1 in scope, at > least in terms of defining the syntax of claims in ASN.1. I am less sure > whether it makes sense to define signing procedures for ASN1. (since these are > presumably defined elsewhere), but I could be persuaded (e.g. by the statement > "no they aren't defined elsewhere - at least not for this important > use-case"). [CW] I'd not discount CMS not because there aren't mechanisms elsewhere, but because it's already used in some attestation contexts. > >>> - Produce specification text defining procedures and corresponding >>> architectures >>> supporting verification of claims within an attestation based on measured >>> file >>> execution procedures and supporting: >>> - Explicit attestation wherein a set of claims is transported in the >>> attestation; >>> - Implicit attestation wherein a set of claims is implied by possession >>> of a secret. >>> >>> - Produce specification text defining procedures and corresponding >>> architectures >>> supporting verification of claims encapsulated in: >>> >>> - CBOR Web Token structures [RFC8392] >>> - JSON Web Token structures [RFC7519] >> >> [CW] As noted before, I'd like to see binding to certificate enrollment >> protocols included here as well. This is something we are doing today, >> without standards grounding (as illustrated in pile of attestations shared >> via Github a few weeks back). > > It would be interesting to understand your thinking a bit further. At one > level it is fairly straightforward to define a claim whose value contains an > X.509 certificate, but I suspect that binding may imply more than that. [CW] My goal is to present an attestation to a CA before a certificate is issued so the provenance of the key can be confirmed to inform issuance decisions. I currently do include self-signed X.509 certificates as claims in attestations, which may be what you meant. > > --B_3623146297_17402904 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable
From: Jeremy O'Donoghue <jodonogh@qti.qualcomm.com>
Date: Tuesday, O= ctober 23, 2018 at 1:10 PM
=
On 23 Oct 2018, at 16:14, Carl Wallace <carl@redhoundsoftware.com> wrote:
=

<snip><= /font>

Work Items

----------

The Working Group will develop specifications supporting the creation of interoperable remote attestation procedures for entities which incorporate&= nbsp;
Roots of Trust. The main deliverables are as follows. 

- Produce a requirements document establishing a common vocabulary for remo= te
  attestation, identifying mechanisms which will be supported for esta= blishing
  trust between an entity and a remote party, and enumerating sample u= se-cases
  for remote attestation.

- Produce specification text defining interoperable cross-platform claims w= hich
  provide information about an entity in support of the required use-c= ases, and
  extending the set of claims defined in RFC7519 and RFC8392. The spec= ification
  will describe the syntax for each claim in at least the following fo= rmats:
    - CBOR [RFC7049]
    - JSON [RFC7159]
    - YANG [RFC6020]

[CW] ASN.1 is already player for a number of attestation fo= rmats. Any reason to exclude it?

None I can technically justify. It seems sensible to have AS= N.1 in scope, at least in terms of defining the syntax of claims in ASN.1. I= am less sure whether it makes sense to define signing procedures for ASN1. = (since these are presumably defined elsewhere), but I could be persuaded (e.g. by the statement "no they aren't defined el= sewhere - at least not for this important use-case").
[CW] I'd not discount CMS not because there aren't= mechanisms elsewhere, but because it's already used in some attestation con= texts.

<= blockquote type=3D"cite" class=3D"">

- Produce specification text defining procedures and corresponding architec= tures
  supporting verification of claims within an attestation based on mea= sured file
  execution procedures and supporting:
    - Explicit attestation wherein a set of claims is transported= in the attestation;
    - Implicit attestation wherein a set of claims is implied by = possession of a secret.

- Produce specification text defining procedures and corresponding architec= tures
  supporting verification of claims encapsulated in:

    - CBOR Web Token structures [RFC8392]
    - JSON Web Token structures [RFC7519]

[CW] As noted before, I'd like to see = binding to certificate enrollment protocols included here as well. This is s= omething we are doing today, without standards grounding (as illustrated in = pile of attestations shared via Github a few weeks back).
<= /blockquote>

It would be interesting to understa= nd your thinking a bit further. At one level it is fairly straightforward to= define a claim whose value contains an X.509 certificate, but I suspect tha= t binding may imply more than that. 
[CW] My goal is to present an attestation to a CA before = a certificate is issued so the provenance of the key can be confirmed to inf= orm issuance decisions. I currently do include self-signed X.509 certificate= s as claims in attestations, which may be what you meant. 
<snip>

 --B_3623146297_17402904-- From nobody Tue Oct 23 10:34:11 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF35D127B92 for ; Tue, 23 Oct 2018 10:34:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UNfHICImcAsw for ; Tue, 23 Oct 2018 10:34:08 -0700 (PDT) Received: from mail-qt1-x82d.google.com (mail-qt1-x82d.google.com [IPv6:2607:f8b0:4864:20::82d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DC4A5124C04 for ; Tue, 23 Oct 2018 10:34:07 -0700 (PDT) Received: by mail-qt1-x82d.google.com with SMTP id j46-v6so2459336qtc.9 for ; Tue, 23 Oct 2018 10:34:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version; bh=CBp/FuIMrmcWwZms8ibp9XnCDJNIhqxUAdiMbOFXeII=; b=DcsNt2VF16U3juVtVftAs81uRxP5LNsqfzW5pw4ctEG7w+1lYwtO1zLbXHjmrh732a wI+RJFax1FdwwMHHlAVOZUd5bZUc/ZfS6B/05sMMHkcYraaNVs4iYq9TuTYY7EIvTm37 HOCQzuFgSblo4snT/V9YPp1tXBCTMU1iOUd8s= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version; bh=CBp/FuIMrmcWwZms8ibp9XnCDJNIhqxUAdiMbOFXeII=; b=AJU5wfPgt43txb5D2XRNPfVpjtANu5WFAzfw06x9wxZ3qB9BE64q9fOoYk+yy9ducd 3owPL7v2fMpJgdmxNgcwlMsWd2RE9UO8qMZUyFTr3mRNsNWyahqHHVM6YxvWKhzIk71X 1uyvVsPgSyUgSdanrNLJxcA/m+FDGEtJaG/Hia3jCRe2dHU3I8rU8K/XOHjfgIuyP5aj SCH0bl3das9zwVyC+xLEIpDc6QQCwB0Beh0iU46HCu5M4EsOHPUEcAxs43hj1yQRp5M2 xhZ/FKWZ9lKocq0E7CF8PSyFGHh3dJM/mIBh9yVHSw0P03Y6CM7600KG6+/6cs37tTwR LZ+Q== X-Gm-Message-State: ABuFfojVXcIhAdd7KFR81Ki20OBxUZOh6kPshp8WuMF48we3LFxvQCFZ +OlJF27heycv36YkkRbEJvvJjQ== X-Google-Smtp-Source: ACcGV60PAmtoidFhDVXizAJluhbsb4X2JLMeCIOcAvh27N+MLHvcyM2VGaBhFw6D9UZ2S3Y16/x73g== X-Received: by 2002:a0c:fe11:: with SMTP id x17mr48560825qvr.150.1540316046890; Tue, 23 Oct 2018 10:34:06 -0700 (PDT) Received: from [192.168.2.27] (pool-108-28-91-61.washdc.fios.verizon.net. [108.28.91.61]) by smtp.googlemail.com with ESMTPSA id k14-v6sm1741106qtk.28.2018.10.23.10.34.02 (version=TLS1 cipher=AES128-SHA bits=128/128); Tue, 23 Oct 2018 10:34:06 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Tue, 23 Oct 2018 13:33:56 -0400 From: Carl Wallace To: "Smith, Ned" , Jeremy O'Donoghue CC: Michael Richardson , "eat@ietf.org" , "rats@ietf.org" Message-ID: Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? References: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> In-Reply-To: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3623146445_17423108" Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 17:34:10 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3623146445_17423108 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: 7bit > > > It would be interesting to understand your thinking a bit further. At one > level it is fairly straightforward to define a claim whose value contains an > X.509 certificate, but I suspect that binding may imply more than that. > [nms] It is also reasonable to consider an X.509 certificate as being an > object that contains a set of claims (rather than the other way around). [cw] Not if the goal is to prevent issuance of a certificate because provenance of a key cannot be confirmed. Having a self-issued cert contain claims is fine, but this does not obviate the need to bind to issuance protocols to inform CA issuance. > --B_3623146445_17423108 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable
<snip>

 

It would be interesting to understand your thinking a bit furt= her. At one level it is fairly straightforward to define a claim whose value= contains an X.509 certificate, but I suspect that binding may imply more than that. 

[nms] It is also reasonable to consider an X.509 certificate as being an ob= ject that contains a set of claims (rather than the other way around).<= /o:p>

[cw] Not if= the goal is to prevent issuance of a certificate because provenance of a ke= y cannot be confirmed. Having a self-issued cert contain claims is fine, but= this does not obviate the need to bind to issuance protocols to inform CA i= ssuance. 

<snip>


 --B_3623146445_17423108-- From nobody Tue Oct 23 11:04:27 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D4BB130E4D; Tue, 23 Oct 2018 11:04:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.5 X-Spam-Level: X-Spam-Status: No, score=-14.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pgCGQet6swN1; Tue, 23 Oct 2018 11:04:16 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E223612D4F0; Tue, 23 Oct 2018 11:04:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=37616; q=dns/txt; s=iport; t=1540317856; x=1541527456; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=YMYrSE9z9rH/hwNlf5QtcJZNZgdP9iLipNmU6+DyK7I=; b=ETEGgpM34rUnBEiJXDnEHYUQR0eLFcX65PXejJObFvD/CC/usbJuXdCY PkYjgun0JpEkzxomh2HztGo6UMTnOy+KP/fdIvvbwKQT0s5IuGLC9KC2E K0ZzZN2GIfLhVIRtuZEMNDCZAzKA9DiPA3gOaZEzeecG5h9xv6J2CLeTW 8=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0APAAAbYs9b/5JdJa1ZAQkZAQEBAQE?= =?us-ascii?q?BAQEBAQEBBwEBAQEBAYFUAQEBAQEBCwGBDU0qZn8oCoVKklaCDZkMAwsBARg?= =?us-ascii?q?BB4FXgT6BNwKFKiE3Cg0BAwEBAgEBAm0cDIU6AQEBAgIBAStBBAcQAgEIFSM?= =?us-ascii?q?BBgcnCxQRAgQBDQUIgk5MgR1kD6kRhCwBEUCFHgWLUw8XgUE/gRGDEoMbAQE?= =?us-ascii?q?BAoEzAQNdhSQCiG+FSIYSigcJAoZhhjODVh+BUiKEUoMUhlaMXIloAhEUgSY?= =?us-ascii?q?zIoFVcBU7gjgBM4F2hA+FFIU+bwGKXwIkB4EBgR8BAQ?= X-IronPort-AV: E=Sophos;i="5.54,417,1534809600"; d="scan'208,217";a="190436528" Received: from rcdn-core-10.cisco.com ([173.37.93.146]) by alln-iport-4.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 23 Oct 2018 18:04:14 +0000 Received: from XCH-RTP-014.cisco.com (xch-rtp-014.cisco.com [64.101.220.154]) by rcdn-core-10.cisco.com (8.15.2/8.15.2) with ESMTPS id w9NI4DqE032524 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 23 Oct 2018 18:04:14 GMT Received: from xch-rtp-013.cisco.com (64.101.220.153) by XCH-RTP-014.cisco.com (64.101.220.154) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 23 Oct 2018 14:04:08 -0400 Received: from xch-rtp-013.cisco.com ([64.101.220.153]) by XCH-RTP-013.cisco.com ([64.101.220.153]) with mapi id 15.00.1395.000; Tue, 23 Oct 2018 14:04:09 -0400 From: "Eric Voit (evoit)" To: "Jeremy O'Donoghue" , Michael Richardson CC: "rats@ietf.org" , "eat@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUakqqBJn3KZZVPEe4vVODtnqbzKUsxo8AgAA3c3A= Date: Tue, 23 Oct 2018 18:04:08 +0000 Message-ID: References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> In-Reply-To: <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.56.234] Content-Type: multipart/alternative; boundary="_000_f6602afcf1b0440d98f5ded158bfe572XCHRTP013ciscocom_" MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.154, xch-rtp-014.cisco.com X-Outbound-Node: rcdn-core-10.cisco.com Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 18:04:19 -0000 --_000_f6602afcf1b0440d98f5ded158bfe572XCHRTP013ciscocom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Jeremy, Thanks for taking a cut at this charter simplification. There are a few ar= eas covered within the GitHub Goals which I can't easily map to your text below. = Could you talk about how these elements are covered (or not)? For context= , I am working from the perspective of remote attestation application developer trying to standardize the interfaces between a contr= oller (which is acting as a claim verifier) and a network element (which in= cludes TCG based subsystems.) For my application to work properly, there are several things needed within= a network controller to validate the asserted claims coming out of a route= r. These include: * How do we expose the attestation evidence which can be used to vali= date asserted claims? * How do we know which root of trust which was used to generate the a= ttestation evidence (e.g., application event logs), and how does a verifier= differentiate this from the root-of-trust which asserts claims made upon t= his evidence? * What entities are allowed to read the info asserted claims? What s= ubset of these can see the raw attestation evidence? These questions are significant because routers/switches are not monolithic= devices. In fact, they are composed of subsystems with different levels o= f trustworthiness. As the IETF often aims at protocol specifications at th= e inter-device level, I am looking for coverage of such questions in the ch= arter. Thanks, Eric From: Jeremy O'Donoghue, October 23, 2018 10:40 AM On 22 Oct 2018, at 22:01, Michael Richardson > wrote: Jeremy O'Donoghue > wrote: This is a very useful contribution, Laurence. The current draft text is too strongly biased towards attestation based on measurement, and does not adequately cover other mechanisms which are already But, it's for the charter, for the WG, it's not a treatise on attestation itself. This is all supposed to be *meta* text about attestation, about what we wan= t to say about attestation in the documents, not about what attestation is. Please go read some other IETF charters: https://datatracker.ietf.org/wg/6lo/about/ https://datatracker.ietf.org/wg/6tisch/about/ https://datatracker.ietf.org/wg/suit/about/ Fair comment. We have two existing proposals - EAT and RATS - which address a similar pro= blem space but using different mechanisms. While I believe the RATS and EAT= contributors are in broad agreement that there is significant benefit in b= ringing both work streams under a single umbrella, trying to properly incor= porate EAT through incremental modification to the draft RATS WG charter te= xt is proving challenging. The below probably diverges too far from the current text for some tastes, = but it may address your point and provide a basis for discussion (at this p= oint the GitHub draft seems a long way behind the list). It is deliberately signif= icantly shorter than the current draft - I have tried to re-use as much exi= sting text as possible, but it is heavily re-organised and abridged. I have taken on board the comment from Carsten that perhaps a minimum level= of terminology is acceptable in charter text, but deliberately tried to ke= ep the language simple and fairly generic to enable the proper work of term= inology definition to take place in the requirements document as you sugges= t. Introduction ------------ Remote attestation procedures can be incorporated in network protocols to provide the basis for establishing claims about an entity in a trustworthy manner. Such claims may include, but are not limited to, device identity, manufacturing origin, system integrity, configuration, operational state an= d measurements of steps which led to the operational state. Such procedures expose entity characteristics in the form of claim sets which allow remote parties to establish the trustworthiness of a device, provide evidence that= a particular set of operations and functions are supported and/or that the entity is actually what it claims to be. In the absence of such procedures, while domain-specific attestation mechanisms such as TCG TPM, FIDO Alliance attestation and Android Keystore attestation exist, there is no common way for a remote party to tell if dat= a originates from a trustworthy device (e.g. a Trusted System designed to support a specific set of operations/functionalities) or not. The following minimal terminology is defined for the purposes of clarifying= the Working Group charter text: - attestation: a set of claims which can be verified as originating in an entity. - claim: as defined in RFC7519. - entity: a device or device sub-module that can generate a claim or set of claims which can be verified by a remote party. - remote party: an actor remote from an entity that wishes to verify whethe= r a claim or set of claims originated in a given entity. Description of the Working Group -------------------------------- The Working Group will define: - Standardized and interoperable mechanisms to establish a sufficient level of confidence that data originates from a trustworthy entity designed to support a specific set of operations/functionalities. - Standardized and interoperable mechanisms building on (1) to allow remote parties to know the provenance and characteristics of an entity that may = be requesting services. The Working Group will identify security goals which it expects a trustwort= hy execution context to address, which will assume the presence of Roots of Trust (as defined by NIST [SP800-164]). The detailed specification of such contexts is out of scope. The Working Group will maintain close relationships with bodies undertaking complementary work streams in the area of remote attestation such as GlobalPlatform, Trusted Computing Group and FIDO Alliance. The Working Group will cooperate with the TEEP Working Group, which may generate requirements for claims relevant to TEE. Work Items ---------- The Working Group will develop specifications supporting the creation of interoperable remote attestation procedures for entities which incorporate Roots of Trust. The main deliverables are as follows. - Produce a requirements document establishing a common vocabulary for remo= te attestation, identifying mechanisms which will be supported for establish= ing trust between an entity and a remote party, and enumerating sample use-ca= ses for remote attestation. - Produce specification text defining interoperable cross-platform claims w= hich provide information about an entity in support of the required use-cases,= and extending the set of claims defined in RFC7519 and RFC8392. The specifica= tion will describe the syntax for each claim in at least the following formats= : - CBOR [RFC7049] - JSON [RFC7159] - YANG [RFC6020] - Produce specification text defining procedures and corresponding architec= tures supporting verification of claims within an attestation based on measured= file execution procedures and supporting: - Explicit attestation wherein a set of claims is transported in the at= testation; - Implicit attestation wherein a set of claims is implied by possession= of a secret. - Produce specification text defining procedures and corresponding architec= tures supporting verification of claims encapsulated in: - CBOR Web Token structures [RFC8392] - JSON Web Token structures [RFC7519] - Perform privacy analysis of both claims and the cryptographic procedures = used to establish trust. This information will be included as appropriate in the deliverable specifications, and may imply extension of procedures defined= in other specifications in support of privacy goals. It seems to me that there are two ways to produce the main specification de= liverables. I have deliberately left the text above slightly vague on this. * A claims specification common to RATS and EAT with separate RATS and = EAT procedure specifications. * A claims specification also incorporating EAT procedures and a separa= te RATS procedure specification. This would be my preferred option. * I believe there are very few procedures needed for EAT other than = the possible need to support a nonce to ensure freshness Jeremy Notice how by about the second paragraph (6tisch takes a bit longer), each gets into what the WG will do? -- Michael Richardson >, S= andelman Software Works -=3D IPv6 IoT consulting =3D- _______________________________________________ EAT mailing list EAT@ietf.org https://www.ietf.org/mailman/listinfo/eat --_000_f6602afcf1b0440d98f5ded158bfe572XCHRTP013ciscocom_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Jeremy,

 

Thanks for taking a cut at this chart= er simplification.  There are a few areas covered within the GitHub Goals which I can’t easily map to your text below.&nbs= p; Could you talk about how these elements are covered (or not)?  = ; For context, I am working from the perspective of remote attestation application developer trying to standardize the inte= rfaces between a controller (which is acting as a claim verifier) and a net= work element (which includes TCG based subsystems.) 

 

For my application to work properly, = there are several things needed within a network controller to validate the= asserted claims coming out of a router.  These include:

 

·      = ; How do we expose the attestat= ion evidence which can be used to validate asserted claims?

·      = ; How do we know which root of = trust which was used to generate the attestation evidence (e.g., applicatio= n event logs), and how does a verifier differentiate this from the root-of-trust which asserts claims made upon this evidence? =

·      = ; What entities are allowed to = read the info asserted claims?  What subset of these can see the raw a= ttestation evidence?

 

These questions are significant becau= se routers/switches are not monolithic devices.  In fact, they are com= posed of subsystems with different levels of trustworthiness.  As the IETF often aims at protocol specifications at the inter-device leve= l, I am looking for coverage of such questions in the charter.

 

Thanks,

Eric

 

From: Jeremy O'Donoghue, October 23,= 2018 10:40 AM

On 22 Oct 2018, at 22:01, Michael Richardson <mcr+ietf@sandelman.ca>= wrote:

 


Jeremy O'Donoghue <jodonogh= @qti.qualcomm.com> wrote:

This is a very useful contribution, Laurence.



The current draft text is too strongly biased toward= s attestation based
on measurement, and does not adequately cover other mechanisms which
are already


But, it's for the charter, for the WG, it's not a treatise on attestation itself.

This is all supposed to be *meta* text about attestation, about what we wan= t
to say about attestation in the documents, not about what attestation is.
Please go read some other IETF charters:

https://datatracker.= ietf.org/wg/6lo/about/
https://datatrack= er.ietf.org/wg/6tisch/about/
https://datatracker= .ietf.org/wg/suit/about/

 

Fair comment.

 

We have two existing proposals - EAT and RATS - whic= h address a similar problem space but using different mechanisms. While I b= elieve the RATS and EAT contributors are in broad agreement that there is s= ignificant benefit in bringing both work streams under a single umbrella, trying to properly incorporate EAT t= hrough incremental modification to the draft RATS WG charter text is provin= g challenging.

 

The below probably diverges too far from the current= text for some tastes, but it may address your point and provide a basis fo= r discussion (at this point the GitHub draft seems a long way behind the list). It is deliberately signi= ficantly shorter than the current draft - I have tried to re-use as much ex= isting text as possible, but it is heavily re-organised and abridged.<= /o:p>

 

I have taken on board the comment from Carsten that = perhaps a minimum level of terminology is acceptable in charter text, but d= eliberately tried to keep the language simple and fairly generic to enable = the proper work of terminology definition to take place in the requirements document as you suggest.

 

Introduction=

------------=

Remote attestation proc= edures can be incorporated in network protocols to
provide the basis for establishing claims about an entity in a trustworthy<= br> manner. Such claims may include, but are not limited to, device identity, manufacturing origin, system integrity, configuration, operational state an= d
measurements of steps which led to the operational state. Such procedures expose entity characteristics in the form of claim sets which allow remote<= br> parties to establish the trustworthiness of a device, provide evidence that= a
particular set of operations and functions are supported and/or that the entity is actually what it claims to be. 

In the absence of such = procedures, while domain-specific attestation
mechanisms such as TCG TPM, FIDO Alliance attestation and Android Keystore<= br> attestation exist, there is no common way for a remote party to tell if dat= a
originates from a trustworthy device (e.g. a Trusted System designed to
support a specific set of operations/functionalities) or not.

The following minimal t= erminology is defined for the purposes of clarifying the
Working Group charter text:

- attestation: a set of= claims which can be verified as originating in an
          entity.

- claim:  as defin= ed in RFC7519.

- entity: a device or d= evice sub-module that can generate a claim or set of
          claims which can be verified by a remote= party.

<= span style=3D"font-size:8.5pt;font-family:Courier">- remote party: an actor= remote from an entity that wishes to verify whether
          a claim or set of claims originated in a= given entity.

Description of the Work= ing Group

-----------------------= ---------

The Working Group will = define:

<= span style=3D"font-size:8.5pt;font-family:Courier">- Standardized and inter= operable mechanisms to establish a sufficient level
  of confidence that data originates from a trustworthy entity designe= d to
  support a specific set of operations/functionalities.
- Standardized and interoperable mechanisms building on (1) to allow remote=
  parties to know the provenance and characteristics of an entity that= may be
  requesting services.

<= span style=3D"font-size:8.5pt;font-family:Courier">The Working Group will i= dentify security goals which it expects a trustworthy
execution context to address, which will assume the presence of Roots of Trust (as defined by NIST [SP800-164]). The detailed specification of such<= br> contexts is out of scope.

The Working Group will = maintain close relationships with bodies undertaking
complementary work streams in the area of remote attestation such as
GlobalPlatform, Trusted Computing Group and FIDO Alliance.

The Working Group will = cooperate with the TEEP Working Group, which may
generate requirements for claims relevant to TEE.

 

Work Items

----------

The Working Group will = develop specifications supporting the creation of
interoperable remote attestation procedures for entities which incorporate&= nbsp;
Roots of Trust. The main deliverables are as follows. 

- Produce a requirement= s document establishing a common vocabulary for remote
  attestation, identifying mechanisms which will be supported for esta= blishing
  trust between an entity and a remote party, and enumerating sample u= se-cases
  for remote attestation.

- Produce specification= text defining interoperable cross-platform claims which
  provide information about an entity in support of the required use-c= ases, and
  extending the set of claims defined in RFC7519 and RFC8392. The spec= ification
  will describe the syntax for each claim in at least the following fo= rmats:
    - CBOR [RFC7049]
    - JSON [RFC7159]
    - YANG [RFC6020]

- Produce specification= text defining procedures and corresponding architectures
  supporting verification of claims within an attestation based on mea= sured file
  execution procedures and supporting:
    - Explicit attestation wherein a set of claims is transported= in the attestation;
    - Implicit attestation wherein a set of claims is implied by = possession of a secret.

- Produce specification= text defining procedures and corresponding architectures
  supporting verification of claims encapsulated in:=

    - CBOR We= b Token structures [RFC8392]
    - JSON Web Token structures [RFC7519]

- Perform privacy analy= sis of both claims and the cryptographic procedures used to
  establish trust. This information will be included as appropriate in= the
  deliverable specifications, and may imply extension of procedures de= fined in
  other specifications in support of privacy goals.<= /p>

 

It seems to me that there are two ways to produce th= e main specification deliverables. I have deliberately left the text above = slightly vague on this.

  • A claims specification common to RATS and EAT with separate RATS and EAT pr= ocedure specifications.
  • A claims specification also incorporating EAT procedures and a separate RAT= S procedure specification. This would be my preferred option.
    • I believe there are very few procedures needed for EAT other than the possi= ble need to support a nonce to ensure freshness

 

Jeremy


Notice how by about the second paragraph (6tisch takes a bit longer), each<= br> gets into what the WG will do?

--
Michael Richardson <mcr+= ;IETF@sandelman.ca>, Sandelman Software Works
-=3D IPv6 IoT consulting =3D-
_______________________________________________
EAT mailing list
EAT@ietf.org
https://www.ietf.org/= mailman/listinfo/eat

 

--_000_f6602afcf1b0440d98f5ded158bfe572XCHRTP013ciscocom_-- From nobody Tue Oct 23 11:49:24 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B3C3C130EEC; Tue, 23 Oct 2018 11:49:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CkRhho8OD3FX; Tue, 23 Oct 2018 11:49:14 -0700 (PDT) Received: from mga05.intel.com (mga05.intel.com [192.55.52.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7C31B130E1D; Tue, 23 Oct 2018 11:49:14 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga007.fm.intel.com ([10.253.24.52]) by fmsmga105.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 23 Oct 2018 11:49:14 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos; i="5.54,417,1534834800"; d="scan'208,217"; a="80335590" Received: from orsmsx109.amr.corp.intel.com ([10.22.240.7]) by fmsmga007.fm.intel.com with ESMTP; 23 Oct 2018 11:49:14 -0700 Received: from orsmsx116.amr.corp.intel.com (10.22.240.14) by ORSMSX109.amr.corp.intel.com (10.22.240.7) with Microsoft SMTP Server (TLS) id 14.3.319.2; Tue, 23 Oct 2018 11:49:13 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.251]) by ORSMSX116.amr.corp.intel.com ([169.254.7.58]) with mapi id 14.03.0319.002; Tue, 23 Oct 2018 11:49:13 -0700 From: "Smith, Ned" To: Carl Wallace , Jeremy O'Donoghue CC: Michael Richardson , "eat@ietf.org" , "rats@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUavNRF3KZGpU4TEGGfYgrNJhz76UtFauAgAB27AD//5+qAA== Date: Tue, 23 Oct 2018 18:49:12 +0000 Message-ID: References: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.3.181015 x-originating-ip: [10.24.14.158] Content-Type: multipart/alternative; boundary="_000_FFA0BB1448AB45CE8D7A53D43821FC7Dintelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 18:49:17 -0000 --_000_FFA0BB1448AB45CE8D7A53D43821FC7Dintelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCk9uIDEwLzIzLzE4LCAxMDozNCBBTSwgIkVBVCBvbiBiZWhhbGYgb2YgQ2FybCBXYWxsYWNl IiA8ZWF0LWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmVhdC1ib3VuY2VzQGlldGYub3JnPiBvbiBi ZWhhbGYgb2YgY2FybEByZWRob3VuZHNvZnR3YXJlLmNvbTxtYWlsdG86Y2FybEByZWRob3VuZHNv ZnR3YXJlLmNvbT4+IHdyb3RlOg0KDQo8c25pcD4NCg0KSXQgd291bGQgYmUgaW50ZXJlc3Rpbmcg dG8gdW5kZXJzdGFuZCB5b3VyIHRoaW5raW5nIGEgYml0IGZ1cnRoZXIuIEF0IG9uZSBsZXZlbCBp dCBpcyBmYWlybHkgc3RyYWlnaHRmb3J3YXJkIHRvIGRlZmluZSBhIGNsYWltIHdob3NlIHZhbHVl IGNvbnRhaW5zIGFuIFguNTA5IGNlcnRpZmljYXRlLCBidXQgSSBzdXNwZWN0IHRoYXQgYmluZGlu ZyBtYXkgaW1wbHkgbW9yZSB0aGFuIHRoYXQuDQpbbm1zXSBJdCBpcyBhbHNvIHJlYXNvbmFibGUg dG8gY29uc2lkZXIgYW4gWC41MDkgY2VydGlmaWNhdGUgYXMgYmVpbmcgYW4gb2JqZWN0IHRoYXQg Y29udGFpbnMgYSBzZXQgb2YgY2xhaW1zIChyYXRoZXIgdGhhbiB0aGUgb3RoZXIgd2F5IGFyb3Vu ZCkuDQpbY3ddIE5vdCBpZiB0aGUgZ29hbCBpcyB0byBwcmV2ZW50IGlzc3VhbmNlIG9mIGEgY2Vy dGlmaWNhdGUgYmVjYXVzZSBwcm92ZW5hbmNlIG9mIGEga2V5IGNhbm5vdCBiZSBjb25maXJtZWQu IEhhdmluZyBhIHNlbGYtaXNzdWVkIGNlcnQgY29udGFpbiBjbGFpbXMgaXMgZmluZSwgYnV0IHRo aXMgZG9lcyBub3Qgb2J2aWF0ZSB0aGUgbmVlZCB0byBiaW5kIHRvIGlzc3VhbmNlIHByb3RvY29s cyB0byBpbmZvcm0gQ0EgaXNzdWFuY2UuDQpbbm1zXSBJIHdhc27igJl0IGFzc2VydGluZyB0aGF0 IGEgY2VydGlmaWNhdGUgd291bGQgYmUgc2VsZi1pc3N1ZWQuIFRoaXMgaXMgd2h5IEkgdGhpbmsg aXQgbWFrZXMgc2Vuc2UgdG8gdGFsayBhYm91dCBhIGNsYWltYW50LiBTUDgwMC0xNjQgcmVmZXJz IHRvIHRoaXMgYXMgZWl0aGVyIGEg4oCYZGV2aWNlIG93bmVy4oCZIG9yIOKAmGluZm9ybWF0aW9u IG93bmVy4oCZLiBJ4oCZbSBPSyB3aXRoIHRoZXNlIHRlcm1zIHRvby4gVGhlIGV4cGVjdGF0aW9u IGlzIHRoZSBkZXZpY2Ugb3duZXIgZHVyaW5nIG1hbnVmYWN0dXJpbmcgIChha2EgbWZn4oCZcikg d2lsbCBrbm93IHdoaWNoIHRydXN0IHJlbGV2YW50IGNsYWltcyBjYW4gYmUgYXNzZXJ0ZWQuIFRo ZXkgY291bGQgYXNzZXJ0IHRoZW0gYnkgaXNzdWluZyBhIGNlcnRpZmljYXRlIGNvbnRhaW5pbmcg dGhlIGNsYWltcy4gVGhlIHZlcmlmaWVyL3JlbHlpbmcgcGFydHkgdHJ1c3RzIHRoZSBtZmfigJly IHRvIGJlIGFuIGF1dGhvcml0YXRpdmUgc291cmNlIHJlZ2FyZGluZyBob3cgYSBkZXZpY2UgKGJ1 dCBtb3JlIHByZWNpc2VseSwgaG93IHRoZSByb290LW9mLXRydXN0KSB3YXMgbWFkZS4gSWYgYSBr ZXkgaXMgY3JlYXRlZCBkdXJpbmcgbWZnIHRpbWUgYW5kIHRoZSBtZmcgaXNzdWVzIGV2aWRlbmNl IChha2EgYSBjZXJ0aWZpY2F0ZSkgb2YgdGhhdCwgdGhlbiBpdCBzZXJ2ZXMgYXMgcHJvdmVuYW5j ZSBhcyBsb25nIGFzIHRoZSB2ZXJpZmllciAvIHJlbHlpbmcgcGFydHkgdHJ1c3RzIHRoZSBtYW51 ZmFjdHVyZXIgdG8gY29ycmVjdGx5IGVtYmVkIHRoZSBrZXkuIENvbmZpcm1hdGlvbiBjYW4gYmUg YWNoaWV2ZWQgdmlhIG1hbnVhbCBpbnNwZWN0aW9uIG9mIHRoZSBtYW51ZmFjdHVyaW5nIHByb2Nl c3MuIE5ldmVydGhlbGVzcywgdGhlIHZlcmlmaWVyIGlzIHRydXN0aW5nIHRoZSBtZmcgdG8gYSBj ZXJ0YWluIGRlZ3JlZS4NCg0KICAgICAgICAgICAgICAgIFRoaXMgdGhyZWFkIGlzIGFib3V0IGZv cm1hdHMgKFguNTA5L0FTTi4xLCBDQk9SIGV0Y+KApikuIFRoZSBzZW1hbnRpY3Mgb2Ygd2hhdCBh IHNpZ25hdHVyZSBtZWFucyBpcyAoc2hvdWxkIGJlKSBjb21tb24gYWNyb3NzIGFsbCB0aGUgZm9y bWF0cyBJTU8uIElmIHNlbGYtc2lnbmVkIGNsYWltcyBhcmUgaW52YWxpZCwgdGhlbiB0aGV5IHNo b3VsZCBiZSBpbnZhbGlkIGZvciBhbnkgZW5jb2Rpbmcgd2hldGhlciBpdCBpcyBBU04uMSwgQ0JP UiBvciBzb21ldGhpbmcgZWxzZS4gSWYgdGhleSBhcmUgdmFsaWQgZm9yIHNvbWV0aGluZyBlbHNl LCB0aGVuIHRoZSBzaWduYXR1cmUgc2hvdWxkIGJlIHZhbGlkIGZvciBhbHRlcm5hdGl2ZSBmb3Jt YXRzIHRvby4NCjxzbmlwPg0KDQo= --_000_FFA0BB1448AB45CE8D7A53D43821FC7Dintelcom_ Content-Type: text/html; charset="utf-8" Content-ID: <83FB8EDF31BA9946A352EA96C76E9F91@intel.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6RGVuZ1hpYW47DQoJcGFub3NlLTE6 MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7 DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZh bWlseToiXEBEZW5nWGlhbiI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQovKiBT dHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05v cm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6 MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bh bi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJ dGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5r Rm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0 LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2 Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9w LWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJZm9udC12 YXJpYW50Om5vcm1hbCAhaW1wb3J0YW50Ow0KCWNvbG9yOndpbmRvd3RleHQ7DQoJdGV4dC10cmFu c2Zvcm06bm9uZTsNCgltc28tY29udGV4dHVhbC1hbHRlcm5hdGVzOnllczsNCglmb250LXdlaWdo dDpub3JtYWw7DQoJZm9udC1zdHlsZTpub3JtYWw7DQoJdGV4dC1kZWNvcmF0aW9uOm5vbmUgbm9u ZTsNCgl2ZXJ0aWNhbC1hbGlnbjpiYXNlbGluZTt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28t c3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjsNCglmb250LXZhcmlhbnQ6bm9ybWFsICFpbXBvcnRhbnQ7DQoJY29sb3I6d2luZG93dGV4 dDsNCgl0ZXh0LXRyYW5zZm9ybTpub25lOw0KCW1zby1jb250ZXh0dWFsLWFsdGVybmF0ZXM6eWVz Ow0KCWZvbnQtd2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDsNCgl0ZXh0LWRlY29y YXRpb246bm9uZSBub25lOw0KCXZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO30NCi5Nc29DaHBEZWZh dWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0K QHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAx LjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24x O30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIg dmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7bXNvLWNvbnRleHR1YWwtYWx0 ZXJuYXRlczp5ZXMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O21zby1jb250ZXh0dWFsLWFsdGVy bmF0ZXM6eWVzIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5PbiAxMC8yMy8xOCwg MTA6MzQgQU0sICZxdW90O0VBVCBvbiBiZWhhbGYgb2YgQ2FybCBXYWxsYWNlJnF1b3Q7ICZsdDs8 YSBocmVmPSJtYWlsdG86ZWF0LWJvdW5jZXNAaWV0Zi5vcmciPmVhdC1ib3VuY2VzQGlldGYub3Jn PC9hPiBvbiBiZWhhbGYgb2YNCjxhIGhyZWY9Im1haWx0bzpjYXJsQHJlZGhvdW5kc29mdHdhcmUu Y29tIj5jYXJsQHJlZGhvdW5kc29mdHdhcmUuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj4mbHQ7c25pcCZndDs8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci1sZWZ0OnNvbGlkICNCNUM0REYgNC41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdDtt YXJnaW4tbGVmdDozLjc1cHQ7bWFyZ2luLXJpZ2h0OjBpbiIgaWQ9Ik1BQ19PVVRMT09LX0FUVFJJ QlVUSU9OX0JMT0NLUVVPVEUiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoxLjBpbiI+DQombmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoxLjBpbiI+ DQpJdCB3b3VsZCBiZSBpbnRlcmVzdGluZyB0byB1bmRlcnN0YW5kIHlvdXIgdGhpbmtpbmcgYSBi aXQgZnVydGhlci4gQXQgb25lIGxldmVsIGl0IGlzIGZhaXJseSBzdHJhaWdodGZvcndhcmQgdG8g ZGVmaW5lIGEgY2xhaW0gd2hvc2UgdmFsdWUgY29udGFpbnMgYW4gWC41MDkgY2VydGlmaWNhdGUs IGJ1dCBJIHN1c3BlY3QgdGhhdCBiaW5kaW5nIG1heSBpbXBseSBtb3JlIHRoYW4gdGhhdC48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjVwdCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvO21hcmdpbi1sZWZ0Oi41aW4iPg0KPHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7bXNvLWNvbnRleHR1YWwtYWx0ZXJuYXRlczp5ZXMiPltubXNdIEl0IGlz IGFsc28gcmVhc29uYWJsZSB0byBjb25zaWRlciBhbiBYLjUwOSBjZXJ0aWZpY2F0ZSBhcyBiZWlu ZyBhbiBvYmplY3QgdGhhdCBjb250YWlucyBhIHNldCBvZiBjbGFpbXMgKHJhdGhlciB0aGFuIHRo ZSBvdGhlciB3YXkgYXJvdW5kKS48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+W2N3XSBOb3QgaWYgdGhlIGdvYWwgaXMgdG8g cHJldmVudCBpc3N1YW5jZSBvZiBhIGNlcnRpZmljYXRlIGJlY2F1c2UgcHJvdmVuYW5jZSBvZiBh IGtleSBjYW5ub3QgYmUgY29uZmlybWVkLiBIYXZpbmcgYSBzZWxmLWlzc3VlZCBjZXJ0IGNvbnRh aW4gY2xhaW1zIGlzIGZpbmUsIGJ1dCB0aGlzIGRvZXMgbm90IG9idmlhdGUgdGhlIG5lZWQgdG8g YmluZCB0byBpc3N1YW5jZQ0KIHByb3RvY29scyB0byBpbmZvcm0gQ0EgaXNzdWFuY2UuJm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6LjVpbiI+W25tc10gSSB3YXNu4oCZdCBhc3NlcnRpbmcgdGhhdCBhIGNl cnRpZmljYXRlIHdvdWxkIGJlIHNlbGYtaXNzdWVkLiBUaGlzIGlzIHdoeSBJIHRoaW5rIGl0IG1h a2VzIHNlbnNlIHRvIHRhbGsgYWJvdXQgYSBjbGFpbWFudC4gU1A4MDAtMTY0IHJlZmVycyB0byB0 aGlzIGFzIGVpdGhlciBhIOKAmGRldmljZSBvd25lcuKAmSBvciDigJhpbmZvcm1hdGlvbiBvd25l cuKAmS4gSeKAmW0gT0sgd2l0aA0KIHRoZXNlIHRlcm1zIHRvby4gVGhlIGV4cGVjdGF0aW9uIGlz IHRoZSBkZXZpY2Ugb3duZXIgZHVyaW5nIG1hbnVmYWN0dXJpbmcgJm5ic3A7KGFrYSBtZmfigJly KSB3aWxsIGtub3cgd2hpY2ggdHJ1c3QgcmVsZXZhbnQgY2xhaW1zIGNhbiBiZSBhc3NlcnRlZC4g VGhleSBjb3VsZCBhc3NlcnQgdGhlbSBieSBpc3N1aW5nIGEgY2VydGlmaWNhdGUgY29udGFpbmlu ZyB0aGUgY2xhaW1zLiBUaGUgdmVyaWZpZXIvcmVseWluZyBwYXJ0eSB0cnVzdHMgdGhlIG1mZ+KA mXINCiB0byBiZSBhbiBhdXRob3JpdGF0aXZlIHNvdXJjZSByZWdhcmRpbmcgaG93IGEgZGV2aWNl IChidXQgbW9yZSBwcmVjaXNlbHksIGhvdyB0aGUgcm9vdC1vZi10cnVzdCkgd2FzIG1hZGUuIElm IGEga2V5IGlzIGNyZWF0ZWQgZHVyaW5nIG1mZyB0aW1lIGFuZCB0aGUgbWZnIGlzc3VlcyBldmlk ZW5jZSAoYWthIGEgY2VydGlmaWNhdGUpIG9mIHRoYXQsIHRoZW4gaXQgc2VydmVzIGFzIHByb3Zl bmFuY2UgYXMgbG9uZyBhcyB0aGUgdmVyaWZpZXIgLyByZWx5aW5nDQogcGFydHkgdHJ1c3RzIHRo ZSBtYW51ZmFjdHVyZXIgdG8gY29ycmVjdGx5IGVtYmVkIHRoZSBrZXkuIENvbmZpcm1hdGlvbiBj YW4gYmUgYWNoaWV2ZWQgdmlhIG1hbnVhbCBpbnNwZWN0aW9uIG9mIHRoZSBtYW51ZmFjdHVyaW5n IHByb2Nlc3MuIE5ldmVydGhlbGVzcywgdGhlIHZlcmlmaWVyIGlzIHRydXN0aW5nIHRoZSBtZmcg dG8gYSBjZXJ0YWluIGRlZ3JlZS48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O21zby1jb250ZXh0dWFsLWFsdGVybmF0ZXM6 eWVzIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O21zby1jb250ZXh0dWFsLWFsdGVybmF0ZXM6eWVzIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsgVGhpcyB0aHJlYWQgaXMgYWJvdXQgZm9ybWF0cyAoWC41MDkvQVNOLjEsIENCT1Ig ZXRj4oCmKS4gVGhlIHNlbWFudGljcyBvZiB3aGF0IGEgc2lnbmF0dXJlIG1lYW5zIGlzIChzaG91 bGQgYmUpIGNvbW1vbiBhY3Jvc3MgYWxsIHRoZSBmb3JtYXRzIElNTy4gSWYgc2VsZi1zaWduZWQN CiBjbGFpbXMgYXJlIGludmFsaWQsIHRoZW4gdGhleSBzaG91bGQgYmUgaW52YWxpZCBmb3IgYW55 IGVuY29kaW5nIHdoZXRoZXIgaXQgaXMgQVNOLjEsIENCT1Igb3Igc29tZXRoaW5nIGVsc2UuIElm IHRoZXkgYXJlIHZhbGlkIGZvciBzb21ldGhpbmcgZWxzZSwgdGhlbiB0aGUgc2lnbmF0dXJlIHNo b3VsZCBiZSB2YWxpZCBmb3IgYWx0ZXJuYXRpdmUgZm9ybWF0cyB0b28uDQo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+Jmx0O3NuaXAmZ3Q7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9j a3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQjVDNERGIDQuNXB0 O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQ7bWFyZ2luLWxlZnQ6My43NXB0O21hcmdpbi1yaWdo dDowaW4iIGlkPSJNQUNfT1VUTE9PS19BVFRSSUJVVElPTl9CTE9DS1FVT1RFIj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MS4w aW4iPg0KPG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_FFA0BB1448AB45CE8D7A53D43821FC7Dintelcom_-- From nobody Tue Oct 23 12:04:59 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7301F130F0F for ; Tue, 23 Oct 2018 12:04:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1myD91A2Jp2E for ; Tue, 23 Oct 2018 12:04:55 -0700 (PDT) Received: from mail-qk1-x732.google.com (mail-qk1-x732.google.com [IPv6:2607:f8b0:4864:20::732]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 980A6130E92 for ; Tue, 23 Oct 2018 12:04:55 -0700 (PDT) Received: by mail-qk1-x732.google.com with SMTP id n12so373050qkh.11 for ; Tue, 23 Oct 2018 12:04:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version; bh=+Ulzq+b0I5iR6URsMhzKL1T+D7yY3RFLRXHZJsnkGfs=; b=dxPSFb9DURn0Z63Yg7hRZy160Wq/VNvf//YvfaK5ccj5YzqctYKlPmCKYYiqa5kyQp Y7ZpTc0W2lGm0CvqCeQRxTO/t354oWJahRD3zPKd63Gpgu7ZZxZCKA1J5x30/X3/JZNJ SvHiqk4tIqC7tgKfH9DV0+OpwSfmUC/Kc7+nc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version; bh=+Ulzq+b0I5iR6URsMhzKL1T+D7yY3RFLRXHZJsnkGfs=; b=pOMle9TXpI6V2/Z7D8occ+vKgTgNeGRtTcJ8kiAnLW/GqqKVhL9zJhbbjGr0/+Bhoo Qc21O4R5I2i9KFVlkaNQqkl/JyWeM6IqA8FxNnGzj3BAwL5wEb1AACQyZSVciccoOwcv o80NtGNuGRocl9232i8NHOl2E/SLRzQYwQhrKf3+tkYCCSb77RzheVuBlwuvXaHmIqeY 9hxUNrqavNHGWtqmgJZagw03wQtcZqJl8ZwyAYUZCZ0aOfPMk1nICracaQfbZXspNBdj 6ZWKNpGoA4nZAqSLweBhKT5v/ix9kYJwr4ZuT1wNR1nnqEHUhY85m0luntnnzUGGcbkj nORQ== X-Gm-Message-State: ABuFfohQ0xDFSpHqwYuMxmz7phNXPOsJTRQ/g2ghRSfXLaRQtE2rNNAi SZ0RdLueIV9Lr635IXO0xEnwcw== X-Google-Smtp-Source: ACcGV62bav63S9rizgNCbPUPvLrBA8AhW8+ay+uP533QAnImxicR3yv6JyZGwqUer9K43UHri4CwzQ== X-Received: by 2002:a37:9a55:: with SMTP id c82-v6mr46970010qke.153.1540321494449; Tue, 23 Oct 2018 12:04:54 -0700 (PDT) Received: from [192.168.2.27] (pool-108-28-91-61.washdc.fios.verizon.net. [108.28.91.61]) by smtp.googlemail.com with ESMTPSA id q51-v6sm2919982qtq.6.2018.10.23.12.04.50 (version=TLS1 cipher=AES128-SHA bits=128/128); Tue, 23 Oct 2018 12:04:53 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Tue, 23 Oct 2018 15:04:43 -0400 From: Carl Wallace To: "Smith, Ned" , Jeremy O'Donoghue CC: Michael Richardson , "eat@ietf.org" , "rats@ietf.org" Message-ID: Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? References: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> In-Reply-To: Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3623151892_17738363" Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 19:04:58 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3623151892_17738363 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Inline.. From: "Smith, Ned" Date: Tuesday, October 23, 2018 at 2:49 PM To: Carl Wallace , Jeremy O'Donoghue Cc: Michael Richardson , "eat@ietf.org" , "rats@ietf.org" Subject: Re: [EAT] [Rats] Attestation BoF charter updates? > =20 > =20 >=20 > On 10/23/18, 10:34 AM, "EAT on behalf of Carl Wallace" on behalf of carl@redhoundsoftware.com> wrote: >=20 > =20 >=20 > >>=20 >> =20 >>=20 >> It would be interesting to understand your thinking a bit further. At on= e >> level it is fairly straightforward to define a claim whose value contain= s an >> X.509 certificate, but I suspect that binding may imply more than that. >> [nms] It is also reasonable to consider an X.509 certificate as being an >> object that contains a set of claims (rather than the other way around). >=20 > [cw] Not if the goal is to prevent issuance of a certificate because > provenance of a key cannot be confirmed. Having a self-issued cert contai= n > claims is fine, but this does not obviate the need to bind to issuance > protocols to inform CA issuance. >=20 > [nms] I wasn=E2=80=99t asserting that a certificate would be self-issued. This = is why > I think it makes sense to talk about a claimant. SP800-164 refers to this= as > either a =E2=80=98device owner=E2=80=99 or =E2=80=98information owner=E2=80=99. I=E2=80=99m OK with the= se terms too. > The expectation is the device owner during manufacturing (aka mfg=E2=80=99r) w= ill > know which trust relevant claims can be asserted. They could assert them = by > issuing a certificate containing the claims. The verifier/relying party t= rusts > the mfg=E2=80=99r to be an authoritative source regarding how a device (but mor= e > precisely, how the root-of-trust) was made. If a key is created during mf= g > time and the mfg issues evidence (aka a certificate) of that, then it ser= ves > as provenance as long as the verifier / relying party trusts the manufact= urer > to correctly embed the key. Confirmation can be achieved via manual inspe= ction > of the manufacturing process. Nevertheless, the verifier is trusting the = mfg > to a certain degree. [CW] You are referring to a certificate issued to the device by the manufacturer. I am referring to certifying keys generated by a hardware crypto module on the device once it is in the hands of a user. I don't disagree the verifier must trust the manufacturer when verifying the attestation, I am suggesting that the verifier is a CA who will have plucke= d an attestation from a certificate management message and will, amongst othe= r checks that need to be standardized, confirm the public key in the certificate request corresponds to a claim in the attestation. --B_3623151892_17738363 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable
Inline..

=
From: "Smith, Ned" <ned.smith@intel.com>
Date: Tuesday, October 23, 2018 at 2:49 PM
To: Carl Wallace <carl@redhoundsoftware.com>, Jeremy O'Donoghue <jodonogh@qti.qualcomm.com>
Cc: Michael Richardson <mcr+ietf@sandelman.ca>, "eat@ietf.org" <eat@ietf.org<= /a>>, "rats@ietf.org" <rats@ietf.org>
S= ubject: Re: [EAT] [Rats] Attestation BoF charter updates?

 

 

<= div>

On 10/23/18, 10:34 AM= , "EAT on behalf of Carl Wallace" <= eat-bounces@ietf.org on behalf of carl@redhoundsoftware.com>= ; wrote:

 

<snip>

 

It would be interesting to understand your thinking a bit further. At one l= evel it is fairly straightforward to define a claim whose value contains an = X.509 certificate, but I suspect that binding may imply more than that. 

<= span style=3D"font-size:10.0pt;mso-contextual-alternates:yes">[nms] It is also= reasonable to consider an X.509 certificate as being an object that contain= s a set of claims (rather than the other way around).

<= /div>

[cw] Not if the goal is to prevent issuance of a certificate beca= use provenance of a key cannot be confirmed. Having a self-issued cert conta= in claims is fine, but this does not obviate the need to bind to issuance protocols to inform CA issuance. 

[nms] I wasn’t asserting that a ce= rtificate would be self-issued. This is why I think it makes sense to talk a= bout a claimant. SP800-164 refers to this as either a ‘device owner= 217; or ‘information owner’. I’m OK with these terms too. The expectation is the device owner during manufacturing =  (aka mfg’r) will know which trust relevant claims can be asserte= d. They could assert them by issuing a certificate containing the claims. Th= e verifier/relying party trusts the mfg’r to be an authoritative source regarding how a device (but more precisely, = how the root-of-trust) was made. If a key is created during mfg time and the= mfg issues evidence (aka a certificate) of that, then it serves as provenan= ce as long as the verifier / relying party trusts the manufacturer to correctly embed the key. Confirmation can= be achieved via manual inspection of the manufacturing process. Nevertheles= s, the verifier is trusting the mfg to a certain degree.


[CW] You are referring to a = certificate issued to the device by the manufacturer. I am referring to cert= ifying keys generated by a hardware crypto module on the device once it is i= n the hands of a user.  I don't disagree the verifier must trust the ma= nufacturer when verifying the attestation, I am suggesting that the verifier= is a CA who will have plucked an attestation from a certificate management = message and will, amongst other checks that need to be standardized, confirm= the public key in the certificate request corresponds to a claim in the att= estation. 
--B_3623151892_17738363-- From nobody Tue Oct 23 12:53:51 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A1D8130E71; Tue, 23 Oct 2018 12:53:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.299 X-Spam-Level: X-Spam-Status: No, score=-4.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MwEENaq0O1e1; Tue, 23 Oct 2018 12:53:47 -0700 (PDT) Received: from alexa-out-sd-02.qualcomm.com (alexa-out-sd-02.qualcomm.com [199.106.114.39]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C0999130E5C; Tue, 23 Oct 2018 12:53:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1540324427; x=1571860427; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=UacNYVRoQfV7q3QtpdTDBb3YLv6ndUIQHlfL3c2hzaw=; b=zhbe2K/DfbtGkqFE+4FS5VhUrre9ThIPqaTCxf4vON4aMz+vPZPAT372 4cp9YXoSSlM/xCKoT0/g+1MLHuPh9Ch7z/4WW08Rinih3U3bFLnGJvAE9 tij7otUdbjDMqQxRZgIb7Z3K+hgBQQf7mfZbtadptLXtfLxLPPQ10zkZe A=; X-IronPort-AV: E=Sophos; i="5.54,417,1534834800"; d="scan'208,217"; a="14632882" Received: from unknown (HELO ironmsg05-sd.qualcomm.com) ([10.53.140.145]) by alexa-out-sd-02.qualcomm.com with ESMTP; 23 Oct 2018 12:53:47 -0700 Received: from nasanexm01a.na.qualcomm.com ([10.85.0.81]) by ironmsg05-sd.qualcomm.com with ESMTP/TLS/AES256-SHA; 23 Oct 2018 12:53:46 -0700 Received: from eusanexr01e.eu.qualcomm.com (10.85.0.100) by nasanexm01a.na.qualcomm.com (10.85.0.81) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Tue, 23 Oct 2018 12:53:46 -0700 Received: from NASANEXM01C.na.qualcomm.com (10.85.0.83) by eusanexr01e.eu.qualcomm.com (10.85.0.100) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Tue, 23 Oct 2018 12:53:44 -0700 Received: from NASANEXM01C.na.qualcomm.com ([10.85.0.83]) by NASANEXM01C.na.qualcomm.com ([10.85.0.83]) with mapi id 15.00.1365.000; Tue, 23 Oct 2018 12:53:44 -0700 From: Giridhar Mandyam To: Carl Wallace , Jeremy O'Donoghue , Michael Richardson CC: "rats@ietf.org" , "eat@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUauMzAcwRL3H0NUa/M9uJc0mqOqUtPSyA Date: Tue, 23 Oct 2018 19:53:43 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [199.106.107.6] Content-Type: multipart/alternative; boundary="_000_e0c3f17f709140b7a546eeced55d522bNASANEXM01Cnaqualcommco_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 19:53:51 -0000 --_000_e0c3f17f709140b7a546eeced55d522bNASANEXM01Cnaqualcommco_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 W0NXXSBBcyBub3RlZCBiZWZvcmUsIEknZCBsaWtlIHRvIHNlZSBiaW5kaW5nIHRvIGNlcnRpZmlj YXRlIGVucm9sbG1lbnQgcHJvdG9jb2xzIGluY2x1ZGVkIGhlcmUgYXMgd2VsbC4gVGhpcyBpcyBz b21ldGhpbmcgd2UgYXJlIGRvaW5nIHRvZGF5LCB3aXRob3V0IHN0YW5kYXJkcyBncm91bmRpbmcg KGFzIGlsbHVzdHJhdGVkIGluIHBpbGUgb2YgYXR0ZXN0YXRpb25zIHNoYXJlZCB2aWEgR2l0aHVi IGEgZmV3IHdlZWtzIGJhY2spLg0KDQpXaHkgaXNu4oCZdCBBQ01FIGFwcGxpY2FibGUgIChodHRw czovL2RhdGF0cmFja2VyLmlldGYub3JnL3dnL2FjbWUvYWJvdXQvKT8gICBHcmFudGVkLCBpdCBp cyBvcHRpbWl6ZWQgZm9yIHRoZSB3ZWIgY3VycmVudGx5LiAgQnV0IGZyb20gYSBtZXNzYWdlIGZv cm1hdCBwZXJzcGVjdGl2ZSBJIGRvbuKAmXQgdGhpbmsgd2UgbmVlZCB0byByZS1pbnZlbnQgdGhl IHdoZWVsLg0KDQotR2lyaSBNYW5keWFtLCBRdWFsY29tbQ0KDQpGcm9tOiBFQVQgPGVhdC1ib3Vu Y2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgQ2FybCBXYWxsYWNlDQpTZW50OiBUdWVzZGF5LCBP Y3RvYmVyIDIzLCAyMDE4IDg6MTUgQU0NClRvOiBKZXJlbXkgTydEb25vZ2h1ZSA8am9kb25vZ2hA cXRpLnF1YWxjb21tLmNvbT47IE1pY2hhZWwgUmljaGFyZHNvbiA8bWNyK2lldGZAc2FuZGVsbWFu LmNhPg0KQ2M6IHJhdHNAaWV0Zi5vcmc7IGVhdEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtFQVRd IFtSYXRzXSBBdHRlc3RhdGlvbiBCb0YgY2hhcnRlciB1cGRhdGVzPw0KDQoNCjxzbmlwPg0KV29y ayBJdGVtcw0KLS0tLS0tLS0tLQ0KVGhlIFdvcmtpbmcgR3JvdXAgd2lsbCBkZXZlbG9wIHNwZWNp ZmljYXRpb25zIHN1cHBvcnRpbmcgdGhlIGNyZWF0aW9uIG9mDQppbnRlcm9wZXJhYmxlIHJlbW90 ZSBhdHRlc3RhdGlvbiBwcm9jZWR1cmVzIGZvciBlbnRpdGllcyB3aGljaCBpbmNvcnBvcmF0ZQ0K Um9vdHMgb2YgVHJ1c3QuIFRoZSBtYWluIGRlbGl2ZXJhYmxlcyBhcmUgYXMgZm9sbG93cy4NCi0g UHJvZHVjZSBhIHJlcXVpcmVtZW50cyBkb2N1bWVudCBlc3RhYmxpc2hpbmcgYSBjb21tb24gdm9j YWJ1bGFyeSBmb3IgcmVtb3RlDQogIGF0dGVzdGF0aW9uLCBpZGVudGlmeWluZyBtZWNoYW5pc21z IHdoaWNoIHdpbGwgYmUgc3VwcG9ydGVkIGZvciBlc3RhYmxpc2hpbmcNCiAgdHJ1c3QgYmV0d2Vl biBhbiBlbnRpdHkgYW5kIGEgcmVtb3RlIHBhcnR5LCBhbmQgZW51bWVyYXRpbmcgc2FtcGxlIHVz ZS1jYXNlcw0KICBmb3IgcmVtb3RlIGF0dGVzdGF0aW9uLg0KLSBQcm9kdWNlIHNwZWNpZmljYXRp b24gdGV4dCBkZWZpbmluZyBpbnRlcm9wZXJhYmxlIGNyb3NzLXBsYXRmb3JtIGNsYWltcyB3aGlj aA0KICBwcm92aWRlIGluZm9ybWF0aW9uIGFib3V0IGFuIGVudGl0eSBpbiBzdXBwb3J0IG9mIHRo ZSByZXF1aXJlZCB1c2UtY2FzZXMsIGFuZA0KICBleHRlbmRpbmcgdGhlIHNldCBvZiBjbGFpbXMg ZGVmaW5lZCBpbiBSRkM3NTE5IGFuZCBSRkM4MzkyLiBUaGUgc3BlY2lmaWNhdGlvbg0KICB3aWxs IGRlc2NyaWJlIHRoZSBzeW50YXggZm9yIGVhY2ggY2xhaW0gaW4gYXQgbGVhc3QgdGhlIGZvbGxv d2luZyBmb3JtYXRzOg0KICAgIC0gQ0JPUiBbUkZDNzA0OV0NCiAgICAtIEpTT04gW1JGQzcxNTld DQogICAgLSBZQU5HIFtSRkM2MDIwXQ0KW0NXXSBBU04uMSBpcyBhbHJlYWR5IHBsYXllciBmb3Ig YSBudW1iZXIgb2YgYXR0ZXN0YXRpb24gZm9ybWF0cy4gQW55IHJlYXNvbiB0byBleGNsdWRlIGl0 Pw0KDQotIFByb2R1Y2Ugc3BlY2lmaWNhdGlvbiB0ZXh0IGRlZmluaW5nIHByb2NlZHVyZXMgYW5k IGNvcnJlc3BvbmRpbmcgYXJjaGl0ZWN0dXJlcw0KICBzdXBwb3J0aW5nIHZlcmlmaWNhdGlvbiBv ZiBjbGFpbXMgd2l0aGluIGFuIGF0dGVzdGF0aW9uIGJhc2VkIG9uIG1lYXN1cmVkIGZpbGUNCiAg ZXhlY3V0aW9uIHByb2NlZHVyZXMgYW5kIHN1cHBvcnRpbmc6DQogICAgLSBFeHBsaWNpdCBhdHRl c3RhdGlvbiB3aGVyZWluIGEgc2V0IG9mIGNsYWltcyBpcyB0cmFuc3BvcnRlZCBpbiB0aGUgYXR0 ZXN0YXRpb247DQogICAgLSBJbXBsaWNpdCBhdHRlc3RhdGlvbiB3aGVyZWluIGEgc2V0IG9mIGNs YWltcyBpcyBpbXBsaWVkIGJ5IHBvc3Nlc3Npb24gb2YgYSBzZWNyZXQuDQotIFByb2R1Y2Ugc3Bl Y2lmaWNhdGlvbiB0ZXh0IGRlZmluaW5nIHByb2NlZHVyZXMgYW5kIGNvcnJlc3BvbmRpbmcgYXJj aGl0ZWN0dXJlcw0KICBzdXBwb3J0aW5nIHZlcmlmaWNhdGlvbiBvZiBjbGFpbXMgZW5jYXBzdWxh dGVkIGluOg0KICAgIC0gQ0JPUiBXZWIgVG9rZW4gc3RydWN0dXJlcyBbUkZDODM5Ml0NCiAgICAt IEpTT04gV2ViIFRva2VuIHN0cnVjdHVyZXMgW1JGQzc1MTldDQpbQ1ddIEFzIG5vdGVkIGJlZm9y ZSwgSSdkIGxpa2UgdG8gc2VlIGJpbmRpbmcgdG8gY2VydGlmaWNhdGUgZW5yb2xsbWVudCBwcm90 b2NvbHMgaW5jbHVkZWQgaGVyZSBhcyB3ZWxsLiBUaGlzIGlzIHNvbWV0aGluZyB3ZSBhcmUgZG9p bmcgdG9kYXksIHdpdGhvdXQgc3RhbmRhcmRzIGdyb3VuZGluZyAoYXMgaWxsdXN0cmF0ZWQgaW4g cGlsZSBvZiBhdHRlc3RhdGlvbnMgc2hhcmVkIHZpYSBHaXRodWIgYSBmZXcgd2Vla3MgYmFjayku DQoNCi0gUGVyZm9ybSBwcml2YWN5IGFuYWx5c2lzIG9mIGJvdGggY2xhaW1zIGFuZCB0aGUgY3J5 cHRvZ3JhcGhpYyBwcm9jZWR1cmVzIHVzZWQgdG8NCiAgZXN0YWJsaXNoIHRydXN0LiBUaGlzIGlu Zm9ybWF0aW9uIHdpbGwgYmUgaW5jbHVkZWQgYXMgYXBwcm9wcmlhdGUgaW4gdGhlDQogIGRlbGl2 ZXJhYmxlIHNwZWNpZmljYXRpb25zLCBhbmQgbWF5IGltcGx5IGV4dGVuc2lvbiBvZiBwcm9jZWR1 cmVzIGRlZmluZWQgaW4NCiAgb3RoZXIgc3BlY2lmaWNhdGlvbnMgaW4gc3VwcG9ydCBvZiBwcml2 YWN5IGdvYWxzLg0KDQpJdCBzZWVtcyB0byBtZSB0aGF0IHRoZXJlIGFyZSB0d28gd2F5cyB0byBw cm9kdWNlIHRoZSBtYWluIHNwZWNpZmljYXRpb24gZGVsaXZlcmFibGVzLiBJIGhhdmUgZGVsaWJl cmF0ZWx5IGxlZnQgdGhlIHRleHQgYWJvdmUgc2xpZ2h0bHkgdmFndWUgb24gdGhpcy4NCg0KICAq ICAgQSBjbGFpbXMgc3BlY2lmaWNhdGlvbiBjb21tb24gdG8gUkFUUyBhbmQgRUFUIHdpdGggc2Vw YXJhdGUgUkFUUyBhbmQgRUFUIHByb2NlZHVyZSBzcGVjaWZpY2F0aW9ucy4NCiAgKiAgIEEgY2xh aW1zIHNwZWNpZmljYXRpb24gYWxzbyBpbmNvcnBvcmF0aW5nIEVBVCBwcm9jZWR1cmVzIGFuZCBh IHNlcGFyYXRlIFJBVFMgcHJvY2VkdXJlIHNwZWNpZmljYXRpb24uIFRoaXMgd291bGQgYmUgbXkg cHJlZmVycmVkIG9wdGlvbi4NCg0KICAgICAqICAgSSBiZWxpZXZlIHRoZXJlIGFyZSB2ZXJ5IGZl dyBwcm9jZWR1cmVzIG5lZWRlZCBmb3IgRUFUIG90aGVyIHRoYW4gdGhlIHBvc3NpYmxlIG5lZWQg dG8gc3VwcG9ydCBhIG5vbmNlIHRvIGVuc3VyZSBmcmVzaG5lc3MNCg0KSmVyZW15DQoNCk5vdGlj ZSBob3cgYnkgYWJvdXQgdGhlIHNlY29uZCBwYXJhZ3JhcGggKDZ0aXNjaCB0YWtlcyBhIGJpdCBs b25nZXIpLCBlYWNoDQpnZXRzIGludG8gd2hhdCB0aGUgV0cgd2lsbCBkbz8NCg0KLS0NCk1pY2hh ZWwgUmljaGFyZHNvbiA8bWNyK0lFVEZAc2FuZGVsbWFuLmNhPG1haWx0bzptY3IrSUVURkBzYW5k ZWxtYW4uY2E+PiwgU2FuZGVsbWFuIFNvZnR3YXJlIFdvcmtzDQotPSBJUHY2IElvVCBjb25zdWx0 aW5nID0tDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K RUFUIG1haWxpbmcgbGlzdA0KRUFUQGlldGYub3JnPG1haWx0bzpFQVRAaWV0Zi5vcmc+DQpodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KDQpfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXyBSQVRTIG1haWxpbmcgbGlzdCBSQVRTQGll dGYub3JnPG1haWx0bzpSQVRTQGlldGYub3JnPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL3JhdHMNCg== --_000_e0c3f17f709140b7a546eeced55d522bNASANEXM01Cnaqualcommco_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 Q291cmllcjsNCglwYW5vc2UtMToyIDcgNCA5IDIgMiA1IDIgNCA0O30NCkBmb250LWZhY2UNCgl7 Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAwIDAgMCAwIDAgMCAwIDA7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQg NSAzIDUgNCA2IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglw YW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0K cC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0K CW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5 OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5l O30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0 eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1y aWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGlu Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNv LXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3Jk U2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGlu IDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlz dCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6ODcwMDY3MTA4Ow0KCW1z by1saXN0LXRlbXBsYXRlLWlkczotMTE0NDI1ODQ1ODt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28t bGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1m YW1pbHk6U3ltYm9sO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsN Cgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7 DQoJbXNvLWJpZGktZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7fQ0KQGxpc3QgbDA6bGV2 ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv gqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBw dDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZl bC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVs LXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWls eTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuNWlu Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0K QGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9u dC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw3 DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsN Cglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpX aW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJ bXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0Kb2wN Cgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+PC9z dHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVk aXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28g OV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJl ZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9o ZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRp diBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrIj5bQ1ddIEFzIG5vdGVkIGJlZm9yZSwgSSdk IGxpa2UgdG8gc2VlIGJpbmRpbmcgdG8gY2VydGlmaWNhdGUgZW5yb2xsbWVudCBwcm90b2NvbHMg aW5jbHVkZWQgaGVyZSBhcyB3ZWxsLiBUaGlzIGlzIHNvbWV0aGluZyB3ZSBhcmUgZG9pbmcgdG9k YXksIHdpdGhvdXQgc3RhbmRhcmRzIGdyb3VuZGluZyAoYXMgaWxsdXN0cmF0ZWQgaW4gcGlsZQ0K IG9mIGF0dGVzdGF0aW9ucyBzaGFyZWQgdmlhIEdpdGh1YiBhIGZldyB3ZWVrcyBiYWNrKS4mbmJz cDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPldoeSBpc27igJl0IEFDTUUgYXBwbGlj YWJsZSAmbmJzcDsoPGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy93Zy9hY21l L2Fib3V0LyI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy93Zy9hY21lL2Fib3V0LzwvYT4p PyZuYnNwOyAmbmJzcDtHcmFudGVkLCBpdCBpcyBvcHRpbWl6ZWQgZm9yIHRoZSB3ZWIgY3VycmVu dGx5LiZuYnNwOyBCdXQgZnJvbSBhIG1lc3NhZ2UgZm9ybWF0IHBlcnNwZWN0aXZlIEkgZG9u4oCZ dCB0aGluayB3ZQ0KIG5lZWQgdG8gcmUtaW52ZW50IHRoZSB3aGVlbC48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9y OmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+LUdpcmkgTWFuZHlh bSwgUXVhbGNvbW08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gRUFUICZsdDtlYXQtYm91bmNlc0BpZXRm Lm9yZyZndDsgPGI+T24gQmVoYWxmIE9mIDwvYj4NCkNhcmwgV2FsbGFjZTxicj4NCjxiPlNlbnQ6 PC9iPiBUdWVzZGF5LCBPY3RvYmVyIDIzLCAyMDE4IDg6MTUgQU08YnI+DQo8Yj5Ubzo8L2I+IEpl cmVteSBPJ0Rvbm9naHVlICZsdDtqb2Rvbm9naEBxdGkucXVhbGNvbW0uY29tJmd0OzsgTWljaGFl bCBSaWNoYXJkc29uICZsdDttY3ImIzQzO2lldGZAc2FuZGVsbWFuLmNhJmd0Ozxicj4NCjxiPkNj OjwvYj4gcmF0c0BpZXRmLm9yZzsgZWF0QGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJl OiBbRUFUXSBbUmF0c10gQXR0ZXN0YXRpb24gQm9GIGNoYXJ0ZXIgdXBkYXRlcz88bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tbGVmdDozLjc1cHQ7bWFyZ2luLXJp Z2h0OjBpbiI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDoxLjVwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdp bi1ib3R0b206MS41cHQ7bWFyZ2luLWxlZnQ6MGluIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuNXB0O2NvbG9yOmJsYWNrIj48YnI+DQombHQ7c25pcCZndDs8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjEuNXB0 O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbToxLjVwdDttYXJnaW4tbGVmdDowaW47Zm9u dC1zdHJldGNoOiBub3JtYWwiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZh bWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj5Xb3JrIEl0ZW1zPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDoxLjVwdDtt YXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MS41cHQ7bWFyZ2luLWxlZnQ6MGluO2ZvbnQt c3RyZXRjaDogbm9ybWFsIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6OC41cHQ7Zm9udC1mYW1p bHk6Q291cmllcjtjb2xvcjpibGFjayI+LS0tLS0tLS0tLTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MS41cHQ7bWFy Z2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEuNXB0O21hcmdpbi1sZWZ0OjBpbjtmb250LXN0 cmV0Y2g6IG5vcm1hbCI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5 OkNvdXJpZXI7Y29sb3I6YmxhY2siPlRoZSBXb3JraW5nIEdyb3VwIHdpbGwgZGV2ZWxvcCBzcGVj aWZpY2F0aW9ucyBzdXBwb3J0aW5nIHRoZSBjcmVhdGlvbiBvZjxicj4NCmludGVyb3BlcmFibGUg cmVtb3RlIGF0dGVzdGF0aW9uIHByb2NlZHVyZXMgZm9yIGVudGl0aWVzIHdoaWNoIGluY29ycG9y YXRlJm5ic3A7PGJyPg0KUm9vdHMgb2YgVHJ1c3QuIFRoZSBtYWluIGRlbGl2ZXJhYmxlcyBhcmUg YXMgZm9sbG93cy4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjEuNXB0O21hcmdpbi1yaWdodDowaW47bWFy Z2luLWJvdHRvbToxLjVwdDttYXJnaW4tbGVmdDowaW47Zm9udC1zdHJldGNoOiBub3JtYWwiPg0K PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJs YWNrIj4tIFByb2R1Y2UgYSByZXF1aXJlbWVudHMgZG9jdW1lbnQgZXN0YWJsaXNoaW5nIGEgY29t bW9uIHZvY2FidWxhcnkgZm9yIHJlbW90ZTxicj4NCiZuYnNwOyBhdHRlc3RhdGlvbiwgaWRlbnRp ZnlpbmcgbWVjaGFuaXNtcyB3aGljaCB3aWxsIGJlIHN1cHBvcnRlZCBmb3IgZXN0YWJsaXNoaW5n PGJyPg0KJm5ic3A7IHRydXN0IGJldHdlZW4gYW4gZW50aXR5IGFuZCBhIHJlbW90ZSBwYXJ0eSwg YW5kIGVudW1lcmF0aW5nIHNhbXBsZSB1c2UtY2FzZXM8YnI+DQombmJzcDsgZm9yIHJlbW90ZSBh dHRlc3RhdGlvbi48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjEuNXB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJv dHRvbToxLjVwdDttYXJnaW4tbGVmdDowaW47Zm9udC1zdHJldGNoOiBub3JtYWwiPg0KPHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj4t IFByb2R1Y2Ugc3BlY2lmaWNhdGlvbiB0ZXh0IGRlZmluaW5nIGludGVyb3BlcmFibGUgY3Jvc3Mt cGxhdGZvcm0gY2xhaW1zIHdoaWNoPGJyPg0KJm5ic3A7IHByb3ZpZGUgaW5mb3JtYXRpb24gYWJv dXQgYW4gZW50aXR5IGluIHN1cHBvcnQgb2YgdGhlIHJlcXVpcmVkIHVzZS1jYXNlcywgYW5kPGJy Pg0KJm5ic3A7IGV4dGVuZGluZyB0aGUgc2V0IG9mIGNsYWltcyBkZWZpbmVkIGluIFJGQzc1MTkg YW5kIFJGQzgzOTIuIFRoZSBzcGVjaWZpY2F0aW9uPGJyPg0KJm5ic3A7IHdpbGwgZGVzY3JpYmUg dGhlIHN5bnRheCBmb3IgZWFjaCBjbGFpbSBpbiBhdCBsZWFzdCB0aGUgZm9sbG93aW5nIGZvcm1h dHM6PGJyPg0KJm5ic3A7ICZuYnNwOyAtIENCT1IgW1JGQzcwNDldPGJyPg0KJm5ic3A7ICZuYnNw OyAtIEpTT04gW1JGQzcxNTldPGJyPg0KJm5ic3A7ICZuYnNwOyAtIFlBTkcgW1JGQzYwMjBdPG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPltDV10gQVNOLjEgaXMgYWxyZWFkeSBwbGF5ZXIgZm9y IGEgbnVtYmVyIG9mIGF0dGVzdGF0aW9uIGZvcm1hdHMuIEFueSByZWFzb24gdG8gZXhjbHVkZSBp dD88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLWxl ZnQ6My43NXB0O21hcmdpbi1yaWdodDowaW4iIGlkPSJNQUNfT1VUTE9PS19BVFRSSUJVVElPTl9C TE9DS1FVT1RFIj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjEuNXB0O21hcmdpbi1yaWdodDowaW47bWFy Z2luLWJvdHRvbToxLjVwdDttYXJnaW4tbGVmdDowaW4iPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTo4LjVwdDtmb250LWZhbWlseTpDb3VyaWVyO2NvbG9yOmJsYWNrIj4tIFByb2R1Y2Ugc3BlY2lm aWNhdGlvbiB0ZXh0IGRlZmluaW5nIHByb2NlZHVyZXMgYW5kIGNvcnJlc3BvbmRpbmcgYXJjaGl0 ZWN0dXJlczxicj4NCiZuYnNwOyBzdXBwb3J0aW5nIHZlcmlmaWNhdGlvbiBvZiBjbGFpbXMgd2l0 aGluIGFuIGF0dGVzdGF0aW9uIGJhc2VkIG9uIG1lYXN1cmVkIGZpbGU8YnI+DQombmJzcDsgZXhl Y3V0aW9uIHByb2NlZHVyZXMgYW5kIHN1cHBvcnRpbmc6PGJyPg0KJm5ic3A7ICZuYnNwOyAtIEV4 cGxpY2l0IGF0dGVzdGF0aW9uIHdoZXJlaW4gYSBzZXQgb2YgY2xhaW1zIGlzIHRyYW5zcG9ydGVk IGluIHRoZSBhdHRlc3RhdGlvbjs8YnI+DQombmJzcDsgJm5ic3A7IC0gSW1wbGljaXQgYXR0ZXN0 YXRpb24gd2hlcmVpbiBhIHNldCBvZiBjbGFpbXMgaXMgaW1wbGllZCBieSBwb3NzZXNzaW9uIG9m IGEgc2VjcmV0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MS41cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90 dG9tOjEuNXB0O21hcmdpbi1sZWZ0OjBpbjtmb250LXN0cmV0Y2g6IG5vcm1hbCI+DQo8c3BhbiBz dHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6YmxhY2siPi0g UHJvZHVjZSBzcGVjaWZpY2F0aW9uIHRleHQgZGVmaW5pbmcgcHJvY2VkdXJlcyBhbmQgY29ycmVz cG9uZGluZyBhcmNoaXRlY3R1cmVzPGJyPg0KJm5ic3A7IHN1cHBvcnRpbmcgdmVyaWZpY2F0aW9u IG9mIGNsYWltcyBlbmNhcHN1bGF0ZWQgaW46PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDoxLjVwdDttYXJnaW4tcmln aHQ6MGluO21hcmdpbi1ib3R0b206MS41cHQ7bWFyZ2luLWxlZnQ6MGluO2ZvbnQtc3RyZXRjaDog bm9ybWFsIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6OC41cHQ7Zm9udC1mYW1pbHk6Q291cmll cjtjb2xvcjpibGFjayI+Jm5ic3A7ICZuYnNwOyAtIENCT1IgV2ViIFRva2VuIHN0cnVjdHVyZXMg W1JGQzgzOTJdPGJyPg0KJm5ic3A7ICZuYnNwOyAtIEpTT04gV2ViIFRva2VuIHN0cnVjdHVyZXMg W1JGQzc1MTldPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPltDV10gQXMgbm90ZWQgYmVmb3Jl LCBJJ2QgbGlrZSB0byBzZWUgYmluZGluZyB0byBjZXJ0aWZpY2F0ZSBlbnJvbGxtZW50IHByb3Rv Y29scyBpbmNsdWRlZCBoZXJlIGFzIHdlbGwuIFRoaXMgaXMgc29tZXRoaW5nIHdlIGFyZSBkb2lu ZyB0b2RheSwgd2l0aG91dCBzdGFuZGFyZHMgZ3JvdW5kaW5nIChhcyBpbGx1c3RyYXRlZCBpbiBw aWxlDQogb2YgYXR0ZXN0YXRpb25zIHNoYXJlZCB2aWEgR2l0aHViIGEgZmV3IHdlZWtzIGJhY2sp LiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tbGVmdDozLjc1cHQ7bWFyZ2luLXJpZ2h0OjBpbiIgaWQ9Ik1BQ19PVVRMT09LX0FUVFJJQlVU SU9OX0JMT0NLUVVPVEUiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MS41cHQ7bWFyZ2luLXJpZ2h0OjBp bjttYXJnaW4tYm90dG9tOjEuNXB0O21hcmdpbi1sZWZ0OjBpbiI+DQo8c3BhbiBzdHlsZT0iZm9u dC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OkNvdXJpZXI7Y29sb3I6YmxhY2siPi0gUGVyZm9ybSBw cml2YWN5IGFuYWx5c2lzIG9mIGJvdGggY2xhaW1zIGFuZCB0aGUgY3J5cHRvZ3JhcGhpYyBwcm9j ZWR1cmVzIHVzZWQgdG88YnI+DQombmJzcDsgZXN0YWJsaXNoIHRydXN0LiBUaGlzIGluZm9ybWF0 aW9uIHdpbGwgYmUgaW5jbHVkZWQgYXMgYXBwcm9wcmlhdGUgaW4gdGhlPGJyPg0KJm5ic3A7IGRl bGl2ZXJhYmxlIHNwZWNpZmljYXRpb25zLCBhbmQgbWF5IGltcGx5IGV4dGVuc2lvbiBvZiBwcm9j ZWR1cmVzIGRlZmluZWQgaW48YnI+DQombmJzcDsgb3RoZXIgc3BlY2lmaWNhdGlvbnMgaW4gc3Vw cG9ydCBvZiBwcml2YWN5IGdvYWxzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2Nv bG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpi bGFjayI+SXQgc2VlbXMgdG8gbWUgdGhhdCB0aGVyZSBhcmUgdHdvIHdheXMgdG8gcHJvZHVjZSB0 aGUgbWFpbiBzcGVjaWZpY2F0aW9uIGRlbGl2ZXJhYmxlcy4gSSBoYXZlIGRlbGliZXJhdGVseSBs ZWZ0IHRoZSB0ZXh0IGFib3ZlIHNsaWdodGx5IHZhZ3VlIG9uIHRoaXMuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJjb2xvcjpibGFjazttc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+DQo8c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdCI+QSBjbGFpbXMgc3BlY2lmaWNhdGlvbiBjb21tb24gdG8gUkFU UyBhbmQgRUFUIHdpdGggc2VwYXJhdGUgUkFUUyBhbmQgRUFUIHByb2NlZHVyZSBzcGVjaWZpY2F0 aW9ucy48bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i Y29sb3I6YmxhY2s7bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG87bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC41cHQiPkEgY2xhaW1zIHNwZWNpZmljYXRpb24gYWxzbyBpbmNvcnBvcmF0aW5nIEVBVCBwcm9j ZWR1cmVzIGFuZCBhIHNlcGFyYXRlIFJBVFMgcHJvY2VkdXJlIHNwZWNpZmljYXRpb24uIFRoaXMg d291bGQgYmUgbXkgcHJlZmVycmVkIG9wdGlvbi4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvbGk+PC91 bD4NCjx1bCB0eXBlPSJkaXNjIj4NCjx1bCB0eXBlPSJjaXJjbGUiPg0KPGxpIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJjb2xvcjpibGFjazttc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0bzttc28tbGlzdDpsMCBsZXZlbDIgbGZvMSI+DQo8c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjVwdCI+SSBiZWxpZXZlIHRoZXJlIGFyZSB2ZXJ5IGZldyBwcm9jZWR1 cmVzIG5lZWRlZCBmb3IgRUFUIG90aGVyIHRoYW4gdGhlIHBvc3NpYmxlIG5lZWQgdG8gc3VwcG9y dCBhIG5vbmNlIHRvIGVuc3VyZSBmcmVzaG5lc3M8bzpwPjwvbzpwPjwvc3Bhbj48L2xpPjwvdWw+ DQo8L3VsPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuNXB0O2NvbG9yOmJsYWNrIj5KZXJlbXk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206 NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+PGJyPg0KTm90aWNlIGhvdyBieSBhYm91dCB0 aGUgc2Vjb25kIHBhcmFncmFwaCAoNnRpc2NoIHRha2VzIGEgYml0IGxvbmdlciksIGVhY2g8YnI+ DQpnZXRzIGludG8gd2hhdCB0aGUgV0cgd2lsbCBkbz88YnI+DQo8YnI+DQotLTxicj4NCk1pY2hh ZWwgUmljaGFyZHNvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1jciYjNDM7SUVURkBzYW5kZWxtYW4u Y2EiPm1jciYjNDM7SUVURkBzYW5kZWxtYW4uY2E8L2E+Jmd0OywgU2FuZGVsbWFuIFNvZnR3YXJl IFdvcmtzPGJyPg0KLT0gSVB2NiBJb1QgY29uc3VsdGluZyA9LTxicj4NCl9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KRUFUIG1haWxpbmcgbGlzdDxi cj4NCjxhIGhyZWY9Im1haWx0bzpFQVRAaWV0Zi5vcmciPkVBVEBpZXRmLm9yZzwvYT48YnI+DQo8 YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdCI+aHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQ8L2E+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Y29sb3I6YmxhY2siPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtjb2xvcjpibGFjayI+X19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18gUkFUUyBtYWlsaW5nIGxpc3QN CjxhIGhyZWY9Im1haWx0bzpSQVRTQGlldGYub3JnIj5SQVRTQGlldGYub3JnPC9hPiA8YSBocmVm PSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3JhdHMiPg0KaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9yYXRzPC9hPiA8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_e0c3f17f709140b7a546eeced55d522bNASANEXM01Cnaqualcommco_-- From nobody Tue Oct 23 12:55:38 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3B61130E5C; Tue, 23 Oct 2018 12:55:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0lkD-4zQkRzQ; Tue, 23 Oct 2018 12:55:29 -0700 (PDT) Received: from mga02.intel.com (mga02.intel.com [134.134.136.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 75256130E1B; Tue, 23 Oct 2018 12:55:29 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga006.jf.intel.com ([10.7.209.51]) by orsmga101.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 23 Oct 2018 12:55:28 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos; i="5.54,417,1534834800"; d="scan'208,217"; a="84994731" Received: from orsmsx105.amr.corp.intel.com ([10.22.225.132]) by orsmga006.jf.intel.com with ESMTP; 23 Oct 2018 12:55:28 -0700 Received: from orsmsx114.amr.corp.intel.com (10.22.240.10) by ORSMSX105.amr.corp.intel.com (10.22.225.132) with Microsoft SMTP Server (TLS) id 14.3.319.2; Tue, 23 Oct 2018 12:55:27 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.251]) by ORSMSX114.amr.corp.intel.com ([169.254.8.194]) with mapi id 14.03.0319.002; Tue, 23 Oct 2018 12:55:27 -0700 From: "Smith, Ned" To: Carl Wallace , Jeremy O'Donoghue CC: Michael Richardson , "eat@ietf.org" , "rats@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUavNRF3KZGpU4TEGGfYgrNJhz76UtFauAgAB27AD//5+qAIAAebSA//+YzgA= Date: Tue, 23 Oct 2018 19:55:26 +0000 Message-ID: References: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.3.181015 x-originating-ip: [10.24.14.158] Content-Type: multipart/alternative; boundary="_000_FCF1711D49364D35A75D84B88C076151intelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 19:55:32 -0000 --_000_FCF1711D49364D35A75D84B88C076151intelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCk9uIDEwLzIzLzE4LCAxMjowNCBQTSwgIkNhcmwgV2FsbGFjZSIgPGNhcmxAcmVkaG91bmRz b2Z0d2FyZS5jb208bWFpbHRvOmNhcmxAcmVkaG91bmRzb2Z0d2FyZS5jb20+PiB3cm90ZToNCg0K SW5saW5lLi4NCg0KRnJvbTogIlNtaXRoLCBOZWQiIDxuZWQuc21pdGhAaW50ZWwuY29tPG1haWx0 bzpuZWQuc21pdGhAaW50ZWwuY29tPj4NCkRhdGU6IFR1ZXNkYXksIE9jdG9iZXIgMjMsIDIwMTgg YXQgMjo0OSBQTQ0KVG86IENhcmwgV2FsbGFjZSA8Y2FybEByZWRob3VuZHNvZnR3YXJlLmNvbTxt YWlsdG86Y2FybEByZWRob3VuZHNvZnR3YXJlLmNvbT4+LCBKZXJlbXkgTydEb25vZ2h1ZSA8am9k b25vZ2hAcXRpLnF1YWxjb21tLmNvbTxtYWlsdG86am9kb25vZ2hAcXRpLnF1YWxjb21tLmNvbT4+ DQpDYzogTWljaGFlbCBSaWNoYXJkc29uIDxtY3IraWV0ZkBzYW5kZWxtYW4uY2E8bWFpbHRvOm1j citpZXRmQHNhbmRlbG1hbi5jYT4+LCAiZWF0QGlldGYub3JnPG1haWx0bzplYXRAaWV0Zi5vcmc+ IiA8ZWF0QGlldGYub3JnPG1haWx0bzplYXRAaWV0Zi5vcmc+PiwgInJhdHNAaWV0Zi5vcmc8bWFp bHRvOnJhdHNAaWV0Zi5vcmc+IiA8cmF0c0BpZXRmLm9yZzxtYWlsdG86cmF0c0BpZXRmLm9yZz4+ DQpTdWJqZWN0OiBSZTogW0VBVF0gW1JhdHNdIEF0dGVzdGF0aW9uIEJvRiBjaGFydGVyIHVwZGF0 ZXM/DQoNCg0KDQpPbiAxMC8yMy8xOCwgMTA6MzQgQU0sICJFQVQgb24gYmVoYWxmIG9mIENhcmwg V2FsbGFjZSIgPGVhdC1ib3VuY2VzQGlldGYub3JnPG1haWx0bzplYXQtYm91bmNlc0BpZXRmLm9y Zz4gb24gYmVoYWxmIG9mIGNhcmxAcmVkaG91bmRzb2Z0d2FyZS5jb208bWFpbHRvOmNhcmxAcmVk aG91bmRzb2Z0d2FyZS5jb20+PiB3cm90ZToNCg0KPHNuaXA+DQoNCkl0IHdvdWxkIGJlIGludGVy ZXN0aW5nIHRvIHVuZGVyc3RhbmQgeW91ciB0aGlua2luZyBhIGJpdCBmdXJ0aGVyLiBBdCBvbmUg bGV2ZWwgaXQgaXMgZmFpcmx5IHN0cmFpZ2h0Zm9yd2FyZCB0byBkZWZpbmUgYSBjbGFpbSB3aG9z ZSB2YWx1ZSBjb250YWlucyBhbiBYLjUwOSBjZXJ0aWZpY2F0ZSwgYnV0IEkgc3VzcGVjdCB0aGF0 IGJpbmRpbmcgbWF5IGltcGx5IG1vcmUgdGhhbiB0aGF0Lg0KW25tc10gSXQgaXMgYWxzbyByZWFz b25hYmxlIHRvIGNvbnNpZGVyIGFuIFguNTA5IGNlcnRpZmljYXRlIGFzIGJlaW5nIGFuIG9iamVj dCB0aGF0IGNvbnRhaW5zIGEgc2V0IG9mIGNsYWltcyAocmF0aGVyIHRoYW4gdGhlIG90aGVyIHdh eSBhcm91bmQpLg0KW2N3XSBOb3QgaWYgdGhlIGdvYWwgaXMgdG8gcHJldmVudCBpc3N1YW5jZSBv ZiBhIGNlcnRpZmljYXRlIGJlY2F1c2UgcHJvdmVuYW5jZSBvZiBhIGtleSBjYW5ub3QgYmUgY29u ZmlybWVkLiBIYXZpbmcgYSBzZWxmLWlzc3VlZCBjZXJ0IGNvbnRhaW4gY2xhaW1zIGlzIGZpbmUs IGJ1dCB0aGlzIGRvZXMgbm90IG9idmlhdGUgdGhlIG5lZWQgdG8gYmluZCB0byBpc3N1YW5jZSBw cm90b2NvbHMgdG8gaW5mb3JtIENBIGlzc3VhbmNlLg0KW25tc10gSSB3YXNu4oCZdCBhc3NlcnRp bmcgdGhhdCBhIGNlcnRpZmljYXRlIHdvdWxkIGJlIHNlbGYtaXNzdWVkLiBUaGlzIGlzIHdoeSBJ IHRoaW5rIGl0IG1ha2VzIHNlbnNlIHRvIHRhbGsgYWJvdXQgYSBjbGFpbWFudC4gU1A4MDAtMTY0 IHJlZmVycyB0byB0aGlzIGFzIGVpdGhlciBhIOKAmGRldmljZSBvd25lcuKAmSBvciDigJhpbmZv cm1hdGlvbiBvd25lcuKAmS4gSeKAmW0gT0sgd2l0aCB0aGVzZSB0ZXJtcyB0b28uIFRoZSBleHBl Y3RhdGlvbiBpcyB0aGUgZGV2aWNlIG93bmVyIGR1cmluZyBtYW51ZmFjdHVyaW5nICAoYWthIG1m Z+KAmXIpIHdpbGwga25vdyB3aGljaCB0cnVzdCByZWxldmFudCBjbGFpbXMgY2FuIGJlIGFzc2Vy dGVkLiBUaGV5IGNvdWxkIGFzc2VydCB0aGVtIGJ5IGlzc3VpbmcgYSBjZXJ0aWZpY2F0ZSBjb250 YWluaW5nIHRoZSBjbGFpbXMuIFRoZSB2ZXJpZmllci9yZWx5aW5nIHBhcnR5IHRydXN0cyB0aGUg bWZn4oCZciB0byBiZSBhbiBhdXRob3JpdGF0aXZlIHNvdXJjZSByZWdhcmRpbmcgaG93IGEgZGV2 aWNlIChidXQgbW9yZSBwcmVjaXNlbHksIGhvdyB0aGUgcm9vdC1vZi10cnVzdCkgd2FzIG1hZGUu IElmIGEga2V5IGlzIGNyZWF0ZWQgZHVyaW5nIG1mZyB0aW1lIGFuZCB0aGUgbWZnIGlzc3VlcyBl dmlkZW5jZSAoYWthIGEgY2VydGlmaWNhdGUpIG9mIHRoYXQsIHRoZW4gaXQgc2VydmVzIGFzIHBy b3ZlbmFuY2UgYXMgbG9uZyBhcyB0aGUgdmVyaWZpZXIgLyByZWx5aW5nIHBhcnR5IHRydXN0cyB0 aGUgbWFudWZhY3R1cmVyIHRvIGNvcnJlY3RseSBlbWJlZCB0aGUga2V5LiBDb25maXJtYXRpb24g Y2FuIGJlIGFjaGlldmVkIHZpYSBtYW51YWwgaW5zcGVjdGlvbiBvZiB0aGUgbWFudWZhY3R1cmlu ZyBwcm9jZXNzLiBOZXZlcnRoZWxlc3MsIHRoZSB2ZXJpZmllciBpcyB0cnVzdGluZyB0aGUgbWZn IHRvIGEgY2VydGFpbiBkZWdyZWUuDQoNCltDV10gWW91IGFyZSByZWZlcnJpbmcgdG8gYSBjZXJ0 aWZpY2F0ZSBpc3N1ZWQgdG8gdGhlIGRldmljZSBieSB0aGUgbWFudWZhY3R1cmVyLiBJIGFtIHJl ZmVycmluZyB0byBjZXJ0aWZ5aW5nIGtleXMgZ2VuZXJhdGVkIGJ5IGEgaGFyZHdhcmUgY3J5cHRv IG1vZHVsZSBvbiB0aGUgZGV2aWNlIG9uY2UgaXQgaXMgaW4gdGhlIGhhbmRzIG9mIGEgdXNlci4g IEkgZG9uJ3QgZGlzYWdyZWUgdGhlIHZlcmlmaWVyIG11c3QgdHJ1c3QgdGhlIG1hbnVmYWN0dXJl ciB3aGVuIHZlcmlmeWluZyB0aGUgYXR0ZXN0YXRpb24sIEkgYW0gc3VnZ2VzdGluZyB0aGF0IHRo ZSB2ZXJpZmllciBpcyBhIENBIHdobyB3aWxsIGhhdmUgcGx1Y2tlZCBhbiBhdHRlc3RhdGlvbiBm cm9tIGEgY2VydGlmaWNhdGUgbWFuYWdlbWVudCBtZXNzYWdlIGFuZCB3aWxsLCBhbW9uZ3N0IG90 aGVyIGNoZWNrcyB0aGF0IG5lZWQgdG8gYmUgc3RhbmRhcmRpemVkLCBjb25maXJtIHRoZSBwdWJs aWMga2V5IGluIHRoZSBjZXJ0aWZpY2F0ZSByZXF1ZXN0IGNvcnJlc3BvbmRzIHRvIGEgY2xhaW0g aW4gdGhlIGF0dGVzdGF0aW9uLg0KW25tc10gUmlnaHQuIEluIG9yZGVyIGZvciB0aGUgQ0EgKHZl cmlmaWVyKSB0byBkaXN0aW5ndWlzaCB0aGUgY2VydGlmeWluZyBrZXkgaXMgYW4g4oCYYXR0ZXN0 YWJsZSBrZXnigJkgdnMuIGEgdHJhZGl0aW9uYWwgQ1NSLiBUaGUgQ0Egc2hvdWxkIGxvb2sgZm9y IGEgc2lnbmF0dXJlIGZyb20gdGhlIG1mZyBjZXJ0IG92ZXIgdGhlIENTUiAoY2VydGlmaWNhdGUg bWFuYWdlbWVudCBtZXNzYWdlPykgY29udGFpbmluZyB0aGUgZ2VuZXJhdGVkIHB1YmxpYyBrZXku IEnigJltIHN0aWxsIG5vdCBzZWVpbmcgd2hlcmUgdGhlcmUgaXMgYSBzZWxmLXNpZ25lZCAoaXNz dWVkKSBjZXJ0aWZpY2F0ZSBpbiB0aGUgZXF1YXRpb24uDQo= --_000_FCF1711D49364D35A75D84B88C076151intelcom_ Content-Type: text/html; charset="utf-8" Content-ID: <482F5899BFE5A84C9C1B96E6A5F171F0@intel.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6RGVuZ1hpYW47DQoJcGFub3NlLTE6 MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7 DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZh bWlseToiXEBEZW5nWGlhbiI7DQoJcGFub3NlLTE6MiAxIDYgMCAzIDEgMSAxIDEgMTt9DQovKiBT dHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05v cm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6 MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bh bi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJ dGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5r Rm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0 LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2 Lm1zb25vcm1hbDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9w LWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6 IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJZm9udC12 YXJpYW50Om5vcm1hbCAhaW1wb3J0YW50Ow0KCWNvbG9yOndpbmRvd3RleHQ7DQoJdGV4dC10cmFu c2Zvcm06bm9uZTsNCgltc28tY29udGV4dHVhbC1hbHRlcm5hdGVzOnllczsNCglmb250LXdlaWdo dDpub3JtYWw7DQoJZm9udC1zdHlsZTpub3JtYWw7DQoJdGV4dC1kZWNvcmF0aW9uOm5vbmUgbm9u ZTsNCgl2ZXJ0aWNhbC1hbGlnbjpiYXNlbGluZTt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28t c3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsN Cglmb250LXZhcmlhbnQ6bm9ybWFsICFpbXBvcnRhbnQ7DQoJY29sb3I6d2luZG93dGV4dDsNCgl0 ZXh0LXRyYW5zZm9ybTpub25lOw0KCW1zby1jb250ZXh0dWFsLWFsdGVybmF0ZXM6eWVzOw0KCWZv bnQtd2VpZ2h0Om5vcm1hbDsNCglmb250LXN0eWxlOm5vcm1hbDsNCgl0ZXh0LWRlY29yYXRpb246 bm9uZSBub25lOw0KCXZlcnRpY2FsLWFsaWduOmJhc2VsaW5lO30NCnNwYW4uRW1haWxTdHlsZTIw DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCWZvbnQtdmFyaWFudDpub3JtYWwgIWltcG9ydGFudDsNCgljb2xvcjp3 aW5kb3d0ZXh0Ow0KCXRleHQtdHJhbnNmb3JtOm5vbmU7DQoJbXNvLWNvbnRleHR1YWwtYWx0ZXJu YXRlczp5ZXM7DQoJZm9udC13ZWlnaHQ6bm9ybWFsOw0KCWZvbnQtc3R5bGU6bm9ybWFsOw0KCXRl eHQtZGVjb3JhdGlvbjpub25lIG5vbmU7DQoJdmVydGljYWwtYWxpZ246YmFzZWxpbmU7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEw LjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2lu OjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3Jk U2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5r PSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDttc28tY29udGV4 dHVhbC1hbHRlcm5hdGVzOnllcyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7bXNvLWNvbnRleHR1 YWwtYWx0ZXJuYXRlczp5ZXMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPk9uIDEw LzIzLzE4LCAxMjowNCBQTSwgJnF1b3Q7Q2FybCBXYWxsYWNlJnF1b3Q7ICZsdDs8YSBocmVmPSJt YWlsdG86Y2FybEByZWRob3VuZHNvZnR3YXJlLmNvbSI+Y2FybEByZWRob3VuZHNvZnR3YXJlLmNv bTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6LjVpbiI+SW5saW5lLi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xp ZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxiPjxzcGFuIHN0eWxlPSJjb2xvcjpi bGFjayI+RnJvbTogPC9zcGFuPg0KPC9iPjxzcGFuIHN0eWxlPSJjb2xvcjpibGFjayI+JnF1b3Q7 U21pdGgsIE5lZCZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOm5lZC5zbWl0aEBpbnRlbC5jb20i Pm5lZC5zbWl0aEBpbnRlbC5jb208L2E+Jmd0Ozxicj4NCjxiPkRhdGU6IDwvYj5UdWVzZGF5LCBP Y3RvYmVyIDIzLCAyMDE4IGF0IDI6NDkgUE08YnI+DQo8Yj5UbzogPC9iPkNhcmwgV2FsbGFjZSAm bHQ7PGEgaHJlZj0ibWFpbHRvOmNhcmxAcmVkaG91bmRzb2Z0d2FyZS5jb20iPmNhcmxAcmVkaG91 bmRzb2Z0d2FyZS5jb208L2E+Jmd0OywgSmVyZW15IE8nRG9ub2dodWUgJmx0OzxhIGhyZWY9Im1h aWx0bzpqb2Rvbm9naEBxdGkucXVhbGNvbW0uY29tIj5qb2Rvbm9naEBxdGkucXVhbGNvbW0uY29t PC9hPiZndDs8YnI+DQo8Yj5DYzogPC9iPk1pY2hhZWwgUmljaGFyZHNvbiAmbHQ7PGEgaHJlZj0i bWFpbHRvOm1jciYjNDM7aWV0ZkBzYW5kZWxtYW4uY2EiPm1jciYjNDM7aWV0ZkBzYW5kZWxtYW4u Y2E8L2E+Jmd0OywgJnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmVhdEBpZXRmLm9yZyI+ZWF0QGlldGYu b3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmVhdEBpZXRmLm9yZyI+ZWF0QGlldGYu b3JnPC9hPiZndDssICZxdW90OzxhIGhyZWY9Im1haWx0bzpyYXRzQGlldGYub3JnIj5yYXRzQGll dGYub3JnPC9hPiZxdW90OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJhdHNAaWV0Zi5vcmciPnJhdHNA aWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW0VBVF0gW1JhdHNdIEF0 dGVzdGF0aW9uIEJvRiBjaGFydGVyIHVwZGF0ZXM/PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4i PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVy Om5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0I1QzRERiA0LjVwdDtwYWRkaW5nOjBpbiAwaW4gMGlu IDQuMHB0O21hcmdpbi1sZWZ0OjMuNzVwdDttYXJnaW4tcmlnaHQ6MGluIiBpZD0iTUFDX09VVExP T0tfQVRUUklCVVRJT05fQkxPQ0tRVU9URSI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDttc28tY29udGV4dHVhbC1hbHRlcm5hdGVzOnllcyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O21zby1jb250ZXh0dWFsLWFsdGVybmF0ZXM6eWVz Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoxLjBpbiI+T24gMTAvMjMvMTgsIDEwOjM0IEFN LCAmcXVvdDtFQVQgb24gYmVoYWxmIG9mIENhcmwgV2FsbGFjZSZxdW90OyAmbHQ7PGEgaHJlZj0i bWFpbHRvOmVhdC1ib3VuY2VzQGlldGYub3JnIj5lYXQtYm91bmNlc0BpZXRmLm9yZzwvYT4gb24g YmVoYWxmIG9mDQo8YSBocmVmPSJtYWlsdG86Y2FybEByZWRob3VuZHNvZnR3YXJlLmNvbSI+Y2Fy bEByZWRob3VuZHNvZnR3YXJlLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MS4waW4iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjEuMGluIj4mbHQ7c25pcCZndDs8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1s ZWZ0OnNvbGlkICNCNUM0REYgNC41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdDttYXJnaW4t bGVmdDozLjc1cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0 b206NS4wcHQiIGlkPSJNQUNfT1VUTE9PS19BVFRSSUJVVElPTl9CTE9DS1FVT1RFIj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6 MS41aW4iPg0KJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG87bWFyZ2luLWxlZnQ6MS41aW4iPg0KSXQgd291bGQgYmUgaW50ZXJlc3Rpbmcg dG8gdW5kZXJzdGFuZCB5b3VyIHRoaW5raW5nIGEgYml0IGZ1cnRoZXIuIEF0IG9uZSBsZXZlbCBp dCBpcyBmYWlybHkgc3RyYWlnaHRmb3J3YXJkIHRvIGRlZmluZSBhIGNsYWltIHdob3NlIHZhbHVl IGNvbnRhaW5zIGFuIFguNTA5IGNlcnRpZmljYXRlLCBidXQgSSBzdXNwZWN0IHRoYXQgYmluZGlu ZyBtYXkgaW1wbHkgbW9yZSB0aGFuIHRoYXQuPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJn aW4tbGVmdDoxLjBpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDttc28tY29udGV4 dHVhbC1hbHRlcm5hdGVzOnllcyI+W25tc10gSXQgaXMgYWxzbyByZWFzb25hYmxlIHRvIGNvbnNp ZGVyIGFuIFguNTA5IGNlcnRpZmljYXRlIGFzIGJlaW5nIGFuIG9iamVjdCB0aGF0IGNvbnRhaW5z IGEgc2V0IG9mIGNsYWltcyAocmF0aGVyIHRoYW4gdGhlIG90aGVyIHdheSBhcm91bmQpLjwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9j a3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDox LjBpbiI+W2N3XSBOb3QgaWYgdGhlIGdvYWwgaXMgdG8gcHJldmVudCBpc3N1YW5jZSBvZiBhIGNl cnRpZmljYXRlIGJlY2F1c2UgcHJvdmVuYW5jZSBvZiBhIGtleSBjYW5ub3QgYmUgY29uZmlybWVk LiBIYXZpbmcgYSBzZWxmLWlzc3VlZCBjZXJ0IGNvbnRhaW4gY2xhaW1zIGlzIGZpbmUsIGJ1dCB0 aGlzIGRvZXMgbm90IG9idmlhdGUgdGhlIG5lZWQgdG8gYmluZCB0byBpc3N1YW5jZQ0KIHByb3Rv Y29scyB0byBpbmZvcm0gQ0EgaXNzdWFuY2UuJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MS4waW4iPltu bXNdIEkgd2FzbuKAmXQgYXNzZXJ0aW5nIHRoYXQgYSBjZXJ0aWZpY2F0ZSB3b3VsZCBiZSBzZWxm LWlzc3VlZC4gVGhpcyBpcyB3aHkgSSB0aGluayBpdCBtYWtlcyBzZW5zZSB0byB0YWxrIGFib3V0 IGEgY2xhaW1hbnQuIFNQODAwLTE2NCByZWZlcnMgdG8gdGhpcyBhcyBlaXRoZXIgYSDigJhkZXZp Y2Ugb3duZXLigJkgb3Ig4oCYaW5mb3JtYXRpb24gb3duZXLigJkuIEnigJltIE9LDQogd2l0aCB0 aGVzZSB0ZXJtcyB0b28uIFRoZSBleHBlY3RhdGlvbiBpcyB0aGUgZGV2aWNlIG93bmVyIGR1cmlu ZyBtYW51ZmFjdHVyaW5nICZuYnNwOyhha2EgbWZn4oCZcikgd2lsbCBrbm93IHdoaWNoIHRydXN0 IHJlbGV2YW50IGNsYWltcyBjYW4gYmUgYXNzZXJ0ZWQuIFRoZXkgY291bGQgYXNzZXJ0IHRoZW0g YnkgaXNzdWluZyBhIGNlcnRpZmljYXRlIGNvbnRhaW5pbmcgdGhlIGNsYWltcy4gVGhlIHZlcmlm aWVyL3JlbHlpbmcgcGFydHkgdHJ1c3RzIHRoZQ0KIG1mZ+KAmXIgdG8gYmUgYW4gYXV0aG9yaXRh dGl2ZSBzb3VyY2UgcmVnYXJkaW5nIGhvdyBhIGRldmljZSAoYnV0IG1vcmUgcHJlY2lzZWx5LCBo b3cgdGhlIHJvb3Qtb2YtdHJ1c3QpIHdhcyBtYWRlLiBJZiBhIGtleSBpcyBjcmVhdGVkIGR1cmlu ZyBtZmcgdGltZSBhbmQgdGhlIG1mZyBpc3N1ZXMgZXZpZGVuY2UgKGFrYSBhIGNlcnRpZmljYXRl KSBvZiB0aGF0LCB0aGVuIGl0IHNlcnZlcyBhcyBwcm92ZW5hbmNlIGFzIGxvbmcgYXMgdGhlIHZl cmlmaWVyDQogLyByZWx5aW5nIHBhcnR5IHRydXN0cyB0aGUgbWFudWZhY3R1cmVyIHRvIGNvcnJl Y3RseSBlbWJlZCB0aGUga2V5LiBDb25maXJtYXRpb24gY2FuIGJlIGFjaGlldmVkIHZpYSBtYW51 YWwgaW5zcGVjdGlvbiBvZiB0aGUgbWFudWZhY3R1cmluZyBwcm9jZXNzLiBOZXZlcnRoZWxlc3Ms IHRoZSB2ZXJpZmllciBpcyB0cnVzdGluZyB0aGUgbWZnIHRvIGEgY2VydGFpbiBkZWdyZWUuPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0Oi41aW4iPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0Oi41aW4iPltDV10gWW91IGFyZSByZWZlcnJpbmcgdG8gYSBjZXJ0aWZpY2F0 ZSBpc3N1ZWQgdG8gdGhlIGRldmljZSBieSB0aGUgbWFudWZhY3R1cmVyLiBJIGFtIHJlZmVycmlu ZyB0byBjZXJ0aWZ5aW5nIGtleXMgZ2VuZXJhdGVkIGJ5IGEgaGFyZHdhcmUgY3J5cHRvIG1vZHVs ZSBvbiB0aGUgZGV2aWNlIG9uY2UgaXQgaXMgaW4gdGhlIGhhbmRzIG9mIGEgdXNlci4gJm5ic3A7 SSBkb24ndA0KIGRpc2FncmVlIHRoZSB2ZXJpZmllciBtdXN0IHRydXN0IHRoZSBtYW51ZmFjdHVy ZXIgd2hlbiB2ZXJpZnlpbmcgdGhlIGF0dGVzdGF0aW9uLCBJIGFtIHN1Z2dlc3RpbmcgdGhhdCB0 aGUgdmVyaWZpZXIgaXMgYSBDQSB3aG8gd2lsbCBoYXZlIHBsdWNrZWQgYW4gYXR0ZXN0YXRpb24g ZnJvbSBhIGNlcnRpZmljYXRlIG1hbmFnZW1lbnQgbWVzc2FnZSBhbmQgd2lsbCwgYW1vbmdzdCBv dGhlciBjaGVja3MgdGhhdCBuZWVkIHRvIGJlIHN0YW5kYXJkaXplZCwNCiBjb25maXJtIHRoZSBw dWJsaWMga2V5IGluIHRoZSBjZXJ0aWZpY2F0ZSByZXF1ZXN0IGNvcnJlc3BvbmRzIHRvIGEgY2xh aW0gaW4gdGhlIGF0dGVzdGF0aW9uLiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7bXNvLWNvbnRleHR1YWwtYWx0 ZXJuYXRlczp5ZXMiPltubXNdIFJpZ2h0LiBJbiBvcmRlciBmb3IgdGhlIENBICh2ZXJpZmllcikg dG8gZGlzdGluZ3Vpc2ggdGhlIGNlcnRpZnlpbmcga2V5IGlzIGFuIOKAmGF0dGVzdGFibGUga2V5 4oCZIHZzLiBhIHRyYWRpdGlvbmFsIENTUi4gVGhlIENBIHNob3VsZCBsb29rIGZvciBhIHNpZ25h dHVyZSBmcm9tIHRoZSBtZmcgY2VydA0KIG92ZXIgdGhlIENTUiAoY2VydGlmaWNhdGUgbWFuYWdl bWVudCBtZXNzYWdlPykgY29udGFpbmluZyB0aGUgZ2VuZXJhdGVkIHB1YmxpYyBrZXkuIEnigJlt IHN0aWxsIG5vdCBzZWVpbmcgd2hlcmUgdGhlcmUgaXMgYSBzZWxmLXNpZ25lZCAoaXNzdWVkKSBj ZXJ0aWZpY2F0ZSBpbiB0aGUgZXF1YXRpb24uDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_FCF1711D49364D35A75D84B88C076151intelcom_-- From nobody Tue Oct 23 12:57:05 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42AB6130E5C for ; Tue, 23 Oct 2018 12:56:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jtTMZJRcPRfP for ; Tue, 23 Oct 2018 12:56:56 -0700 (PDT) Received: from mail-qt1-x82f.google.com (mail-qt1-x82f.google.com [IPv6:2607:f8b0:4864:20::82f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D5F99130E71 for ; Tue, 23 Oct 2018 12:56:53 -0700 (PDT) Received: by mail-qt1-x82f.google.com with SMTP id a10-v6so3058899qtp.2 for ; Tue, 23 Oct 2018 12:56:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version; bh=XqqgaFimMWI08cdkWVJVs/zZw9B3lZMN1ERRwwzzkVc=; b=HJCL7os4vrIbVKInVB3RhGWk1nVemHKDojhQ/pnQ1it0a6oNbhjM3yOeJs3i/A18qt AjoHtEvsDCBUGJl/6XvQDzd63utj0DV4wV5h375q32IMZfbGz9ojNLeXVDEI/h0FUqWJ GMufyaiRoSLQNZpR6GKwRNl3jzHxUt7CCJj30= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version; bh=XqqgaFimMWI08cdkWVJVs/zZw9B3lZMN1ERRwwzzkVc=; b=Yud/yEupnjACl4LEbfax5usGA+cJ/B/obZMuhzacACq4BQ9/n1KNr5QBChWkcls7iw 1Scrd9/ixkyfi+jtK6qpdKXRJLolRg8UJyJHVgv9gJB9KwrUiyZV8gjqxauFrUNuq4q4 FMIBBHz79vveR2qG2Rr2ASGMOY0wiFgkKdJLoOdfqxOaJ0UiB70ZGG6sEukrYtqhKelB oaFKO7MR7ItKZquHyIkBqKpYvSxuLdQRkv+PbGB5T0lD0H9fWkZ3DnR1QH7cSJt/zTug ykFNvQpGUodQmo2Bjed5sQyc2xVV5xxJ+I/yndwV4qsp3JIlX46EH4O7jDcKCJfatSfM E2/g== X-Gm-Message-State: AGRZ1gI16URNd66yYShYJaLoBajGPaQGXxWQv49GQLvZCwu5o4pu6FvL SYtxYakfOxxX6D/8PAkbXwMUTQ== X-Google-Smtp-Source: ACcGV61JibX7aDUL96a3YPyRAmsnMO5XNwop5WyTYl28wazvrl6FJ8Ab9XT4kk5GWAZgbBqClCovjg== X-Received: by 2002:ac8:191a:: with SMTP id t26-v6mr17010547qtj.327.1540324612805; Tue, 23 Oct 2018 12:56:52 -0700 (PDT) Received: from [192.168.2.27] (pool-108-28-91-61.washdc.fios.verizon.net. [108.28.91.61]) by smtp.googlemail.com with ESMTPSA id 4-v6sm1902100qtx.46.2018.10.23.12.56.49 (version=TLS1 cipher=AES128-SHA bits=128/128); Tue, 23 Oct 2018 12:56:52 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Tue, 23 Oct 2018 15:56:44 -0400 From: Carl Wallace To: Giridhar Mandyam , Jeremy O'Donoghue , Michael Richardson CC: "rats@ietf.org" , "eat@ietf.org" Message-ID: Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? References: In-Reply-To: Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3623155011_17934164" Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 19:56:58 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3623155011_17934164 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable inline From: Giridhar Mandyam Date: Tuesday, October 23, 2018 at 3:53 PM To: Carl Wallace , Jeremy O'Donoghue , Michael Richardson Cc: "rats@ietf.org" , "eat@ietf.org" Subject: RE: [EAT] [Rats] Attestation BoF charter updates? > [CW] As noted before, I'd like to see binding to certificate enrollment > protocols included here as well. This is something we are doing today, wi= thout > standards grounding (as illustrated in pile of attestations shared via Gi= thub > a few weeks back). > =20 > Why isn=E2=80=99t ACME applicable (https://datatracker.ietf.org/wg/acme/about/= )? > Granted, it is optimized for the web currently. But from a message forma= t > perspective I don=E2=80=99t think we need to re-invent the wheel. [CW] I have not suggested defining new certificate management specs, just codifying the binding of attestations to one or more certificate management specs. In my case, I am using SCEP (for legacy installed base purposes). > =20 > -Giri Mandyam, Qualcomm > =20 >=20 > From: EAT On Behalf Of Carl Wallace > Sent: Tuesday, October 23, 2018 8:15 AM > To: Jeremy O'Donoghue ; Michael Richardson > > Cc: rats@ietf.org; eat@ietf.org > Subject: Re: [EAT] [Rats] Attestation BoF charter updates? > =20 >>=20 >>=20 >> >> Work Items >> ---------- >> The Working Group will develop specifications supporting the creation of >> interoperable remote attestation procedures for entities which incorpora= te >> Roots of Trust. The main deliverables are as follows. >> - Produce a requirements document establishing a common vocabulary for r= emote >> attestation, identifying mechanisms which will be supported for >> establishing >> trust between an entity and a remote party, and enumerating sample >> use-cases >> for remote attestation. >> - Produce specification text defining interoperable cross-platform claim= s >> which >> provide information about an entity in support of the required use-cas= es, >> and >> extending the set of claims defined in RFC7519 and RFC8392. The >> specification >> will describe the syntax for each claim in at least the following form= ats: >> - CBOR [RFC7049] >> - JSON [RFC7159] >> - YANG [RFC6020] >=20 > [CW] ASN.1 is already player for a number of attestation formats. Any rea= son > to exclude it? >=20 > =20 >>=20 >> - Produce specification text defining procedures and corresponding >> architectures >> supporting verification of claims within an attestation based on measu= red >> file >> execution procedures and supporting: >> - Explicit attestation wherein a set of claims is transported in the >> attestation; >> - Implicit attestation wherein a set of claims is implied by possess= ion >> of a secret. >> - Produce specification text defining procedures and corresponding >> architectures >> supporting verification of claims encapsulated in: >> - CBOR Web Token structures [RFC8392] >> - JSON Web Token structures [RFC7519] >=20 > [CW] As noted before, I'd like to see binding to certificate enrollment > protocols included here as well. This is something we are doing today, wi= thout > standards grounding (as illustrated in pile of attestations shared via Gi= thub > a few weeks back). >=20 > =20 >>=20 >> - Perform privacy analysis of both claims and the cryptographic procedur= es >> used to >> establish trust. This information will be included as appropriate in t= he >> deliverable specifications, and may imply extension of procedures defi= ned >> in >> other specifications in support of privacy goals. >>=20 >> =20 >>=20 >> It seems to me that there are two ways to produce the main specification >> deliverables. I have deliberately left the text above slightly vague on = this. >> * A claims specification common to RATS and EAT with separate RATS and E= AT >> procedure specifications. >> * A claims specification also incorporating EAT procedures and a separat= e >> RATS procedure specification. This would be my preferred option. >>> * I believe there are very few procedures needed for EAT other than the >>> possible need to support a nonce to ensure freshness >> =20 >>=20 >> Jeremy >>>=20 >>>=20 >>> Notice how by about the second paragraph (6tisch takes a bit longer), e= ach >>> gets into what the WG will do? >>>=20 >>> -- >>> Michael Richardson , Sandelman Software Works >>> -=3D IPv6 IoT consulting =3D- >>> _______________________________________________ >>> EAT mailing list >>> EAT@ietf.org >>> https://www.ietf.org/mailman/listinfo/eat >> =20 >> _______________________________________________ RATS mailing list >> RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats --B_3623155011_17934164 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable
inline

From: Giridhar Mandyam <mandyam@qti.qualcomm.com>
Date: Tuesday, October 23, 2018 at 3:53 PM
To: Carl Wallace <carl@redhoundsoftware.com>, Jeremy O'Donoghue = <jodonogh@qti.qualcomm.com= >, Michael Richardson <mcr+ietf= @sandelman.ca>
Cc: "rats@ietf.org" <rats@ietf.org>, "eat@ietf.org" &l= t;eat@ietf.org>
Subject: RE: [EAT] [Rats] Attestation BoF charter upda= tes?

=

[CW] As noted before, I'd like to see binding to certifica= te enrollment protocols included here as well. This is something we are doin= g today, without standards grounding (as illustrated in pile of attestations shared via Github a few weeks back). 

 

Why isn= ’t ACME applicable  (https://datatracker.ietf.org/wg/acme/about/)?   Gran= ted, it is optimized for the web currently.  But from a message format = perspective I don’t think we need to re-invent the wheel.

=
[CW] I have not suggested defining new certificate management sp= ecs, just codifying the binding of attestations to one or more certificate m= anagement specs. In my case, I am using SCEP (for legacy installed base purp= oses).

 


-Giri Mandyam, Qualcomm

 

From: EAT= <eat-bounces@ietf.org> O= n Behalf Of Carl Wallace
Sent: Tuesday, October 23, 2018 8:15 AM
To: Jeremy O'Donoghue <jodonogh@= qti.qualcomm.com>; Michael Richardson <mcr+ietf@sandelman.ca>
Cc: rats@ietf.org; eat@ietf.org=
Subject: Re: [EAT] [Rats] Attestation BoF charter updates?

 


<snip>

Wor= k Items

---------= -

<= span style=3D"font-size:8.5pt;font-family:Courier;color:black">The Working Gro= up will develop specifications supporting the creation of
interoperable remote attestation procedures for entities which incorporate&= nbsp;
Roots of Trust. The main deliverables are as follows. 

- Produce a requirements documen= t establishing a common vocabulary for remote
  attestation, identifying mechanisms which will be supported for esta= blishing
  trust between an entity and a remote party, and enumerating sample u= se-cases
  for remote attestation.

- Produce specification text defining interoperable cross-pla= tform claims which
  provide information about an entity in support of the required use-c= ases, and
  extending the set of claims defined in RFC7519 and RFC8392. The spec= ification
  will describe the syntax for each claim in at least the following fo= rmats:
    - CBOR [RFC7049]
    - JSON [RFC7159]
    - YANG [RFC6020]

[CW] ASN.1 is already player for a number of attestation formats. Any= reason to exclude it?

=  

- Produce specific= ation text defining procedures and corresponding architectures
  supporting verification of claims within an attestation based on mea= sured file
  execution procedures and supporting:
    - Explicit attestation wherein a set of claims is transported= in the attestation;
    - Implicit attestation wherein a set of claims is implied by = possession of a secret.

- Produce specification text defining procedures and corresponding ar= chitectures
  supporting verification of claims encapsulated in:=

    - CBOR Web Token str= uctures [RFC8392]
    - JSON Web Token structures [RFC7519]

[CW] As noted before, I'd like to see binding to= certificate enrollment protocols included here as well. This is something w= e are doing today, without standards grounding (as illustrated in pile of attestations shared via Github a few weeks back). 

 

- Perform privacy analysis of both claims and the crypto= graphic procedures used to
  establish trust. This information will be included as appropriate in= the
  deliverable specifications, and may imply extension of procedures de= fined in
  other specifications in support of privacy goals.<= /p>

 

It seems to me that there are two ways to produ= ce the main specification deliverables. I have deliberately left the text ab= ove slightly vague on this.

    =
  • A cl= aims specification common to RATS and EAT with separate RATS and EAT procedu= re specifications.
  • A claims specification also incorporati= ng EAT procedures and a separate RATS procedure specification. This would be= my preferred option.
    • I believe there a= re very few procedures needed for EAT other than the possible need to suppor= t a nonce to ensure freshness

 

Jeremy


Notice how by about the second paragraph (6tisch takes a bit longer), each<= br> gets into what the WG will do?

--
Michael Richardson <mcr+IETF@sand= elman.ca>, Sandelman Software Works
-=3D IPv6 IoT consulting =3D-
_______________________________________________
EAT mailing list
EAT@ietf.org
https://www.ietf.org/mailman/= listinfo/eat

 

_______________________________________________ RATS mailing list RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats

--B_3623155011_17934164-- From nobody Tue Oct 23 12:57:50 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E308130E71 for ; Tue, 23 Oct 2018 12:57:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jWS_NuU8D9hR for ; Tue, 23 Oct 2018 12:57:46 -0700 (PDT) Received: from mail-qk1-x730.google.com (mail-qk1-x730.google.com [IPv6:2607:f8b0:4864:20::730]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E81E130E1B for ; Tue, 23 Oct 2018 12:57:46 -0700 (PDT) Received: by mail-qk1-x730.google.com with SMTP id u20-v6so1673613qkk.9 for ; Tue, 23 Oct 2018 12:57:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version; bh=jNiKkWafRS0glpa4DRE7oRdfs87Nq1XcQHfNzF3k3XU=; b=PjfJvWxudmUq9YHjLyIV7Hma4BPrbG62DTnIAeB6BrO0kfzESeWRwzzbhYl6PTp2yt 6VDR9N6sobs8aH7/lKpTDKr5yJEGWLe8L8tKCdGOZ7ctMYl2LjSq7cEFrzz5um9Gwogt C6jx6R7Zz7jBKLeNxSmB2FB7aIcqdwcYiYY+A= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version; bh=jNiKkWafRS0glpa4DRE7oRdfs87Nq1XcQHfNzF3k3XU=; b=qNF2p2IL8FDcrakJZQ5dEOKmKWQRKN6y1Z/p+q2jdfuumUIkoKK2Id8p/awFIpK764 f7BFAmRiGlMtO8Wnjc7ptMzj8XJdaSXTklkqEFgI5bs+3h+TxZkhF/sm/ma1irKk3oXS P0eDuqKsRpoBRR4esHk8bIR19E0sWayWFtDHo5soBopIbv5QQp6wUc56mJxl8v6wymdB s9NACBa4MDsTeJkV3Aio1JyLUjmlEupsqxm0R46SvD2xRoc775Wz+LHE0QSBevT8ij6V qdSb2WoW9EqEjIJDzKM0Jb9gJy2RIzrNFxGOZHW0+i3v/Kzqmk9aWkRkSmW4KLFN/k4B Pe3A== X-Gm-Message-State: ABuFfogeDP5yyllj7ZtS8le9m/9Fn7SWA5EhjKKUEMBZ3JnoxDAKkIls gRg2WOsGiDs5uILs6EC753kyOg== X-Google-Smtp-Source: ACcGV63+Q06GdgFb6azhp2x+g35YDwc8ABLEit+ywCeOXcunD0DacHu/RRKW9xBr1qUWhUomApYE5w== X-Received: by 2002:ae9:e00c:: with SMTP id m12-v6mr47710280qkk.303.1540324665402; Tue, 23 Oct 2018 12:57:45 -0700 (PDT) Received: from [192.168.2.27] (pool-108-28-91-61.washdc.fios.verizon.net. [108.28.91.61]) by smtp.googlemail.com with ESMTPSA id l28-v6sm1681878qkj.33.2018.10.23.12.57.40 (version=TLS1 cipher=AES128-SHA bits=128/128); Tue, 23 Oct 2018 12:57:44 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Tue, 23 Oct 2018 15:57:35 -0400 From: Carl Wallace To: "Smith, Ned" , Jeremy O'Donoghue CC: Michael Richardson , "eat@ietf.org" , "rats@ietf.org" Message-ID: Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? References: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> In-Reply-To: Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3623155063_17955261" Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 19:57:48 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3623155063_17955261 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable > [nms] Right. In order for the CA (verifier) to distinguish the certifying= key > is an =E2=80=98attestable key=E2=80=99 vs. a traditional CSR. The CA should look for = a > signature from the mfg cert over the CSR (certificate management message?= ) > containing the generated public key. I=E2=80=99m still not seeing where there i= s a > self-signed (issued) certificate in the equation. This began with request to codify binding to certificate request protocols, not for a self signed certificate. --B_3623155063_17955261 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable
<snip>

[nms] Right. In order for th= e CA (verifier) to distinguish the certifying key is an ‘attestable ke= y’ vs. a traditional CSR. The CA should look for a signature from the = mfg cert over the CSR (certificate management message?) containing the generated pu= blic key. I’m still not seeing where there is a self-signed (issued) c= ertificate in the equation.

<= /span>
This began with request to codify binding to certificate request = protocols, not for a self signed certificate. 

 --B_3623155063_17955261-- From nobody Tue Oct 23 16:10:27 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59B3E127AC2; Tue, 23 Oct 2018 16:10:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U6OpZWjRyXZy; Tue, 23 Oct 2018 16:10:17 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC2D1130E36; Tue, 23 Oct 2018 16:10:14 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id C9D0120008; Tue, 23 Oct 2018 19:10:10 -0400 (EDT) Received: by sandelman.ca (Postfix, from userid 179) id 33A422302; Tue, 23 Oct 2018 19:10:13 -0400 (EDT) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 31D291FD; Tue, 23 Oct 2018 19:10:13 -0400 (EDT) From: Michael Richardson To: "Jeremy O'Donoghue" cc: "rats\@ietf.org" , "eat\@ietf.org" In-Reply-To: <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 23:10:18 -0000 --=-=-= Content-Type: text/plain Jeremy, that's awesome work. Thank you very much for these edits. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlvPqlQACgkQgItw+93Q 3WVA1gf/Yh+gJhq5ClILr4ZC/HC4m2gHtYUKPicp+vw6Cp40vvnygZGqqE3yXIFX d0rTfsXUsTf/jY4hci1P8KHtCx3us01FF+RwvdClF11nGPfo+683Lw75lseRsQB1 UQm/C1bV3FmacI+QdLGabA0SoHTZG61UmiGa+Wdv7HpI5Wea36IWFDpyukbjB40B oEIkKcvgn/DP6QK/nZOH6Rslaar63kKh6tPEoWXCoK4QJAssy+w1PigPHY5spCW7 gfGdKXGYV0K7fL4tNZKgjS0BbrIn1kurqtVMDbHeQcakOJ1YhOiMwzqlIcX35N+9 YKx0k9NHFt5sIFzCK04QQ/cPzrUZYw== =2sqz -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Oct 23 16:13:52 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F58C130E36; Tue, 23 Oct 2018 16:13:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7rajk-QGYX9c; Tue, 23 Oct 2018 16:13:36 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 231EE127AC2; Tue, 23 Oct 2018 16:13:36 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id E5DC520008; Tue, 23 Oct 2018 19:13:32 -0400 (EDT) Received: by sandelman.ca (Postfix, from userid 179) id 4EF222302; Tue, 23 Oct 2018 19:13:35 -0400 (EDT) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 4D1881FD; Tue, 23 Oct 2018 19:13:35 -0400 (EDT) From: Michael Richardson To: "Eric Voit \(evoit\)" cc: "Jeremy O'Donoghue" , "rats\@ietf.org" , "eat\@ietf.org" In-Reply-To: References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 23:13:38 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Eric Voit (evoit) wrote: > Could you talk about how these elements are covered (or not)? For > context, I am working from the perspective of remote attestation > application developer trying to standardize the interfaces between a > controller (which is acting as a claim verifier) and a network element > (which includes TCG based subsystems.) These are good questions, but are they questions that the *CHARTER* of the *WORKING GROUP* needs to answer? Sure the *WORKING GROUP* needs to answer them, but please remember that the charter is META. > =C2=B7 How do we know which root of trust which was used to generate = the > attestation evidence (e.g., application event logs), and how does a Good question... put it in the Internet Draft. =2D- ] Never tell me the odds! | ipv6 mesh network= s [ ] Michael Richardson, Sandelman Software Works | network architect= [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [ --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlvPqx4ACgkQgItw+93Q 3WWSOwf+OKm4TMPfnx6mSiuA5QCt3e/q4oD0y6oTxesYbMuS2Y6W9COfeOm4MDmE QXqh4msgJ000nA8HqCaH2R4j8RwW/xLxVC4bUy/uqvARPXc6d2CZwzLCkK3zoAme vJeU4daQhzxCsdUjOk+etWJtYh1tq7U8lBQmV1dK9q2OOPny8SzXH8GtBL54eMgN 8mGpxyJY9SXOv05hQ2nogcQ14bJ6jq+e/WqxRffDLLmnDKJOa+zGEmKIjzJCyxpz IWJUt/vqn48WPl6wvpKVwN4rJZIPi99q5/ogKLInQUEtIwH+DhcMD96O7vrmGwN+ upbY/WMSWJXs9GCnDYDs3gTEgDy97Q== =ti1r -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Oct 23 16:20:45 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3B05130EAE; Tue, 23 Oct 2018 16:20:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.501 X-Spam-Level: X-Spam-Status: No, score=-14.501 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pNMy204CalM5; Tue, 23 Oct 2018 16:20:24 -0700 (PDT) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C35DF130F35; Tue, 23 Oct 2018 16:20:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1882; q=dns/txt; s=iport; t=1540336823; x=1541546423; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=FM4BUUrgmnlpaUBbokbVHLmHiJffIcWgr4bVv76KNZo=; b=Ad6aNqL/cPQOuuD1Kzk2/1fpNtAgUfoQgzQg7u0lSFn7fs/CzqDTAkZ5 ZiT5EwkfsKcabNrRQcfReOT8QZdkQDvWcU25CLQtvyTKgPFQVs5O/tzfP F7IFIDerCoQdC7RY74R7FKytIf4WyDNQtgW5ttfCDUTQtudM+A+8V+eSR k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AeAABOq89b/5pdJa1jGgEBAQEBAgE?= =?us-ascii?q?BAQEHAgEBAQGBVAIBAQEBCwGBWipmfygKg2uUNYINgz+VUAsBAR+BWIJ1Ahe?= =?us-ascii?q?CciE3Cg0BAwEBAgEBAm0cDIU6AQEBAwEjEUUFCwIBCA4HAwICJgICAjAVEAI?= =?us-ascii?q?EDgUIgk5MgXkIqA6BLoojgQuKSA8XgUE/gRGDEogBglcCnlIJApBsH4FShHS?= =?us-ascii?q?JbZZHAhEUgSYzIoFVcBWDJwmFKIsmb4sNgR8BAQ?= X-IronPort-AV: E=Sophos;i="5.54,418,1534809600"; d="scan'208";a="190158543" Received: from rcdn-core-3.cisco.com ([173.37.93.154]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 23 Oct 2018 23:20:23 +0000 Received: from XCH-RTP-015.cisco.com (xch-rtp-015.cisco.com [64.101.220.155]) by rcdn-core-3.cisco.com (8.15.2/8.15.2) with ESMTPS id w9NNKM3T022534 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 23 Oct 2018 23:20:22 GMT Received: from xch-rtp-013.cisco.com (64.101.220.153) by XCH-RTP-015.cisco.com (64.101.220.155) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 23 Oct 2018 19:20:22 -0400 Received: from xch-rtp-013.cisco.com ([64.101.220.153]) by XCH-RTP-013.cisco.com ([64.101.220.153]) with mapi id 15.00.1395.000; Tue, 23 Oct 2018 19:20:22 -0400 From: "Eric Voit (evoit)" To: Michael Richardson CC: "Jeremy O'Donoghue" , "rats@ietf.org" , "eat@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUayYIxGIfFCDBbEOrnnilU7+Cm6UtdkFA Date: Tue, 23 Oct 2018 23:20:22 +0000 Message-ID: <892ee6bc1728439fa3f5d70164b4a69c@XCH-RTP-013.cisco.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> <10963.1540336415@localhost> In-Reply-To: <10963.1540336415@localhost> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.56.234] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.155, xch-rtp-015.cisco.com X-Outbound-Node: rcdn-core-3.cisco.com Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Oct 2018 23:20:44 -0000 PiBGcm9tOiBNaWNoYWVsIFJpY2hhcmRzb24sIE9jdG9iZXIgMjMsIDIwMTggNzoxNCBQTQ0KPiAN Cj4gRXJpYyBWb2l0IChldm9pdCkgPGV2b2l0QGNpc2NvLmNvbT4gd3JvdGU6DQo+ICAgICA+IENv dWxkIHlvdSB0YWxrIGFib3V0IGhvdyB0aGVzZSBlbGVtZW50cyBhcmUgY292ZXJlZCAob3Igbm90 KT8gRm9yDQo+ICAgICA+IGNvbnRleHQsIEkgYW0gd29ya2luZyBmcm9tIHRoZSBwZXJzcGVjdGl2 ZSBvZiByZW1vdGUgYXR0ZXN0YXRpb24NCj4gICAgID4gYXBwbGljYXRpb24gZGV2ZWxvcGVyIHRy eWluZyB0byBzdGFuZGFyZGl6ZSB0aGUgaW50ZXJmYWNlcyBiZXR3ZWVuIGENCj4gICAgID4gY29u dHJvbGxlciAod2hpY2ggaXMgYWN0aW5nIGFzIGEgY2xhaW0gdmVyaWZpZXIpIGFuZCBhIG5ldHdv cmsgZWxlbWVudA0KPiAgICAgPiAod2hpY2ggaW5jbHVkZXMgVENHIGJhc2VkIHN1YnN5c3RlbXMu KQ0KPiANCj4gVGhlc2UgYXJlIGdvb2QgcXVlc3Rpb25zLCBidXQgYXJlIHRoZXkgcXVlc3Rpb25z IHRoYXQgdGhlICpDSEFSVEVSKiBvZiB0aGUNCj4gKldPUktJTkcgR1JPVVAqIG5lZWRzIHRvIGFu c3dlcj8gIFN1cmUgdGhlICpXT1JLSU5HIEdST1VQKiBuZWVkcyB0bw0KPiBhbnN3ZXIgdGhlbSwg YnV0IHBsZWFzZSByZW1lbWJlciB0aGF0IHRoZSBjaGFydGVyIGlzIE1FVEEuDQoNCklmIHRoZSBX RyBuZWVkcyB0byBhbnN3ZXIgdGhlbSwgdGhhdCBpcyBncmVhdC4gIE15IGNvbmNlcm4gd2FzIHRo YXQgSSBkaWRuJ3Qgc2VlIHRoZXNlIHR5cGVzIG9mIHF1ZXN0aW9ucyBmYWxsaW5nIHVuZGVyIHRo ZSBjaGFydGVyIHRleHQgcHJvcG9zZWQgYnkgSmVyZW15LiAgTWF5YmUgaXQgaXMgdGhlcmUsIGJ1 dCBJIGRpZG4ndCBzZWUgaXQuICBIZW5jZSBteSBxdWVzdGlvbi4NCg0KRXJpYw0KIA0KPiAgICAg PiDCtyBIb3cgZG8gd2Uga25vdyB3aGljaCByb290IG9mIHRydXN0IHdoaWNoIHdhcyB1c2VkIHRv IGdlbmVyYXRlIHRoZQ0KPiAgICAgPiBhdHRlc3RhdGlvbiBldmlkZW5jZSAoZS5nLiwgYXBwbGlj YXRpb24gZXZlbnQgbG9ncyksIGFuZCBob3cgZG9lcyBhDQo+IA0KPiBHb29kIHF1ZXN0aW9uLi4u IHB1dCBpdCBpbiB0aGUgSW50ZXJuZXQgRHJhZnQuDQo+IA0KPiAtLQ0KPiBdICAgICAgICAgICAg ICAgTmV2ZXIgdGVsbCBtZSB0aGUgb2RkcyEgICAgICAgICAgICAgICAgIHwgaXB2NiBtZXNoIG5l dHdvcmtzIFsNCj4gXSAgIE1pY2hhZWwgUmljaGFyZHNvbiwgU2FuZGVsbWFuIFNvZnR3YXJlIFdv cmtzICAgICAgICB8IG5ldHdvcmsgYXJjaGl0ZWN0ICBbDQo+IF0gICAgIG1jckBzYW5kZWxtYW4u Y2EgIGh0dHA6Ly93d3cuc2FuZGVsbWFuLmNhLyAgICAgICAgfCAgIHJ1Ynkgb24gcmFpbHMgICAg Ww0KDQo= From nobody Wed Oct 24 01:46:34 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E9D3130E70; Wed, 24 Oct 2018 01:46:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A9rWFmlpcX8p; Wed, 24 Oct 2018 01:46:22 -0700 (PDT) Received: from alexa-out-ams-01.qualcomm.com (alexa-out-ams-01.qualcomm.com [185.23.61.162]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EB02D12870E; Wed, 24 Oct 2018 01:46:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1540370782; x=1571906782; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=wvt0v3I3bBoM2qANOyj/Y1B3yih/oMeq4pb1cRsq+1U=; b=jWX7Cz6tmPr+yKFGzW8FXYcaQEZsxFieDrN29AsGmAYOj68rTtJtgIDe PB+zhrASzTJNdZXUUE9tB0UWXjAlu2af4g0+FgAzLaRJqDfto0YXY+RQa nbbRPVRfb7W+a3Tv1YfyJ+tjixrtUMyyO8zXzFSsnof0tQAC2xyCDemIc g=; X-IronPort-AV: E=Sophos;i="5.54,419,1534802400"; d="scan'208,217";a="1384851" Received: from ironmsg01-ams.qualcomm.com ([10.251.56.2]) by alexa-out-ams-01.qualcomm.com with ESMTP; 24 Oct 2018 10:46:20 +0200 X-IronPort-AV: E=McAfee;i="5900,7806,9055"; a="6080665" Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by ironmsg01-ams.qualcomm.com with ESMTP/TLS/AES256-SHA; 24 Oct 2018 10:46:20 +0200 Received: from euamsexm01a.eu.qualcomm.com (10.251.127.40) by euamsexm01a.eu.qualcomm.com (10.251.127.40) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Wed, 24 Oct 2018 10:46:18 +0200 Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by euamsexm01a.eu.qualcomm.com ([10.251.127.40]) with mapi id 15.00.1365.000; Wed, 24 Oct 2018 10:46:18 +0200 From: Jeremy O'Donoghue To: "Smith, Ned" CC: Michael Richardson , "rats@ietf.org" , "eat@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUakqqBJn3KZZVPEe4vVODtnqbzKUsxo8AgAAp8ACAAQVygA== Date: Wed, 24 Oct 2018 08:46:18 +0000 Message-ID: <990D359D-7993-4D42-B69C-8CCDC5D0D889@qti.qualcomm.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> <048076C6-C8C4-4F14-961C-C990F154E174@intel.com> In-Reply-To: <048076C6-C8C4-4F14-961C-C990F154E174@intel.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.9.1) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.251.52.12] Content-Type: multipart/alternative; boundary="_000_990D359D79934D42B69C8CCDC5D0D889qtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 08:46:26 -0000 --_000_990D359D79934D42B69C8CCDC5D0D889qtiqualcommcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGZvciB0aGlzIGFuYWx5c2lzLg0KDQpJIGFncmVlIC0gaXQgbWFrZXMgc2Vuc2UgdG8g dXNlIE5JU1QgdGVybWlub2xvZ3kgaW4gdGhlIGNoYXJ0ZXIgdGV4dCBwcm9wb3NhbC4gSSdsbCBo YXZlIGEgZ28gYXQgdGhhdCBzaG9ydGx5ICh3aGlsZSB0cnlpbmcgdG8gYWRkcmVzcyBzb21lIG9m IHRoZSBvdGhlciBjb21tZW50cyBhcyB3ZWxsKS4NCg0KSmVyZW15DQoNCk9uIDIzIE9jdCAyMDE4 LCBhdCAxODoxMCwgU21pdGgsIE5lZCA8bmVkLnNtaXRoQGludGVsLmNvbTxtYWlsdG86bmVkLnNt aXRoQGludGVsLmNvbT4+IHdyb3RlOg0KDQpTUDgwMC0xNjQgaXMgYSB1c2VmdWwgcmVmZXJlbmNl IGZvciBib3RoIGNvbmNlcHRzIGFuZCB0ZXJtaW5vbG9neS4gSW4gcGFydGljdWxhciBpdCBmb2xs b3dzIHRlcm1pbm9sb2d5IGNvbnZlbnRpb25zIHRoYXQgc2xpZ2h0bHkgZGlmZmVyIGZyb20gc29t ZSB0ZXJtcyBzdWdnZXN0ZWQgYnkgdGhpcyBsaXN0LiBJbiBwYXJ0aWN1bGFyLA0KDQotIGF0dGVz dGF0aW9uOiBhIHNldCBvZiBjbGFpbXMgd2hpY2ggY2FuIGJlIHZlcmlmaWVkIGFzIG9yaWdpbmF0 aW5nIGluIGFuIGVudGl0eS4NClNQODAwLTE2NC5hdHRlc3Q6IOKAnFJvb3Qgb2YgVHJ1c3QgZm9y IE1lYXN1cmVtZW50IChSVE0p4oCUcHJvdmlkZXMgdHJ1c3RlZCBtZWFzdXJlbWVudCBmdW5jdGlv bnMgdG8gYmUgdXNlZCBieSBhc3NlcnRpb25zIHRoYXQgYXJlIHByb3RlY3RlZCB2aWEgdGhlIFJU SSBhbmQgYXR0ZXN0ZWQgdG8gd2l0aCB0aGUgUlRSLuKAnSBbbm1zXSBOb3RlOiBTUDgwMC0xNjQu YXNzZXJ0aW9uIGFwcGVhcnMgdG8gYmUgc3lub255bW91cyB3aXRoIFNQODAwLTE2NC5jbGFpbSBh bmQgU1A4MDAtMTY0LmV2aWRlbmNlLiBUaGUgZGlzY3Vzc2lvbiBvbiByb290cy1vZi10cnVzdCBt YWtlcyBpdCBjbGVhciB0aGF0IHRoZSBjbGFpbXMgKGV2aWRlbmNlIHwgYXNzZXJ0aW9ucykgYXJl IHZlcmlmaWFibGUgdG8gaGF2ZSBvcmlnaW5hdGVkIGZyb20gYSByb290LW9mLXRydXN0Lg0KDQot IGNsYWltOiAgYXMgZGVmaW5lZCBpbiBSRkM3NTE5Lg0KU1A4MDAtMTY0LmNsYWltOiDigJxBIGRl dmljZSB3aXRoIGludGVncml0eSBoYXMgdGhlIGFiaWxpdHkgdG8gYXNzZXJ0IHNwZWNpZmljIGNs YWltcyBhYm91dCBpdHMgY29uZmlndXJhdGlvbiwgaGVhbHRoLCBvciBvcGVyYXRpbmcgc3RhdHVz IGluIGEgd2F5IHRoYXQgSW5mb3JtYXRpb24gT3duZXJzIGNhbiBjb25maWRlbnRseSByZWx5IHVw b24gdG8gbWFrZSBkZWNpc2lvbnMgYWJvdXQgaW50ZXJhY3Rpbmcgd2l0aCB0aGUgZGV2aWNlIGFu ZCBEZXZpY2UgT3duZXIu4oCdIFtubXNdIFRoZSBTUDgwMC0xNjQuY2xhaW0gZG9lc27igJl0IGFw cGVhciB0byBjb25mbGljdCB3aXRoIFJGQzc1MTkuY2xhaW0gc2VtYW50aWNzOyBhbHRob3VnaCBS RkM3NTE5LmNsYWltIGFsc28gZGVmaW5lcyBhIHBhcnRpY3VsYXIgZW5jb2Rpbmcgc2NoZW1lLiBX aGVyZWFzIFNQODAwLTE2NC5jbGFpbSBpcyBjb25jZXB0dWFsIChvbmx5KS4gSXQgc2hvdWxkIGJl IHBvc3NpYmxlIHRvIGFsbG93IGZvciB0aGUgdXNlIG9mIOKAnGNsYWlt4oCdIGluIGNvbnRleHRz IHRoYXQgY2hvc2UgdG8gZGVmaW5lIGFsdGVybmF0aXZlIGVuY29kaW5ncyBzdWNoIGFzIEFTTi4x LiBOb3RlOiBTUDgwMC0xNjQuYXNzZXJ0aW9uIGFwcGVhcnMgdG8gYmUgc3lub255bW91cyB3aXRo IFNQODAwLTE2NC5jbGFpbSBhbmQgU1A4MDAtMTY0LmV2aWRlbmNlLg0KDQotIGVudGl0eTogYSBk ZXZpY2Ugb3IgZGV2aWNlIHN1Yi1tb2R1bGUgdGhhdCBjYW4gZ2VuZXJhdGUgYSBjbGFpbSBvciBz ZXQgb2YNCiAgICAgICAgICBjbGFpbXMgd2hpY2ggY2FuIGJlIHZlcmlmaWVkIGJ5IGEgcmVtb3Rl IHBhcnR5Lg0KU1A4MDAtMTY0LnJvb3Qgb2YgdHJ1c3Q6IOKAnFJvVHMgYXJlIHNlY3VyaXR5IHBy aW1pdGl2ZXMgY29tcG9zZWQgb2YgaGFyZHdhcmUsIGZpcm13YXJlIGFuZC9vciBzb2Z0d2FyZSB0 aGF0IHByb3ZpZGUgYSBzZXQgb2YgdHJ1c3RlZCwgc2VjdXJpdHktY3JpdGljYWwgZnVuY3Rpb25z LuKAnSBbbm1zXSBBIHJvb3Qgb2YgdHJ1c3QgYXBwZWFycyB0byBiZSBhIOKAnHN1Yi1tb2R1bGXi gJ0gb2YgYSDigJxkZXZpY2XigJ0uIEl0IG1pZ2h0IGhhdmUgYmVlbiBtb3JlIGNvcnJlY3QgZm9y IHRoZSBzdWdnZXN0ZWQgZGVmaW5pdGlvbiBmb3IgYXR0ZXN0YXRpb24gdG8gaGF2ZSB1c2VkIHRo ZSB0ZXJtIOKAnHN1Yi1tb2R1bGXigJ0gaW5zdGVhZCBvZiDigJxlbnRpdHnigJ0gZ2l2ZW4gU1A4 MDAtMTY0LnJvb3Qtb2YtdHJ1c3QgdGVybSBtb3N0IGNsb3NlbHkgcmVzZW1ibGVzIHRoZSBzdWdn ZXN0ZWQg4oCcc3ViLW1vZHVsZeKAnS4gUG9zc2libHkgaXQgbWFrZXMgc2Vuc2UgdG8gdXNlIHRo ZSB0ZXJtIOKAnGRldmljZeKAnSB0byByZWZlciB0byBhIGRldmljZSBhbmQg4oCccm9vdC1vZi10 cnVzdOKAnSB0byByZWZlciB0byBhIOKAnHN1Yi1tb2R1bGXigJ0/DQoNCi0gZW50aXR5OiBhIGRl dmljZSBvciBkZXZpY2Ugc3ViLW1vZHVsZSB0aGF0IGNhbiBnZW5lcmF0ZSBhIGNsYWltIG9yIHNl dCBvZg0KICAgICAgICAgIGNsYWltcyB3aGljaCBjYW4gYmUgdmVyaWZpZWQgYnkgYSByZW1vdGUg cGFydHkuDQpTUDgwMC0xNjQuZW50aXR5OiDigJxBbiBJbmZvcm1hdGlvbiBPd25lciBpcyBhbiBl bnRpdHkgd2hvc2XigKbigJ0gYW5kIOKAnGEgRGV2aWNlIE93bmVyIGlzIGFuIGVudGl0eSB0aGF0 4oCm4oCdIFtubXNdIFNpbmNlIHRoZXJlIGlzbuKAmXQgYSBzdWdnZXN0ZWQgYWx0ZXJuYXRpdmUg Zm9yIFNQODAwLTE2NC5lbnRpdHksIHBvc3NpYmx5IGl0IG1ha2VzIHNlbnNlIG5vdCB0byBvdmVy bG9hZCDigJxlbnRpdHnigJ0gd2l0aCDigJxkZXZpY2XigJ0gYXMgZW50aXR5IGFsc28gY2FuIHJl ZmVyIHRvIGEgcGVyc29uIG9yIG9yZ2FuaXphdGlvbi4NCg0KLSByZW1vdGUgcGFydHk6IGFuIGFj dG9yIHJlbW90ZSBmcm9tIGFuIGVudGl0eSB0aGF0IHdpc2hlcyB0byB2ZXJpZnkgd2hldGhlcg0K ICAgICAgICAgIGEgY2xhaW0gb3Igc2V0IG9mIGNsYWltcyBvcmlnaW5hdGVkIGluIGEgZ2l2ZW4g ZW50aXR5Lg0KU1A4MDAtMTY0IGRvZXNu4oCZdCB1c2UgdGhlIHRlcm0g4oCccmVtb3RlIHBhcnR5 4oCdIGluc3RlYWQgaXQgdXNlcyBhIGNvdXBsZSBvZiB0ZXJtcyB0aGF0IHBvdGVudGlhbGx5IGNv dWxkIGJlIHVzZWQgaW4gcGxhY2Ugb2Yg4oCccmVtb3RlIHBhcnR54oCdLiBUaGVzZSBhcmUg4oCc dmVyaWZpZXLigJ0gYW5kIOKAnHJlbHlpbmcgcGFydHnigJ0uDQpTUDgwMC0xNjQudmVyaWZpZXI6 IOKAnFRoZSBSVFIgd2lsbCBhcHBseSBpbnRlZ3JpdHkgYW5kIG5vbi1yZXB1ZGlhdGlvbiBwcm90 ZWN0aW9ucyBvbiB0aGUgZGF0YSBzbyB0aGF0IHN1YnNlcXVlbnQgc29mdHdhcmUgYWdlbnRzIGNh bm5vdCBhbHRlciBvciByZXBsYXkgdGhlIGRhdGEgd2l0aG91dCBkZXRlY3Rpb24uIFRoZSBlc3Rh Ymxpc2hlZCBpZGVudGl0aWVzIGFsbG93IHZlcmlmaWVycyB0byB2ZXJpZnkgdGhlIHNvdXJjZSBv ZiB0aGUgZGF0YSB1bmlxdWVseSBhbmQgd2l0aG91dCByZXB1ZGlhdGlvbi7igJ0NClNQODAwLTE2 NC5yZWx5aW5nIHBhcnR5OiDigJxBIGRldmljZSBoYXMgaW50ZWdyaXR5IGlmIGl0cyBzb2Z0d2Fy ZSwgZmlybXdhcmUsIGFuZCBoYXJkd2FyZSBjb25maWd1cmF0aW9ucyBhcmUgaW4gYSBzdGF0ZSB0 aGF0IGlzIHRydXN0ZWQgYnkgYSByZWx5aW5nIHBhcnR5LuKAnQ0KU2luY2UgaXQgbWFrZXMgc2Vu c2UgZm9yIElFVEYgYXR0ZXN0YXRpb24gZWZmb3J0cyB0byBiZSBhbGlnbmVkIHdpdGggYWNjZXB0 ZWQgYW5kIGNpdGVkIE5JU1QgU1A4MDAtMTY0IGRvY3VtZW50LiBQb3NzaWJseSwgdGhlIGNoYXJ0 ZXIgY2FuIHVzZSB0ZXJtaW5vbG9neSBpbnRyb2R1Y2VkIHRoZXJlIGFuZCBzZWVrIG5vdCB0byBy ZWRlZmluZSBvciBjbGFyaWZ5LiBBcyBsb25nIGFzIHRoZSBjaGFydGVyIHRlcm1pbm9sb2d5IGlz IGFsaWduZWQgd2l0aCB0aGF0IG9mIFNQODAwLTE2NCwgaXQgc2hvdWxkIGJlIHBvc3NpYmxlIGZv ciB0aGUgQXR0ZXN0YXRpb24gQk9GIHRvIGRpc2N1c3MgYSBXRyBjaGFydGVyIHdpdGhvdXQgbmVl ZGxlc3MgY29uZnVzaW9uIGFuZCBtaXNpbnRlcnByZXRhdGlvbiBkdWUgdG8gaW5jb25zaXN0ZW50 IGFuZCBhbHRlcm5hdGl2ZSB1c2Ugb2YgdGVybWlub2xvZ3kuDQotTmVkDQoNCg0KT24gMTAvMjMv MTgsIDc6NDAgQU0sICJFQVQgb24gYmVoYWxmIG9mIEplcmVteSBPJ0Rvbm9naHVlIiA8ZWF0LWJv dW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmVhdC1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2Zq b2Rvbm9naEBxdGkucXVhbGNvbW0uY29tPG1haWx0bzpqb2Rvbm9naEBxdGkucXVhbGNvbW0uY29t Pj4gd3JvdGU6DQoNClRoZSBXb3JraW5nIEdyb3VwIHdpbGwgaWRlbnRpZnkgc2VjdXJpdHkgZ29h bHMgd2hpY2ggaXQgZXhwZWN0cyBhIHRydXN0d29ydGh5DQpleGVjdXRpb24gY29udGV4dCB0byBh ZGRyZXNzLCB3aGljaCB3aWxsIGFzc3VtZSB0aGUgcHJlc2VuY2Ugb2YgUm9vdHMgb2YNClRydXN0 IChhcyBkZWZpbmVkIGJ5IE5JU1QgW1NQODAwLTE2NF0pLiBUaGUgZGV0YWlsZWQgc3BlY2lmaWNh dGlvbiBvZiBzdWNoDQpjb250ZXh0cyBpcyBvdXQgb2Ygc2NvcGUuDQoNCg== --_000_990D359D79934D42B69C8CCDC5D0D889qtiqualcommcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+VGhhbmtzIGZvciB0aGlz IGFuYWx5c2lzLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+SSBhZ3JlZSAtIGl0IG1ha2VzIHNlbnNlIHRvIHVzZSBOSVNUIHRlcm1pbm9s b2d5IGluIHRoZSBjaGFydGVyIHRleHQgcHJvcG9zYWwuIEknbGwgaGF2ZSBhIGdvIGF0IHRoYXQg c2hvcnRseSAod2hpbGUgdHJ5aW5nIHRvIGFkZHJlc3Mgc29tZSBvZiB0aGUgb3RoZXIgY29tbWVu dHMgYXMgd2VsbCkuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj5KZXJlbXk8YnIgY2xhc3M9IiI+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjxi bG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiAyMyBPY3Qg MjAxOCwgYXQgMTg6MTAsIFNtaXRoLCBOZWQgJmx0OzxhIGhyZWY9Im1haWx0bzpuZWQuc21pdGhA aW50ZWwuY29tIiBjbGFzcz0iIj5uZWQuc21pdGhAaW50ZWwuY29tPC9hPiZndDsgd3JvdGU6PC9k aXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSIgc3R5bGU9InBhZ2U6IFdvcmRTZWN0aW9uMTsg Y2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1z aXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246 IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3Bh Y2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAw aW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMt c2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IiBjbGFzcz0i Ij5TUDgwMC0xNjQgaXMgYSB1c2VmdWwgcmVmZXJlbmNlIGZvciBib3RoIGNvbmNlcHRzIGFuZCB0 ZXJtaW5vbG9neS4gSW4gcGFydGljdWxhciBpdCBmb2xsb3dzIHRlcm1pbm9sb2d5IGNvbnZlbnRp b25zIHRoYXQgc2xpZ2h0bHkgZGlmZmVyIGZyb20gc29tZSB0ZXJtcyBzdWdnZXN0ZWQgYnkgdGhp cyBsaXN0LiBJbiBwYXJ0aWN1bGFyLDxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDExcHQ7IGZv bnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0i Zm9udC1zaXplOiAxMHB0OyIgY2xhc3M9IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3Nw YW4+PC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDEu NXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyI+ DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBj bGFzcz0iIj4tIGF0dGVzdGF0aW9uOiBhIHNldCBvZiBjbGFpbXMgd2hpY2ggY2FuIGJlIHZlcmlm aWVkIGFzIG9yaWdpbmF0aW5nIGluIGFuIGVudGl0eS48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDEuNXB0 OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyI+DQo8 c3BhbiBzdHlsZT0iZm9udC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFz cz0iIj5TUDgwMC0xNjQuYXR0ZXN0OiDigJw8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTog OXB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBjbGFzcz0iIj5Sb290 IG9mIFRydXN0IGZvciBNZWFzdXJlbWVudCAoUlRNKeKAlDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOiA5cHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtDb3VyaWVyIE5ldyZxdW90OzsiIGNsYXNz PSIiPnByb3ZpZGVzDQogdHJ1c3RlZCBtZWFzdXJlbWVudCBmdW5jdGlvbnMgdG8gYmUgdXNlZCBi eSBhc3NlcnRpb25zIHRoYXQgYXJlIHByb3RlY3RlZCB2aWEgdGhlIFJUSSBhbmQgYXR0ZXN0ZWQg dG8gd2l0aCB0aGUgUlRSLuKAnTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IFRpbWVz TmV3Um9tYW5QU01ULCBzZXJpZjsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0 ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5bbm1zXSBOb3RlOiBTUDgwMC0xNjQuYXNzZXJ0aW9uDQog YXBwZWFycyB0byBiZSBzeW5vbnltb3VzIHdpdGggU1A4MDAtMTY0LmNsYWltIGFuZCBTUDgwMC0x NjQuZXZpZGVuY2UuIFRoZSBkaXNjdXNzaW9uIG9uIHJvb3RzLW9mLXRydXN0IG1ha2VzIGl0IGNs ZWFyIHRoYXQgdGhlIGNsYWltcyAoZXZpZGVuY2UgfCBhc3NlcnRpb25zKSBhcmUgdmVyaWZpYWJs ZSB0byBoYXZlIG9yaWdpbmF0ZWQgZnJvbSBhIHJvb3Qtb2YtdHJ1c3QuPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPjxv OnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMS41cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250 LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41 cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7Ij4N CjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNs YXNzPSIiPi0gY2xhaW06Jm5ic3A7IGFzIGRlZmluZWQgaW4gUkZDNzUxOS48bzpwIGNsYXNzPSIi PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAw aW4gMGluIDEuNXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5z LXNlcmlmOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENv dXJpZXI7IiBjbGFzcz0iIj5TUDgwMC0xNjQuY2xhaW06PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZl cnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiA5 cHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtDb3VyaWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPuKAnDwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiA5cHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtDb3Vy aWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPkENCiBkZXZpY2Ugd2l0aCBpbnRlZ3JpdHkgaGFzIHRo ZSBhYmlsaXR5IHRvIGFzc2VydCBzcGVjaWZpYyBjbGFpbXMgYWJvdXQgaXRzIGNvbmZpZ3VyYXRp b24sIGhlYWx0aCwgb3Igb3BlcmF0aW5nIHN0YXR1cyBpbiBhIHdheSB0aGF0IEluZm9ybWF0aW9u IE93bmVycyBjYW4gY29uZmlkZW50bHkgcmVseSB1cG9uIHRvIG1ha2UgZGVjaXNpb25zIGFib3V0 IGludGVyYWN0aW5nIHdpdGggdGhlIGRldmljZSBhbmQgRGV2aWNlIE93bmVyLuKAnTwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IFRpbWVzTmV3Um9tYW5QU01ULCBzZXJpZjsiIGNsYXNz PSIiPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5bbm1z XQ0KIFRoZSBTUDgwMC0xNjQuY2xhaW0gZG9lc27igJl0IGFwcGVhciB0byBjb25mbGljdCB3aXRo IFJGQzc1MTkuY2xhaW0gc2VtYW50aWNzOyBhbHRob3VnaCBSRkM3NTE5LmNsYWltIGFsc28gZGVm aW5lcyBhIHBhcnRpY3VsYXIgZW5jb2Rpbmcgc2NoZW1lLiBXaGVyZWFzIFNQODAwLTE2NC5jbGFp bSBpcyBjb25jZXB0dWFsIChvbmx5KS4gSXQgc2hvdWxkIGJlIHBvc3NpYmxlIHRvIGFsbG93IGZv ciB0aGUgdXNlIG9mIOKAnGNsYWlt4oCdIGluIGNvbnRleHRzIHRoYXQNCiBjaG9zZSB0byBkZWZp bmUgYWx0ZXJuYXRpdmUgZW5jb2RpbmdzIHN1Y2ggYXMgQVNOLjEuIE5vdGU6IFNQODAwLTE2NC5h c3NlcnRpb24gYXBwZWFycyB0byBiZSBzeW5vbnltb3VzIHdpdGggU1A4MDAtMTY0LmNsYWltIGFu ZCBTUDgwMC0xNjQuZXZpZGVuY2UuPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41cHQ7IGZvbnQtc2l6ZTogMTFwdDsg Zm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNp emU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW46IDBpbiAwaW4gMS41cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmks IHNhbnMtc2VyaWY7Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWls eTogQ291cmllcjsiIGNsYXNzPSIiPi0gZW50aXR5OiBhIGRldmljZSBvciBkZXZpY2Ugc3ViLW1v ZHVsZSB0aGF0IGNhbiBnZW5lcmF0ZSBhIGNsYWltIG9yIHNldCBvZjxiciBjbGFzcz0iIj4NCiZu YnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgY2xhaW1zIHdoaWNoIGNhbiBiZSB2ZXJp ZmllZCBieSBhIHJlbW90ZSBwYXJ0eS48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDEuNXB0OyBmb250LXNp emU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyI+DQo8c3BhbiBzdHls ZT0iZm9udC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj5TUDgw MC0xNjQucm9vdCBvZiB0cnVzdDo8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDlwdDsgZm9udC1mYW1p bHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9IiI+4oCcPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDlwdDsgZm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 OyIgY2xhc3M9IiI+Um9Ucw0KIGFyZSBzZWN1cml0eSBwcmltaXRpdmVzIGNvbXBvc2VkIG9mIGhh cmR3YXJlLCBmaXJtd2FyZSBhbmQvb3Igc29mdHdhcmUgdGhhdCBwcm92aWRlIGEgc2V0IG9mIHRy dXN0ZWQsIHNlY3VyaXR5LWNyaXRpY2FsIGZ1bmN0aW9ucy7igJ08L3NwYW4+PHNwYW4gc3R5bGU9 ImZvbnQtZmFtaWx5OiBUaW1lc05ld1JvbWFuUFNNVCwgc2VyaWY7IiBjbGFzcz0iIj48c3BhbiBj bGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+W25tc10gQSByb290DQog b2YgdHJ1c3QgYXBwZWFycyB0byBiZSBhIOKAnHN1Yi1tb2R1bGXigJ0gb2YgYSDigJxkZXZpY2Xi gJ0uIEl0IG1pZ2h0IGhhdmUgYmVlbiBtb3JlIGNvcnJlY3QgZm9yIHRoZSBzdWdnZXN0ZWQgZGVm aW5pdGlvbiBmb3IgYXR0ZXN0YXRpb24gdG8gaGF2ZSB1c2VkIHRoZSB0ZXJtIOKAnHN1Yi1tb2R1 bGXigJ0gaW5zdGVhZCBvZiDigJxlbnRpdHnigJ0gZ2l2ZW4gU1A4MDAtMTY0LnJvb3Qtb2YtdHJ1 c3QgdGVybSBtb3N0IGNsb3NlbHkgcmVzZW1ibGVzIHRoZSBzdWdnZXN0ZWQNCiDigJxzdWItbW9k dWxl4oCdLiBQb3NzaWJseSBpdCBtYWtlcyBzZW5zZSB0byB1c2UgdGhlIHRlcm0g4oCcZGV2aWNl 4oCdIHRvIHJlZmVyIHRvIGEgZGV2aWNlIGFuZCDigJxyb290LW9mLXRydXN04oCdIHRvIHJlZmVy IHRvIGEg4oCcc3ViLW1vZHVsZeKAnT88L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOC41 cHQ7IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIgY2xhc3M9IiI+PG86cCBjbGFzcz0iIj48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAx LjVwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsi Pg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOC41cHQ7IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIg Y2xhc3M9IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMXB0 OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTogOC41cHQ7IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIgY2xhc3M9IiI+LSBlbnRpdHk6IGEg ZGV2aWNlIG9yIGRldmljZSBzdWItbW9kdWxlIHRoYXQgY2FuIGdlbmVyYXRlIGEgY2xhaW0gb3Ig c2V0IG9mPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyBj bGFpbXMgd2hpY2ggY2FuIGJlIHZlcmlmaWVkIGJ5IGEgcmVtb3RlIHBhcnR5LjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46 IDBpbiAwaW4gMS41cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNh bnMtc2VyaWY7Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IiBjbGFzcz0iIj5TUDgw MC0xNjQuZW50aXR5OjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOXB0OyBmb250LWZhbWlseTogJnF1 b3Q7Q291cmllciBOZXcmcXVvdDs7IiBjbGFzcz0iIj7igJw8L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTogOXB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBjbGFz cz0iIj5BbiBJbmZvcm1hdGlvbg0KIE93bmVyIGlzIGFuIGVudGl0eSB3aG9zZeKApuKAnTxzcGFu IGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTogOXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPmFu ZDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiA5cHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtD b3VyaWVyIE5ldyZxdW90OzsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj7igJxhDQogRGV2aWNlIE93bmVyIGlzIGFuIGVudGl0eSB0aGF0 4oCm4oCdPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwv c3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiA5cHQ7IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIg Y2xhc3M9IiI+W25tc10gU2luY2UgdGhlcmUgaXNu4oCZdCBhIHN1Z2dlc3RlZCBhbHRlcm5hdGl2 ZSBmb3IgU1A4MDAtMTY0LmVudGl0eSwgcG9zc2libHkgaXQgbWFrZXMgc2Vuc2Ugbm90IHRvIG92 ZXJsb2FkIOKAnGVudGl0eeKAnQ0KIHdpdGgg4oCcZGV2aWNl4oCdIGFzIGVudGl0eSBhbHNvIGNh biByZWZlciB0byBhIHBlcnNvbiBvciBvcmdhbml6YXRpb24uPC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTogVGltZXNOZXdSb21hblBTTVQsIHNlcmlmOyIgY2xhc3M9IiI+PG86cCBjbGFz cz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwg c2Fucy1zZXJpZjsiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOC41cHQ7IGZvbnQtZmFtaWx5 OiBDb3VyaWVyOyIgY2xhc3M9IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiA5cHQ7IGZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7Ij4NCjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPi0g cmVtb3RlIHBhcnR5OiBhbiBhY3RvciByZW1vdGUgZnJvbSBhbiBlbnRpdHkgdGhhdCB3aXNoZXMg dG8gdmVyaWZ5IHdoZXRoZXI8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7IGEgY2xhaW0gb3Igc2V0IG9mIGNsYWltcyBvcmlnaW5hdGVkIGluIGEgZ2l2ZW4g ZW50aXR5LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gOXB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFt aWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiA4LjVw dDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj5TUDgwMC0xNjQgZG9lc27igJl0IHVz ZSB0aGUgdGVybSDigJxyZW1vdGUgcGFydHnigJ0gaW5zdGVhZCBpdCB1c2VzIGEgY291cGxlIG9m IHRlcm1zIHRoYXQgcG90ZW50aWFsbHkgY291bGQgYmUgdXNlZCBpbiBwbGFjZSBvZiDigJxyZW1v dGUgcGFydHnigJ0uIFRoZXNlIGFyZSDigJx2ZXJpZmllcuKAnSBhbmQg4oCccmVseWluZyBwYXJ0 eeKAnS48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IGNsYXNzPSIiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIi PlNQODAwLTE2NC52ZXJpZmllcjo8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDlwdDsgZm9udC1mYW1p bHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7OyIgY2xhc3M9IiI+4oCcPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDlwdDsgZm9udC1mYW1pbHk6ICZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 OyIgY2xhc3M9IiI+VGhlDQogUlRSIHdpbGwgYXBwbHkgaW50ZWdyaXR5IGFuZCBub24tcmVwdWRp YXRpb24gcHJvdGVjdGlvbnMgb24gdGhlIGRhdGEgc28gdGhhdCBzdWJzZXF1ZW50IHNvZnR3YXJl IGFnZW50cyBjYW5ub3QgYWx0ZXIgb3IgcmVwbGF5IHRoZSBkYXRhIHdpdGhvdXQgZGV0ZWN0aW9u LiBUaGUgZXN0YWJsaXNoZWQgaWRlbnRpdGllcyBhbGxvdyB2ZXJpZmllcnMgdG8gdmVyaWZ5IHRo ZSBzb3VyY2Ugb2YgdGhlIGRhdGEgdW5pcXVlbHkgYW5kIHdpdGhvdXQgcmVwdWRpYXRpb24u4oCd PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPlNQ ODAwLTE2NC5yZWx5aW5nIHBhcnR5OjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOXB0OyBmb250LWZh bWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVvdDs7IiBjbGFzcz0iIj7igJw8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTogOXB0OyBmb250LWZhbWlseTogJnF1b3Q7Q291cmllciBOZXcmcXVv dDs7IiBjbGFzcz0iIj5BDQogZGV2aWNlIGhhcyBpbnRlZ3JpdHkgaWYgaXRzIHNvZnR3YXJlLCBm aXJtd2FyZSwgYW5kIGhhcmR3YXJlIGNvbmZpZ3VyYXRpb25zIGFyZSBpbiBhIHN0YXRlIHRoYXQg aXMgdHJ1c3RlZCBieSBhIHJlbHlpbmcgcGFydHku4oCdPC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogVGltZXNO ZXdSb21hblBTTVQsIHNlcmlmOyIgY2xhc3M9IiI+U2luY2UgaXQgbWFrZXMgc2Vuc2UgZm9yIElF VEYgYXR0ZXN0YXRpb24gZWZmb3J0cyB0byBiZSBhbGlnbmVkIHdpdGggYWNjZXB0ZWQgYW5kIGNp dGVkIE5JU1QgU1A4MDAtMTY0IGRvY3VtZW50LiBQb3NzaWJseSwgdGhlIGNoYXJ0ZXIgY2FuIHVz ZSB0ZXJtaW5vbG9neSBpbnRyb2R1Y2VkIHRoZXJlIGFuZCBzZWVrDQogbm90IHRvIHJlZGVmaW5l IG9yIGNsYXJpZnkuIEFzIGxvbmcgYXMgdGhlIGNoYXJ0ZXIgdGVybWlub2xvZ3kgaXMgYWxpZ25l ZCB3aXRoIHRoYXQgb2YgU1A4MDAtMTY0LCBpdCBzaG91bGQgYmUgcG9zc2libGUgZm9yIHRoZSBB dHRlc3RhdGlvbiBCT0YgdG8gZGlzY3VzcyBhIFdHIGNoYXJ0ZXIgd2l0aG91dCBuZWVkbGVzcyBj b25mdXNpb24gYW5kIG1pc2ludGVycHJldGF0aW9uIGR1ZSB0byBpbmNvbnNpc3RlbnQgYW5kIGFs dGVybmF0aXZlIHVzZQ0KIG9mIHRlcm1pbm9sb2d5LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFu PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IFRpbWVzTmV3 Um9tYW5QU01ULCBzZXJpZjsiIGNsYXNzPSIiPi1OZWQ8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bh bj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xh c3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyIgY2xhc3M9IiI+PG86cCBjbGFz cz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdCAwLjVpbjsgZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0K T24gMTAvMjMvMTgsIDc6NDAgQU0sICZxdW90O0VBVCBvbiBiZWhhbGYgb2YgSmVyZW15IE8nRG9u b2dodWUmcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzplYXQtYm91bmNlc0BpZXRmLm9yZyIgc3R5 bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+ ZWF0LWJvdW5jZXNAaWV0Zi5vcmc8L2E+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPm9uIGJlaGFsZiBvZjxhIGhyZWY9Im1haWx0bzpqb2Rvbm9naEBxdGku cXVhbGNvbW0uY29tIiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRl cmxpbmU7IiBjbGFzcz0iIj5qb2Rvbm9naEBxdGkucXVhbGNvbW0uY29tPC9hPiZndDsNCiB3cm90 ZTo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQgMC41aW47IGZvbnQtc2l6 ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxv OnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdCAwLjVpbjsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTog Q2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTog OC41cHQ7IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIgY2xhc3M9IiI+VGhlIFdvcmtpbmcgR3JvdXAg d2lsbCBpZGVudGlmeSBzZWN1cml0eSBnb2FscyB3aGljaCBpdCBleHBlY3RzIGEgdHJ1c3R3b3J0 aHk8YnIgY2xhc3M9IiI+DQpleGVjdXRpb24gY29udGV4dCB0byBhZGRyZXNzLCB3aGljaCB3aWxs IGFzc3VtZSB0aGUgcHJlc2VuY2Ugb2YgUm9vdHMgb2Y8YnIgY2xhc3M9IiI+DQpUcnVzdCAoYXMg ZGVmaW5lZCBieSBOSVNUIFtTUDgwMC0xNjRdKS4gVGhlIGRldGFpbGVkIHNwZWNpZmljYXRpb24g b2Ygc3VjaDxiciBjbGFzcz0iIj4NCmNvbnRleHRzIGlzIG91dCBvZiBzY29wZS48L3NwYW4+PC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_990D359D79934D42B69C8CCDC5D0D889qtiqualcommcom_-- From nobody Wed Oct 24 04:36:55 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EC01130E3A; Wed, 24 Oct 2018 04:36:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3KJWXHlkR_XT; Wed, 24 Oct 2018 04:36:44 -0700 (PDT) Received: from alexa-out-ams-01.qualcomm.com (alexa-out-ams-01.qualcomm.com [185.23.61.162]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70C56130DF5; Wed, 24 Oct 2018 04:36:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1540381003; x=1571917003; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=osXgUV9riGUhHEG0DZv/VQXHP0aR3gSNt+m2zRKLFuQ=; b=TCsiHPFGE9bmKYuVbk4Quh6JjfHnCTp8lzFAN6IrT2mcZPl8HyfTDdfV 0sstHoaIbaUy2sKLbTgI0teQjT7ZIlwZGDBLyNKl5u8h0CZ46qPrwmO7R ZVwKM4R713WzdOPrvqk4eptwVMXa5MP08hEDuOCHxt+Pbpuq6Td80mrd2 g=; X-IronPort-AV: E=Sophos;i="5.54,420,1534802400"; d="scan'208,217";a="1385930" Received: from ironmsg03-ams.qualcomm.com ([10.251.56.4]) by alexa-out-ams-01.qualcomm.com with ESMTP; 24 Oct 2018 13:36:40 +0200 X-IronPort-AV: E=McAfee;i="5900,7806,9055"; a="6108322" Received: from euamsexm01b.eu.qualcomm.com ([10.251.127.41]) by ironmsg03-ams.qualcomm.com with ESMTP/TLS/AES256-SHA; 24 Oct 2018 13:36:40 +0200 Received: from euamsexm01a.eu.qualcomm.com (10.251.127.40) by euamsexm01b.eu.qualcomm.com (10.251.127.41) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Wed, 24 Oct 2018 13:36:38 +0200 Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by euamsexm01a.eu.qualcomm.com ([10.251.127.40]) with mapi id 15.00.1365.000; Wed, 24 Oct 2018 13:36:38 +0200 From: Jeremy O'Donoghue To: "Eric Voit (evoit)" CC: Michael Richardson , "rats@ietf.org" , "eat@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUakqqBJn3KZZVPEe4vVODtnqbzKUsxo8AgAA3c3CAASeGgA== Date: Wed, 24 Oct 2018 11:36:38 +0000 Message-ID: <0771A502-32EF-46E9-95FB-55BE0FF04634@qti.qualcomm.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.9.1) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.251.52.12] Content-Type: multipart/alternative; boundary="_000_0771A50232EF46E995FB55BE0FF04634qtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 11:36:48 -0000 --_000_0771A50232EF46E995FB55BE0FF04634qtiqualcommcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SEkgRXJpYywNCg0KT24gMjMgT2N0IDIwMTgsIGF0IDE5OjA0LCBFcmljIFZvaXQgKGV2b2l0KSA8 ZXZvaXRAY2lzY28uY29tPG1haWx0bzpldm9pdEBjaXNjby5jb20+PiB3cm90ZToNCg0KSGkgSmVy ZW15LA0KDQpUaGFua3MgZm9yIHRha2luZyBhIGN1dCBhdCB0aGlzIGNoYXJ0ZXIgc2ltcGxpZmlj YXRpb24uICBUaGVyZSBhcmUgYSBmZXcgYXJlYXMgY292ZXJlZCB3aXRoaW4gdGhlIEdpdEh1YiBH b2FsczxodHRwczovL2dpdGh1Yi5jb20vaWV0Zi1yYXRzL2NoYXJ0ZXIvYmxvYi9SQzIvaWV0Zi1y YXRzLWNoYXJ0ZXIubWQ+d2hpY2ggSSBjYW7igJl0IGVhc2lseSBtYXAgdG8geW91ciB0ZXh0IGJl bG93LiAgQ291bGQgeW91IHRhbGsgYWJvdXQgaG93IHRoZXNlIGVsZW1lbnRzIGFyZSBjb3ZlcmVk IChvciBub3QpPyAgIEZvciBjb250ZXh0LCBJIGFtIHdvcmtpbmcgZnJvbSB0aGUgcGVyc3BlY3Rp dmUgb2YgcmVtb3RlIGF0dGVzdGF0aW9uIGFwcGxpY2F0aW9uPGh0dHBzOi8vd3d3LmNpc2NvLmNv bS9jL2RhbS9lbi91cy90ZC9kb2NzL2Nsb3VkLXN5c3RlbXMtbWFuYWdlbWVudC9hcHBsaWNhdGlv bi1wb2xpY3ktaW5mcmFzdHJ1Y3R1cmUtY29udHJvbGxlci1lbnRlcnByaXNlLW1vZHVsZS8xLTUt eC9pbnRlZ3JpdHlfdmVyaWZpY2F0aW9uL3VzZXItZ3VpZGUvQ2lzY29fSW50ZWdyaXR5X1Zlcmlm aWNhdGlvbl9BcHBsaWNhdGlvbl9BUElDLUVNX1VzZXJfR3VpZGVfMV81XzBfeC5wZGY+IGRldmVs b3BlciB0cnlpbmcgdG8gc3RhbmRhcmRpemUgdGhlIGludGVyZmFjZXMgYmV0d2VlbiBhIGNvbnRy b2xsZXIgKHdoaWNoIGlzIGFjdGluZyBhcyBhIGNsYWltIHZlcmlmaWVyKSBhbmQgYSBuZXR3b3Jr IGVsZW1lbnQgKHdoaWNoIGluY2x1ZGVzIFRDRyBiYXNlZCBzdWJzeXN0ZW1zLikNCg0KRm9yIG15 IGFwcGxpY2F0aW9uIHRvIHdvcmsgcHJvcGVybHksIHRoZXJlIGFyZSBzZXZlcmFsIHRoaW5ncyBu ZWVkZWQgd2l0aGluIGEgbmV0d29yayBjb250cm9sbGVyIHRvIHZhbGlkYXRlIHRoZSBhc3NlcnRl ZCBjbGFpbXMgY29taW5nIG91dCBvZiBhIHJvdXRlci4gIFRoZXNlIGluY2x1ZGU6DQoNCuKAoiAg ICAgICBIb3cgZG8gd2UgZXhwb3NlIHRoZSBhdHRlc3RhdGlvbiBldmlkZW5jZSB3aGljaCBjYW4g YmUgdXNlZCB0byB2YWxpZGF0ZSBhc3NlcnRlZCBjbGFpbXM/DQoNCkkgdGhpbmsgdGhhdCB0aGUg bmVlZCB0byBhZGRyZXNzIHRoaXMgaXMgY292ZXJlZCBzdWZmaWNpZW50bHkgZm9yIGEgV0cgQ2hh cnRlciBieSB0aGUgc3RhdGVtZW50ICJQcm9kdWNlIGEgc3BlY2lmaWNhdGlvbiBkZWZpbmluZyBw cm9jZWR1cmVzIGFuZCBjb3JyZXNwb25kaW5nIGFyY2hpdGVjdHVyZXPigKggc3VwcG9ydGluZyB2 ZXJpZmljYXRpb24gb2YgQ2xhaW1zIi4NCg0KSWYgdmVyaWZpY2F0aW9uIG9mIENsYWltcyByZXF1 aXJlcyBzcGVjaWZpYyBmb3JtcyBvZiBhdHRlc3RhdGlvbiBldmlkZW5jZSAoZS5nLiBhIHNldCBv ZiBtZWFzdXJlbWVudHMgZ2VuZXJhdGVkIGJ5IGEgVFBNKSwgdGhlbiBpdCBpcyBwcm9wZXJseSBh IG1hdHRlciBmb3IgYW4gUkZDIHRvIHNwZWNpZnkgdGhpcywgYXMgTWljaGFlbCBzdWdnZXN0cy4N Cg0K4oCiICAgICAgIEhvdyBkbyB3ZSBrbm93IHdoaWNoIHJvb3Qgb2YgdHJ1c3Qgd2hpY2ggd2Fz IHVzZWQgdG8gZ2VuZXJhdGUgdGhlIGF0dGVzdGF0aW9uIGV2aWRlbmNlIChlLmcuLCBhcHBsaWNh dGlvbiBldmVudCBsb2dzKSwgYW5kIGhvdyBkb2VzIGEgdmVyaWZpZXIgZGlmZmVyZW50aWF0ZSB0 aGlzIGZyb20gdGhlIHJvb3Qtb2YtdHJ1c3Qgd2hpY2ggYXNzZXJ0cyBjbGFpbXMgbWFkZSB1cG9u IHRoaXMgZXZpZGVuY2U/DQoNCkFnYWluLCBJIHRoaW5rIHRoaXMgaXMgYSBtYXR0ZXIgZm9yIHNw ZWNpZmljYXRpb24gcmF0aGVyIHRoYW4gY2hhcnRlci4gVGhlcmUgYXJlIGEgbnVtYmVyIG9mIGRp ZmZlcmVudCB3YXlzIGluIHdoaWNoIFJvb3RzIG9mIFRydXN0IGNhbiBiZSByZWFsaXNlZCBhbmQg bWFueSBwb3NzaWJsZSBkZXZpY2UgYXJjaGl0ZWN0dXJlcy4gVGhlIEVBVCBkcmFmdCBhbGxvd3Mg b25lIFJvVCB0byBpbmNsdWRlIGFuIGF0dGVzdGF0aW9uIGdlbmVyYXRlZCBieSBhIGRpZmZlcmVu dCBSb1QsIGZvciBleGFtcGxlLiBJIGJlbGlldmUgdGhlIFJBVFMgZHJhZnQgYWxzbyBwcm92aWRl cyB0ZWNobmljYWwgbWVjaGFuaXNtcyBieSB3aGljaCB0aGlzIGNhbiBiZSBhY2hpZXZlZC4NCg0K 4oCiICAgICAgIFdoYXQgZW50aXRpZXMgYXJlIGFsbG93ZWQgdG8gcmVhZCB0aGUgaW5mbyBhc3Nl cnRlZCBjbGFpbXM/ICBXaGF0IHN1YnNldCBvZiB0aGVzZSBjYW4gc2VlIHRoZSByYXcgYXR0ZXN0 YXRpb24gZXZpZGVuY2U/DQoNClRoZXNlIHF1ZXN0aW9ucyBhcmUgc2lnbmlmaWNhbnQgYmVjYXVz ZSByb3V0ZXJzL3N3aXRjaGVzIGFyZSBub3QgbW9ub2xpdGhpYyBkZXZpY2VzLiAgSW4gZmFjdCwg dGhleSBhcmUgY29tcG9zZWQgb2Ygc3Vic3lzdGVtcyB3aXRoIGRpZmZlcmVudCBsZXZlbHMgb2Yg dHJ1c3R3b3J0aGluZXNzLiAgQXMgdGhlIElFVEYgb2Z0ZW4gYWltcyBhdCBwcm90b2NvbCBzcGVj aWZpY2F0aW9ucyBhdCB0aGUgaW50ZXItZGV2aWNlIGxldmVsLCBJIGFtIGxvb2tpbmcgZm9yIGNv dmVyYWdlIG9mIHN1Y2ggcXVlc3Rpb25zIGluIHRoZSBjaGFydGVyLg0KDQpJIGFncmVlIHdpdGgg eW91IGhlcmUgYXMgdGhlIHNhbWUgaXNzdWUgYXBwbGllcyB0byBjbGFpbXMgd2l0aCBwcml2YWN5 IGltcGxpY2F0aW9ucy4gQXMgYW4gZXhhbXBsZSwgSSBtYXkgd2lzaCB0byBwcmVzZW50IGEgdW5p cXVlIGRldmljZSBJRCB0byBhIHNvY2lhbCBtZWRpYSB3ZWJzaXRlIGJ1dCBub3QgbXkgbG9jYXRp b24uDQoNCkkgaGF2ZSBhZGRlZCBidWxsZXQgcG9pbnQgMyB0byB0aGUgZHJhZnQgLSB3aGljaCBJ IHdpbGwgcG9zdCBzZXBhcmF0ZWx5LiBMZXQgbWUga25vdyBpZiB5b3UgdGhpbmsgdGhpcyBhZGRy ZXNzZXMgeW91ciBjb25jZXJucyBzdWZmaWNpZW50bHkuDQoNCkJlc3QgcmVnYXJkcw0KSmVyZW15 DQoNCg0KVGhhbmtzLA0KRXJpYw0KDQpGcm9tOiBKZXJlbXkgTydEb25vZ2h1ZSwgT2N0b2JlciAy MywgMjAxOCAxMDo0MCBBTQ0KDQpPbiAyMiBPY3QgMjAxOCwgYXQgMjI6MDEsIE1pY2hhZWwgUmlj aGFyZHNvbiA8bWNyK2lldGZAc2FuZGVsbWFuLmNhPG1haWx0bzptY3IraWV0ZkBzYW5kZWxtYW4u Y2E+PiB3cm90ZToNCg0KDQpKZXJlbXkgTydEb25vZ2h1ZSA8am9kb25vZ2hAcXRpLnF1YWxjb21t LmNvbTxtYWlsdG86am9kb25vZ2hAcXRpLnF1YWxjb21tLmNvbT4+IHdyb3RlOg0KDQpUaGlzIGlz IGEgdmVyeSB1c2VmdWwgY29udHJpYnV0aW9uLCBMYXVyZW5jZS4NCg0KDQpUaGUgY3VycmVudCBk cmFmdCB0ZXh0IGlzIHRvbyBzdHJvbmdseSBiaWFzZWQgdG93YXJkcyBhdHRlc3RhdGlvbiBiYXNl ZA0Kb24gbWVhc3VyZW1lbnQsIGFuZCBkb2VzIG5vdCBhZGVxdWF0ZWx5IGNvdmVyIG90aGVyIG1l Y2hhbmlzbXMgd2hpY2gNCmFyZSBhbHJlYWR5DQoNCkJ1dCwgaXQncyBmb3IgdGhlIGNoYXJ0ZXIs IGZvciB0aGUgV0csIGl0J3Mgbm90IGEgdHJlYXRpc2Ugb24gYXR0ZXN0YXRpb24NCml0c2VsZi4N Cg0KVGhpcyBpcyBhbGwgc3VwcG9zZWQgdG8gYmUgKm1ldGEqIHRleHQgYWJvdXQgYXR0ZXN0YXRp b24sIGFib3V0IHdoYXQgd2Ugd2FudA0KdG8gc2F5IGFib3V0IGF0dGVzdGF0aW9uIGluIHRoZSBk b2N1bWVudHMsIG5vdCBhYm91dCB3aGF0IGF0dGVzdGF0aW9uIGlzLg0KDQpQbGVhc2UgZ28gcmVh ZCBzb21lIG90aGVyIElFVEYgY2hhcnRlcnM6DQoNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5v cmcvd2cvNmxvL2Fib3V0Lw0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy93Zy82dGlzY2gv YWJvdXQvDQpodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL3dnL3N1aXQvYWJvdXQvDQoNCkZh aXIgY29tbWVudC4NCg0KV2UgaGF2ZSB0d28gZXhpc3RpbmcgcHJvcG9zYWxzIC0gRUFUIGFuZCBS QVRTIC0gd2hpY2ggYWRkcmVzcyBhIHNpbWlsYXIgcHJvYmxlbSBzcGFjZSBidXQgdXNpbmcgZGlm ZmVyZW50IG1lY2hhbmlzbXMuIFdoaWxlIEkgYmVsaWV2ZSB0aGUgUkFUUyBhbmQgRUFUIGNvbnRy aWJ1dG9ycyBhcmUgaW4gYnJvYWQgYWdyZWVtZW50IHRoYXQgdGhlcmUgaXMgc2lnbmlmaWNhbnQg YmVuZWZpdCBpbiBicmluZ2luZyBib3RoIHdvcmsgc3RyZWFtcyB1bmRlciBhIHNpbmdsZSB1bWJy ZWxsYSwgdHJ5aW5nIHRvIHByb3Blcmx5IGluY29ycG9yYXRlIEVBVCB0aHJvdWdoIGluY3JlbWVu dGFsIG1vZGlmaWNhdGlvbiB0byB0aGUgZHJhZnQgUkFUUyBXRyBjaGFydGVyIHRleHQgaXMgcHJv dmluZyBjaGFsbGVuZ2luZy4NCg0KVGhlIGJlbG93IHByb2JhYmx5IGRpdmVyZ2VzIHRvbyBmYXIg ZnJvbSB0aGUgY3VycmVudCB0ZXh0IGZvciBzb21lIHRhc3RlcywgYnV0IGl0IG1heSBhZGRyZXNz IHlvdXIgcG9pbnQgYW5kIHByb3ZpZGUgYSBiYXNpcyBmb3IgZGlzY3Vzc2lvbiAoYXQgdGhpcyBw b2ludCB0aGUgR2l0SHViIGRyYWZ0PGh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMvY2hhcnRl ci9ibG9iL1JDMi9pZXRmLXJhdHMtY2hhcnRlci5tZD4gc2VlbXMgYSBsb25nIHdheSBiZWhpbmQg dGhlIGxpc3QpLiBJdCBpcyBkZWxpYmVyYXRlbHkgc2lnbmlmaWNhbnRseSBzaG9ydGVyIHRoYW4g dGhlIGN1cnJlbnQgZHJhZnQgLSBJIGhhdmUgdHJpZWQgdG8gcmUtdXNlIGFzIG11Y2ggZXhpc3Rp bmcgdGV4dCBhcyBwb3NzaWJsZSwgYnV0IGl0IGlzIGhlYXZpbHkgcmUtb3JnYW5pc2VkIGFuZCBh YnJpZGdlZC4NCg0KSSBoYXZlIHRha2VuIG9uIGJvYXJkIHRoZSBjb21tZW50IGZyb20gQ2Fyc3Rl biB0aGF0IHBlcmhhcHMgYSBtaW5pbXVtIGxldmVsIG9mIHRlcm1pbm9sb2d5IGlzIGFjY2VwdGFi bGUgaW4gY2hhcnRlciB0ZXh0LCBidXQgZGVsaWJlcmF0ZWx5IHRyaWVkIHRvIGtlZXAgdGhlIGxh bmd1YWdlIHNpbXBsZSBhbmQgZmFpcmx5IGdlbmVyaWMgdG8gZW5hYmxlIHRoZSBwcm9wZXIgd29y ayBvZiB0ZXJtaW5vbG9neSBkZWZpbml0aW9uIHRvIHRha2UgcGxhY2UgaW4gdGhlIHJlcXVpcmVt ZW50cyBkb2N1bWVudCBhcyB5b3Ugc3VnZ2VzdC4NCg0KSW50cm9kdWN0aW9uDQotLS0tLS0tLS0t LS0NClJlbW90ZSBhdHRlc3RhdGlvbiBwcm9jZWR1cmVzIGNhbiBiZSBpbmNvcnBvcmF0ZWQgaW4g bmV0d29yayBwcm90b2NvbHMgdG8NCnByb3ZpZGUgdGhlIGJhc2lzIGZvciBlc3RhYmxpc2hpbmcg Y2xhaW1zIGFib3V0IGFuIGVudGl0eSBpbiBhIHRydXN0d29ydGh5DQptYW5uZXIuIFN1Y2ggY2xh aW1zIG1heSBpbmNsdWRlLCBidXQgYXJlIG5vdCBsaW1pdGVkIHRvLCBkZXZpY2UgaWRlbnRpdHks DQptYW51ZmFjdHVyaW5nIG9yaWdpbiwgc3lzdGVtIGludGVncml0eSwgY29uZmlndXJhdGlvbiwg b3BlcmF0aW9uYWwgc3RhdGUgYW5kDQptZWFzdXJlbWVudHMgb2Ygc3RlcHMgd2hpY2ggbGVkIHRv IHRoZSBvcGVyYXRpb25hbCBzdGF0ZS4gU3VjaCBwcm9jZWR1cmVzDQpleHBvc2UgZW50aXR5IGNo YXJhY3RlcmlzdGljcyBpbiB0aGUgZm9ybSBvZiBjbGFpbSBzZXRzIHdoaWNoIGFsbG93IHJlbW90 ZQ0KcGFydGllcyB0byBlc3RhYmxpc2ggdGhlIHRydXN0d29ydGhpbmVzcyBvZiBhIGRldmljZSwg cHJvdmlkZSBldmlkZW5jZSB0aGF0IGENCnBhcnRpY3VsYXIgc2V0IG9mIG9wZXJhdGlvbnMgYW5k IGZ1bmN0aW9ucyBhcmUgc3VwcG9ydGVkIGFuZC9vciB0aGF0IHRoZQ0KZW50aXR5IGlzIGFjdHVh bGx5IHdoYXQgaXQgY2xhaW1zIHRvIGJlLg0KSW4gdGhlIGFic2VuY2Ugb2Ygc3VjaCBwcm9jZWR1 cmVzLCB3aGlsZSBkb21haW4tc3BlY2lmaWMgYXR0ZXN0YXRpb24NCm1lY2hhbmlzbXMgc3VjaCBh cyBUQ0cgVFBNLCBGSURPIEFsbGlhbmNlIGF0dGVzdGF0aW9uIGFuZCBBbmRyb2lkIEtleXN0b3Jl DQphdHRlc3RhdGlvbiBleGlzdCwgdGhlcmUgaXMgbm8gY29tbW9uIHdheSBmb3IgYSByZW1vdGUg cGFydHkgdG8gdGVsbCBpZiBkYXRhDQpvcmlnaW5hdGVzIGZyb20gYSB0cnVzdHdvcnRoeSBkZXZp Y2UgKGUuZy4gYSBUcnVzdGVkIFN5c3RlbSBkZXNpZ25lZCB0bw0Kc3VwcG9ydCBhIHNwZWNpZmlj IHNldCBvZiBvcGVyYXRpb25zL2Z1bmN0aW9uYWxpdGllcykgb3Igbm90Lg0KVGhlIGZvbGxvd2lu ZyBtaW5pbWFsIHRlcm1pbm9sb2d5IGlzIGRlZmluZWQgZm9yIHRoZSBwdXJwb3NlcyBvZiBjbGFy aWZ5aW5nIHRoZQ0KV29ya2luZyBHcm91cCBjaGFydGVyIHRleHQ6DQotIGF0dGVzdGF0aW9uOiBh IHNldCBvZiBjbGFpbXMgd2hpY2ggY2FuIGJlIHZlcmlmaWVkIGFzIG9yaWdpbmF0aW5nIGluIGFu DQogICAgICAgICAgZW50aXR5Lg0KLSBjbGFpbTogIGFzIGRlZmluZWQgaW4gUkZDNzUxOS4NCi0g ZW50aXR5OiBhIGRldmljZSBvciBkZXZpY2Ugc3ViLW1vZHVsZSB0aGF0IGNhbiBnZW5lcmF0ZSBh IGNsYWltIG9yIHNldCBvZg0KICAgICAgICAgIGNsYWltcyB3aGljaCBjYW4gYmUgdmVyaWZpZWQg YnkgYSByZW1vdGUgcGFydHkuDQotIHJlbW90ZSBwYXJ0eTogYW4gYWN0b3IgcmVtb3RlIGZyb20g YW4gZW50aXR5IHRoYXQgd2lzaGVzIHRvIHZlcmlmeSB3aGV0aGVyDQogICAgICAgICAgYSBjbGFp bSBvciBzZXQgb2YgY2xhaW1zIG9yaWdpbmF0ZWQgaW4gYSBnaXZlbiBlbnRpdHkuDQpEZXNjcmlw dGlvbiBvZiB0aGUgV29ya2luZyBHcm91cA0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0NClRoZSBXb3JraW5nIEdyb3VwIHdpbGwgZGVmaW5lOg0KLSBTdGFuZGFyZGl6ZWQgYW5kIGlu dGVyb3BlcmFibGUgbWVjaGFuaXNtcyB0byBlc3RhYmxpc2ggYSBzdWZmaWNpZW50IGxldmVsDQog IG9mIGNvbmZpZGVuY2UgdGhhdCBkYXRhIG9yaWdpbmF0ZXMgZnJvbSBhIHRydXN0d29ydGh5IGVu dGl0eSBkZXNpZ25lZCB0bw0KICBzdXBwb3J0IGEgc3BlY2lmaWMgc2V0IG9mIG9wZXJhdGlvbnMv ZnVuY3Rpb25hbGl0aWVzLg0KLSBTdGFuZGFyZGl6ZWQgYW5kIGludGVyb3BlcmFibGUgbWVjaGFu aXNtcyBidWlsZGluZyBvbiAoMSkgdG8gYWxsb3cgcmVtb3RlDQogIHBhcnRpZXMgdG8ga25vdyB0 aGUgcHJvdmVuYW5jZSBhbmQgY2hhcmFjdGVyaXN0aWNzIG9mIGFuIGVudGl0eSB0aGF0IG1heSBi ZQ0KICByZXF1ZXN0aW5nIHNlcnZpY2VzLg0KVGhlIFdvcmtpbmcgR3JvdXAgd2lsbCBpZGVudGlm eSBzZWN1cml0eSBnb2FscyB3aGljaCBpdCBleHBlY3RzIGEgdHJ1c3R3b3J0aHkNCmV4ZWN1dGlv biBjb250ZXh0IHRvIGFkZHJlc3MsIHdoaWNoIHdpbGwgYXNzdW1lIHRoZSBwcmVzZW5jZSBvZiBS b290cyBvZg0KVHJ1c3QgKGFzIGRlZmluZWQgYnkgTklTVCBbU1A4MDAtMTY0XSkuIFRoZSBkZXRh aWxlZCBzcGVjaWZpY2F0aW9uIG9mIHN1Y2gNCmNvbnRleHRzIGlzIG91dCBvZiBzY29wZS4NClRo ZSBXb3JraW5nIEdyb3VwIHdpbGwgbWFpbnRhaW4gY2xvc2UgcmVsYXRpb25zaGlwcyB3aXRoIGJv ZGllcyB1bmRlcnRha2luZw0KY29tcGxlbWVudGFyeSB3b3JrIHN0cmVhbXMgaW4gdGhlIGFyZWEg b2YgcmVtb3RlIGF0dGVzdGF0aW9uIHN1Y2ggYXMNCkdsb2JhbFBsYXRmb3JtLCBUcnVzdGVkIENv bXB1dGluZyBHcm91cCBhbmQgRklETyBBbGxpYW5jZS4NClRoZSBXb3JraW5nIEdyb3VwIHdpbGwg Y29vcGVyYXRlIHdpdGggdGhlIFRFRVAgV29ya2luZyBHcm91cCwgd2hpY2ggbWF5DQpnZW5lcmF0 ZSByZXF1aXJlbWVudHMgZm9yIGNsYWltcyByZWxldmFudCB0byBURUUuDQoNCldvcmsgSXRlbXMN Ci0tLS0tLS0tLS0NClRoZSBXb3JraW5nIEdyb3VwIHdpbGwgZGV2ZWxvcCBzcGVjaWZpY2F0aW9u cyBzdXBwb3J0aW5nIHRoZSBjcmVhdGlvbiBvZg0KaW50ZXJvcGVyYWJsZSByZW1vdGUgYXR0ZXN0 YXRpb24gcHJvY2VkdXJlcyBmb3IgZW50aXRpZXMgd2hpY2ggaW5jb3Jwb3JhdGUNClJvb3RzIG9m IFRydXN0LiBUaGUgbWFpbiBkZWxpdmVyYWJsZXMgYXJlIGFzIGZvbGxvd3MuDQotIFByb2R1Y2Ug YSByZXF1aXJlbWVudHMgZG9jdW1lbnQgZXN0YWJsaXNoaW5nIGEgY29tbW9uIHZvY2FidWxhcnkg Zm9yIHJlbW90ZQ0KICBhdHRlc3RhdGlvbiwgaWRlbnRpZnlpbmcgbWVjaGFuaXNtcyB3aGljaCB3 aWxsIGJlIHN1cHBvcnRlZCBmb3IgZXN0YWJsaXNoaW5nDQogIHRydXN0IGJldHdlZW4gYW4gZW50 aXR5IGFuZCBhIHJlbW90ZSBwYXJ0eSwgYW5kIGVudW1lcmF0aW5nIHNhbXBsZSB1c2UtY2FzZXMN CiAgZm9yIHJlbW90ZSBhdHRlc3RhdGlvbi4NCi0gUHJvZHVjZSBzcGVjaWZpY2F0aW9uIHRleHQg ZGVmaW5pbmcgaW50ZXJvcGVyYWJsZSBjcm9zcy1wbGF0Zm9ybSBjbGFpbXMgd2hpY2gNCiAgcHJv dmlkZSBpbmZvcm1hdGlvbiBhYm91dCBhbiBlbnRpdHkgaW4gc3VwcG9ydCBvZiB0aGUgcmVxdWly ZWQgdXNlLWNhc2VzLCBhbmQNCiAgZXh0ZW5kaW5nIHRoZSBzZXQgb2YgY2xhaW1zIGRlZmluZWQg aW4gUkZDNzUxOSBhbmQgUkZDODM5Mi4gVGhlIHNwZWNpZmljYXRpb24NCiAgd2lsbCBkZXNjcmli ZSB0aGUgc3ludGF4IGZvciBlYWNoIGNsYWltIGluIGF0IGxlYXN0IHRoZSBmb2xsb3dpbmcgZm9y bWF0czoNCiAgICAtIENCT1IgW1JGQzcwNDldDQogICAgLSBKU09OIFtSRkM3MTU5XQ0KICAgIC0g WUFORyBbUkZDNjAyMF0NCi0gUHJvZHVjZSBzcGVjaWZpY2F0aW9uIHRleHQgZGVmaW5pbmcgcHJv Y2VkdXJlcyBhbmQgY29ycmVzcG9uZGluZyBhcmNoaXRlY3R1cmVzDQogIHN1cHBvcnRpbmcgdmVy aWZpY2F0aW9uIG9mIGNsYWltcyB3aXRoaW4gYW4gYXR0ZXN0YXRpb24gYmFzZWQgb24gbWVhc3Vy ZWQgZmlsZQ0KICBleGVjdXRpb24gcHJvY2VkdXJlcyBhbmQgc3VwcG9ydGluZzoNCiAgICAtIEV4 cGxpY2l0IGF0dGVzdGF0aW9uIHdoZXJlaW4gYSBzZXQgb2YgY2xhaW1zIGlzIHRyYW5zcG9ydGVk IGluIHRoZSBhdHRlc3RhdGlvbjsNCiAgICAtIEltcGxpY2l0IGF0dGVzdGF0aW9uIHdoZXJlaW4g YSBzZXQgb2YgY2xhaW1zIGlzIGltcGxpZWQgYnkgcG9zc2Vzc2lvbiBvZiBhIHNlY3JldC4NCi0g UHJvZHVjZSBzcGVjaWZpY2F0aW9uIHRleHQgZGVmaW5pbmcgcHJvY2VkdXJlcyBhbmQgY29ycmVz cG9uZGluZyBhcmNoaXRlY3R1cmVzDQogIHN1cHBvcnRpbmcgdmVyaWZpY2F0aW9uIG9mIGNsYWlt cyBlbmNhcHN1bGF0ZWQgaW46DQogICAgLSBDQk9SIFdlYiBUb2tlbiBzdHJ1Y3R1cmVzIFtSRkM4 MzkyXQ0KICAgIC0gSlNPTiBXZWIgVG9rZW4gc3RydWN0dXJlcyBbUkZDNzUxOV0NCi0gUGVyZm9y bSBwcml2YWN5IGFuYWx5c2lzIG9mIGJvdGggY2xhaW1zIGFuZCB0aGUgY3J5cHRvZ3JhcGhpYyBw cm9jZWR1cmVzIHVzZWQgdG8NCiAgZXN0YWJsaXNoIHRydXN0LiBUaGlzIGluZm9ybWF0aW9uIHdp bGwgYmUgaW5jbHVkZWQgYXMgYXBwcm9wcmlhdGUgaW4gdGhlDQogIGRlbGl2ZXJhYmxlIHNwZWNp ZmljYXRpb25zLCBhbmQgbWF5IGltcGx5IGV4dGVuc2lvbiBvZiBwcm9jZWR1cmVzIGRlZmluZWQg aW4NCiAgb3RoZXIgc3BlY2lmaWNhdGlvbnMgaW4gc3VwcG9ydCBvZiBwcml2YWN5IGdvYWxzLg0K DQpJdCBzZWVtcyB0byBtZSB0aGF0IHRoZXJlIGFyZSB0d28gd2F5cyB0byBwcm9kdWNlIHRoZSBt YWluIHNwZWNpZmljYXRpb24gZGVsaXZlcmFibGVzLiBJIGhhdmUgZGVsaWJlcmF0ZWx5IGxlZnQg dGhlIHRleHQgYWJvdmUgc2xpZ2h0bHkgdmFndWUgb24gdGhpcy4NCg0KICAqICAgQSBjbGFpbXMg c3BlY2lmaWNhdGlvbiBjb21tb24gdG8gUkFUUyBhbmQgRUFUIHdpdGggc2VwYXJhdGUgUkFUUyBh bmQgRUFUIHByb2NlZHVyZSBzcGVjaWZpY2F0aW9ucy4NCiAgKiAgIEEgY2xhaW1zIHNwZWNpZmlj YXRpb24gYWxzbyBpbmNvcnBvcmF0aW5nIEVBVCBwcm9jZWR1cmVzIGFuZCBhIHNlcGFyYXRlIFJB VFMgcHJvY2VkdXJlIHNwZWNpZmljYXRpb24uIFRoaXMgd291bGQgYmUgbXkgcHJlZmVycmVkIG9w dGlvbi4NCg0KICAgICAqICAgSSBiZWxpZXZlIHRoZXJlIGFyZSB2ZXJ5IGZldyBwcm9jZWR1cmVz IG5lZWRlZCBmb3IgRUFUIG90aGVyIHRoYW4gdGhlIHBvc3NpYmxlIG5lZWQgdG8gc3VwcG9ydCBh IG5vbmNlIHRvIGVuc3VyZSBmcmVzaG5lc3MNCg0KDQpKZXJlbXkNCg0KTm90aWNlIGhvdyBieSBh Ym91dCB0aGUgc2Vjb25kIHBhcmFncmFwaCAoNnRpc2NoIHRha2VzIGEgYml0IGxvbmdlciksIGVh Y2gNCmdldHMgaW50byB3aGF0IHRoZSBXRyB3aWxsIGRvPw0KDQotLQ0KTWljaGFlbCBSaWNoYXJk c29uIDxtY3IrSUVURkBzYW5kZWxtYW4uY2E8bWFpbHRvOm1jcitJRVRGQHNhbmRlbG1hbi5jYT4+ LCBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MNCi09IElQdjYgSW9UIGNvbnN1bHRpbmcgPS0NCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpFQVQgbWFpbGlu ZyBsaXN0DQpFQVRAaWV0Zi5vcmc8bWFpbHRvOkVBVEBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0DQoNCg== --_000_0771A50232EF46E995FB55BE0FF04634qtiqualcommcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCkhJIEVyaWMsPGJyIGNsYXNzPSIiPg0KPGRpdj48 YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xh c3M9IiI+T24gMjMgT2N0IDIwMTgsIGF0IDE5OjA0LCBFcmljIFZvaXQgKGV2b2l0KSAmbHQ7PGEg aHJlZj0ibWFpbHRvOmV2b2l0QGNpc2NvLmNvbSIgY2xhc3M9IiI+ZXZvaXRAY2lzY28uY29tPC9h PiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUi Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSIgc3R5bGU9InBhZ2U6 IFdvcmRTZWN0aW9uMTsgY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhl bHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFu dC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3Jt YWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTog bm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6 ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBj b2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPkhpIEplcmVteSw8bzpwIGNsYXNzPSIi PjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFw dDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIg Y2xhc3M9IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1p bHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFu IHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPlRoYW5rcyBmb3IgdGFraW5nIGEg Y3V0IGF0IHRoaXMgY2hhcnRlciBzaW1wbGlmaWNhdGlvbi4mbmJzcDsgVGhlcmUgYXJlIGEgZmV3 IGFyZWFzIGNvdmVyZWQgd2l0aGluIHRoZTxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJodHRwczovL2dpdGh1Yi5jb20vaWV0Zi1yYXRzL2No YXJ0ZXIvYmxvYi9SQzIvaWV0Zi1yYXRzLWNoYXJ0ZXIubWQiIHN0eWxlPSJjb2xvcjogcHVycGxl OyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPkdpdEh1Yg0KIEdvYWxzPC9h PndoaWNoIEkgY2Fu4oCZdCBlYXNpbHkgbWFwIHRvIHlvdXIgdGV4dCBiZWxvdy4mbmJzcDsgQ291 bGQgeW91IHRhbGsgYWJvdXQgaG93IHRoZXNlIGVsZW1lbnRzIGFyZSBjb3ZlcmVkIChvciBub3Qp PyZuYnNwOyZuYnNwOyBGb3IgY29udGV4dCwgSSBhbSB3b3JraW5nIGZyb20gdGhlIHBlcnNwZWN0 aXZlIG9mPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxh IGhyZWY9Imh0dHBzOi8vd3d3LmNpc2NvLmNvbS9jL2RhbS9lbi91cy90ZC9kb2NzL2Nsb3VkLXN5 c3RlbXMtbWFuYWdlbWVudC9hcHBsaWNhdGlvbi1wb2xpY3ktaW5mcmFzdHJ1Y3R1cmUtY29udHJv bGxlci1lbnRlcnByaXNlLW1vZHVsZS8xLTUteC9pbnRlZ3JpdHlfdmVyaWZpY2F0aW9uL3VzZXIt Z3VpZGUvQ2lzY29fSW50ZWdyaXR5X1ZlcmlmaWNhdGlvbl9BcHBsaWNhdGlvbl9BUElDLUVNX1Vz ZXJfR3VpZGVfMV81XzBfeC5wZGYiIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRp b246IHVuZGVybGluZTsiIGNsYXNzPSIiPnJlbW90ZQ0KIGF0dGVzdGF0aW9uIGFwcGxpY2F0aW9u PC9hPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5kZXZl bG9wZXIgdHJ5aW5nIHRvIHN0YW5kYXJkaXplIHRoZSBpbnRlcmZhY2VzIGJldHdlZW4gYSBjb250 cm9sbGVyICh3aGljaCBpcyBhY3RpbmcgYXMgYSBjbGFpbSB2ZXJpZmllcikgYW5kIGEgbmV0d29y ayBlbGVtZW50ICh3aGljaCBpbmNsdWRlcyBUQ0cgYmFzZWQgc3Vic3lzdGVtcy4pJm5ic3A7PG86 cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAw aW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5l dyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6 IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3 MywgMTI1KTsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2 Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7 IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9 IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwg c2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj5Gb3IgbXkgYXBw bGljYXRpb24gdG8gd29yayBwcm9wZXJseSwgdGhlcmUgYXJlIHNldmVyYWwgdGhpbmdzIG5lZWRl ZCB3aXRoaW4gYSBuZXR3b3JrIGNvbnRyb2xsZXIgdG8gdmFsaWRhdGUgdGhlIGFzc2VydGVkIGNs YWltcyBjb21pbmcgb3V0IG9mIGEgcm91dGVyLiZuYnNwOyBUaGVzZQ0KIGluY2x1ZGU6PG86cCBj bGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEx cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3Mywg MTI1KTsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0IDAuNWluOyBmb250LXNpemU6IDEy cHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyB0ZXh0 LWluZGVudDogLTAuMjVpbjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFw dDsgZm9udC1mYW1pbHk6IFN5bWJvbDsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0i Ij48c3BhbiBjbGFzcz0iIj7CtzxzcGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc3RyZXRjaDog bm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9udC1mYW1pbHk6 ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OzsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAx MXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMs IDEyNSk7IiBjbGFzcz0iIj5Ib3cNCiBkbyB3ZSBleHBvc2UgdGhlIGF0dGVzdGF0aW9uIGV2aWRl bmNlIHdoaWNoIGNhbiBiZSB1c2VkIHRvIHZhbGlkYXRlIGFzc2VydGVkIGNsYWltcz88L3NwYW4+ PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjxkaXY+SSB0aGluayB0aGF0IHRoZSBuZWVkIHRvIGFkZHJlc3MgdGhpcyBpcyBj b3ZlcmVkIHN1ZmZpY2llbnRseSBmb3IgYSBXRyBDaGFydGVyIGJ5IHRoZSBzdGF0ZW1lbnQgJnF1 b3Q7UHJvZHVjZSBhIHNwZWNpZmljYXRpb24gZGVmaW5pbmcgcHJvY2VkdXJlcyBhbmQgY29ycmVz cG9uZGluZyBhcmNoaXRlY3R1cmVz4oCoIHN1cHBvcnRpbmcgdmVyaWZpY2F0aW9uIG9mIENsYWlt cyZxdW90Oy48L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2PklmIHZlcmlm aWNhdGlvbiBvZiBDbGFpbXMgcmVxdWlyZXMgc3BlY2lmaWMgZm9ybXMgb2YgYXR0ZXN0YXRpb24g ZXZpZGVuY2UgKGUuZy4gYSBzZXQgb2YgbWVhc3VyZW1lbnRzIGdlbmVyYXRlZCBieSBhIFRQTSks IHRoZW4gaXQgaXMgcHJvcGVybHkgYSBtYXR0ZXIgZm9yIGFuIFJGQyB0byBzcGVjaWZ5IHRoaXMs IGFzIE1pY2hhZWwgc3VnZ2VzdHMuPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90ZSB0 eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2Vj dGlvbjEiIHN0eWxlPSJwYWdlOiBXb3JkU2VjdGlvbjE7IGNhcmV0LWNvbG9yOiByZ2IoMCwgMCwg MCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBw eDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjog bm9uZTsiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0IDAuNWluOyBmb250 LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNl cmlmOyB0ZXh0LWluZGVudDogLTAuMjVpbjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2Io MzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+ DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQgMC41aW47IGZvbnQtc2l6ZTog MTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IHRl eHQtaW5kZW50OiAtMC4yNWluOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAx MXB0OyBmb250LWZhbWlseTogU3ltYm9sOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNz PSIiPjxzcGFuIGNsYXNzPSIiPsK3PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgZm9udC1zdHJldGNo OiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFsOyBmb250LWZhbWls eTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3 MywgMTI1KTsiIGNsYXNzPSIiPkhvdw0KIGRvIHdlIGtub3cgd2hpY2ggcm9vdCBvZiB0cnVzdCB3 aGljaCB3YXMgdXNlZCB0byBnZW5lcmF0ZSB0aGUgYXR0ZXN0YXRpb24gZXZpZGVuY2UgKGUuZy4s IGFwcGxpY2F0aW9uIGV2ZW50IGxvZ3MpLCBhbmQgaG93IGRvZXMgYSB2ZXJpZmllciBkaWZmZXJl bnRpYXRlIHRoaXMgZnJvbSB0aGUgcm9vdC1vZi10cnVzdCB3aGljaCBhc3NlcnRzIGNsYWltcyBt YWRlIHVwb24gdGhpcyBldmlkZW5jZT88L3NwYW4+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i bG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+QWdhaW4sIEkgdGhp bmsgdGhpcyBpcyBhIG1hdHRlciBmb3Igc3BlY2lmaWNhdGlvbiByYXRoZXIgdGhhbiBjaGFydGVy LiBUaGVyZSBhcmUgYSBudW1iZXIgb2YgZGlmZmVyZW50IHdheXMgaW4gd2hpY2ggUm9vdHMgb2Yg VHJ1c3QgY2FuIGJlIHJlYWxpc2VkIGFuZCBtYW55IHBvc3NpYmxlIGRldmljZSBhcmNoaXRlY3R1 cmVzLiBUaGUgRUFUIGRyYWZ0IGFsbG93cyBvbmUgUm9UIHRvIGluY2x1ZGUgYW4gYXR0ZXN0YXRp b24gZ2VuZXJhdGVkDQogYnkgYSBkaWZmZXJlbnQgUm9ULCBmb3IgZXhhbXBsZS4gSSBiZWxpZXZl IHRoZSBSQVRTIGRyYWZ0IGFsc28gcHJvdmlkZXMgdGVjaG5pY2FsIG1lY2hhbmlzbXMgYnkgd2hp Y2ggdGhpcyBjYW4gYmUgYWNoaWV2ZWQuPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8YmxvY2txdW90 ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSIgc3R5bGU9 InBhZ2U6IFdvcmRTZWN0aW9uMTsgY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1p bHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQt dmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5n OiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8ZGl2 IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQgMC41aW47IGZvbnQtc2l6ZTogMTJwdDsg Zm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IHRleHQtaW5k ZW50OiAtMC4yNWluOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBm b250LWZhbWlseTogU3ltYm9sOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPjxz cGFuIGNsYXNzPSIiPsK3PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgZm9udC1zdHJldGNoOiBub3Jt YWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFsOyBmb250LWZhbWlseTogJnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7 IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1 KTsiIGNsYXNzPSIiPldoYXQNCiBlbnRpdGllcyBhcmUgYWxsb3dlZCB0byByZWFkIHRoZSBpbmZv IGFzc2VydGVkIGNsYWltcz8mbmJzcDsgV2hhdCBzdWJzZXQgb2YgdGhlc2UgY2FuIHNlZSB0aGUg cmF3IGF0dGVzdGF0aW9uIGV2aWRlbmNlPzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2 Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0IDAuNWluOyBmb250LXNpemU6 IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIg Y2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2Fs aWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj48bzpw IGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2Io MzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+VGhlc2UgcXVlc3Rpb25zIGFyZSBzaWduaWZpY2FudCBi ZWNhdXNlIHJvdXRlcnMvc3dpdGNoZXMgYXJlIG5vdCBtb25vbGl0aGljIGRldmljZXMuJm5ic3A7 IEluIGZhY3QsIHRoZXkgYXJlIGNvbXBvc2VkIG9mIHN1YnN5c3RlbXMgd2l0aCBkaWZmZXJlbnQg bGV2ZWxzIG9mIHRydXN0d29ydGhpbmVzcy4mbmJzcDsNCiBBcyB0aGUgSUVURiBvZnRlbiBhaW1z IGF0IHByb3RvY29sIHNwZWNpZmljYXRpb25zIGF0IHRoZSBpbnRlci1kZXZpY2UgbGV2ZWwsIEkg YW0gbG9va2luZyBmb3IgY292ZXJhZ2Ugb2Ygc3VjaCBxdWVzdGlvbnMgaW4gdGhlIGNoYXJ0ZXIu PC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2PjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdj5JIGFncmVlIHdpdGggeW91IGhlcmUgYXMgdGhlIHNhbWUgaXNzdWUgYXBw bGllcyB0byBjbGFpbXMgd2l0aCBwcml2YWN5IGltcGxpY2F0aW9ucy4gQXMgYW4gZXhhbXBsZSwg SSBtYXkgd2lzaCB0byBwcmVzZW50IGEgdW5pcXVlIGRldmljZSBJRCB0byBhIHNvY2lhbCBtZWRp YSB3ZWJzaXRlIGJ1dCBub3QgbXkgbG9jYXRpb24uPC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdj5JIGhhdmUgYWRkZWQgYnVsbGV0IHBvaW50IDMgdG8gdGhlIGRyYWZ0IC0g d2hpY2ggSSB3aWxsIHBvc3Qgc2VwYXJhdGVseS4gTGV0IG1lIGtub3cgaWYgeW91IHRoaW5rIHRo aXMgYWRkcmVzc2VzIHlvdXIgY29uY2VybnMgc3VmZmljaWVudGx5LjwvZGl2Pg0KPGRpdj48YnIg Y2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+QmVzdCByZWdhcmRzPC9kaXY+DQo8ZGl2PkplcmVteTwv ZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUi IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIiBzdHlsZT0icGFnZTogV29yZFNl Y3Rpb24xOyBjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3 aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiBy Z2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9k aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJw dDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFz cz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPjxvOnAgY2xh c3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwg NzMsIDEyNSk7IiBjbGFzcz0iIj5UaGFua3MsPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9k aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJw dDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFz cz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPkVyaWM8bzpw IGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBp biAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTog MTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDcz LCAxMjUpOyIgY2xhc3M9IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9kaXY+ DQo8ZGl2IHN0eWxlPSJib3JkZXItc3R5bGU6IG5vbmUgbm9uZSBub25lIHNvbGlkOyBib3JkZXIt bGVmdC13aWR0aDogMS41cHQ7IGJvcmRlci1sZWZ0LWNvbG9yOiBibHVlOyBwYWRkaW5nOiAwaW4g MGluIDBpbiA0cHQ7IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAw MDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFu JnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPGIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj5G cm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+SmVyZW15IE8nRG9ub2dodWUsIE9jdG9iZXIgMjMsIDIw MTggMTA6NDANCiBBTTxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvc3Bhbj48L2Rpdj4N CjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBm b250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIi Pg0KT24gMjIgT2N0IDIwMTgsIGF0IDIyOjAxLCBNaWNoYWVsIFJpY2hhcmRzb24gJmx0OzxhIGhy ZWY9Im1haWx0bzptY3ImIzQzO2lldGZAc2FuZGVsbWFuLmNhIiBzdHlsZT0iY29sb3I6IHB1cnBs ZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5tY3ImIzQzO2lldGZAc2Fu ZGVsbWFuLmNhPC9hPiZndDsgd3JvdGU6PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDogNXB0OyBtYXJnaW4tYm90 dG9tOiA1cHQ7IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFw dDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1 b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpKZXJlbXkg TydEb25vZ2h1ZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmpvZG9ub2doQHF0aS5xdWFsY29tbS5jb20i IHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNz PSIiPmpvZG9ub2doQHF0aS5xdWFsY29tbS5jb208L2E+Jmd0OyB3cm90ZTo8YnIgY2xhc3M9IiI+ DQo8YnIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPGJsb2NrcXVvdGUg c3R5bGU9Im1hcmdpbi10b3A6IDVwdDsgbWFyZ2luLWJvdHRvbTogNXB0OyIgY2xhc3M9IiI+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9u dC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4N ClRoaXMgaXMgYSB2ZXJ5IHVzZWZ1bCBjb250cmlidXRpb24sIExhdXJlbmNlLjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAw aW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5l dyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFz cz0iIj4NCjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFy Z2luLXRvcDogNXB0OyBtYXJnaW4tYm90dG9tOiA1cHQ7IiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTog JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KVGhlIGN1cnJl bnQgZHJhZnQgdGV4dCBpcyB0b28gc3Ryb25nbHkgYmlhc2VkIHRvd2FyZHMgYXR0ZXN0YXRpb24g YmFzZWQ8YnIgY2xhc3M9IiI+DQpvbiBtZWFzdXJlbWVudCwgYW5kIGRvZXMgbm90IGFkZXF1YXRl bHkgY292ZXIgb3RoZXIgbWVjaGFuaXNtcyB3aGljaDxiciBjbGFzcz0iIj4NCmFyZSBhbHJlYWR5 PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIi Pg0KQnV0LCBpdCdzIGZvciB0aGUgY2hhcnRlciwgZm9yIHRoZSBXRywgaXQncyBub3QgYSB0cmVh dGlzZSBvbiBhdHRlc3RhdGlvbjxiciBjbGFzcz0iIj4NCml0c2VsZi48YnIgY2xhc3M9IiI+DQo8 YnIgY2xhc3M9IiI+DQpUaGlzIGlzIGFsbCBzdXBwb3NlZCB0byBiZSAqbWV0YSogdGV4dCBhYm91 dCBhdHRlc3RhdGlvbiwgYWJvdXQgd2hhdCB3ZSB3YW50PGJyIGNsYXNzPSIiPg0KdG8gc2F5IGFi b3V0IGF0dGVzdGF0aW9uIGluIHRoZSBkb2N1bWVudHMsIG5vdCBhYm91dCB3aGF0IGF0dGVzdGF0 aW9uIGlzLjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClBsZWFzZSBnbyByZWFkIHNvbWUg b3RoZXIgSUVURiBjaGFydGVyczo8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8YSBocmVm PSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL3dnLzZsby9hYm91dC8iIHN0eWxlPSJjb2xv cjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPmh0dHBzOi8v ZGF0YXRyYWNrZXIuaWV0Zi5vcmcvd2cvNmxvL2Fib3V0LzwvYT48YnIgY2xhc3M9IiI+DQo8YSBo cmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL3dnLzZ0aXNjaC9hYm91dC8iIHN0eWxl PSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPmh0 dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvd2cvNnRpc2NoL2Fib3V0LzwvYT48YnIgY2xhc3M9 IiI+DQo8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL3dnL3N1aXQvYWJvdXQv IiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFz cz0iIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL3dnL3N1aXQvYWJvdXQvPC9hPjxvOnAg Y2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1z aXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJp ZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBz ZXJpZjsiIGNsYXNzPSIiPg0KRmFpciBjb21tZW50LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+ DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4w MDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9k aXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NCldlIGhhdmUgdHdvIGV4aXN0aW5nIHByb3Bv c2FscyAtIEVBVCBhbmQgUkFUUyAtIHdoaWNoIGFkZHJlc3MgYSBzaW1pbGFyIHByb2JsZW0gc3Bh Y2UgYnV0IHVzaW5nIGRpZmZlcmVudCBtZWNoYW5pc21zLiBXaGlsZSBJIGJlbGlldmUgdGhlIFJB VFMgYW5kIEVBVCBjb250cmlidXRvcnMgYXJlIGluIGJyb2FkIGFncmVlbWVudCB0aGF0IHRoZXJl IGlzIHNpZ25pZmljYW50IGJlbmVmaXQgaW4gYnJpbmdpbmcgYm90aCB3b3JrIHN0cmVhbXMgdW5k ZXINCiBhIHNpbmdsZSB1bWJyZWxsYSwgdHJ5aW5nIHRvIHByb3Blcmx5IGluY29ycG9yYXRlIEVB VCB0aHJvdWdoIGluY3JlbWVudGFsIG1vZGlmaWNhdGlvbiB0byB0aGUgZHJhZnQgUkFUUyBXRyBj aGFydGVyIHRleHQgaXMgcHJvdmluZyBjaGFsbGVuZ2luZy48bzpwIGNsYXNzPSIiPjwvbzpwPjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGlu IDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcg Um9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpw PjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQpUaGUgYmVsb3cgcHJvYmFibHkgZGl2 ZXJnZXMgdG9vIGZhciBmcm9tIHRoZSBjdXJyZW50IHRleHQgZm9yIHNvbWUgdGFzdGVzLCBidXQg aXQgbWF5IGFkZHJlc3MgeW91ciBwb2ludCBhbmQgcHJvdmlkZSBhIGJhc2lzIGZvciBkaXNjdXNz aW9uIChhdCB0aGlzIHBvaW50IHRoZSZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9p ZXRmLXJhdHMvY2hhcnRlci9ibG9iL1JDMi9pZXRmLXJhdHMtY2hhcnRlci5tZCIgc3R5bGU9ImNv bG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+R2l0SHVi DQogZHJhZnQ8L2E+Jm5ic3A7c2VlbXMgYSBsb25nIHdheSBiZWhpbmQgdGhlIGxpc3QpLiBJdCBp cyBkZWxpYmVyYXRlbHkgc2lnbmlmaWNhbnRseSBzaG9ydGVyIHRoYW4gdGhlIGN1cnJlbnQgZHJh ZnQgLSBJIGhhdmUgdHJpZWQgdG8gcmUtdXNlIGFzIG11Y2ggZXhpc3RpbmcgdGV4dCBhcyBwb3Nz aWJsZSwgYnV0IGl0IGlzIGhlYXZpbHkgcmUtb3JnYW5pc2VkIGFuZCBhYnJpZGdlZC48bzpwIGNs YXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0i bWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAm cXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNz PSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHls ZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5 OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQpJIGhhdmUg dGFrZW4gb24gYm9hcmQgdGhlIGNvbW1lbnQgZnJvbSBDYXJzdGVuIHRoYXQgcGVyaGFwcyBhIG1p bmltdW0gbGV2ZWwgb2YgdGVybWlub2xvZ3kgaXMgYWNjZXB0YWJsZSBpbiBjaGFydGVyIHRleHQs IGJ1dCBkZWxpYmVyYXRlbHkgdHJpZWQgdG8ga2VlcCB0aGUgbGFuZ3VhZ2Ugc2ltcGxlIGFuZCBm YWlybHkgZ2VuZXJpYyB0byBlbmFibGUgdGhlIHByb3BlciB3b3JrIG9mIHRlcm1pbm9sb2d5IGRl ZmluaXRpb24gdG8gdGFrZSBwbGFjZQ0KIGluIHRoZSByZXF1aXJlbWVudHMgZG9jdW1lbnQgYXMg eW91IHN1Z2dlc3QuPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAx MnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNs YXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41 cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90Oywgc2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1z aXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj5JbnRyb2R1Y3Rpb248 bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luOiAwaW4gMGluIDEuNXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAm cXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsi Pg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOC41cHQ7IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIg Y2xhc3M9IiI+LS0tLS0tLS0tLS0tPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAxLjVwdDsgZm9udC1zaXpl OiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsg Zm9udC1zdHJldGNoOiBub3JtYWw7Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBm b250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPlJlbW90ZSBhdHRlc3RhdGlvbiBwcm9jZWR1 cmVzIGNhbiBiZSBpbmNvcnBvcmF0ZWQgaW4gbmV0d29yayBwcm90b2NvbHMgdG88YnIgY2xhc3M9 IiI+DQpwcm92aWRlIHRoZSBiYXNpcyBmb3IgZXN0YWJsaXNoaW5nIGNsYWltcyBhYm91dCBhbiBl bnRpdHkgaW4gYSB0cnVzdHdvcnRoeTxiciBjbGFzcz0iIj4NCm1hbm5lci4gU3VjaCBjbGFpbXMg bWF5IGluY2x1ZGUsIGJ1dCBhcmUgbm90IGxpbWl0ZWQgdG8sIGRldmljZSBpZGVudGl0eSw8YnIg Y2xhc3M9IiI+DQptYW51ZmFjdHVyaW5nIG9yaWdpbiwgc3lzdGVtIGludGVncml0eSwgY29uZmln dXJhdGlvbiwgb3BlcmF0aW9uYWwgc3RhdGUgYW5kPGJyIGNsYXNzPSIiPg0KbWVhc3VyZW1lbnRz IG9mIHN0ZXBzIHdoaWNoIGxlZCB0byB0aGUgb3BlcmF0aW9uYWwgc3RhdGUuIFN1Y2ggcHJvY2Vk dXJlczxiciBjbGFzcz0iIj4NCmV4cG9zZSBlbnRpdHkgY2hhcmFjdGVyaXN0aWNzIGluIHRoZSBm b3JtIG9mIGNsYWltIHNldHMgd2hpY2ggYWxsb3cgcmVtb3RlPGJyIGNsYXNzPSIiPg0KcGFydGll cyB0byBlc3RhYmxpc2ggdGhlIHRydXN0d29ydGhpbmVzcyBvZiBhIGRldmljZSwgcHJvdmlkZSBl dmlkZW5jZSB0aGF0IGE8YnIgY2xhc3M9IiI+DQpwYXJ0aWN1bGFyIHNldCBvZiBvcGVyYXRpb25z IGFuZCBmdW5jdGlvbnMgYXJlIHN1cHBvcnRlZCBhbmQvb3IgdGhhdCB0aGU8YnIgY2xhc3M9IiI+ DQplbnRpdHkgaXMgYWN0dWFsbHkgd2hhdCBpdCBjbGFpbXMgdG8gYmUuJm5ic3A7PG86cCBjbGFz cz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNoOiBub3JtYWw7Ij4NCjxzcGFu IHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIi PkluIHRoZSBhYnNlbmNlIG9mIHN1Y2ggcHJvY2VkdXJlcywgd2hpbGUgZG9tYWluLXNwZWNpZmlj IGF0dGVzdGF0aW9uPGJyIGNsYXNzPSIiPg0KbWVjaGFuaXNtcyBzdWNoIGFzIFRDRyBUUE0sIEZJ RE8gQWxsaWFuY2UgYXR0ZXN0YXRpb24gYW5kIEFuZHJvaWQgS2V5c3RvcmU8YnIgY2xhc3M9IiI+ DQphdHRlc3RhdGlvbiBleGlzdCwgdGhlcmUgaXMgbm8gY29tbW9uIHdheSBmb3IgYSByZW1vdGUg cGFydHkgdG8gdGVsbCBpZiBkYXRhPGJyIGNsYXNzPSIiPg0Kb3JpZ2luYXRlcyBmcm9tIGEgdHJ1 c3R3b3J0aHkgZGV2aWNlIChlLmcuIGEgVHJ1c3RlZCBTeXN0ZW0gZGVzaWduZWQgdG88YnIgY2xh c3M9IiI+DQpzdXBwb3J0IGEgc3BlY2lmaWMgc2V0IG9mIG9wZXJhdGlvbnMvZnVuY3Rpb25hbGl0 aWVzKSBvciBub3QuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBm b250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJl dGNoOiBub3JtYWw7Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWls eTogQ291cmllcjsiIGNsYXNzPSIiPlRoZSBmb2xsb3dpbmcgbWluaW1hbCB0ZXJtaW5vbG9neSBp cyBkZWZpbmVkIGZvciB0aGUgcHVycG9zZXMgb2YgY2xhcmlmeWluZyB0aGU8YnIgY2xhc3M9IiI+ DQpXb3JraW5nIEdyb3VwIGNoYXJ0ZXIgdGV4dDo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDEuNXB0OyBm b250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDss IHNlcmlmOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTog OC41cHQ7IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIgY2xhc3M9IiI+LSBhdHRlc3RhdGlvbjogYSBz ZXQgb2YgY2xhaW1zIHdoaWNoIGNhbiBiZSB2ZXJpZmllZCBhcyBvcmlnaW5hdGluZyBpbiBhbjxi ciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgZW50aXR5Ljxv OnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW46IDBpbiAwaW4gMS41cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyI+ DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBj bGFzcz0iIj4tIGNsYWltOiZuYnNwOyBhcyBkZWZpbmVkIGluIFJGQzc1MTkuPG86cCBjbGFzcz0i Ij48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNoOiBub3JtYWw7Ij4NCjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPi0g ZW50aXR5OiBhIGRldmljZSBvciBkZXZpY2Ugc3ViLW1vZHVsZSB0aGF0IGNhbiBnZW5lcmF0ZSBh IGNsYWltIG9yIHNldCBvZjxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyAmbmJzcDsgY2xhaW1zIHdoaWNoIGNhbiBiZSB2ZXJpZmllZCBieSBhIHJlbW90ZSBwYXJ0eS48 bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luOiAwaW4gMGluIDlwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNoOiBub3JtYWw7Ij4N CjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNs YXNzPSIiPi0gcmVtb3RlIHBhcnR5OiBhbiBhY3RvciByZW1vdGUgZnJvbSBhbiBlbnRpdHkgdGhh dCB3aXNoZXMgdG8gdmVyaWZ5IHdoZXRoZXI8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7ICZu YnNwOyAmbmJzcDsgJm5ic3A7IGEgY2xhaW0gb3Igc2V0IG9mIGNsYWltcyBvcmlnaW5hdGVkIGlu IGEgZ2l2ZW4gZW50aXR5LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41cHQ7IGZvbnQtc2l6ZTogMTJw dDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IGZvbnQt c3RyZXRjaDogbm9ybWFsOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiA4LjVwdDsgZm9udC1m YW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj5EZXNjcmlwdGlvbiBvZiB0aGUgV29ya2luZyBHcm91 cDxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6 ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFs OyI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7 IiBjbGFzcz0iIj4tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxvOnAgY2xhc3M9IiI+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBp biAwaW4gMS41cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5l dyBSb21hbiZxdW90Oywgc2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyI+DQo8c3BhbiBzdHls ZT0iZm9udC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj5UaGUg V29ya2luZyBHcm91cCB3aWxsIGRlZmluZTo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDlwdDsgZm9udC1z aXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJp ZjsgZm9udC1zdHJldGNoOiBub3JtYWw7Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0 OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPi0gU3RhbmRhcmRpemVkIGFuZCBpbnRl cm9wZXJhYmxlIG1lY2hhbmlzbXMgdG8gZXN0YWJsaXNoIGEgc3VmZmljaWVudCBsZXZlbDxiciBj bGFzcz0iIj4NCiZuYnNwOyBvZiBjb25maWRlbmNlIHRoYXQgZGF0YSBvcmlnaW5hdGVzIGZyb20g YSB0cnVzdHdvcnRoeSBlbnRpdHkgZGVzaWduZWQgdG88YnIgY2xhc3M9IiI+DQombmJzcDsgc3Vw cG9ydCBhIHNwZWNpZmljIHNldCBvZiBvcGVyYXRpb25zL2Z1bmN0aW9uYWxpdGllcy48YnIgY2xh c3M9IiI+DQotIFN0YW5kYXJkaXplZCBhbmQgaW50ZXJvcGVyYWJsZSBtZWNoYW5pc21zIGJ1aWxk aW5nIG9uICgxKSB0byBhbGxvdyByZW1vdGU8YnIgY2xhc3M9IiI+DQombmJzcDsgcGFydGllcyB0 byBrbm93IHRoZSBwcm92ZW5hbmNlIGFuZCBjaGFyYWN0ZXJpc3RpY3Mgb2YgYW4gZW50aXR5IHRo YXQgbWF5IGJlPGJyIGNsYXNzPSIiPg0KJm5ic3A7IHJlcXVlc3Rpbmcgc2VydmljZXMuPG86cCBj bGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbjogMGluIDBpbiA5cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyI+DQo8c3Bh biBzdHlsZT0iZm9udC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0i Ij5UaGUgV29ya2luZyBHcm91cCB3aWxsIGlkZW50aWZ5IHNlY3VyaXR5IGdvYWxzIHdoaWNoIGl0 IGV4cGVjdHMgYSB0cnVzdHdvcnRoeTxiciBjbGFzcz0iIj4NCmV4ZWN1dGlvbiBjb250ZXh0IHRv IGFkZHJlc3MsIHdoaWNoIHdpbGwgYXNzdW1lIHRoZSBwcmVzZW5jZSBvZiBSb290cyBvZjxiciBj bGFzcz0iIj4NClRydXN0IChhcyBkZWZpbmVkIGJ5IE5JU1QgW1NQODAwLTE2NF0pLiBUaGUgZGV0 YWlsZWQgc3BlY2lmaWNhdGlvbiBvZiBzdWNoPGJyIGNsYXNzPSIiPg0KY29udGV4dHMgaXMgb3V0 IG9mIHNjb3BlLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9u dC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IGZvbnQtc3RyZXRj aDogbm9ybWFsOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6 IENvdXJpZXI7IiBjbGFzcz0iIj5UaGUgV29ya2luZyBHcm91cCB3aWxsIG1haW50YWluIGNsb3Nl IHJlbGF0aW9uc2hpcHMgd2l0aCBib2RpZXMgdW5kZXJ0YWtpbmc8YnIgY2xhc3M9IiI+DQpjb21w bGVtZW50YXJ5IHdvcmsgc3RyZWFtcyBpbiB0aGUgYXJlYSBvZiByZW1vdGUgYXR0ZXN0YXRpb24g c3VjaCBhczxiciBjbGFzcz0iIj4NCkdsb2JhbFBsYXRmb3JtLCBUcnVzdGVkIENvbXB1dGluZyBH cm91cCBhbmQgRklETyBBbGxpYW5jZS48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDEuNXB0OyBmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlm OyBmb250LXN0cmV0Y2g6IG5vcm1hbDsiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOC41cHQ7 IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIgY2xhc3M9IiI+VGhlIFdvcmtpbmcgR3JvdXAgd2lsbCBj b29wZXJhdGUgd2l0aCB0aGUgVEVFUCBXb3JraW5nIEdyb3VwLCB3aGljaCBtYXk8YnIgY2xhc3M9 IiI+DQpnZW5lcmF0ZSByZXF1aXJlbWVudHMgZm9yIGNsYWltcyByZWxldmFudCB0byBURUUuPG86 cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNoOiBub3JtYWw7IG1p bi1oZWlnaHQ6IDEzcHg7Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZh bWlseTogQ291cmllcjsiIGNsYXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41cHQ7 IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 Oywgc2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXpl OiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj5Xb3JrIEl0ZW1zPG86cCBj bGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNoOiBub3JtYWw7Ij4NCjxz cGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNz PSIiPi0tLS0tLS0tLS08bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDEuNXB0OyBmb250LXNpemU6IDEycHQ7 IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyBmb250LXN0 cmV0Y2g6IG5vcm1hbDsiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOC41cHQ7IGZvbnQtZmFt aWx5OiBDb3VyaWVyOyIgY2xhc3M9IiI+VGhlIFdvcmtpbmcgR3JvdXAgd2lsbCBkZXZlbG9wIHNw ZWNpZmljYXRpb25zIHN1cHBvcnRpbmcgdGhlIGNyZWF0aW9uIG9mPGJyIGNsYXNzPSIiPg0KaW50 ZXJvcGVyYWJsZSByZW1vdGUgYXR0ZXN0YXRpb24gcHJvY2VkdXJlcyBmb3IgZW50aXRpZXMgd2hp Y2ggaW5jb3Jwb3JhdGUmbmJzcDs8YnIgY2xhc3M9IiI+DQpSb290cyBvZiBUcnVzdC4gVGhlIG1h aW4gZGVsaXZlcmFibGVzIGFyZSBhcyBmb2xsb3dzLiZuYnNwOzxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g MS41cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21h biZxdW90Oywgc2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyI+DQo8c3BhbiBzdHlsZT0iZm9u dC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj4tIFByb2R1Y2Ug YSByZXF1aXJlbWVudHMgZG9jdW1lbnQgZXN0YWJsaXNoaW5nIGEgY29tbW9uIHZvY2FidWxhcnkg Zm9yIHJlbW90ZTxiciBjbGFzcz0iIj4NCiZuYnNwOyBhdHRlc3RhdGlvbiwgaWRlbnRpZnlpbmcg bWVjaGFuaXNtcyB3aGljaCB3aWxsIGJlIHN1cHBvcnRlZCBmb3IgZXN0YWJsaXNoaW5nPGJyIGNs YXNzPSIiPg0KJm5ic3A7IHRydXN0IGJldHdlZW4gYW4gZW50aXR5IGFuZCBhIHJlbW90ZSBwYXJ0 eSwgYW5kIGVudW1lcmF0aW5nIHNhbXBsZSB1c2UtY2FzZXM8YnIgY2xhc3M9IiI+DQombmJzcDsg Zm9yIHJlbW90ZSBhdHRlc3RhdGlvbi48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDEuNXB0OyBmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlm OyBmb250LXN0cmV0Y2g6IG5vcm1hbDsiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOC41cHQ7 IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIgY2xhc3M9IiI+LSBQcm9kdWNlIHNwZWNpZmljYXRpb24g dGV4dCBkZWZpbmluZyBpbnRlcm9wZXJhYmxlIGNyb3NzLXBsYXRmb3JtIGNsYWltcyB3aGljaDxi ciBjbGFzcz0iIj4NCiZuYnNwOyBwcm92aWRlIGluZm9ybWF0aW9uIGFib3V0IGFuIGVudGl0eSBp biBzdXBwb3J0IG9mIHRoZSByZXF1aXJlZCB1c2UtY2FzZXMsIGFuZDxiciBjbGFzcz0iIj4NCiZu YnNwOyBleHRlbmRpbmcgdGhlIHNldCBvZiBjbGFpbXMgZGVmaW5lZCBpbiBSRkM3NTE5IGFuZCBS RkM4MzkyLiBUaGUgc3BlY2lmaWNhdGlvbjxiciBjbGFzcz0iIj4NCiZuYnNwOyB3aWxsIGRlc2Ny aWJlIHRoZSBzeW50YXggZm9yIGVhY2ggY2xhaW0gaW4gYXQgbGVhc3QgdGhlIGZvbGxvd2luZyBm b3JtYXRzOjxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgLSBDQk9SIFtSRkM3MDQ5XTxiciBj bGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgLSBKU09OIFtSRkM3MTU5XTxiciBjbGFzcz0iIj4NCiZu YnNwOyAmbmJzcDsgLSBZQU5HIFtSRkM2MDIwXTxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41cHQ7IGZv bnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywg c2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiA4 LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj4tIFByb2R1Y2Ugc3BlY2lmaWNh dGlvbiB0ZXh0IGRlZmluaW5nIHByb2NlZHVyZXMgYW5kIGNvcnJlc3BvbmRpbmcgYXJjaGl0ZWN0 dXJlczxiciBjbGFzcz0iIj4NCiZuYnNwOyBzdXBwb3J0aW5nIHZlcmlmaWNhdGlvbiBvZiBjbGFp bXMgd2l0aGluIGFuIGF0dGVzdGF0aW9uIGJhc2VkIG9uIG1lYXN1cmVkIGZpbGU8YnIgY2xhc3M9 IiI+DQombmJzcDsgZXhlY3V0aW9uIHByb2NlZHVyZXMgYW5kIHN1cHBvcnRpbmc6PGJyIGNsYXNz PSIiPg0KJm5ic3A7ICZuYnNwOyAtIEV4cGxpY2l0IGF0dGVzdGF0aW9uIHdoZXJlaW4gYSBzZXQg b2YgY2xhaW1zIGlzIHRyYW5zcG9ydGVkIGluIHRoZSBhdHRlc3RhdGlvbjs8YnIgY2xhc3M9IiI+ DQombmJzcDsgJm5ic3A7IC0gSW1wbGljaXQgYXR0ZXN0YXRpb24gd2hlcmVpbiBhIHNldCBvZiBj bGFpbXMgaXMgaW1wbGllZCBieSBwb3NzZXNzaW9uIG9mIGEgc2VjcmV0LjxvOnAgY2xhc3M9IiI+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBp biAwaW4gMS41cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5l dyBSb21hbiZxdW90Oywgc2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyI+DQo8c3BhbiBzdHls ZT0iZm9udC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj4tIFBy b2R1Y2Ugc3BlY2lmaWNhdGlvbiB0ZXh0IGRlZmluaW5nIHByb2NlZHVyZXMgYW5kIGNvcnJlc3Bv bmRpbmcgYXJjaGl0ZWN0dXJlczxiciBjbGFzcz0iIj4NCiZuYnNwOyBzdXBwb3J0aW5nIHZlcmlm aWNhdGlvbiBvZiBjbGFpbXMgZW5jYXBzdWxhdGVkIGluOjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41 cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90Oywgc2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1z aXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7 IC0gQ0JPUiBXZWIgVG9rZW4gc3RydWN0dXJlcyBbUkZDODM5Ml08YnIgY2xhc3M9IiI+DQombmJz cDsgJm5ic3A7IC0gSlNPTiBXZWIgVG9rZW4gc3RydWN0dXJlcyBbUkZDNzUxOV08bzpwIGNsYXNz PSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu OiAwaW4gMGluIDEuNXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1l cyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsiPg0KPHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTogOC41cHQ7IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIgY2xhc3M9IiI+ LSBQZXJmb3JtIHByaXZhY3kgYW5hbHlzaXMgb2YgYm90aCBjbGFpbXMgYW5kIHRoZSBjcnlwdG9n cmFwaGljIHByb2NlZHVyZXMgdXNlZCB0bzxiciBjbGFzcz0iIj4NCiZuYnNwOyBlc3RhYmxpc2gg dHJ1c3QuIFRoaXMgaW5mb3JtYXRpb24gd2lsbCBiZSBpbmNsdWRlZCBhcyBhcHByb3ByaWF0ZSBp biB0aGU8YnIgY2xhc3M9IiI+DQombmJzcDsgZGVsaXZlcmFibGUgc3BlY2lmaWNhdGlvbnMsIGFu ZCBtYXkgaW1wbHkgZXh0ZW5zaW9uIG9mIHByb2NlZHVyZXMgZGVmaW5lZCBpbjxiciBjbGFzcz0i Ij4NCiZuYnNwOyBvdGhlciBzcGVjaWZpY2F0aW9ucyBpbiBzdXBwb3J0IG9mIHByaXZhY3kgZ29h bHMuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7 IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9 IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEy cHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xh c3M9IiI+DQpJdCBzZWVtcyB0byBtZSB0aGF0IHRoZXJlIGFyZSB0d28gd2F5cyB0byBwcm9kdWNl IHRoZSBtYWluIHNwZWNpZmljYXRpb24gZGVsaXZlcmFibGVzLiBJIGhhdmUgZGVsaWJlcmF0ZWx5 IGxlZnQgdGhlIHRleHQgYWJvdmUgc2xpZ2h0bHkgdmFndWUgb24gdGhpcy48bzpwIGNsYXNzPSIi PjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPHVsIHR5cGU9ImRpc2MiIHN0 eWxlPSJtYXJnaW4tYm90dG9tOiAwaW47IiBjbGFzcz0iIj4NCjxsaSBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQt ZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyI+DQpBIGNsYWltcyBz cGVjaWZpY2F0aW9uIGNvbW1vbiB0byBSQVRTIGFuZCBFQVQgd2l0aCBzZXBhcmF0ZSBSQVRTIGFu ZCBFQVQgcHJvY2VkdXJlIHNwZWNpZmljYXRpb25zLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9saT48 bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBz ZXJpZjsiPg0KQSBjbGFpbXMgc3BlY2lmaWNhdGlvbiBhbHNvIGluY29ycG9yYXRpbmcgRUFUIHBy b2NlZHVyZXMgYW5kIGEgc2VwYXJhdGUgUkFUUyBwcm9jZWR1cmUgc3BlY2lmaWNhdGlvbi4gVGhp cyB3b3VsZCBiZSBteSBwcmVmZXJyZWQgb3B0aW9uLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9saT48 L3VsPg0KPHVsIHR5cGU9ImRpc2MiIHN0eWxlPSJtYXJnaW4tYm90dG9tOiAwaW47IiBjbGFzcz0i Ij4NCjx1bCB0eXBlPSJjaXJjbGUiIHN0eWxlPSJtYXJnaW4tYm90dG9tOiAwaW47IiBjbGFzcz0i Ij4NCjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVv dDssIHNlcmlmOyI+DQpJIGJlbGlldmUgdGhlcmUgYXJlIHZlcnkgZmV3IHByb2NlZHVyZXMgbmVl ZGVkIGZvciBFQVQgb3RoZXIgdGhhbiB0aGUgcG9zc2libGUgbmVlZCB0byBzdXBwb3J0IGEgbm9u Y2UgdG8gZW5zdXJlIGZyZXNobmVzczxvOnAgY2xhc3M9IiI+PC9vOnA+PC9saT48L3VsPg0KPC91 bD4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAw LjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48 L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBp biAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KSmVyZW15PG86cCBjbGFzcz0iIj48L286 cD48L2Rpdj4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6IDVwdDsgbWFy Z2luLWJvdHRvbTogNXB0OyIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i Ij4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KTm90aWNlIGhvdyBieSBhYm91dCB0aGUgc2Vjb25kIHBhcmFn cmFwaCAoNnRpc2NoIHRha2VzIGEgYml0IGxvbmdlciksIGVhY2g8YnIgY2xhc3M9IiI+DQpnZXRz IGludG8gd2hhdCB0aGUgV0cgd2lsbCBkbz88YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQot LTxiciBjbGFzcz0iIj4NCk1pY2hhZWwgUmljaGFyZHNvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1j ciYjNDM7SUVURkBzYW5kZWxtYW4uY2EiIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29y YXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPm1jciYjNDM7SUVURkBzYW5kZWxtYW4uY2E8L2E+ Jmd0OywgU2FuZGVsbWFuIFNvZnR3YXJlIFdvcmtzPGJyIGNsYXNzPSIiPg0KLT0gSVB2NiBJb1Qg Y29uc3VsdGluZyA9LTxiciBjbGFzcz0iIj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fPGJyIGNsYXNzPSIiPg0KRUFUIG1haWxpbmcgbGlzdDxiciBjbGFz cz0iIj4NCjxhIGhyZWY9Im1haWx0bzpFQVRAaWV0Zi5vcmciIHN0eWxlPSJjb2xvcjogcHVycGxl OyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPkVBVEBpZXRmLm9yZzwvYT48 YnIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL2VhdCIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5l OyIgY2xhc3M9IiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQ8L2E+ PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2JvZHk+DQo8L2h0 bWw+DQo= --_000_0771A50232EF46E995FB55BE0FF04634qtiqualcommcom_-- From nobody Wed Oct 24 05:47:30 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13C79128DFD; Wed, 24 Oct 2018 05:47:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ILiK_aqHGHJL; Wed, 24 Oct 2018 05:47:20 -0700 (PDT) Received: from alexa-out-ams-02.qualcomm.com (alexa-out-ams-02.qualcomm.com [185.23.61.163]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95770127332; Wed, 24 Oct 2018 05:47:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1540385240; x=1571921240; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=5NrvUKpdcQHSRC9NkLvxcNTByOY/znrLyV5u/Z+qyHM=; b=AKyhIdrNSl1Yr+ojVWoxSfJeseiZ8+g4kswvXDtGbFUM0xUgUby0ncfG Key0RbFm01LpCARYPUYUac0sADHV38S926uyYBFdfb0YaIDEL+ZL1mjHR Glz+N8vq/23yHRZwW6y00ZEpiXG4MJhvCKKnIsknN+kZ45hxWTHK8jOQ+ Q=; X-IronPort-AV: E=Sophos;i="5.54,420,1534802400"; d="scan'208,217";a="1387166" Received: from ironmsg02-ams.qualcomm.com ([10.251.56.3]) by alexa-out-ams-02.qualcomm.com with ESMTP; 24 Oct 2018 14:46:23 +0200 X-IronPort-AV: E=McAfee;i="5900,7806,9055"; a="6117362" Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by ironmsg02-ams.qualcomm.com with ESMTP/TLS/AES256-SHA; 24 Oct 2018 14:46:23 +0200 Received: from euamsexm01a.eu.qualcomm.com (10.251.127.40) by euamsexm01a.eu.qualcomm.com (10.251.127.40) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Wed, 24 Oct 2018 14:46:21 +0200 Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by euamsexm01a.eu.qualcomm.com ([10.251.127.40]) with mapi id 15.00.1365.000; Wed, 24 Oct 2018 14:46:21 +0200 From: Jeremy O'Donoghue To: Carl Wallace CC: "Smith, Ned" , Michael Richardson , "eat@ietf.org" , "rats@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUavXP5xlM3Oo/GUa0I+2fOxOmhqUs9bMAgAAVBwCAAARWgIAADiwAgAAAmYCAARnZgA== Date: Wed, 24 Oct 2018 12:46:21 +0000 Message-ID: <8340B1B8-775D-4932-B432-29B715A3B45D@qti.qualcomm.com> References: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.9.1) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.251.52.12] Content-Type: multipart/alternative; boundary="_000_8340B1B8775D4932B43229B715A3B45Dqtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 12:47:23 -0000 --_000_8340B1B8775D4932B43229B715A3B45Dqtiqualcommcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBoYXZlIHRoZSBmb2xsb3dpbmcgdW5kZXJzdGFuZGluZyAocG9zc2libHkgbWlzdW5kZXJzdG9v ZCkgZnJvbSB0aGlzIHRocmVhZDoNCg0KDQogICogICBJdCBpcyBkZXNpcmFibGUgdG8gaGF2ZSBz eW50YXggZm9yIGluY29ycG9yYXRpbmcgc2V0cyBvZiBDbGFpbXMgaW4gc3RydWN0dXJlcyB0aGF0 IGFyZSBkZWZpbmVkIGluIEFTTi4xLiBBdCB0aGUgc3VyZmFjZSBsZXZlbCB0aGlzIG1heSBiZSBz dHJhaWdodGZvcndhcmQgYmVjYXVzZSBjbGFpbXMgYXJlIGVzc2VudGlhbGx5IChrZXksIHZhbHVl KSBwYWlycyAtIHRoZSBrZXkgcG90ZW50aWFsbHkgYmVpbmcgaW1wbGljaXQgaW4gc29tZSBjYXNl cywgYnV0IHRoZXJlIGNvdWxkIGJlIGltcG9ydGFudCBzZW1hbnRpYyBkaWZmZXJlbmNlcyBpbiB0 aGUgbWVhbmluZyBvZiBzaWduaW5nIGluIEF0dGVzdGF0aW9uIGZvcm1hdHMgdnMgbGVnYWN5IGZv cm1hdHMsIGFuZCB0aGVyZSBtYXkgYmUgY2hhbGxlbmdlcyBpbiBtYXBwaW5nIHNvbWUgQ0JPUiBv ciBKU09OIGNvbnN0cnVjdGlvbnMgdG8gQVNOLjEuDQogICogICBUaGUgbWFpbiB1c2UtY2FzZSB1 bmRlciBkaXNjdXNzaW9uIGlzIHRvIGFkZHJlc3MgbWVjaGFuaXNtcyB0byBlbmFibGUgYW4gYXR0 ZXN0YXRpb24gdG8gYmUgcHJlc2VudGVkIHRvIGEgQ0EgaW4gdGhlIGNvbnRleHQgb2YgYSBjZXJ0 aWZpY2F0ZSByZXF1ZXN0IHByb3RvY29sLiBJZiBJIGhhdmUgY29ycmVjdGx5IHVuZGVyc3Rvb2Qg dGhpcywgaXQgbWVhbnMgdGhhdCBhIGRpcmVjdCBtYXBwaW5nIG9mIHRoZSBDbGFpbXMgaW4gYW4g YXR0ZXN0YXRpb24gdG8gYW4gWC41MDkgY2VydGlmaWNhdGUgaXMgYSBub24tZ29hbCBhcyB0aGUg Q0Egd291bGQgYmUgcmVzcG9uc2libGUgZm9yIGNvcnJlY3RseSBpbnRlcnByZXRpbmcgdGhlIHNl bWFudGljcyBvZiB0aGUgQ2xhaW1zIGFuZCBpbmNvcnBvcmF0aW5nIHRoZW0gaW50byBhbiBpc3N1 ZWQgY2VydGlmaWNhdGUgaW4gd2F5cyB0aGF0IG1ha2Ugc2Vuc2UgaW4gdGhlIFguNTA5IHdvcmxk Lg0KDQpJIHRoaW5rIHdlIG5lZWQgdG8gdGFrZSBjYXJlIHRvIGxpbWl0IHRoZSBzY29wZSBvZiB3 b3JrIGl0ZW1zIGluIHRoaXMgYXJlYSBhcyB0aGVyZSBleGlzdHMgYSBjb25zaWRlcmFibGUgZXhp c3RpbmcgYm9keSBvZiBzcGVjaWZpY2F0aW9ucyBpbiB0aGlzIGFyZWEuIEdpcmwgaGFzIG1lbnRp b25lZCBBQ01FLCBhbmQgQ2FybCBtZW50aW9uZWQgU0NFUCwgZm9yIHdoaWNoIGEgbmV3IHZlcnNp b24gYXBwZWFycyB0byBiZSBuZWFyaW5nIHB1YmxpY2F0aW9uLg0KDQpNeSBzdWdnZXN0aW9uIGlz IHRoYXQgaXQgc2hvdWxkIGJlIGluIHNjb3BlIHRvIGRlZmluZSBhIHN5bnRheCBmb3IgZGVzY3Jp YmluZyBhdHRlc3RhdGlvbnMgd2hpY2ggd2hpY2ggY291bGQgYmUgdHJhbnNwb3J0ZWQgdmlhIGNl cnRpZmljYXRlIHJlcXVlc3QgcHJvdG9jb2xzIHN1Y2ggYXMgQUNNRSBhbmQgU0NFUCwgYnV0IHRo YXQgdGhlIHF1ZXN0aW9uIG9mIGhvdyB0aGUgc2VtYW50aWNzIG9mIGF0dGVzdGF0aW9ucyBhcmUg bWFuYWdlZCBpbiB0aGVpciB1c2UtY2FzZXMgaXMgYSBxdWVzdGlvbiBmb3IgdGhlIFdHcyBvd25p bmcgdGhvc2Ugc3BlY2lmaWNhdGlvbnMuDQoNCkxvb2tpbmcgYXQgdGhlIGN1cnJlbnQgU0NFUCBk cmFmdDxodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1ndXRtYW5uLXNjZXAv P2luY2x1ZGVfdGV4dD0xPiwgaXQgbWlnaHQgYmUgc3VmZmljaWVudCBmb3IgdGhlIENSSUF0dHJp YnV0ZXMgZGVmaW5pdGlvbiAoZnJvbSBSRkMyOTg2KSB0byBpbmNsdWRlIHRoZSBBU04uMSBlbmNv ZGluZyBvZiBhbiBhdHRlc3RhdGlvbi4gQUNNRSBzZWVtcyB0byBlbmNvZGUgdGhlIENTUiBpbiBS RkMyOTg2IGZvciBhcyB3ZWxsLCBzbyB0aGlzIG1pZ2h0IGJlIHdvcmthYmxlLg0KDQpJbiB0ZXJt cyBvZiB0aGUgY2hhcnRlciB0ZXh0ICh3aGljaCBpcyB3aGF0IGlzIHJlYWxseSBpbiBzY29wZSBo ZXJlKSB3ZSBjb3VsZCBhZGQgdGV4dCB0byB0aGUgV0cgZGVzY3JpcHRpb24gaW5kaWNhdGluZyB0 aGF0IHRoZSBXRyB3aWxsIHdvcmsgd2l0aCByZWxldmFudCBXR3MgdG8gaWRlbnRpZnkgd2hlcmUg YXR0ZXN0YXRpb25zIG1heSBiZSB1c2VmdWwgaW4gUEtJIGluZnJhc3RydWN0dXJlcy4gSSB0aGlu ayB0aGUgZXhpc3RpbmcgY2hhcnRlciB0ZXh0IGFscmVhZHkgY292ZXJzIHRoZSBwb3NzaWJpbGl0 eSBvZiBkZWZpbmluZyBDbGFpbXMgdG8gZW5hYmxlIHRyYW5zcG9ydCBvZiBhbiBYLjUwOSBjZXJ0 aWZpY2F0ZSBhcyBwYXJ0IG9mIGFuIGF0dGVzdGF0aW9uLg0KDQpQbGVhc2UgbGV0IG1lIGtub3cg aWYgSSBoYXZlIG1pc3VuZGVyc3Rvb2QuIEkgd2lsbCBiZSBwb3N0aW5nIGFuIHVwZGF0ZSB0byB0 aGUgdGV4dCBzaG9ydGx5IHdoaWNoIEkgYmVsaWV2ZSBjb3ZlcnMgdGhpcy4NCg0KSmVyZW15DQoN Ck9uIDIzIE9jdCAyMDE4LCBhdCAyMDo1NywgQ2FybCBXYWxsYWNlIDxjYXJsQHJlZGhvdW5kc29m dHdhcmUuY29tPG1haWx0bzpjYXJsQHJlZGhvdW5kc29mdHdhcmUuY29tPj4gd3JvdGU6DQoNCjxz bmlwPg0KW25tc10gUmlnaHQuIEluIG9yZGVyIGZvciB0aGUgQ0EgKHZlcmlmaWVyKSB0byBkaXN0 aW5ndWlzaCB0aGUgY2VydGlmeWluZyBrZXkgaXMgYW4g4oCYYXR0ZXN0YWJsZSBrZXnigJkgdnMu IGEgdHJhZGl0aW9uYWwgQ1NSLiBUaGUgQ0Egc2hvdWxkIGxvb2sgZm9yIGEgc2lnbmF0dXJlIGZy b20gdGhlIG1mZyBjZXJ0IG92ZXIgdGhlIENTUiAoY2VydGlmaWNhdGUgbWFuYWdlbWVudCBtZXNz YWdlPykgY29udGFpbmluZyB0aGUgZ2VuZXJhdGVkIHB1YmxpYyBrZXkuIEnigJltIHN0aWxsIG5v dCBzZWVpbmcgd2hlcmUgdGhlcmUgaXMgYSBzZWxmLXNpZ25lZCAoaXNzdWVkKSBjZXJ0aWZpY2F0 ZSBpbiB0aGUgZXF1YXRpb24uDQpUaGlzIGJlZ2FuIHdpdGggcmVxdWVzdCB0byBjb2RpZnkgYmlu ZGluZyB0byBjZXJ0aWZpY2F0ZSByZXF1ZXN0IHByb3RvY29scywgbm90IGZvciBhIHNlbGYgc2ln bmVkIGNlcnRpZmljYXRlLg0KDQo= --_000_8340B1B8775D4932B43229B715A3B45Dqtiqualcommcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCkkgaGF2ZSB0aGUgZm9sbG93aW5nIHVuZGVyc3Rh bmRpbmcgKHBvc3NpYmx5IG1pc3VuZGVyc3Rvb2QpIGZyb20gdGhpcyB0aHJlYWQ6DQo8ZGl2IGNs YXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjx1bCBjbGFzcz0i TWFpbE91dGxpbmUiPg0KPGxpIGNsYXNzPSIiPkl0IGlzIGRlc2lyYWJsZSB0byBoYXZlIHN5bnRh eCBmb3IgaW5jb3Jwb3JhdGluZyBzZXRzIG9mIENsYWltcyBpbiBzdHJ1Y3R1cmVzIHRoYXQgYXJl IGRlZmluZWQgaW4gQVNOLjEuIEF0IHRoZSBzdXJmYWNlIGxldmVsIHRoaXMgbWF5IGJlIHN0cmFp Z2h0Zm9yd2FyZCBiZWNhdXNlIGNsYWltcyBhcmUgZXNzZW50aWFsbHkgKGtleSwgdmFsdWUpIHBh aXJzIC0gdGhlIGtleSBwb3RlbnRpYWxseSBiZWluZyBpbXBsaWNpdCBpbg0KIHNvbWUgY2FzZXMs IGJ1dCB0aGVyZSBjb3VsZCBiZSBpbXBvcnRhbnQgc2VtYW50aWMgZGlmZmVyZW5jZXMgaW4gdGhl IG1lYW5pbmcgb2Ygc2lnbmluZyBpbiBBdHRlc3RhdGlvbiBmb3JtYXRzIHZzIGxlZ2FjeSBmb3Jt YXRzLCBhbmQgdGhlcmUgbWF5IGJlIGNoYWxsZW5nZXMgaW4gbWFwcGluZyBzb21lIENCT1Igb3Ig SlNPTiBjb25zdHJ1Y3Rpb25zIHRvIEFTTi4xLjwvbGk+PGxpIGNsYXNzPSIiPlRoZSBtYWluIHVz ZS1jYXNlIHVuZGVyIGRpc2N1c3Npb24gaXMgdG8gYWRkcmVzcyBtZWNoYW5pc21zIHRvIGVuYWJs ZSBhbiBhdHRlc3RhdGlvbiB0byBiZSBwcmVzZW50ZWQgdG8gYSBDQSBpbiB0aGUgY29udGV4dCBv ZiBhIGNlcnRpZmljYXRlIHJlcXVlc3QgcHJvdG9jb2wuIElmIEkgaGF2ZSBjb3JyZWN0bHkgdW5k ZXJzdG9vZCB0aGlzLCBpdCBtZWFucyB0aGF0IGEgZGlyZWN0IG1hcHBpbmcgb2YgdGhlIENsYWlt cyBpbg0KIGFuIGF0dGVzdGF0aW9uIHRvIGFuIFguNTA5IGNlcnRpZmljYXRlIGlzIGEgbm9uLWdv YWwgYXMgdGhlIENBIHdvdWxkIGJlIHJlc3BvbnNpYmxlIGZvciBjb3JyZWN0bHkgaW50ZXJwcmV0 aW5nIHRoZSBzZW1hbnRpY3Mgb2YgdGhlIENsYWltcyBhbmQgaW5jb3Jwb3JhdGluZyB0aGVtIGlu dG8gYW4gaXNzdWVkIGNlcnRpZmljYXRlIGluIHdheXMgdGhhdCBtYWtlIHNlbnNlIGluIHRoZSBY LjUwOSB3b3JsZC48L2xpPjwvdWw+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5J IHRoaW5rIHdlIG5lZWQgdG8gdGFrZSBjYXJlIHRvIGxpbWl0IHRoZSBzY29wZSBvZiB3b3JrIGl0 ZW1zIGluIHRoaXMgYXJlYSBhcyB0aGVyZSBleGlzdHMgYSBjb25zaWRlcmFibGUgZXhpc3Rpbmcg Ym9keSBvZiBzcGVjaWZpY2F0aW9ucyBpbiB0aGlzIGFyZWEuIEdpcmwgaGFzIG1lbnRpb25lZCBB Q01FLCBhbmQgQ2FybCBtZW50aW9uZWQgU0NFUCwgZm9yIHdoaWNoIGEgbmV3IHZlcnNpb24gYXBw ZWFycyB0byBiZSBuZWFyaW5nIHB1YmxpY2F0aW9uLjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjxkaXY+TXkgc3VnZ2VzdGlvbiBpcyB0aGF0IGl0IHNob3VsZCBiZSBpbiBzY29w ZSB0byBkZWZpbmUgYSBzeW50YXggZm9yIGRlc2NyaWJpbmcgYXR0ZXN0YXRpb25zIHdoaWNoIHdo aWNoIGNvdWxkIGJlIHRyYW5zcG9ydGVkIHZpYSBjZXJ0aWZpY2F0ZSByZXF1ZXN0IHByb3RvY29s cyBzdWNoIGFzIEFDTUUgYW5kIFNDRVAsIGJ1dCB0aGF0IHRoZSBxdWVzdGlvbiBvZiBob3cgdGhl IHNlbWFudGljcyBvZiBhdHRlc3RhdGlvbnMgYXJlIG1hbmFnZWQNCiBpbiB0aGVpciB1c2UtY2Fz ZXMgaXMgYSBxdWVzdGlvbiBmb3IgdGhlIFdHcyBvd25pbmcgdGhvc2Ugc3BlY2lmaWNhdGlvbnMu PC9kaXY+DQo8ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5Mb29raW5nIGF0IHRoZSZu YnNwOzxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWd1dG1h bm4tc2NlcC8/aW5jbHVkZV90ZXh0PTEiIGNsYXNzPSIiPmN1cnJlbnQgU0NFUCBkcmFmdDwvYT4s IGl0IG1pZ2h0IGJlIHN1ZmZpY2llbnQgZm9yIHRoZSBDUklBdHRyaWJ1dGVzIGRlZmluaXRpb24g KGZyb20gUkZDMjk4NikgdG8gaW5jbHVkZSB0aGUgQVNOLjEgZW5jb2Rpbmcgb2YgYW4gYXR0ZXN0 YXRpb24uIEFDTUUgc2VlbXMNCiB0byBlbmNvZGUgdGhlIENTUiBpbiBSRkMyOTg2IGZvciBhcyB3 ZWxsLCBzbyB0aGlzIG1pZ2h0IGJlIHdvcmthYmxlLjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+ DQo8L2Rpdj4NCjxkaXY+SW4gdGVybXMgb2YgdGhlIGNoYXJ0ZXIgdGV4dCAod2hpY2ggaXMgd2hh dCBpcyByZWFsbHkgaW4gc2NvcGUgaGVyZSkgd2UgY291bGQgYWRkIHRleHQgdG8gdGhlIFdHIGRl c2NyaXB0aW9uIGluZGljYXRpbmcgdGhhdCB0aGUgV0cgd2lsbCB3b3JrIHdpdGggcmVsZXZhbnQg V0dzIHRvIGlkZW50aWZ5IHdoZXJlIGF0dGVzdGF0aW9ucyBtYXkgYmUgdXNlZnVsIGluIFBLSSBp bmZyYXN0cnVjdHVyZXMuIEkgdGhpbmsgdGhlIGV4aXN0aW5nIGNoYXJ0ZXINCiB0ZXh0IGFscmVh ZHkgY292ZXJzIHRoZSBwb3NzaWJpbGl0eSBvZiBkZWZpbmluZyBDbGFpbXMgdG8gZW5hYmxlIHRy YW5zcG9ydCBvZiBhbiBYLjUwOSBjZXJ0aWZpY2F0ZSBhcyBwYXJ0IG9mIGFuIGF0dGVzdGF0aW9u LjwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+UGxlYXNlIGxldCBtZSBr bm93IGlmIEkgaGF2ZSBtaXN1bmRlcnN0b29kLiBJIHdpbGwgYmUgcG9zdGluZyBhbiB1cGRhdGUg dG8gdGhlIHRleHQgc2hvcnRseSB3aGljaCBJIGJlbGlldmUgY292ZXJzIHRoaXMuPC9kaXY+DQo8 ZGl2PjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5KZXJlbXk8L2Rpdj4NCjxkaXY+PGJyIGNs YXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi Pk9uIDIzIE9jdCAyMDE4LCBhdCAyMDo1NywgQ2FybCBXYWxsYWNlICZsdDs8YSBocmVmPSJtYWls dG86Y2FybEByZWRob3VuZHNvZnR3YXJlLmNvbSIgY2xhc3M9IiI+Y2FybEByZWRob3VuZHNvZnR3 YXJlLmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5n ZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdi KDAsIDAsIDApOyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgZm9udC1zaXplOiAx NHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQt d2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0 OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5v cm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg dGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQombHQ7c25pcCZndDs8L2Rpdj4NCjxz cGFuIGlkPSJPTEtfU1JDX0JPRFlfU0VDVElPTiIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwg MCwgMCk7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDE0cHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0 LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIGlkPSJNQUNfT1VUTE9P S19BVFRSSUJVVElPTl9CTE9DS1FVT1RFIiBzdHlsZT0icGFkZGluZzogMHB4IDBweCAwcHggNXB4 OyBtYXJnaW46IDBweCAwcHggMHB4IDVweDsiIGNsYXNzPSIiIHR5cGU9ImNpdGUiPg0KPGRpdiB4 bWxuczpvPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpvZmZpY2UiIHhtbG5zOnc9 InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOndvcmQiIHhtbG5zOm09Imh0dHA6Ly9z Y2hlbWFzLm1pY3Jvc29mdC5jb20vb2ZmaWNlLzIwMDQvMTIvb21tbCIgeG1sbnM9Imh0dHA6Ly93 d3cudzMub3JnL1RSL1JFQy1odG1sNDAiIGNsYXNzPSIiPg0KPGRpdiBsYW5nPSJFTi1VUyIgbGlu az0iYmx1ZSIgdmxpbms9InB1cnBsZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlv bjEiIHN0eWxlPSJwYWdlOiBXb3JkU2VjdGlvbjE7Ij4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1p bHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNp emU6IDEwcHQ7IiBjbGFzcz0iIj5bbm1zXSBSaWdodC4gSW4gb3JkZXIgZm9yIHRoZSBDQSAodmVy aWZpZXIpIHRvIGRpc3Rpbmd1aXNoIHRoZSBjZXJ0aWZ5aW5nIGtleSBpcyBhbiDigJhhdHRlc3Rh YmxlIGtleeKAmSB2cy4gYSB0cmFkaXRpb25hbCBDU1IuIFRoZSBDQSBzaG91bGQgbG9vayBmb3Ig YSBzaWduYXR1cmUgZnJvbSB0aGUgbWZnIGNlcnQgb3ZlciB0aGUgQ1NSIChjZXJ0aWZpY2F0ZSBt YW5hZ2VtZW50IG1lc3NhZ2U/KQ0KIGNvbnRhaW5pbmcgdGhlIGdlbmVyYXRlZCBwdWJsaWMga2V5 LiBJ4oCZbSBzdGlsbCBub3Qgc2VlaW5nIHdoZXJlIHRoZXJlIGlzIGEgc2VsZi1zaWduZWQgKGlz c3VlZCkgY2VydGlmaWNhdGUgaW4gdGhlIGVxdWF0aW9uLjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9zcGFuPg0KPGRpdiBzdHls ZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMt c2VyaWY7IGZvbnQtc2l6ZTogMTRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFs OyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KVGhp cyBiZWdhbiB3aXRoIHJlcXVlc3QgdG8gY29kaWZ5IGJpbmRpbmcgdG8gY2VydGlmaWNhdGUgcmVx dWVzdCBwcm90b2NvbHMsIG5vdCBmb3IgYSBzZWxmIHNpZ25lZCBjZXJ0aWZpY2F0ZS4mbmJzcDs8 L2Rpdj4NCjxzcGFuIGlkPSJPTEtfU1JDX0JPRFlfU0VDVElPTiIgc3R5bGU9ImNhcmV0LWNvbG9y OiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBmb250LXNp emU6IDE0cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIGlkPSJN QUNfT1VUTE9PS19BVFRSSUJVVElPTl9CTE9DS1FVT1RFIiBzdHlsZT0icGFkZGluZzogMHB4IDBw eCAwcHggNXB4OyBtYXJnaW46IDBweCAwcHggMHB4IDVweDsiIGNsYXNzPSIiIHR5cGU9ImNpdGUi Pg0KPGRpdiB4bWxuczpvPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpvZmZpY2Ui IHhtbG5zOnc9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOndvcmQiIHhtbG5zOm09 Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vb2ZmaWNlLzIwMDQvMTIvb21tbCIgeG1sbnM9 Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiIGNsYXNzPSIiPg0KPGRpdiBsYW5nPSJF Ti1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJX b3JkU2VjdGlvbjEiIHN0eWxlPSJwYWdlOiBXb3JkU2VjdGlvbjE7Ij4NCjxkaXYgY2xhc3M9IiI+ DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsg Zm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxl PSJmb250LXNpemU6IDEwcHQ7IiBjbGFzcz0iIj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9z cGFuPjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjwvYm9keT4NCjwvaHRtbD4NCg== --_000_8340B1B8775D4932B43229B715A3B45Dqtiqualcommcom_-- From nobody Wed Oct 24 05:56:03 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10D27129619; Wed, 24 Oct 2018 05:56:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0OjSkPr7AZGS; Wed, 24 Oct 2018 05:55:56 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 57C13128DFD; Wed, 24 Oct 2018 05:55:55 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9OCtlnY012826 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 24 Oct 2018 14:55:48 +0200 Received: from [134.102.160.95] (134.102.160.95) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Wed, 24 Oct 2018 14:55:41 +0200 To: "Jeremy O'Donoghue" , "Eric Voit (evoit)" , "rats@ietf.org" CC: Michael Richardson , "eat@ietf.org" References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> <0771A502-32EF-46E9-95FB-55BE0FF04634@qti.qualcomm.com> From: Henk Birkholz Message-ID: <54613a6a-48f2-2301-5ebf-f1eb9fa208e4@sit.fraunhofer.de> Date: Wed, 24 Oct 2018 14:55:41 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <0771A502-32EF-46E9-95FB-55BE0FF04634@qti.qualcomm.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.160.95] Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 12:56:01 -0000 Hi all, based on Jeremy's proposal we did another big refactoring - also tried to address everybody's comments, inputs and concerns. > https://github.com/ietf-rats/charter/blob/RC3/ietf-rats-charter.md Please note that this charter text is intended to be a first phase, which is the reason why, for example, there still is no mentioning about provisioning, profiles, or more details about out-of-band dependencies. As Michael highlighted, most types of content belong into drafts. That said - on one hand the charter is a kind of "contract" wrt to scope and output, on the other hand we do not want to boil the ocean (at least not all at once...). Viele Grüße, Henk On 10/24/2018 01:36 PM, Jeremy O'Donoghue wrote: > HI Eric, > >> On 23 Oct 2018, at 19:04, Eric Voit (evoit) > > wrote: >> >> Hi Jeremy, >> Thanks for taking a cut at this charter simplification.  There are a >> few areas covered within theGitHub Goals >> which >> I can’t easily map to your text below.  Could you talk about how these >> elements are covered (or not)?   For context, I am working from the >> perspective ofremote attestation application >> developer >> trying to standardize the interfaces between a controller (which is >> acting as a claim verifier) and a network element (which includes TCG >> based subsystems.) >> For my application to work properly, there are several things needed >> within a network controller to validate the asserted claims coming out >> of a router.  These include: >> ·How do we expose the attestation evidence which can be used to >> validate asserted claims? > > I think that the need to address this is covered sufficiently for a WG > Charter by the statement "Produce a specification defining procedures > and corresponding architectures
 supporting verification of Claims". > > If verification of Claims requires specific forms of attestation > evidence (e.g. a set of measurements generated by a TPM), then it is > properly a matter for an RFC to specify this, as Michael suggests. > >> ·How do we know which root of trust which was used to generate the >> attestation evidence (e.g., application event logs), and how does a >> verifier differentiate this from the root-of-trust which asserts >> claims made upon this evidence? > > Again, I think this is a matter for specification rather than charter. > There are a number of different ways in which Roots of Trust can be > realised and many possible device architectures. The EAT draft allows > one RoT to include an attestation generated by a different RoT, for > example. I believe the RATS draft also provides technical mechanisms by > which this can be achieved. > >> ·What entities are allowed to read the info asserted claims?  What >> subset of these can see the raw attestation evidence? >> These questions are significant because routers/switches are not >> monolithic devices.  In fact, they are composed of subsystems with >> different levels of trustworthiness. As the IETF often aims at >> protocol specifications at the inter-device level, I am looking for >> coverage of such questions in the charter. > > I agree with you here as the same issue applies to claims with privacy > implications. As an example, I may wish to present a unique device ID to > a social media website but not my location. > > I have added bullet point 3 to the draft - which I will post separately. > Let me know if you think this addresses your concerns sufficiently. > > Best regards > Jeremy > >> Thanks, >> Eric >> *From:*Jeremy O'Donoghue, October 23, 2018 10:40 AM >> >> On 22 Oct 2018, at 22:01, Michael Richardson > > wrote: >> >> >> Jeremy O'Donoghue > > wrote: >> >> This is a very useful contribution, Laurence. >> >> >> >> The current draft text is too strongly biased towards >> attestation based >> on measurement, and does not adequately cover other mechanisms >> which >> are already >> >> >> But, it's for the charter, for the WG, it's not a treatise on >> attestation >> itself. >> >> This is all supposed to be *meta* text about attestation, about >> what we want >> to say about attestation in the documents, not about what >> attestation is. >> >> Please go read some other IETF charters: >> >> https://datatracker.ietf.org/wg/6lo/about/ >> https://datatracker.ietf.org/wg/6tisch/about/ >> https://datatracker.ietf.org/wg/suit/about/ >> >> Fair comment. >> We have two existing proposals - EAT and RATS - which address a >> similar problem space but using different mechanisms. While I believe >> the RATS and EAT contributors are in broad agreement that there is >> significant benefit in bringing both work streams under a single >> umbrella, trying to properly incorporate EAT through incremental >> modification to the draft RATS WG charter text is proving challenging. >> The below probably diverges too far from the current text for some >> tastes, but it may address your point and provide a basis for >> discussion (at this point the GitHub draft >>  seems >> a long way behind the list). It is deliberately significantly shorter >> than the current draft - I have tried to re-use as much existing text >> as possible, but it is heavily re-organised and abridged. >> I have taken on board the comment from Carsten that perhaps a minimum >> level of terminology is acceptable in charter text, but deliberately >> tried to keep the language simple and fairly generic to enable the >> proper work of terminology definition to take place in the >> requirements document as you suggest. >> >> Introduction >> >> ------------ >> >> Remote attestation procedures can be incorporated in network protocols to >> provide the basis for establishing claims about an entity in a trustworthy >> manner. Such claims may include, but are not limited to, device identity, >> manufacturing origin, system integrity, configuration, operational >> state and >> measurements of steps which led to the operational state. Such procedures >> expose entity characteristics in the form of claim sets which allow remote >> parties to establish the trustworthiness of a device, provide evidence >> that a >> particular set of operations and functions are supported and/or that the >> entity is actually what it claims to be. >> >> In the absence of such procedures, while domain-specific attestation >> mechanisms such as TCG TPM, FIDO Alliance attestation and Android Keystore >> attestation exist, there is no common way for a remote party to tell >> if data >> originates from a trustworthy device (e.g. a Trusted System designed to >> support a specific set of operations/functionalities) or not. >> >> The following minimal terminology is defined for the purposes of >> clarifying the >> Working Group charter text: >> >> - attestation: a set of claims which can be verified as originating in an >>           entity. >> >> - claim:  as defined in RFC7519. >> >> - entity: a device or device sub-module that can generate a claim or >> set of >>           claims which can be verified by a remote party. >> >> - remote party: an actor remote from an entity that wishes to verify >> whether >>           a claim or set of claims originated in a given entity. >> >> Description of the Working Group >> >> -------------------------------- >> >> The Working Group will define: >> >> - Standardized and interoperable mechanisms to establish a sufficient >> level >>   of confidence that data originates from a trustworthy entity designed to >>   support a specific set of operations/functionalities. >> - Standardized and interoperable mechanisms building on (1) to allow >> remote >>   parties to know the provenance and characteristics of an entity that >> may be >>   requesting services. >> >> The Working Group will identify security goals which it expects a >> trustworthy >> execution context to address, which will assume the presence of Roots of >> Trust (as defined by NIST [SP800-164]). The detailed specification of such >> contexts is out of scope. >> >> The Working Group will maintain close relationships with bodies >> undertaking >> complementary work streams in the area of remote attestation such as >> GlobalPlatform, Trusted Computing Group and FIDO Alliance. >> >> The Working Group will cooperate with the TEEP Working Group, which may >> generate requirements for claims relevant to TEE. >> >> Work Items >> >> ---------- >> >> The Working Group will develop specifications supporting the creation of >> interoperable remote attestation procedures for entities which >> incorporate >> Roots of Trust. The main deliverables are as follows. >> >> - Produce a requirements document establishing a common vocabulary for >> remote >>   attestation, identifying mechanisms which will be supported for >> establishing >>   trust between an entity and a remote party, and enumerating sample >> use-cases >>   for remote attestation. >> >> - Produce specification text defining interoperable cross-platform >> claims which >>   provide information about an entity in support of the required >> use-cases, and >>   extending the set of claims defined in RFC7519 and RFC8392. The >> specification >>   will describe the syntax for each claim in at least the following >> formats: >>     - CBOR [RFC7049] >>     - JSON [RFC7159] >>     - YANG [RFC6020] >> >> - Produce specification text defining procedures and corresponding >> architectures >>   supporting verification of claims within an attestation based on >> measured file >>   execution procedures and supporting: >>     - Explicit attestation wherein a set of claims is transported in >> the attestation; >>     - Implicit attestation wherein a set of claims is implied by >> possession of a secret. >> >> - Produce specification text defining procedures and corresponding >> architectures >>   supporting verification of claims encapsulated in: >> >>     - CBOR Web Token structures [RFC8392] >>     - JSON Web Token structures [RFC7519] >> >> - Perform privacy analysis of both claims and the cryptographic >> procedures used to >>   establish trust. This information will be included as appropriate in the >>   deliverable specifications, and may imply extension of procedures >> defined in >>   other specifications in support of privacy goals. >> >> It seems to me that there are two ways to produce the main >> specification deliverables. I have deliberately left the text above >> slightly vague on this. >> >> * A claims specification common to RATS and EAT with separate RATS >> and EAT procedure specifications. >> * A claims specification also incorporating EAT procedures and a >> separate RATS procedure specification. This would be my preferred >> option. >> >> o I believe there are very few procedures needed for EAT other >> than the possible need to support a nonce to ensure freshness >> >> Jeremy >> >> >> Notice how by about the second paragraph (6tisch takes a bit >> longer), each >> gets into what the WG will do? >> >> -- >> Michael Richardson > >, Sandelman Software Works >> -= IPv6 IoT consulting =- >> _______________________________________________ >> EAT mailing list >> EAT@ietf.org >> https://www.ietf.org/mailman/listinfo/eat >> > > > > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat > From nobody Wed Oct 24 05:58:47 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0FB51130EEB; Wed, 24 Oct 2018 05:58:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JO7dQ04Otr1W; Wed, 24 Oct 2018 05:58:25 -0700 (PDT) Received: from alexa-out-ams-02.qualcomm.com (alexa-out-ams-02.qualcomm.com [185.23.61.163]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 585E2130DFE; Wed, 24 Oct 2018 05:58:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1540385904; x=1571921904; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=10pkKHpVuWv+apzmukXDQIneCxkTh6IsmZVOBTTVSe4=; b=tSe2E0/DipMuNm+0OGnsoK8Glm3tvyoNrFtn1PVprcBfNE+8UK4jtrCX 5jBOC+vMnTeq6uEtRL0Jt40XSS5Ysw1yauSfkvRJUtXbqMdt/8Xpa5IRL 5CetuYTrIv3nsbG2ITMPQlnQmfIW8ZRyW/sAaMePGRxnQ1nH+AnoWjvM7 I=; X-IronPort-AV: E=Sophos;i="5.54,420,1534802400"; d="scan'208,217";a="1387215" Received: from ironmsg01-ams.qualcomm.com ([10.251.56.2]) by alexa-out-ams-02.qualcomm.com with ESMTP; 24 Oct 2018 14:58:22 +0200 X-IronPort-AV: E=McAfee;i="5900,7806,9055"; a="6082810" Received: from euamsexm01b.eu.qualcomm.com ([10.251.127.41]) by ironmsg01-ams.qualcomm.com with ESMTP/TLS/AES256-SHA; 24 Oct 2018 14:58:22 +0200 Received: from euamsexm01a.eu.qualcomm.com (10.251.127.40) by euamsexm01b.eu.qualcomm.com (10.251.127.41) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Wed, 24 Oct 2018 14:58:20 +0200 Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by euamsexm01a.eu.qualcomm.com ([10.251.127.40]) with mapi id 15.00.1365.000; Wed, 24 Oct 2018 14:58:19 +0200 From: Jeremy O'Donoghue To: "Eric Voit (evoit)" CC: Michael Richardson , "eat@ietf.org" , "rats@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUakqqBJn3KZZVPEe4vVODtnqbzKUsxo8AgAA3c3CAASeGgIAAFtMA Date: Wed, 24 Oct 2018 12:58:19 +0000 Message-ID: <1F4B0DE5-32F4-4F09-B25A-1A088F108362@qti.qualcomm.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> <0771A502-32EF-46E9-95FB-55BE0FF04634@qti.qualcomm.com> In-Reply-To: <0771A502-32EF-46E9-95FB-55BE0FF04634@qti.qualcomm.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.9.1) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.251.52.12] Content-Type: multipart/alternative; boundary="_000_1F4B0DE532F44F09B25A1A088F108362qtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 12:58:38 -0000 --_000_1F4B0DE532F44F09B25A1A088F108362qtiqualcommcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGZvciB0aGUgZmVlZGJhY2sgb24gbXkgdGV4dC4gVGhlIHRleHQgYmVsb3cgbWFrZXMg dGhlIGZvbGxvd2luZyBjaGFuZ2VzLCBhZGRyZXNzaW5nIGNvbW1lbnRzIGZyb20gbGlzdCBjb250 cmlidXRvcnM6DQoNCg0KICAqICAgYWxpZ25zIG1vcmUgY2xvc2VseSB3aXRoIE5JU1QgdGVybWlu b2xvZ3kgLSBub3RlIHRoYXQgTklTVCBkb2VzIG5vdCBoYXZlIGEgY2xlYXIgc2V0IG9mIGRlZmlu aXRpb25zIGZvciBhbGwgb2YgdGhlIHRlcm1pbm9sb2d5IHVzZWQsIHNvIHNvbWUgb2YgdGhlIHRl eHQgaXMgbXkgaW50ZXJwcmV0YXRpb24gb2YgdGhlIGNvbnRlbnQgb2YgU1AgODAwLTY0LCBhaWRl ZCBieSB0aGUgaW5wdXQgZnJvbSBOZWQuDQogICogICBhZGRzIHRleHQgYWRkcmVzc2luZyB0aGUg cG9zc2libGUgbmVlZCB0byBwcm90ZWN0IGNvbWUgY2xhaW1zIGZyb20gdW5hdXRob3Jpc2VkIGRp c2Nsb3N1cmUgZm9yIHByaXZhY3kgb3Igc2VjdXJpdHkgcmVhc29uDQogICogICBhZGRzIHRleHQg c3VwcG9ydGluZyBBU04uMSBhcyBhIHN5bnRheCBmb3IgY2xhaW1zLg0KDQpJIGhhdmUgdXNlZCBz b21lIHNpbXBsZSBtYXJrdXAgdG8gaWRlbnRpZnkgdGhlIGNoYW5nZXMuDQoNCkludHJvZHVjdGlv bg0KLS0tLS0tLS0tLS0tDQoNClJlbW90ZSBBdHRlc3RhdGlvbiBwcm9jZWR1cmVzIGNhbiBiZSBp bmNvcnBvcmF0ZWQgaW4gbmV0d29yayBwcm90b2NvbHMgdG8NCnByb3ZpZGUgdGhlIGJhc2lzIGZv ciBlc3RhYmxpc2hpbmcgQ2xhaW1zIGFib3V0IGEgRGV2aWNlIGluIGEgdHJ1c3R3b3J0aHnigKgN Cm1hbm5lci4gU3VjaCBDbGFpbXMgbWF5IGluY2x1ZGUsIGJ1dCBhcmUgbm90IGxpbWl0ZWQgdG8s IGRldmljZSBpZGVudGl0eSzigKgNCm1hbnVmYWN0dXJpbmcgb3JpZ2luLCBzeXN0ZW0gaW50ZWdy aXR5LCBjb25maWd1cmF0aW9uLCBvcGVyYXRpb25hbCBzdGF0ZSBhbmTigKgNCm1lYXN1cmVtZW50 cyBvZiBzdGVwcyB3aGljaCBsZWQgdG8gdGhlIG9wZXJhdGlvbmFsIHN0YXRlLiBTdWNoIHByb2Nl ZHVyZXPigKgNCmV4cG9zZSBEZXZpY2UgY2hhcmFjdGVyaXN0aWNzIGluIHRoZSBmb3JtIG9mIENs YWltIHNldHMgd2hpY2ggYWxsb3cgYSBSZWx5aW5n4oCoDQpQYXJ0eSwgdXNpbmcgYSBWZXJpZmll ciwgdG8gZXN0YWJsaXNoIHRoZSB0cnVzdHdvcnRoaW5lc3Mgb2YgYSBEZXZpY2UsIHByb3ZpZGUN CmV2aWRlbmNlIHRoYXQgYeKAqCBwYXJ0aWN1bGFyIHNldCBvZiBvcGVyYXRpb25zIGFuZCBmdW5j dGlvbnMgYXJlIHN1cHBvcnRlZCBhbmQvb3INCnRoYXQgdGhlIERldmljZSBpcyBhY3R1YWxseSB3 aGF0IGl0IGRlY2xhcmVzIGl0c2VsZiB0byBiZS4NCg0KSW4gdGhlIGFic2VuY2Ugb2Ygc3VjaCBw cm9jZWR1cmVzLCB3aGlsZSBkb21haW4tc3BlY2lmaWMgYXR0ZXN0YXRpb24gbWVjaGFuaXNtcw0K c3VjaCBhcyBUQ0cgVFBNLCBGSURPIEFsbGlhbmNlIGF0dGVzdGF0aW9uIGFuZCBBbmRyb2lkIEtl eXN0b3JlIGF0dGVzdGF0aW9uDQpleGlzdCwgdGhlcmUgaXMgbm8gY29tbW9uIHdheSBmb3IgYSBS ZWx5aW5nIFBhcnR5IHRvIHRlbGwgaWYgQ2xhaW1zIG9yaWdpbmF0ZQ0KZnJvbSBhIHRydXN0d29y dGh5IGRldmljZSAoZS5nLiBhIHRydXN0ZWQgc3lzdGVtIGRlc2lnbmVkIHRv4oCoc3VwcG9ydCBh IHNwZWNpZmljDQpzZXQgb2Ygb3BlcmF0aW9ucy9mdW5jdGlvbmFsaXRpZXMpIG9yIG5vdC4NCg0K VGVybWlub2xvZ3kgZnJvbSBOSVNUIFtTUDgwMC02NF0gaXMgdXNlZCB3aXRoIHRoZSBmb2xsb3dp bmcgZGVmaW5pdGlvbnMgaW4gdGhpcw0KY2hhcnRlci4NCg0KLSBBdHRlc3RhdGlvbjogYSBzZXQg b2YgQ2xhaW1zIGZvciB3aGljaCBhIFZlcmlmaWVyIGNhbiBlc3RhYmxpc2ggdGhlIHNvdXJjZQ0K ICB1bmlxdWVseSBhbmQgd2l0aG91dCByZXB1ZGlhdGlvbi4NCi0gQ2xhaW06IEEgcmVsaWFibGUg YXNzZXJ0aW9uIGFib3V0IHRoZSB0cnVzdGVkIHN0YXRlIG9mIGEgRGV2aWNlIHN1Y2ggYXMNCiAg aXRzIGNvbmZpZ3VyYXRpb24sIGhlYWx0aCwgb3Igb3BlcmF0aW5nIHN0YXR1cy4gQWxzbyB1c2Vk IGluIFtSRkM3NTE5XS4NCi0gRGV2aWNlOiBhbiBvYmplY3QgaGF2aW5nIHNvbWUgc3BlY2lmaWMg cHVycG9zZSwgb3IgYSBzdWItbW9kdWxlIG9mIHN1Y2ggYW4NCiAgb2JqZWN0LCB0aGF0IGNhbiBn ZW5lcmF0ZSBhIENsYWltIG9yIHNldCBvZuKAqCBDbGFpbXMgd2hvc2Ugc291cmNlIGFuZCBpbnRl Z3JpdHkNCiAgY2FuIGJlIGVzdGFibGlzaGVkIGJ5IGEgVmVyaWZpZXIuDQotIFJlbHlpbmcgUGFy dHk6IGFuIGFjdG9yIHJlbW90ZSBmcm9tIGEgRGV2aWNlIHRoYXQgd2lzaGVzIHRvIHZlcmlmeSB3 aGV0aGVy4oCoYQ0KICBDbGFpbSBvciBzZXQgb2YgQ2xhaW1zIG9yaWdpbmF0ZWQgaW4gYSBnaXZl biBEZXZpY2UuDQotIFZlcmlmaWVyOiBhbiBhY3RvciB0cnVzdGVkIGJ5IHRoZSBSZWx5aW5nIFBh cnR5IHRvIGVzdGFibGlzaCB0aGUgc291cmNlIG9mIGENCiAgQ2xhaW0gb3Igc2V0IG9mIENsYWlt cyB1bmlxdWVseSBhbmQgd2l0aG91dCByZXB1ZGlhdGlvbiwNCi0gUm9vdCBvZiBUcnVzdDogYSBz ZWN1cml0eSBwcmltaXRpdmUgcHJvdmlkaW5nIGEgc2V0IG9mIHRydXN0ZWQsDQogIHNlY3VyaXR5 LWNyaXRpY2FsIGZ1bmN0aW9ucy4NCg0KRGVzY3JpcHRpb24gb2YgdGhlIFdvcmtpbmcgR3JvdXAN Ci0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNClRoZSBXb3JraW5nIEdyb3VwIHdp bGwgZGVmaW5lOg0KDQoxLiBTdGFuZGFyZGl6ZWQgYW5kIGludGVyb3BlcmFibGUgbWVjaGFuaXNt cyB0byBlc3RhYmxpc2ggYSBzdWZmaWNpZW50IGxldmVs4oCob2YNCiAgIGNvbmZpZGVuY2UgdGhh dCBDbGFpbXMgb3JpZ2luYXRlIGZyb20gYSB0cnVzdHdvcnRoeSBEZXZpY2UgZGVzaWduZWQgdG/i gKgNCiAgIHN1cHBvcnQgYSBzcGVjaWZpYyBzZXQgb2Ygb3BlcmF0aW9ucy9mdW5jdGlvbmFsaXRp ZXMu4oCoDQoyLiBTdGFuZGFyZGl6ZWQgYW5kIGludGVyb3BlcmFibGUgbWVjaGFuaXNtcyBidWls ZGluZyBvbiAoMSkgdG8gYWxsb3cgUmVseWluZw0KICAgUGFydGllcyB0byBrbm93IHRoZSBwcm92 ZW5hbmNlIGFuZCBjaGFyYWN0ZXJpc3RpY3Mgb2YgYSBEZXZpY2UgdGhhdCBtYXkgYmXigKgNCiAg IHJlcXVlc3Rpbmcgc2VydmljZXMuDQozLiBTdGFuZGFyZGl6ZWQgYW5kIGludGVyb3BlcmFibGUg bWVjaGFuaXNtcyB0byBwcm90ZWN0IENsYWltcyB3aGljaCBtYXkgbmVlZCB0bw0KICAgYmUgcHJv dGVjdGVkIGZyb20gdW5hdXRob3Jpc2VkIGRpc2Nsb3N1cmUgZm9yIHByaXZhY3kgYW5kL29yIHNl Y3VyaXR5DQogICByZWFzb25zLg0KDQpUaGUgV29ya2luZyBHcm91cCB3aWxsIGlkZW50aWZ5IHNl Y3VyaXR5IGdvYWxzIHdoaWNoIGl0IGV4cGVjdHMgYSB0cnVzdHdvcnRoeQ0KZXhlY3V0aW9uIGNv bnRleHQgdG8gYWRkcmVzcywgd2hpY2ggd2lsbCBhc3N1bWUgdGhlIHByZXNlbmNlIG9mIG9uZSBv ciBtb3JlDQpSb290cyBvZuKAqFRydXN0LiBUaGUgZGV0YWlsZWQgc3BlY2lmaWNhdGlvbiBvZiBz dWNo4oCoY29udGV4dHMgaXMgb3V0IG9mIHNjb3BlLg0KDQpUaGUgV29ya2luZyBHcm91cCB3aWxs IG1haW50YWluIGNsb3NlIHJlbGF0aW9uc2hpcHMgd2l0aCBib2RpZXMgdW5kZXJ0YWtpbmfigKgN CmNvbXBsZW1lbnRhcnkgd29yayBzdHJlYW1zIGluIHRoZSBhcmVhIG9mIHJlbW90ZSBBdHRlc3Rh dGlvbiBzdWNoIGFz4oCoDQpHbG9iYWxQbGF0Zm9ybSwgVHJ1c3RlZCBDb21wdXRpbmcgR3JvdXAg YW5kIEZJRE8gQWxsaWFuY2UuDQoNClRoZSBXb3JraW5nIEdyb3VwIHdpbGwgY29vcGVyYXRlIHdp dGggdGhlIFRFRVAgV29ya2luZyBHcm91cCwgd2hpY2ggbWF54oCoZ2VuZXJhdGUNCnJlcXVpcmVt ZW50cyBmb3IgQ2xhaW1zIHJlbGV2YW50IHRvIFRFRS4NCg0KVGhlIFdvcmtpbmcgR3JvdXAgd2ls bCBpZGVudGlmeSB1c2UtY2FzZXMgZm9yIGludGVyb3BlcmFiaWxpdHkgd2l0aCBQS0kNCmluZnJh c3RydWN0dXJlIGFuZCB3aWxsIHdvcmsgd2l0aCB0aGUgZWRpdG9yIG9mIFNDRVAgYW5kIHRoZSBB Q01FIFdvcmtpbmcgR3JvdXANCnRvIGFkZHJlc3MgdGVjaG5pY2FsIHNvbHV0aW9ucyBmb3IgdGhl c2UuDQoNCldvcmsgSXRlbXMNCi0tLS0tLS0tLS0NCg0KVGhlIFdvcmtpbmcgR3JvdXAgd2lsbCBk ZXZlbG9wIHNwZWNpZmljYXRpb25zIHN1cHBvcnRpbmcgdGhlIGNyZWF0aW9uDQpvZuKAqCBpbnRl cm9wZXJhYmxlIFJlbW90ZSBBdHRlc3RhdGlvbiBwcm9jZWR1cmVzIGZvciBkZXZpY2VzIHdoaWNo IGluY29ycG9yYXRlDQphdOKAqCBsZWFzdCBvbmUgUm9vdCBvZiBUcnVzdC4NCg0KLSBQcm9kdWNl IGEgcmVxdWlyZW1lbnRzIGRvY3VtZW50IGVzdGFibGlzaGluZyBhIGNvbW1vbiB2b2NhYnVsYXJ5 IGZvciByZW1vdGXigKgNCiAgQXR0ZXN0YXRpb24sIGlkZW50aWZ5aW5nIG1lY2hhbmlzbXMgd2hp Y2ggd2lsbCBiZSBzdXBwb3J0ZWQgZm9yIGVzdGFibGlzaGluZ+KAqA0KICB0cnVzdCBiZXR3ZWVu IGEgRGV2aWNlIGFuZCBhIFJlbHlpbmcgUGFydHksIGFuZCBlbnVtZXJhdGluZyBzYW1wbGUgdXNl LWNhc2Vz4oCoDQogIGZvciBSZW1vdGUgQXR0ZXN0YXRpb24uDQotIFByb2R1Y2UgYSBzcGVjaWZp Y2F0aW9uIGRlZmluaW5nIGludGVyb3BlcmFibGUgY3Jvc3MtcGxhdGZvcm0gQ2xhaW1zIHdoaWNo 4oCoDQogIHByb3ZpZGUgaW5mb3JtYXRpb24gYWJvdXQgYSBEZXZpY2UgaW4gc3VwcG9ydCBvZiB0 aGUgcmVxdWlyZWQgdXNlLWNhc2VzLCBhbmTigKgNCiAgZXh0ZW5kaW5nIHRoZSBzZXQgb2YgQ2xh aW1zIGRlZmluZWQgaW4gUkZDNzUxOSBhbmQgUkZDODM5Mi4gVGhlIHNwZWNpZmljYXRpb27igKgN CiAgd2lsbCBkZXNjcmliZSB0aGUgc3ludGF4IGZvciBlYWNoIENsYWltIGluIGF0IGxlYXN0IHRo ZSBmb2xsb3dpbmcgZm9ybWF0czrigKgNCiAgLSBDQk9SIFtSRkM3MDQ5XeKAqA0KICAtIEpTT04g W1JGQzcxNTld4oCoDQogIC0gWUFORyBbUkZDNjAyMF0NCiAgLSBBU04uMQ0KLSBQcm9kdWNlIGEg c3BlY2lmaWNhdGlvbiBkZWZpbmluZyBwcm9jZWR1cmVzIGFuZCBjb3JyZXNwb25kaW5nIGFyY2hp dGVjdHVyZXPigKgNCiAgc3VwcG9ydGluZyB2ZXJpZmljYXRpb24gb2YgQ2xhaW1zIHdpdGhpbiBh biBBdHRlc3RhdGlvbiBiYXNlZCBvbiBtZWFzdXJlZA0KICBmaWxl4oCoIGV4ZWN1dGlvbiBwcm9j ZWR1cmVzIGFuZCBzdXBwb3J0aW5nOuKAqA0KICAtIEV4cGxpY2l0IEF0dGVzdGF0aW9uIHdoZXJl aW4gYSBzZXQgb2YgQ2xhaW1zIGlzIHRyYW5zcG9ydGVkIGluIHRoZQ0KICAgIEF0dGVzdGF0aW9u O+KAqA0KICAtIEltcGxpY2l0IEF0dGVzdGF0aW9uIHdoZXJlaW4gYSBzZXQgb2YgQ2xhaW1zIGlz IGltcGxpZWQgYnkgcG9zc2Vzc2lvbiBvZiBhDQogICAgc2VjcmV0Lg0KLSBQcm9kdWNlIGEgc3Bl Y2lmaWNhdGlvbiBkZWZpbmluZyBwcm9jZWR1cmVzIGFuZCBjb3JyZXNwb25kaW5nIGFyY2hpdGVj dHVyZXPigKgNCiAgc3VwcG9ydGluZyB2ZXJpZmljYXRpb24gb2YgQ2xhaW1zIGVuY2Fwc3VsYXRl ZCBpbjoNCiAgLSBDQk9SIFdlYiBUb2tlbiBzdHJ1Y3R1cmVzIFtSRkM4MzkyXeKAqA0KICAtIEpT T04gV2ViIFRva2VuIHN0cnVjdHVyZXMgW1JGQzc1MTldDQotIFBlcmZvcm0gcHJpdmFjeSBhbmFs eXNpcyBvZiBib3RoIENsYWltcyBhbmQgdGhlIGNyeXB0b2dyYXBoaWMgcHJvY2VkdXJlcyB1c2Vk DQogIHRv4oCoIGVzdGFibGlzaCB0cnVzdC4gVGhpcyBpbmZvcm1hdGlvbiB3aWxsIGJlIGluY2x1 ZGVkIGFzIGFwcHJvcHJpYXRlIGluIHRoZeKAqA0KICBkZWxpdmVyYWJsZSBzcGVjaWZpY2F0aW9u cywgYW5kIG1heSBpbXBseSBleHRlbnNpb24gb2YgcHJvY2VkdXJlcyBkZWZpbmVkIGlu4oCoDQog IG90aGVyIHNwZWNpZmljYXRpb25zIGluIHN1cHBvcnQgb2YgcHJpdmFjeSBnb2Fscy4NCg0KDQpP biAyNCBPY3QgMjAxOCwgYXQgMTI6MzYsIEplcmVteSBPJ0Rvbm9naHVlIDxqb2Rvbm9naEBxdGku cXVhbGNvbW0uY29tPG1haWx0bzpqb2Rvbm9naEBxdGkucXVhbGNvbW0uY29tPj4gd3JvdGU6DQoN CkhJIEVyaWMsDQoNCk9uIDIzIE9jdCAyMDE4LCBhdCAxOTowNCwgRXJpYyBWb2l0IChldm9pdCkg PGV2b2l0QGNpc2NvLmNvbTxtYWlsdG86ZXZvaXRAY2lzY28uY29tPj4gd3JvdGU6DQoNCkhpIEpl cmVteSwNCg0KVGhhbmtzIGZvciB0YWtpbmcgYSBjdXQgYXQgdGhpcyBjaGFydGVyIHNpbXBsaWZp Y2F0aW9uLiAgVGhlcmUgYXJlIGEgZmV3IGFyZWFzIGNvdmVyZWQgd2l0aGluIHRoZSBHaXRIdWIg R29hbHM8aHR0cHM6Ly9naXRodWIuY29tL2lldGYtcmF0cy9jaGFydGVyL2Jsb2IvUkMyL2lldGYt cmF0cy1jaGFydGVyLm1kPndoaWNoIEkgY2Fu4oCZdCBlYXNpbHkgbWFwIHRvIHlvdXIgdGV4dCBi ZWxvdy4gIENvdWxkIHlvdSB0YWxrIGFib3V0IGhvdyB0aGVzZSBlbGVtZW50cyBhcmUgY292ZXJl ZCAob3Igbm90KT8gICBGb3IgY29udGV4dCwgSSBhbSB3b3JraW5nIGZyb20gdGhlIHBlcnNwZWN0 aXZlIG9mIHJlbW90ZSBhdHRlc3RhdGlvbiBhcHBsaWNhdGlvbjxodHRwczovL3d3dy5jaXNjby5j b20vYy9kYW0vZW4vdXMvdGQvZG9jcy9jbG91ZC1zeXN0ZW1zLW1hbmFnZW1lbnQvYXBwbGljYXRp b24tcG9saWN5LWluZnJhc3RydWN0dXJlLWNvbnRyb2xsZXItZW50ZXJwcmlzZS1tb2R1bGUvMS01 LXgvaW50ZWdyaXR5X3ZlcmlmaWNhdGlvbi91c2VyLWd1aWRlL0Npc2NvX0ludGVncml0eV9WZXJp ZmljYXRpb25fQXBwbGljYXRpb25fQVBJQy1FTV9Vc2VyX0d1aWRlXzFfNV8wX3gucGRmPiBkZXZl bG9wZXIgdHJ5aW5nIHRvIHN0YW5kYXJkaXplIHRoZSBpbnRlcmZhY2VzIGJldHdlZW4gYSBjb250 cm9sbGVyICh3aGljaCBpcyBhY3RpbmcgYXMgYSBjbGFpbSB2ZXJpZmllcikgYW5kIGEgbmV0d29y ayBlbGVtZW50ICh3aGljaCBpbmNsdWRlcyBUQ0cgYmFzZWQgc3Vic3lzdGVtcy4pDQoNCkZvciBt eSBhcHBsaWNhdGlvbiB0byB3b3JrIHByb3Blcmx5LCB0aGVyZSBhcmUgc2V2ZXJhbCB0aGluZ3Mg bmVlZGVkIHdpdGhpbiBhIG5ldHdvcmsgY29udHJvbGxlciB0byB2YWxpZGF0ZSB0aGUgYXNzZXJ0 ZWQgY2xhaW1zIGNvbWluZyBvdXQgb2YgYSByb3V0ZXIuICBUaGVzZSBpbmNsdWRlOg0KDQrigKIg ICAgICAgSG93IGRvIHdlIGV4cG9zZSB0aGUgYXR0ZXN0YXRpb24gZXZpZGVuY2Ugd2hpY2ggY2Fu IGJlIHVzZWQgdG8gdmFsaWRhdGUgYXNzZXJ0ZWQgY2xhaW1zPw0KDQpJIHRoaW5rIHRoYXQgdGhl IG5lZWQgdG8gYWRkcmVzcyB0aGlzIGlzIGNvdmVyZWQgc3VmZmljaWVudGx5IGZvciBhIFdHIENo YXJ0ZXIgYnkgdGhlIHN0YXRlbWVudCAiUHJvZHVjZSBhIHNwZWNpZmljYXRpb24gZGVmaW5pbmcg cHJvY2VkdXJlcyBhbmQgY29ycmVzcG9uZGluZyBhcmNoaXRlY3R1cmVz4oCoIHN1cHBvcnRpbmcg dmVyaWZpY2F0aW9uIG9mIENsYWltcyIuDQoNCklmIHZlcmlmaWNhdGlvbiBvZiBDbGFpbXMgcmVx dWlyZXMgc3BlY2lmaWMgZm9ybXMgb2YgYXR0ZXN0YXRpb24gZXZpZGVuY2UgKGUuZy4gYSBzZXQg b2YgbWVhc3VyZW1lbnRzIGdlbmVyYXRlZCBieSBhIFRQTSksIHRoZW4gaXQgaXMgcHJvcGVybHkg YSBtYXR0ZXIgZm9yIGFuIFJGQyB0byBzcGVjaWZ5IHRoaXMsIGFzIE1pY2hhZWwgc3VnZ2VzdHMu DQoNCuKAoiAgICAgICBIb3cgZG8gd2Uga25vdyB3aGljaCByb290IG9mIHRydXN0IHdoaWNoIHdh cyB1c2VkIHRvIGdlbmVyYXRlIHRoZSBhdHRlc3RhdGlvbiBldmlkZW5jZSAoZS5nLiwgYXBwbGlj YXRpb24gZXZlbnQgbG9ncyksIGFuZCBob3cgZG9lcyBhIHZlcmlmaWVyIGRpZmZlcmVudGlhdGUg dGhpcyBmcm9tIHRoZSByb290LW9mLXRydXN0IHdoaWNoIGFzc2VydHMgY2xhaW1zIG1hZGUgdXBv biB0aGlzIGV2aWRlbmNlPw0KDQpBZ2FpbiwgSSB0aGluayB0aGlzIGlzIGEgbWF0dGVyIGZvciBz cGVjaWZpY2F0aW9uIHJhdGhlciB0aGFuIGNoYXJ0ZXIuIFRoZXJlIGFyZSBhIG51bWJlciBvZiBk aWZmZXJlbnQgd2F5cyBpbiB3aGljaCBSb290cyBvZiBUcnVzdCBjYW4gYmUgcmVhbGlzZWQgYW5k IG1hbnkgcG9zc2libGUgZGV2aWNlIGFyY2hpdGVjdHVyZXMuIFRoZSBFQVQgZHJhZnQgYWxsb3dz IG9uZSBSb1QgdG8gaW5jbHVkZSBhbiBhdHRlc3RhdGlvbiBnZW5lcmF0ZWQgYnkgYSBkaWZmZXJl bnQgUm9ULCBmb3IgZXhhbXBsZS4gSSBiZWxpZXZlIHRoZSBSQVRTIGRyYWZ0IGFsc28gcHJvdmlk ZXMgdGVjaG5pY2FsIG1lY2hhbmlzbXMgYnkgd2hpY2ggdGhpcyBjYW4gYmUgYWNoaWV2ZWQuDQoN CuKAoiAgICAgICBXaGF0IGVudGl0aWVzIGFyZSBhbGxvd2VkIHRvIHJlYWQgdGhlIGluZm8gYXNz ZXJ0ZWQgY2xhaW1zPyAgV2hhdCBzdWJzZXQgb2YgdGhlc2UgY2FuIHNlZSB0aGUgcmF3IGF0dGVz dGF0aW9uIGV2aWRlbmNlPw0KDQpUaGVzZSBxdWVzdGlvbnMgYXJlIHNpZ25pZmljYW50IGJlY2F1 c2Ugcm91dGVycy9zd2l0Y2hlcyBhcmUgbm90IG1vbm9saXRoaWMgZGV2aWNlcy4gIEluIGZhY3Qs IHRoZXkgYXJlIGNvbXBvc2VkIG9mIHN1YnN5c3RlbXMgd2l0aCBkaWZmZXJlbnQgbGV2ZWxzIG9m IHRydXN0d29ydGhpbmVzcy4gIEFzIHRoZSBJRVRGIG9mdGVuIGFpbXMgYXQgcHJvdG9jb2wgc3Bl Y2lmaWNhdGlvbnMgYXQgdGhlIGludGVyLWRldmljZSBsZXZlbCwgSSBhbSBsb29raW5nIGZvciBj b3ZlcmFnZSBvZiBzdWNoIHF1ZXN0aW9ucyBpbiB0aGUgY2hhcnRlci4NCg0KSSBhZ3JlZSB3aXRo IHlvdSBoZXJlIGFzIHRoZSBzYW1lIGlzc3VlIGFwcGxpZXMgdG8gY2xhaW1zIHdpdGggcHJpdmFj eSBpbXBsaWNhdGlvbnMuIEFzIGFuIGV4YW1wbGUsIEkgbWF5IHdpc2ggdG8gcHJlc2VudCBhIHVu aXF1ZSBkZXZpY2UgSUQgdG8gYSBzb2NpYWwgbWVkaWEgd2Vic2l0ZSBidXQgbm90IG15IGxvY2F0 aW9uLg0KDQpJIGhhdmUgYWRkZWQgYnVsbGV0IHBvaW50IDMgdG8gdGhlIGRyYWZ0IC0gd2hpY2gg SSB3aWxsIHBvc3Qgc2VwYXJhdGVseS4gTGV0IG1lIGtub3cgaWYgeW91IHRoaW5rIHRoaXMgYWRk cmVzc2VzIHlvdXIgY29uY2VybnMgc3VmZmljaWVudGx5Lg0KDQpCZXN0IHJlZ2FyZHMNCkplcmVt eQ0KDQoNClRoYW5rcywNCkVyaWMNCg0KRnJvbTogSmVyZW15IE8nRG9ub2dodWUsIE9jdG9iZXIg MjMsIDIwMTggMTA6NDAgQU0NCg0KT24gMjIgT2N0IDIwMTgsIGF0IDIyOjAxLCBNaWNoYWVsIFJp Y2hhcmRzb24gPG1jcitpZXRmQHNhbmRlbG1hbi5jYTxtYWlsdG86bWNyK2lldGZAc2FuZGVsbWFu LmNhPj4gd3JvdGU6DQoNCg0KSmVyZW15IE8nRG9ub2dodWUgPGpvZG9ub2doQHF0aS5xdWFsY29t bS5jb208bWFpbHRvOmpvZG9ub2doQHF0aS5xdWFsY29tbS5jb20+PiB3cm90ZToNCg0KVGhpcyBp cyBhIHZlcnkgdXNlZnVsIGNvbnRyaWJ1dGlvbiwgTGF1cmVuY2UuDQoNCg0KVGhlIGN1cnJlbnQg ZHJhZnQgdGV4dCBpcyB0b28gc3Ryb25nbHkgYmlhc2VkIHRvd2FyZHMgYXR0ZXN0YXRpb24gYmFz ZWQNCm9uIG1lYXN1cmVtZW50LCBhbmQgZG9lcyBub3QgYWRlcXVhdGVseSBjb3ZlciBvdGhlciBt ZWNoYW5pc21zIHdoaWNoDQphcmUgYWxyZWFkeQ0KDQpCdXQsIGl0J3MgZm9yIHRoZSBjaGFydGVy LCBmb3IgdGhlIFdHLCBpdCdzIG5vdCBhIHRyZWF0aXNlIG9uIGF0dGVzdGF0aW9uDQppdHNlbGYu DQoNClRoaXMgaXMgYWxsIHN1cHBvc2VkIHRvIGJlICptZXRhKiB0ZXh0IGFib3V0IGF0dGVzdGF0 aW9uLCBhYm91dCB3aGF0IHdlIHdhbnQNCnRvIHNheSBhYm91dCBhdHRlc3RhdGlvbiBpbiB0aGUg ZG9jdW1lbnRzLCBub3QgYWJvdXQgd2hhdCBhdHRlc3RhdGlvbiBpcy4NCg0KUGxlYXNlIGdvIHJl YWQgc29tZSBvdGhlciBJRVRGIGNoYXJ0ZXJzOg0KDQpodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL3dnLzZsby9hYm91dC8NCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvd2cvNnRpc2No L2Fib3V0Lw0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy93Zy9zdWl0L2Fib3V0Lw0KDQpG YWlyIGNvbW1lbnQuDQoNCldlIGhhdmUgdHdvIGV4aXN0aW5nIHByb3Bvc2FscyAtIEVBVCBhbmQg UkFUUyAtIHdoaWNoIGFkZHJlc3MgYSBzaW1pbGFyIHByb2JsZW0gc3BhY2UgYnV0IHVzaW5nIGRp ZmZlcmVudCBtZWNoYW5pc21zLiBXaGlsZSBJIGJlbGlldmUgdGhlIFJBVFMgYW5kIEVBVCBjb250 cmlidXRvcnMgYXJlIGluIGJyb2FkIGFncmVlbWVudCB0aGF0IHRoZXJlIGlzIHNpZ25pZmljYW50 IGJlbmVmaXQgaW4gYnJpbmdpbmcgYm90aCB3b3JrIHN0cmVhbXMgdW5kZXIgYSBzaW5nbGUgdW1i cmVsbGEsIHRyeWluZyB0byBwcm9wZXJseSBpbmNvcnBvcmF0ZSBFQVQgdGhyb3VnaCBpbmNyZW1l bnRhbCBtb2RpZmljYXRpb24gdG8gdGhlIGRyYWZ0IFJBVFMgV0cgY2hhcnRlciB0ZXh0IGlzIHBy b3ZpbmcgY2hhbGxlbmdpbmcuDQoNClRoZSBiZWxvdyBwcm9iYWJseSBkaXZlcmdlcyB0b28gZmFy IGZyb20gdGhlIGN1cnJlbnQgdGV4dCBmb3Igc29tZSB0YXN0ZXMsIGJ1dCBpdCBtYXkgYWRkcmVz cyB5b3VyIHBvaW50IGFuZCBwcm92aWRlIGEgYmFzaXMgZm9yIGRpc2N1c3Npb24gKGF0IHRoaXMg cG9pbnQgdGhlIEdpdEh1YiBkcmFmdDxodHRwczovL2dpdGh1Yi5jb20vaWV0Zi1yYXRzL2NoYXJ0 ZXIvYmxvYi9SQzIvaWV0Zi1yYXRzLWNoYXJ0ZXIubWQ+IHNlZW1zIGEgbG9uZyB3YXkgYmVoaW5k IHRoZSBsaXN0KS4gSXQgaXMgZGVsaWJlcmF0ZWx5IHNpZ25pZmljYW50bHkgc2hvcnRlciB0aGFu IHRoZSBjdXJyZW50IGRyYWZ0IC0gSSBoYXZlIHRyaWVkIHRvIHJlLXVzZSBhcyBtdWNoIGV4aXN0 aW5nIHRleHQgYXMgcG9zc2libGUsIGJ1dCBpdCBpcyBoZWF2aWx5IHJlLW9yZ2FuaXNlZCBhbmQg YWJyaWRnZWQuDQoNCkkgaGF2ZSB0YWtlbiBvbiBib2FyZCB0aGUgY29tbWVudCBmcm9tIENhcnN0 ZW4gdGhhdCBwZXJoYXBzIGEgbWluaW11bSBsZXZlbCBvZiB0ZXJtaW5vbG9neSBpcyBhY2NlcHRh YmxlIGluIGNoYXJ0ZXIgdGV4dCwgYnV0IGRlbGliZXJhdGVseSB0cmllZCB0byBrZWVwIHRoZSBs YW5ndWFnZSBzaW1wbGUgYW5kIGZhaXJseSBnZW5lcmljIHRvIGVuYWJsZSB0aGUgcHJvcGVyIHdv cmsgb2YgdGVybWlub2xvZ3kgZGVmaW5pdGlvbiB0byB0YWtlIHBsYWNlIGluIHRoZSByZXF1aXJl bWVudHMgZG9jdW1lbnQgYXMgeW91IHN1Z2dlc3QuDQoNCkludHJvZHVjdGlvbg0KLS0tLS0tLS0t LS0tDQpSZW1vdGUgYXR0ZXN0YXRpb24gcHJvY2VkdXJlcyBjYW4gYmUgaW5jb3Jwb3JhdGVkIGlu IG5ldHdvcmsgcHJvdG9jb2xzIHRvDQpwcm92aWRlIHRoZSBiYXNpcyBmb3IgZXN0YWJsaXNoaW5n IGNsYWltcyBhYm91dCBhbiBlbnRpdHkgaW4gYSB0cnVzdHdvcnRoeQ0KbWFubmVyLiBTdWNoIGNs YWltcyBtYXkgaW5jbHVkZSwgYnV0IGFyZSBub3QgbGltaXRlZCB0bywgZGV2aWNlIGlkZW50aXR5 LA0KbWFudWZhY3R1cmluZyBvcmlnaW4sIHN5c3RlbSBpbnRlZ3JpdHksIGNvbmZpZ3VyYXRpb24s IG9wZXJhdGlvbmFsIHN0YXRlIGFuZA0KbWVhc3VyZW1lbnRzIG9mIHN0ZXBzIHdoaWNoIGxlZCB0 byB0aGUgb3BlcmF0aW9uYWwgc3RhdGUuIFN1Y2ggcHJvY2VkdXJlcw0KZXhwb3NlIGVudGl0eSBj aGFyYWN0ZXJpc3RpY3MgaW4gdGhlIGZvcm0gb2YgY2xhaW0gc2V0cyB3aGljaCBhbGxvdyByZW1v dGUNCnBhcnRpZXMgdG8gZXN0YWJsaXNoIHRoZSB0cnVzdHdvcnRoaW5lc3Mgb2YgYSBkZXZpY2Us IHByb3ZpZGUgZXZpZGVuY2UgdGhhdCBhDQpwYXJ0aWN1bGFyIHNldCBvZiBvcGVyYXRpb25zIGFu ZCBmdW5jdGlvbnMgYXJlIHN1cHBvcnRlZCBhbmQvb3IgdGhhdCB0aGUNCmVudGl0eSBpcyBhY3R1 YWxseSB3aGF0IGl0IGNsYWltcyB0byBiZS4NCkluIHRoZSBhYnNlbmNlIG9mIHN1Y2ggcHJvY2Vk dXJlcywgd2hpbGUgZG9tYWluLXNwZWNpZmljIGF0dGVzdGF0aW9uDQptZWNoYW5pc21zIHN1Y2gg YXMgVENHIFRQTSwgRklETyBBbGxpYW5jZSBhdHRlc3RhdGlvbiBhbmQgQW5kcm9pZCBLZXlzdG9y ZQ0KYXR0ZXN0YXRpb24gZXhpc3QsIHRoZXJlIGlzIG5vIGNvbW1vbiB3YXkgZm9yIGEgcmVtb3Rl IHBhcnR5IHRvIHRlbGwgaWYgZGF0YQ0Kb3JpZ2luYXRlcyBmcm9tIGEgdHJ1c3R3b3J0aHkgZGV2 aWNlIChlLmcuIGEgVHJ1c3RlZCBTeXN0ZW0gZGVzaWduZWQgdG8NCnN1cHBvcnQgYSBzcGVjaWZp YyBzZXQgb2Ygb3BlcmF0aW9ucy9mdW5jdGlvbmFsaXRpZXMpIG9yIG5vdC4NClRoZSBmb2xsb3dp bmcgbWluaW1hbCB0ZXJtaW5vbG9neSBpcyBkZWZpbmVkIGZvciB0aGUgcHVycG9zZXMgb2YgY2xh cmlmeWluZyB0aGUNCldvcmtpbmcgR3JvdXAgY2hhcnRlciB0ZXh0Og0KLSBhdHRlc3RhdGlvbjog YSBzZXQgb2YgY2xhaW1zIHdoaWNoIGNhbiBiZSB2ZXJpZmllZCBhcyBvcmlnaW5hdGluZyBpbiBh bg0KICAgICAgICAgIGVudGl0eS4NCi0gY2xhaW06ICBhcyBkZWZpbmVkIGluIFJGQzc1MTkuDQot IGVudGl0eTogYSBkZXZpY2Ugb3IgZGV2aWNlIHN1Yi1tb2R1bGUgdGhhdCBjYW4gZ2VuZXJhdGUg YSBjbGFpbSBvciBzZXQgb2YNCiAgICAgICAgICBjbGFpbXMgd2hpY2ggY2FuIGJlIHZlcmlmaWVk IGJ5IGEgcmVtb3RlIHBhcnR5Lg0KLSByZW1vdGUgcGFydHk6IGFuIGFjdG9yIHJlbW90ZSBmcm9t IGFuIGVudGl0eSB0aGF0IHdpc2hlcyB0byB2ZXJpZnkgd2hldGhlcg0KICAgICAgICAgIGEgY2xh aW0gb3Igc2V0IG9mIGNsYWltcyBvcmlnaW5hdGVkIGluIGEgZ2l2ZW4gZW50aXR5Lg0KRGVzY3Jp cHRpb24gb2YgdGhlIFdvcmtpbmcgR3JvdXANCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tDQpUaGUgV29ya2luZyBHcm91cCB3aWxsIGRlZmluZToNCi0gU3RhbmRhcmRpemVkIGFuZCBp bnRlcm9wZXJhYmxlIG1lY2hhbmlzbXMgdG8gZXN0YWJsaXNoIGEgc3VmZmljaWVudCBsZXZlbA0K ICBvZiBjb25maWRlbmNlIHRoYXQgZGF0YSBvcmlnaW5hdGVzIGZyb20gYSB0cnVzdHdvcnRoeSBl bnRpdHkgZGVzaWduZWQgdG8NCiAgc3VwcG9ydCBhIHNwZWNpZmljIHNldCBvZiBvcGVyYXRpb25z L2Z1bmN0aW9uYWxpdGllcy4NCi0gU3RhbmRhcmRpemVkIGFuZCBpbnRlcm9wZXJhYmxlIG1lY2hh bmlzbXMgYnVpbGRpbmcgb24gKDEpIHRvIGFsbG93IHJlbW90ZQ0KICBwYXJ0aWVzIHRvIGtub3cg dGhlIHByb3ZlbmFuY2UgYW5kIGNoYXJhY3RlcmlzdGljcyBvZiBhbiBlbnRpdHkgdGhhdCBtYXkg YmUNCiAgcmVxdWVzdGluZyBzZXJ2aWNlcy4NClRoZSBXb3JraW5nIEdyb3VwIHdpbGwgaWRlbnRp Znkgc2VjdXJpdHkgZ29hbHMgd2hpY2ggaXQgZXhwZWN0cyBhIHRydXN0d29ydGh5DQpleGVjdXRp b24gY29udGV4dCB0byBhZGRyZXNzLCB3aGljaCB3aWxsIGFzc3VtZSB0aGUgcHJlc2VuY2Ugb2Yg Um9vdHMgb2YNClRydXN0IChhcyBkZWZpbmVkIGJ5IE5JU1QgW1NQODAwLTE2NF0pLiBUaGUgZGV0 YWlsZWQgc3BlY2lmaWNhdGlvbiBvZiBzdWNoDQpjb250ZXh0cyBpcyBvdXQgb2Ygc2NvcGUuDQpU aGUgV29ya2luZyBHcm91cCB3aWxsIG1haW50YWluIGNsb3NlIHJlbGF0aW9uc2hpcHMgd2l0aCBi b2RpZXMgdW5kZXJ0YWtpbmcNCmNvbXBsZW1lbnRhcnkgd29yayBzdHJlYW1zIGluIHRoZSBhcmVh IG9mIHJlbW90ZSBhdHRlc3RhdGlvbiBzdWNoIGFzDQpHbG9iYWxQbGF0Zm9ybSwgVHJ1c3RlZCBD b21wdXRpbmcgR3JvdXAgYW5kIEZJRE8gQWxsaWFuY2UuDQpUaGUgV29ya2luZyBHcm91cCB3aWxs IGNvb3BlcmF0ZSB3aXRoIHRoZSBURUVQIFdvcmtpbmcgR3JvdXAsIHdoaWNoIG1heQ0KZ2VuZXJh dGUgcmVxdWlyZW1lbnRzIGZvciBjbGFpbXMgcmVsZXZhbnQgdG8gVEVFLg0KDQpXb3JrIEl0ZW1z DQotLS0tLS0tLS0tDQpUaGUgV29ya2luZyBHcm91cCB3aWxsIGRldmVsb3Agc3BlY2lmaWNhdGlv bnMgc3VwcG9ydGluZyB0aGUgY3JlYXRpb24gb2YNCmludGVyb3BlcmFibGUgcmVtb3RlIGF0dGVz dGF0aW9uIHByb2NlZHVyZXMgZm9yIGVudGl0aWVzIHdoaWNoIGluY29ycG9yYXRlDQpSb290cyBv ZiBUcnVzdC4gVGhlIG1haW4gZGVsaXZlcmFibGVzIGFyZSBhcyBmb2xsb3dzLg0KLSBQcm9kdWNl IGEgcmVxdWlyZW1lbnRzIGRvY3VtZW50IGVzdGFibGlzaGluZyBhIGNvbW1vbiB2b2NhYnVsYXJ5 IGZvciByZW1vdGUNCiAgYXR0ZXN0YXRpb24sIGlkZW50aWZ5aW5nIG1lY2hhbmlzbXMgd2hpY2gg d2lsbCBiZSBzdXBwb3J0ZWQgZm9yIGVzdGFibGlzaGluZw0KICB0cnVzdCBiZXR3ZWVuIGFuIGVu dGl0eSBhbmQgYSByZW1vdGUgcGFydHksIGFuZCBlbnVtZXJhdGluZyBzYW1wbGUgdXNlLWNhc2Vz DQogIGZvciByZW1vdGUgYXR0ZXN0YXRpb24uDQotIFByb2R1Y2Ugc3BlY2lmaWNhdGlvbiB0ZXh0 IGRlZmluaW5nIGludGVyb3BlcmFibGUgY3Jvc3MtcGxhdGZvcm0gY2xhaW1zIHdoaWNoDQogIHBy b3ZpZGUgaW5mb3JtYXRpb24gYWJvdXQgYW4gZW50aXR5IGluIHN1cHBvcnQgb2YgdGhlIHJlcXVp cmVkIHVzZS1jYXNlcywgYW5kDQogIGV4dGVuZGluZyB0aGUgc2V0IG9mIGNsYWltcyBkZWZpbmVk IGluIFJGQzc1MTkgYW5kIFJGQzgzOTIuIFRoZSBzcGVjaWZpY2F0aW9uDQogIHdpbGwgZGVzY3Jp YmUgdGhlIHN5bnRheCBmb3IgZWFjaCBjbGFpbSBpbiBhdCBsZWFzdCB0aGUgZm9sbG93aW5nIGZv cm1hdHM6DQogICAgLSBDQk9SIFtSRkM3MDQ5XQ0KICAgIC0gSlNPTiBbUkZDNzE1OV0NCiAgICAt IFlBTkcgW1JGQzYwMjBdDQotIFByb2R1Y2Ugc3BlY2lmaWNhdGlvbiB0ZXh0IGRlZmluaW5nIHBy b2NlZHVyZXMgYW5kIGNvcnJlc3BvbmRpbmcgYXJjaGl0ZWN0dXJlcw0KICBzdXBwb3J0aW5nIHZl cmlmaWNhdGlvbiBvZiBjbGFpbXMgd2l0aGluIGFuIGF0dGVzdGF0aW9uIGJhc2VkIG9uIG1lYXN1 cmVkIGZpbGUNCiAgZXhlY3V0aW9uIHByb2NlZHVyZXMgYW5kIHN1cHBvcnRpbmc6DQogICAgLSBF eHBsaWNpdCBhdHRlc3RhdGlvbiB3aGVyZWluIGEgc2V0IG9mIGNsYWltcyBpcyB0cmFuc3BvcnRl ZCBpbiB0aGUgYXR0ZXN0YXRpb247DQogICAgLSBJbXBsaWNpdCBhdHRlc3RhdGlvbiB3aGVyZWlu IGEgc2V0IG9mIGNsYWltcyBpcyBpbXBsaWVkIGJ5IHBvc3Nlc3Npb24gb2YgYSBzZWNyZXQuDQot IFByb2R1Y2Ugc3BlY2lmaWNhdGlvbiB0ZXh0IGRlZmluaW5nIHByb2NlZHVyZXMgYW5kIGNvcnJl c3BvbmRpbmcgYXJjaGl0ZWN0dXJlcw0KICBzdXBwb3J0aW5nIHZlcmlmaWNhdGlvbiBvZiBjbGFp bXMgZW5jYXBzdWxhdGVkIGluOg0KICAgIC0gQ0JPUiBXZWIgVG9rZW4gc3RydWN0dXJlcyBbUkZD ODM5Ml0NCiAgICAtIEpTT04gV2ViIFRva2VuIHN0cnVjdHVyZXMgW1JGQzc1MTldDQotIFBlcmZv cm0gcHJpdmFjeSBhbmFseXNpcyBvZiBib3RoIGNsYWltcyBhbmQgdGhlIGNyeXB0b2dyYXBoaWMg cHJvY2VkdXJlcyB1c2VkIHRvDQogIGVzdGFibGlzaCB0cnVzdC4gVGhpcyBpbmZvcm1hdGlvbiB3 aWxsIGJlIGluY2x1ZGVkIGFzIGFwcHJvcHJpYXRlIGluIHRoZQ0KICBkZWxpdmVyYWJsZSBzcGVj aWZpY2F0aW9ucywgYW5kIG1heSBpbXBseSBleHRlbnNpb24gb2YgcHJvY2VkdXJlcyBkZWZpbmVk IGluDQogIG90aGVyIHNwZWNpZmljYXRpb25zIGluIHN1cHBvcnQgb2YgcHJpdmFjeSBnb2Fscy4N Cg0KSXQgc2VlbXMgdG8gbWUgdGhhdCB0aGVyZSBhcmUgdHdvIHdheXMgdG8gcHJvZHVjZSB0aGUg bWFpbiBzcGVjaWZpY2F0aW9uIGRlbGl2ZXJhYmxlcy4gSSBoYXZlIGRlbGliZXJhdGVseSBsZWZ0 IHRoZSB0ZXh0IGFib3ZlIHNsaWdodGx5IHZhZ3VlIG9uIHRoaXMuDQoNCiAgKiAgIEEgY2xhaW1z IHNwZWNpZmljYXRpb24gY29tbW9uIHRvIFJBVFMgYW5kIEVBVCB3aXRoIHNlcGFyYXRlIFJBVFMg YW5kIEVBVCBwcm9jZWR1cmUgc3BlY2lmaWNhdGlvbnMuDQogICogICBBIGNsYWltcyBzcGVjaWZp Y2F0aW9uIGFsc28gaW5jb3Jwb3JhdGluZyBFQVQgcHJvY2VkdXJlcyBhbmQgYSBzZXBhcmF0ZSBS QVRTIHByb2NlZHVyZSBzcGVjaWZpY2F0aW9uLiBUaGlzIHdvdWxkIGJlIG15IHByZWZlcnJlZCBv cHRpb24uDQoNCiAgICAgKiAgIEkgYmVsaWV2ZSB0aGVyZSBhcmUgdmVyeSBmZXcgcHJvY2VkdXJl cyBuZWVkZWQgZm9yIEVBVCBvdGhlciB0aGFuIHRoZSBwb3NzaWJsZSBuZWVkIHRvIHN1cHBvcnQg YSBub25jZSB0byBlbnN1cmUgZnJlc2huZXNzDQoNCg0KSmVyZW15DQoNCk5vdGljZSBob3cgYnkg YWJvdXQgdGhlIHNlY29uZCBwYXJhZ3JhcGggKDZ0aXNjaCB0YWtlcyBhIGJpdCBsb25nZXIpLCBl YWNoDQpnZXRzIGludG8gd2hhdCB0aGUgV0cgd2lsbCBkbz8NCg0KLS0NCk1pY2hhZWwgUmljaGFy ZHNvbiA8bWNyK0lFVEZAc2FuZGVsbWFuLmNhPG1haWx0bzptY3IrSUVURkBzYW5kZWxtYW4uY2E+ PiwgU2FuZGVsbWFuIFNvZnR3YXJlIFdvcmtzDQotPSBJUHY2IElvVCBjb25zdWx0aW5nID0tDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KRUFUIG1haWxp bmcgbGlzdA0KRUFUQGlldGYub3JnPG1haWx0bzpFQVRAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KDQpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KRUFUIG1haWxpbmcgbGlzdA0KRUFUQGlldGYub3JnPG1h aWx0bzpFQVRAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2VhdA0KDQo= --_000_1F4B0DE532F44F09B25A1A088F108362qtiqualcommcom_ Content-Type: text/html; charset="utf-8" Content-ID: <4167F494A953A242A0FB5AC23F4AB82F@qualcomm.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NClRoYW5rcyBmb3IgdGhlIGZlZWRiYWNrIG9uIG15 IHRleHQuIFRoZSB0ZXh0IGJlbG93IG1ha2VzIHRoZSBmb2xsb3dpbmcgY2hhbmdlcywgYWRkcmVz c2luZyBjb21tZW50cyBmcm9tIGxpc3QgY29udHJpYnV0b3JzOg0KPGRpdiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPg0KPHVsIGNsYXNzPSJNYWlsT3V0bGluZSI+DQo8bGkg Y2xhc3M9IiI+YWxpZ25zIG1vcmUgY2xvc2VseSB3aXRoIE5JU1QgdGVybWlub2xvZ3kgLSBub3Rl IHRoYXQgTklTVCBkb2VzIG5vdCBoYXZlIGEgY2xlYXIgc2V0IG9mIGRlZmluaXRpb25zIGZvciBh bGwgb2YgdGhlIHRlcm1pbm9sb2d5IHVzZWQsIHNvIHNvbWUgb2YgdGhlIHRleHQgaXMgbXkgaW50 ZXJwcmV0YXRpb24gb2YgdGhlIGNvbnRlbnQgb2YgU1AgODAwLTY0LCBhaWRlZCBieSB0aGUgaW5w dXQgZnJvbSBOZWQuPC9saT48bGkgY2xhc3M9IiI+YWRkcyB0ZXh0IGFkZHJlc3NpbmcgdGhlIHBv c3NpYmxlIG5lZWQgdG8gcHJvdGVjdCBjb21lIGNsYWltcyBmcm9tIHVuYXV0aG9yaXNlZCBkaXNj bG9zdXJlIGZvciBwcml2YWN5IG9yIHNlY3VyaXR5IHJlYXNvbjwvbGk+PGxpIGNsYXNzPSIiPmFk ZHMgdGV4dCBzdXBwb3J0aW5nIEFTTi4xIGFzIGEgc3ludGF4IGZvciBjbGFpbXMuPC9saT48L3Vs Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SSBo YXZlIHVzZWQgc29tZSBzaW1wbGUgbWFya3VwIHRvIGlkZW50aWZ5IHRoZSBjaGFuZ2VzLjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAx MXB4OyIgY2xhc3M9IiI+SW50cm9kdWN0aW9uPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIi Pi0tLS0tLS0tLS0tLTwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291 cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+ DQo8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBz dHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+UmVtb3RlIDxmb250IGNvbG9yPSIjOTQy MTkyIiBjbGFzcz0iIj4NCkE8L2ZvbnQ+dHRlc3RhdGlvbiBwcm9jZWR1cmVzIGNhbiBiZSBpbmNv cnBvcmF0ZWQgaW4gbmV0d29yayBwcm90b2NvbHMgdG88L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xh c3M9IiI+cHJvdmlkZSB0aGUgYmFzaXMgZm9yIGVzdGFibGlzaGluZw0KPGZvbnQgY29sb3I9IiM5 NDIxOTIiIGNsYXNzPSIiPkNsYWltczwvZm9udD4gYWJvdXQgYSA8Zm9udCBjb2xvcj0iIzk0MjE5 MiIgY2xhc3M9IiI+DQpEZXZpY2U8L2ZvbnQ+IGluIGEgdHJ1c3R3b3J0aHnigKg8L2ZvbnQ+PC9k aXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1z aXplOiAxMXB4OyIgY2xhc3M9IiI+bWFubmVyLiBTdWNoDQo8Zm9udCBjb2xvcj0iIzk0MjE5MiIg Y2xhc3M9IiI+QzwvZm9udD5sYWltcyBtYXkgaW5jbHVkZSwgYnV0IGFyZSBub3QgbGltaXRlZCB0 bywgZGV2aWNlIGlkZW50aXR5LOKAqDwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQg ZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj5tYW51 ZmFjdHVyaW5nIG9yaWdpbiwgc3lzdGVtIGludGVncml0eSwgY29uZmlndXJhdGlvbiwgb3BlcmF0 aW9uYWwgc3RhdGUgYW5k4oCoPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNl PSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPm1lYXN1cmVt ZW50cyBvZiBzdGVwcyB3aGljaCBsZWQgdG8gdGhlIG9wZXJhdGlvbmFsIHN0YXRlLiBTdWNoIHBy b2NlZHVyZXPigKg8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJp ZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+ZXhwb3NlIDxmb250IGNv bG9yPSIjOTQyMTkyIiBjbGFzcz0iIj4NCkQ8L2ZvbnQ+ZXZpY2UgY2hhcmFjdGVyaXN0aWNzIGlu IHRoZSBmb3JtIG9mIDxmb250IGNvbG9yPSIjOTQyMTkyIiBjbGFzcz0iIj5DPC9mb250PmxhaW0g c2V0cyB3aGljaCBhbGxvdyBhDQo8Zm9udCBjb2xvcj0iIzk0MjE5MiIgY2xhc3M9IiI+UmVseWlu Z+KAqDwvZm9udD48L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJp ZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+PGZvbnQgY29sb3I9IiM5 NDIxOTIiIGNsYXNzPSIiPlBhcnR5LCB1c2luZyBhIFZlcmlmaWVyLDwvZm9udD4gdG8gZXN0YWJs aXNoIHRoZSB0cnVzdHdvcnRoaW5lc3Mgb2YgYQ0KPGZvbnQgY29sb3I9IiM5NDIxOTIiIGNsYXNz PSIiPkRldmljZTwvZm9udD4sIHByb3ZpZGU8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxm b250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+ ZXZpZGVuY2UgdGhhdCBh4oCoIHBhcnRpY3VsYXIgc2V0IG9mIG9wZXJhdGlvbnMgYW5kIGZ1bmN0 aW9ucyBhcmUgc3VwcG9ydGVkIGFuZC9vcjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZv bnQgZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj50 aGF0IHRoZQ0KPGZvbnQgY29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPkQ8L2ZvbnQ+ZXZpY2UgaXMg YWN0dWFsbHkgd2hhdCBpdCA8Zm9udCBjb2xvcj0iIzk0MjE5MiIgY2xhc3M9IiI+DQpkZWNsYXJl cyBpdHNlbGY8L2ZvbnQ+IHRvIGJlLjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQg ZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj48YnIg Y2xhc3M9IiI+DQo8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJp ZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+SW4gdGhlIGFic2VuY2Ug b2Ygc3VjaCBwcm9jZWR1cmVzLCB3aGlsZSBkb21haW4tc3BlY2lmaWMgYXR0ZXN0YXRpb24gbWVj aGFuaXNtczwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBO ZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj5zdWNoIGFzIFRDRyBUUE0sIEZJ RE8gQWxsaWFuY2UgYXR0ZXN0YXRpb24gYW5kIEFuZHJvaWQgS2V5c3RvcmUgYXR0ZXN0YXRpb248 L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHls ZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+ZXhpc3QsIHRoZXJlIGlzIG5vIGNvbW1vbiB3 YXkgZm9yIGENCjxmb250IGNvbG9yPSIjOTQyMTkyIiBjbGFzcz0iIj5SZWx5aW5nIFBhcnR5PC9m b250PiB0byB0ZWxsIGlmIDxmb250IGNvbG9yPSIjOTQyMTkyIiBjbGFzcz0iIj4NCkM8L2ZvbnQ+ bGFpbXMgb3JpZ2luYXRlPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJD b3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPmZyb20gYSB0cnVz dHdvcnRoeSBkZXZpY2UgKGUuZy4gYQ0KPGZvbnQgY29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPnQ8 L2ZvbnQ+cnVzdGVkIDxmb250IGNvbG9yPSIjOTQyMTkyIiBjbGFzcz0iIj5zPC9mb250PnlzdGVt IGRlc2lnbmVkIHRv4oCoc3VwcG9ydCBhIHNwZWNpZmljPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNs YXNzPSIiPnNldCBvZiBvcGVyYXRpb25zL2Z1bmN0aW9uYWxpdGllcykgb3Igbm90LjwvZm9udD48 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250 LXNpemU6IDExcHg7IiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2ZvbnQ+PC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4 OyIgY29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPlRlcm1pbm9sb2d5IGZyb20gTklTVCBbU1A4MDAt NjRdIGlzIHVzZWQgd2l0aCB0aGUgZm9sbG93aW5nIGRlZmluaXRpb25zIGluIHRoaXM8L2ZvbnQ+ PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9u dC1zaXplOiAxMXB4OyIgY29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPmNoYXJ0ZXIuPC9mb250Pjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQt c2l6ZTogMTFweDsiIGNvbG9yPSIjOTQyMTkyIiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Zv bnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0i Zm9udC1zaXplOiAxMXB4OyIgY29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPi0gQXR0ZXN0YXRpb246 IGEgc2V0IG9mIENsYWltcyBmb3Igd2hpY2ggYSBWZXJpZmllciBjYW4gZXN0YWJsaXNoIHRoZSBz b3VyY2U8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3 IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPiZuYnNw OyB1bmlxdWVseSBhbmQgd2l0aG91dCByZXB1ZGlhdGlvbi48L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNs YXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIg Y29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPi0gQ2xhaW06IEEgcmVsaWFibGUgYXNzZXJ0aW9uIGFi b3V0IHRoZSB0cnVzdGVkIHN0YXRlIG9mIGEgRGV2aWNlIHN1Y2ggYXM8L2ZvbnQ+PC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAx MXB4OyIgY29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPiZuYnNwOyBpdHMgY29uZmlndXJhdGlvbiwg aGVhbHRoLCBvciBvcGVyYXRpbmcgc3RhdHVzLiBBbHNvIHVzZWQgaW4gW1JGQzc1MTldLjwvZm9u dD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJm b250LXNpemU6IDExcHg7IiBjb2xvcj0iIzk0MjE5MiIgY2xhc3M9IiI+LSBEZXZpY2U6IGFuIG9i amVjdCBoYXZpbmcgc29tZSBzcGVjaWZpYyBwdXJwb3NlLCBvciBhIHN1Yi1tb2R1bGUgb2Ygc3Vj aCBhbjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXci IHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjb2xvcj0iIzk0MjE5MiIgY2xhc3M9IiI+Jm5ic3A7 IG9iamVjdCwgdGhhdCBjYW4gZ2VuZXJhdGUgYSBDbGFpbSBvciBzZXQgb2bigKggQ2xhaW1zIHdo b3NlIHNvdXJjZSBhbmQgaW50ZWdyaXR5PC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9u dCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNvbG9yPSIjOTQy MTkyIiBjbGFzcz0iIj4mbmJzcDsgY2FuIGJlIGVzdGFibGlzaGVkIGJ5IGEgVmVyaWZpZXIuPC9m b250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9 ImZvbnQtc2l6ZTogMTFweDsiIGNvbG9yPSIjOTQyMTkyIiBjbGFzcz0iIj4tIFJlbHlpbmcgUGFy dHk6IGFuIGFjdG9yIHJlbW90ZSBmcm9tIGEgRGV2aWNlIHRoYXQgd2lzaGVzIHRvIHZlcmlmeSB3 aGV0aGVy4oCoYTwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmll ciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjb2xvcj0iIzk0MjE5MiIgY2xhc3M9IiI+ Jm5ic3A7IENsYWltIG9yIHNldCBvZiBDbGFpbXMgb3JpZ2luYXRlZCBpbiBhIGdpdmVuIERldmlj ZS48L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBz dHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPi0gVmVyaWZp ZXI6IGFuIGFjdG9yIHRydXN0ZWQgYnkgdGhlIFJlbHlpbmcgUGFydHkgdG8gZXN0YWJsaXNoIHRo ZSBzb3VyY2Ugb2YgYTwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291 cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjb2xvcj0iIzk0MjE5MiIgY2xhc3M9 IiI+Jm5ic3A7IENsYWltIG9yIHNldCBvZiBDbGFpbXMgdW5pcXVlbHkgYW5kIHdpdGhvdXQgcmVw dWRpYXRpb24sPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVy IE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNvbG9yPSIjOTQyMTkyIiBjbGFzcz0iIj4t IFJvb3Qgb2YgVHJ1c3Q6IGEgc2VjdXJpdHkgcHJpbWl0aXZlIHByb3ZpZGluZyBhIHNldCBvZiB0 cnVzdGVkLDwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBO ZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjb2xvcj0iIzk0MjE5MiIgY2xhc3M9IiI+Jm5i c3A7IHNlY3VyaXR5LWNyaXRpY2FsIGZ1bmN0aW9ucy48L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNz PSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xh c3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBm YWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPkRlc2Ny aXB0aW9uIG9mIHRoZSBXb3JraW5nIEdyb3VwPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIi Pi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNs YXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQg ZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj5UaGUg V29ya2luZyBHcm91cCB3aWxsIGRlZmluZTo8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxm b250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJD b3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPjEuIFN0YW5kYXJk aXplZCBhbmQgaW50ZXJvcGVyYWJsZSBtZWNoYW5pc21zIHRvIGVzdGFibGlzaCBhIHN1ZmZpY2ll bnQgbGV2ZWzigKhvZjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291 cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj4mbmJzcDsgJm5ic3A7 Y29uZmlkZW5jZSB0aGF0DQo8Zm9udCBjb2xvcj0iIzk0MjE5MiIgY2xhc3M9IiI+Q2xhaW1zPC9m b250PiBvcmlnaW5hdGUgZnJvbSBhIHRydXN0d29ydGh5IDxmb250IGNvbG9yPSIjOTQyMTkyIiBj bGFzcz0iIj4NCkRldmljZTwvZm9udD4gZGVzaWduZWQgdG/igKg8L2ZvbnQ+PC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4 OyIgY2xhc3M9IiI+Jm5ic3A7ICZuYnNwO3N1cHBvcnQgYSBzcGVjaWZpYyBzZXQgb2Ygb3BlcmF0 aW9ucy9mdW5jdGlvbmFsaXRpZXMu4oCoPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9u dCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPjIu IFN0YW5kYXJkaXplZCBhbmQgaW50ZXJvcGVyYWJsZSBtZWNoYW5pc21zIGJ1aWxkaW5nIG9uICgx KSB0byBhbGxvdw0KPGZvbnQgY29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPlJlbHlpbmc8L2ZvbnQ+ PC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5 bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPjxmb250IGNvbG9yPSIjOTQyMTkyIiBjbGFz cz0iIj4mbmJzcDsgJm5ic3A7UGFydGllczwvZm9udD4gdG8ga25vdyB0aGUgcHJvdmVuYW5jZSBh bmQgY2hhcmFjdGVyaXN0aWNzIG9mIGENCjxmb250IGNvbG9yPSIjOTQyMTkyIiBjbGFzcz0iIj5E ZXZpY2U8L2ZvbnQ+IHRoYXQgbWF5IGJl4oCoPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48 Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIi PiZuYnNwOyAmbmJzcDtyZXF1ZXN0aW5nIHNlcnZpY2VzLjwvZm9udD48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBj b2xvcj0iIzk0MjE5MiIgY2xhc3M9IiI+My4gU3RhbmRhcmRpemVkIGFuZCBpbnRlcm9wZXJhYmxl IG1lY2hhbmlzbXMgdG8gcHJvdGVjdCBDbGFpbXMgd2hpY2ggbWF5IG5lZWQgdG88L2ZvbnQ+PC9k aXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1z aXplOiAxMXB4OyIgY29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDtiZSBwcm90 ZWN0ZWQgZnJvbSB1bmF1dGhvcmlzZWQgZGlzY2xvc3VyZSBmb3IgcHJpdmFjeSBhbmQvb3Igc2Vj dXJpdHk8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3 IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPiZuYnNw OyAmbmJzcDtyZWFzb25zLjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0i Q291cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3 IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+VGhlIFdvcmtpbmcgR3JvdXAgd2ls bCBpZGVudGlmeSBzZWN1cml0eSBnb2FscyB3aGljaCBpdCBleHBlY3RzIGEgdHJ1c3R3b3J0aHk8 L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHls ZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+ZXhlY3V0aW9uIGNvbnRleHQgdG8gYWRkcmVz cywgd2hpY2ggd2lsbCBhc3N1bWUgdGhlIHByZXNlbmNlIG9mIG9uZSBvciBtb3JlPC9mb250Pjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQt c2l6ZTogMTFweDsiIGNsYXNzPSIiPlJvb3RzIG9m4oCoVHJ1c3QuIFRoZSBkZXRhaWxlZCBzcGVj aWZpY2F0aW9uIG9mIHN1Y2jigKhjb250ZXh0cyBpcyBvdXQgb2Ygc2NvcGUuPC9mb250PjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6 ZTogMTFweDsiIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZm9udD48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBj bGFzcz0iIj5UaGUgV29ya2luZyBHcm91cCB3aWxsIG1haW50YWluIGNsb3NlIHJlbGF0aW9uc2hp cHMgd2l0aCBib2RpZXMgdW5kZXJ0YWtpbmfigKg8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9 IiI+Y29tcGxlbWVudGFyeSB3b3JrIHN0cmVhbXMgaW4gdGhlIGFyZWEgb2YgcmVtb3RlIEF0dGVz dGF0aW9uIHN1Y2ggYXPigKg8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9 IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+R2xvYmFsUGxh dGZvcm0sIFRydXN0ZWQgQ29tcHV0aW5nIEdyb3VwIGFuZCBGSURPIEFsbGlhbmNlLjwvZm9udD48 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250 LXNpemU6IDExcHg7IiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2ZvbnQ+PC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4 OyIgY2xhc3M9IiI+VGhlIFdvcmtpbmcgR3JvdXAgd2lsbCBjb29wZXJhdGUgd2l0aCB0aGUgVEVF UCBXb3JraW5nIEdyb3VwLCB3aGljaCBtYXnigKhnZW5lcmF0ZTwvZm9udD48L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7 IiBjbGFzcz0iIj5yZXF1aXJlbWVudHMgZm9yDQo8Zm9udCBjb2xvcj0iIzk0MjE5MiIgY2xhc3M9 IiI+QzwvZm9udD5sYWltcyByZWxldmFudCB0byBURUUuPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNs YXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQg ZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjb2xvcj0iIzk0MjE5 MiIgY2xhc3M9IiI+VGhlIFdvcmtpbmcgR3JvdXAgd2lsbCBpZGVudGlmeSB1c2UtY2FzZXMgZm9y IGludGVyb3BlcmFiaWxpdHkgd2l0aCBQS0k8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxm b250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY29sb3I9IiM5 NDIxOTIiIGNsYXNzPSIiPmluZnJhc3RydWN0dXJlIGFuZCB3aWxsIHdvcmsgd2l0aCB0aGUgZWRp dG9yIG9mIFNDRVAgYW5kIHRoZSBBQ01FIFdvcmtpbmcgR3JvdXA8L2ZvbnQ+PC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4 OyIgY29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPnRvIGFkZHJlc3MgdGVjaG5pY2FsIHNvbHV0aW9u cyBmb3IgdGhlc2UuPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3Vy aWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4N CjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0 eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj5Xb3JrIEl0ZW1zPC9mb250PjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTog MTFweDsiIGNsYXNzPSIiPi0tLS0tLS0tLS08L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxm b250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+ PGJyIGNsYXNzPSIiPg0KPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJD b3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPlRoZSBXb3JraW5n IEdyb3VwIHdpbGwgZGV2ZWxvcCBzcGVjaWZpY2F0aW9ucyBzdXBwb3J0aW5nIHRoZSBjcmVhdGlv bjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0 eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj5vZuKAqCBpbnRlcm9wZXJhYmxlIFJlbW90 ZSBBdHRlc3RhdGlvbiBwcm9jZWR1cmVzIGZvciBkZXZpY2VzIHdoaWNoIGluY29ycG9yYXRlPC9m b250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgc3R5bGU9 ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPmF04oCoIGxlYXN0IG9uZSBSb290IG9mIFRydXN0 LjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0 eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2ZvbnQ+PC9k aXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1z aXplOiAxMXB4OyIgY2xhc3M9IiI+LSBQcm9kdWNlIGEgcmVxdWlyZW1lbnRzIGRvY3VtZW50IGVz dGFibGlzaGluZyBhIGNvbW1vbiB2b2NhYnVsYXJ5IGZvciByZW1vdGXigKg8L2ZvbnQ+PC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXpl OiAxMXB4OyIgY2xhc3M9IiI+Jm5ic3A7IEF0dGVzdGF0aW9uLCBpZGVudGlmeWluZyBtZWNoYW5p c21zIHdoaWNoIHdpbGwgYmUgc3VwcG9ydGVkIGZvciBlc3RhYmxpc2hpbmfigKg8L2ZvbnQ+PC9k aXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1z aXplOiAxMXB4OyIgY2xhc3M9IiI+Jm5ic3A7IHRydXN0IGJldHdlZW4gYQ0KPGZvbnQgY29sb3I9 IiM5NDIxOTIiIGNsYXNzPSIiPkRldmljZTwvZm9udD4gYW5kIGEgPGZvbnQgY29sb3I9IiM5NDIx OTIiIGNsYXNzPSIiPg0KUmVseWluZyBQYXJ0eTwvZm9udD4sIGFuZCBlbnVtZXJhdGluZyBzYW1w bGUgdXNlLWNhc2Vz4oCoPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJD b3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPiZuYnNwOyBmb3Ig UmVtb3RlIEF0dGVzdGF0aW9uLjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFj ZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj4tIFByb2R1 Y2UgYSBzcGVjaWZpY2F0aW9uIGRlZmluaW5nIGludGVyb3BlcmFibGUgY3Jvc3MtcGxhdGZvcm0g Q2xhaW1zIHdoaWNo4oCoPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJD b3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPiZuYnNwOyBwcm92 aWRlIGluZm9ybWF0aW9uIGFib3V0IGEgRGV2aWNlIGluIHN1cHBvcnQgb2YgdGhlIHJlcXVpcmVk IHVzZS1jYXNlcywgYW5k4oCoPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNl PSJDb3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPiZuYnNwOyBl eHRlbmRpbmcgdGhlIHNldCBvZiBDbGFpbXMgZGVmaW5lZCBpbiBSRkM3NTE5IGFuZCBSRkM4Mzky LiBUaGUgc3BlY2lmaWNhdGlvbuKAqDwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQg ZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj4mbmJz cDsgd2lsbCBkZXNjcmliZSB0aGUgc3ludGF4IGZvciBlYWNoIENsYWltIGluIGF0IGxlYXN0IHRo ZSBmb2xsb3dpbmcgZm9ybWF0czrigKg8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250 IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+Jm5i c3A7IC0gQ0JPUiBbUkZDNzA0OV3igKg8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250 IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+Jm5i c3A7IC0gSlNPTiBbUkZDNzE1OV3igKg8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250 IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+Jm5i c3A7IC0gWUFORyBbUkZDNjAyMF08L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZh Y2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+Jm5ic3A7 PGZvbnQgY29sb3I9IiM5NDIxOTIiIGNsYXNzPSIiPiAtIEFTTi4xPC9mb250PjwvZm9udD48L2Rp dj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250LXNp emU6IDExcHg7IiBjbGFzcz0iIj4tIFByb2R1Y2UgYSBzcGVjaWZpY2F0aW9uIGRlZmluaW5nIHBy b2NlZHVyZXMgYW5kIGNvcnJlc3BvbmRpbmcgYXJjaGl0ZWN0dXJlc+KAqDwvZm9udD48L2Rpdj4N CjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6 IDExcHg7IiBjbGFzcz0iIj4mbmJzcDsgc3VwcG9ydGluZyB2ZXJpZmljYXRpb24gb2YgQ2xhaW1z IHdpdGhpbiBhbiBBdHRlc3RhdGlvbiBiYXNlZCBvbiBtZWFzdXJlZDwvZm9udD48L2Rpdj4NCjxk aXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0eWxlPSJmb250LXNpemU6IDEx cHg7IiBjbGFzcz0iIj4mbmJzcDsgZmlsZeKAqCBleGVjdXRpb24gcHJvY2VkdXJlcyBhbmQgc3Vw cG9ydGluZzrigKg8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJp ZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+Jm5ic3A7IC0gRXhwbGlj aXQgQXR0ZXN0YXRpb24gd2hlcmVpbiBhIHNldCBvZiBDbGFpbXMgaXMgdHJhbnNwb3J0ZWQgaW4g dGhlPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIg c3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsgQXR0ZXN0YXRp b2474oCoPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5l dyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPiZuYnNwOyAtIEltcGxpY2l0IEF0 dGVzdGF0aW9uIHdoZXJlaW4gYSBzZXQgb2YgQ2xhaW1zIGlzIGltcGxpZWQgYnkgcG9zc2Vzc2lv biBvZiBhPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5l dyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPiZuYnNwOyAmbmJzcDsgc2VjcmV0 LjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0 eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj4tIFByb2R1Y2UgYSBzcGVjaWZpY2F0aW9u IGRlZmluaW5nIHByb2NlZHVyZXMgYW5kIGNvcnJlc3BvbmRpbmcgYXJjaGl0ZWN0dXJlc+KAqDwv Zm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIHN0eWxl PSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj4mbmJzcDsgc3VwcG9ydGluZyB2ZXJpZmljYXRp b24gb2YgQ2xhaW1zIGVuY2Fwc3VsYXRlZCBpbjo8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9 IiI+Jm5ic3A7IC0gQ0JPUiBXZWIgVG9rZW4gc3RydWN0dXJlcyBbUkZDODM5Ml3igKg8L2ZvbnQ+ PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBzdHlsZT0iZm9u dC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+Jm5ic3A7IC0gSlNPTiBXZWIgVG9rZW4gc3RydWN0dXJl cyBbUkZDNzUxOV08L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJp ZXIgTmV3IiBzdHlsZT0iZm9udC1zaXplOiAxMXB4OyIgY2xhc3M9IiI+LSBQZXJmb3JtIHByaXZh Y3kgYW5hbHlzaXMgb2YgYm90aCBDbGFpbXMgYW5kIHRoZSBjcnlwdG9ncmFwaGljIHByb2NlZHVy ZXMgdXNlZDwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBO ZXciIHN0eWxlPSJmb250LXNpemU6IDExcHg7IiBjbGFzcz0iIj4mbmJzcDsgdG/igKggZXN0YWJs aXNoIHRydXN0LiBUaGlzIGluZm9ybWF0aW9uIHdpbGwgYmUgaW5jbHVkZWQgYXMgYXBwcm9wcmlh dGUgaW4gdGhl4oCoPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3Vy aWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPiZuYnNwOyBkZWxpdmVy YWJsZSBzcGVjaWZpY2F0aW9ucywgYW5kIG1heSBpbXBseSBleHRlbnNpb24gb2YgcHJvY2VkdXJl cyBkZWZpbmVkIGlu4oCoPC9mb250PjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48Zm9udCBmYWNlPSJD b3VyaWVyIE5ldyIgc3R5bGU9ImZvbnQtc2l6ZTogMTFweDsiIGNsYXNzPSIiPiZuYnNwOyBvdGhl ciBzcGVjaWZpY2F0aW9ucyBpbiBzdXBwb3J0IG9mIHByaXZhY3kgZ29hbHMuPC9mb250PjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+PGJyIGNsYXNzPSIi Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPk9uIDI0 IE9jdCAyMDE4LCBhdCAxMjozNiwgSmVyZW15IE8nRG9ub2dodWUgJmx0OzxhIGhyZWY9Im1haWx0 bzpqb2Rvbm9naEBxdGkucXVhbGNvbW0uY29tIiBjbGFzcz0iIj5qb2Rvbm9naEBxdGkucXVhbGNv bW0uY29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdl LW5ld2xpbmUiPg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9IndvcmQtd3JhcDogYnJlYWst d29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyBsaW5lLWJyZWFrOiBhZnRlci13aGl0ZS1z cGFjZTsiIGNsYXNzPSIiPg0KSEkgRXJpYyw8YnIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFz cz0iIj5PbiAyMyBPY3QgMjAxOCwgYXQgMTk6MDQsIEVyaWMgVm9pdCAoZXZvaXQpICZsdDs8YSBo cmVmPSJtYWlsdG86ZXZvaXRAY2lzY28uY29tIiBjbGFzcz0iIj5ldm9pdEBjaXNjby5jb208L2E+ Jmd0OyB3cm90ZTo8L2Rpdj4NCjxiciBjbGFzcz0iQXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZSI+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIiBzdHlsZT0icGFnZTog V29yZFNlY3Rpb24xOyBjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxkaXYgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTog JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNv bG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+SGkgSmVyZW15LDxvOnAgY2xhc3M9IiI+ PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVv dDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250 LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBj bGFzcz0iIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWls eTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7 IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+VGhhbmtzIGZvciB0YWtpbmcgYSBj dXQgYXQgdGhpcyBjaGFydGVyIHNpbXBsaWZpY2F0aW9uLiZuYnNwOyBUaGVyZSBhcmUgYSBmZXcg YXJlYXMgY292ZXJlZCB3aXRoaW4gdGhlPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMvY2hh cnRlci9ibG9iL1JDMi9pZXRmLXJhdHMtY2hhcnRlci5tZCIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7 IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+R2l0SHViDQogR29hbHM8L2E+ d2hpY2ggSSBjYW7igJl0IGVhc2lseSBtYXAgdG8geW91ciB0ZXh0IGJlbG93LiZuYnNwOyBDb3Vs ZCB5b3UgdGFsayBhYm91dCBob3cgdGhlc2UgZWxlbWVudHMgYXJlIGNvdmVyZWQgKG9yIG5vdCk/ Jm5ic3A7Jm5ic3A7IEZvciBjb250ZXh0LCBJIGFtIHdvcmtpbmcgZnJvbSB0aGUgcGVyc3BlY3Rp dmUgb2Y8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEg aHJlZj0iaHR0cHM6Ly93d3cuY2lzY28uY29tL2MvZGFtL2VuL3VzL3RkL2RvY3MvY2xvdWQtc3lz dGVtcy1tYW5hZ2VtZW50L2FwcGxpY2F0aW9uLXBvbGljeS1pbmZyYXN0cnVjdHVyZS1jb250cm9s bGVyLWVudGVycHJpc2UtbW9kdWxlLzEtNS14L2ludGVncml0eV92ZXJpZmljYXRpb24vdXNlci1n dWlkZS9DaXNjb19JbnRlZ3JpdHlfVmVyaWZpY2F0aW9uX0FwcGxpY2F0aW9uX0FQSUMtRU1fVXNl cl9HdWlkZV8xXzVfMF94LnBkZiIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlv bjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+cmVtb3RlDQogYXR0ZXN0YXRpb24gYXBwbGljYXRpb248 L2E+PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPmRldmVs b3BlciB0cnlpbmcgdG8gc3RhbmRhcmRpemUgdGhlIGludGVyZmFjZXMgYmV0d2VlbiBhIGNvbnRy b2xsZXIgKHdoaWNoIGlzIGFjdGluZyBhcyBhIGNsYWltIHZlcmlmaWVyKSBhbmQgYSBuZXR3b3Jr IGVsZW1lbnQgKHdoaWNoIGluY2x1ZGVzIFRDRyBiYXNlZCBzdWJzeXN0ZW1zLikmbmJzcDs8bzpw IGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBp biAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTog MTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDcz LCAxMjUpOyIgY2xhc3M9IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9kaXY+ DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsg Zm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0i Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBz YW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPkZvciBteSBhcHBs aWNhdGlvbiB0byB3b3JrIHByb3Blcmx5LCB0aGVyZSBhcmUgc2V2ZXJhbCB0aGluZ3MgbmVlZGVk IHdpdGhpbiBhIG5ldHdvcmsgY29udHJvbGxlciB0byB2YWxpZGF0ZSB0aGUgYXNzZXJ0ZWQgY2xh aW1zIGNvbWluZyBvdXQgb2YgYSByb3V0ZXIuJm5ic3A7IFRoZXNlDQogaW5jbHVkZTo8bzpwIGNs YXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAw LjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFw dDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAx MjUpOyIgY2xhc3M9IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9kaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQgMC41aW47IGZvbnQtc2l6ZTogMTJw dDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IHRleHQt aW5kZW50OiAtMC4yNWluOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0 OyBmb250LWZhbWlseTogU3ltYm9sOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIi PjxzcGFuIGNsYXNzPSIiPsK3PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgZm9udC1zdHJldGNoOiBu b3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFsOyBmb250LWZhbWlseTog JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7OyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjwvc3Bhbj48L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEx cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3Mywg MTI1KTsiIGNsYXNzPSIiPkhvdw0KIGRvIHdlIGV4cG9zZSB0aGUgYXR0ZXN0YXRpb24gZXZpZGVu Y2Ugd2hpY2ggY2FuIGJlIHVzZWQgdG8gdmFsaWRhdGUgYXNzZXJ0ZWQgY2xhaW1zPzwvc3Bhbj48 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNzPSIiPjxiciBj bGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5JIHRoaW5rIHRoYXQgdGhlIG5lZWQgdG8g YWRkcmVzcyB0aGlzIGlzIGNvdmVyZWQgc3VmZmljaWVudGx5IGZvciBhIFdHIENoYXJ0ZXIgYnkg dGhlIHN0YXRlbWVudCAmcXVvdDtQcm9kdWNlIGEgc3BlY2lmaWNhdGlvbiBkZWZpbmluZyBwcm9j ZWR1cmVzIGFuZCBjb3JyZXNwb25kaW5nIGFyY2hpdGVjdHVyZXPigKggc3VwcG9ydGluZyB2ZXJp ZmljYXRpb24gb2YgQ2xhaW1zJnF1b3Q7LjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SWYgdmVyaWZpY2F0aW9uIG9mIENsYWltcyByZXF1 aXJlcyBzcGVjaWZpYyBmb3JtcyBvZiBhdHRlc3RhdGlvbiBldmlkZW5jZSAoZS5nLiBhIHNldCBv ZiBtZWFzdXJlbWVudHMgZ2VuZXJhdGVkIGJ5IGEgVFBNKSwgdGhlbiBpdCBpcyBwcm9wZXJseSBh IG1hdHRlciBmb3IgYW4gUkZDIHRvIHNwZWNpZnkgdGhpcywgYXMgTWljaGFlbCBzdWdnZXN0cy48 L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSIgc3R5bGU9InBhZ2U6IFdv cmRTZWN0aW9uMTsgY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9u ZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBpbiAwaW4gMC4wMDAxcHQgMC41aW47IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1p bHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IHRleHQtaW5kZW50OiAtMC4y NWluOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWls eTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0i Ij48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAwLjAwMDFwdCAwLjVpbjsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgdGV4dC1pbmRlbnQ6IC0wLjI1aW47IiBj bGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBTeW1i b2w7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+wrc8 c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFs OyBmb250LXdlaWdodDogbm9ybWFsOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsgZm9udC1zaXplOiA3 cHQ7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDs7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8 c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjwv c3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+SG93 DQogZG8gd2Uga25vdyB3aGljaCByb290IG9mIHRydXN0IHdoaWNoIHdhcyB1c2VkIHRvIGdlbmVy YXRlIHRoZSBhdHRlc3RhdGlvbiBldmlkZW5jZSAoZS5nLiwgYXBwbGljYXRpb24gZXZlbnQgbG9n cyksIGFuZCBob3cgZG9lcyBhIHZlcmlmaWVyIGRpZmZlcmVudGlhdGUgdGhpcyBmcm9tIHRoZSBy b290LW9mLXRydXN0IHdoaWNoIGFzc2VydHMgY2xhaW1zIG1hZGUgdXBvbiB0aGlzIGV2aWRlbmNl Pzwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2IGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5BZ2FpbiwgSSB0aGluayB0 aGlzIGlzIGEgbWF0dGVyIGZvciBzcGVjaWZpY2F0aW9uIHJhdGhlciB0aGFuIGNoYXJ0ZXIuIFRo ZXJlIGFyZSBhIG51bWJlciBvZiBkaWZmZXJlbnQgd2F5cyBpbiB3aGljaCBSb290cyBvZiBUcnVz dCBjYW4gYmUgcmVhbGlzZWQgYW5kIG1hbnkgcG9zc2libGUgZGV2aWNlIGFyY2hpdGVjdHVyZXMu IFRoZSBFQVQgZHJhZnQgYWxsb3dzIG9uZSBSb1QgdG8gaW5jbHVkZSBhbiBhdHRlc3RhdGlvbg0K IGdlbmVyYXRlZCBieSBhIGRpZmZlcmVudCBSb1QsIGZvciBleGFtcGxlLiBJIGJlbGlldmUgdGhl IFJBVFMgZHJhZnQgYWxzbyBwcm92aWRlcyB0ZWNobmljYWwgbWVjaGFuaXNtcyBieSB3aGljaCB0 aGlzIGNhbiBiZSBhY2hpZXZlZC48L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIiBzdHlsZT0icGFn ZTogV29yZFNlY3Rpb24xOyBjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdCAwLjVpbjsgZm9udC1zaXplOiAxMnB0OyBmb250 LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgdGV4dC1pbmRlbnQ6 IC0wLjI1aW47IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQt ZmFtaWx5OiBTeW1ib2w7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9IiI+PHNwYW4g Y2xhc3M9IiI+wrc8c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQt Y2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsg Zm9udC1zaXplOiA3cHQ7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5OiAmcXVvdDtU aW1lcyBOZXcgUm9tYW4mcXVvdDs7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDs8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PC9zcGFuPjwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIg Y2xhc3M9IiI+V2hhdA0KIGVudGl0aWVzIGFyZSBhbGxvd2VkIHRvIHJlYWQgdGhlIGluZm8gYXNz ZXJ0ZWQgY2xhaW1zPyZuYnNwOyBXaGF0IHN1YnNldCBvZiB0aGVzZSBjYW4gc2VlIHRoZSByYXcg YXR0ZXN0YXRpb24gZXZpZGVuY2U/PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQgMC41aW47IGZvbnQtc2l6ZTogMTJw dDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFz cz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPjxvOnAgY2xh c3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwg NzMsIDEyNSk7IiBjbGFzcz0iIj5UaGVzZSBxdWVzdGlvbnMgYXJlIHNpZ25pZmljYW50IGJlY2F1 c2Ugcm91dGVycy9zd2l0Y2hlcyBhcmUgbm90IG1vbm9saXRoaWMgZGV2aWNlcy4mbmJzcDsgSW4g ZmFjdCwgdGhleSBhcmUgY29tcG9zZWQgb2Ygc3Vic3lzdGVtcyB3aXRoIGRpZmZlcmVudCBsZXZl bHMgb2YgdHJ1c3R3b3J0aGluZXNzLiZuYnNwOw0KIEFzIHRoZSBJRVRGIG9mdGVuIGFpbXMgYXQg cHJvdG9jb2wgc3BlY2lmaWNhdGlvbnMgYXQgdGhlIGludGVyLWRldmljZSBsZXZlbCwgSSBhbSBs b29raW5nIGZvciBjb3ZlcmFnZSBvZiBzdWNoIHF1ZXN0aW9ucyBpbiB0aGUgY2hhcnRlci48L3Nw YW4+PC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNz PSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkkgYWdyZWUgd2l0aCB5b3UgaGVyZSBhcyB0aGUg c2FtZSBpc3N1ZSBhcHBsaWVzIHRvIGNsYWltcyB3aXRoIHByaXZhY3kgaW1wbGljYXRpb25zLiBB cyBhbiBleGFtcGxlLCBJIG1heSB3aXNoIHRvIHByZXNlbnQgYSB1bmlxdWUgZGV2aWNlIElEIHRv IGEgc29jaWFsIG1lZGlhIHdlYnNpdGUgYnV0IG5vdCBteSBsb2NhdGlvbi48L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPkkgaGF2ZSBhZGRl ZCBidWxsZXQgcG9pbnQgMyB0byB0aGUgZHJhZnQgLSB3aGljaCBJIHdpbGwgcG9zdCBzZXBhcmF0 ZWx5LiBMZXQgbWUga25vdyBpZiB5b3UgdGhpbmsgdGhpcyBhZGRyZXNzZXMgeW91ciBjb25jZXJu cyBzdWZmaWNpZW50bHkuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj5CZXN0IHJlZ2FyZHM8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SmVyZW15 PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUg dHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiIHN0eWxlPSJw YWdlOiBXb3JkU2VjdGlvbjE7IGNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KPGRpdiBz dHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFt aWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3Bh biBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJp ZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj48bzpwIGNsYXNzPSIiPjwvbzpw Pjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBz ZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1p bHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9 IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxl PSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xv cjogcmdiKDMxLCA3MywgMTI1KTsiIGNsYXNzPSIiPlRoYW5rcyw8bzpwIGNsYXNzPSIiPjwvbzpw Pjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBz ZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1p bHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyIgY2xhc3M9 IiI+RXJpYzxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVv dDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0i Zm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6 IHJnYigzMSwgNzMsIDEyNSk7IiBjbGFzcz0iIj48bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwv c3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9ImJvcmRlci1zdHlsZTogbm9uZSBub25lIG5vbmUgc29s aWQ7IGJvcmRlci1sZWZ0LXdpZHRoOiAxLjVwdDsgYm9yZGVyLWxlZnQtY29sb3I6IGJsdWU7IHBh ZGRpbmc6IDBpbiAwaW4gMGluIDRwdDsiIGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw aW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1l cyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsi IGNsYXNzPSIiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBm b250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSJB cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5KZXJlbXkgTydEb25vZ2h1ZSwgT2N0 b2JlciAyMywgMjAxOCAxMDo0MA0KIEFNPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9z cGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlm OyIgY2xhc3M9IiI+DQpPbiAyMiBPY3QgMjAxOCwgYXQgMjI6MDEsIE1pY2hhZWwgUmljaGFyZHNv biAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1jciYjNDM7aWV0ZkBzYW5kZWxtYW4uY2EiIHN0eWxlPSJj b2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPm1jciYj NDM7aWV0ZkBzYW5kZWxtYW4uY2E8L2E+Jmd0OyB3cm90ZTo8bzpwIGNsYXNzPSIiPjwvbzpwPjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOiA1cHQ7 IG1hcmdpbi1ib3R0b206IDVwdDsiIGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4g MGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBO ZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwv bzpwPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0i Ij4NCkplcmVteSBPJ0Rvbm9naHVlICZsdDs8YSBocmVmPSJtYWlsdG86am9kb25vZ2hAcXRpLnF1 YWxjb21tLmNvbSIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJs aW5lOyIgY2xhc3M9IiI+am9kb25vZ2hAcXRpLnF1YWxjb21tLmNvbTwvYT4mZ3Q7IHdyb3RlOjxi ciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8 YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDogNXB0OyBtYXJnaW4tYm90dG9tOiA1cHQ7IiBj bGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsi IGNsYXNzPSIiPg0KVGhpcyBpcyBhIHZlcnkgdXNlZnVsIGNvbnRyaWJ1dGlvbiwgTGF1cmVuY2Uu PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIi Pg0KPGJyIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjxibG9ja3F1b3Rl IHN0eWxlPSJtYXJnaW4tdG9wOiA1cHQ7IG1hcmdpbi1ib3R0b206IDVwdDsiIGNsYXNzPSIiPg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZv bnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+ DQpUaGUgY3VycmVudCBkcmFmdCB0ZXh0IGlzIHRvbyBzdHJvbmdseSBiaWFzZWQgdG93YXJkcyBh dHRlc3RhdGlvbiBiYXNlZDxiciBjbGFzcz0iIj4NCm9uIG1lYXN1cmVtZW50LCBhbmQgZG9lcyBu b3QgYWRlcXVhdGVseSBjb3ZlciBvdGhlciBtZWNoYW5pc21zIHdoaWNoPGJyIGNsYXNzPSIiPg0K YXJlIGFscmVhZHk8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRp diBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQt ZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8 YnIgY2xhc3M9IiI+DQpCdXQsIGl0J3MgZm9yIHRoZSBjaGFydGVyLCBmb3IgdGhlIFdHLCBpdCdz IG5vdCBhIHRyZWF0aXNlIG9uIGF0dGVzdGF0aW9uPGJyIGNsYXNzPSIiPg0KaXRzZWxmLjxiciBj bGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoaXMgaXMgYWxsIHN1cHBvc2VkIHRvIGJlICptZXRh KiB0ZXh0IGFib3V0IGF0dGVzdGF0aW9uLCBhYm91dCB3aGF0IHdlIHdhbnQ8YnIgY2xhc3M9IiI+ DQp0byBzYXkgYWJvdXQgYXR0ZXN0YXRpb24gaW4gdGhlIGRvY3VtZW50cywgbm90IGFib3V0IHdo YXQgYXR0ZXN0YXRpb24gaXMuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KUGxlYXNlIGdv IHJlYWQgc29tZSBvdGhlciBJRVRGIGNoYXJ0ZXJzOjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0i Ij4NCjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvd2cvNmxvL2Fib3V0LyIg c3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9 IiI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy93Zy82bG8vYWJvdXQvPC9hPjxiciBjbGFz cz0iIj4NCjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvd2cvNnRpc2NoL2Fi b3V0LyIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIg Y2xhc3M9IiI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy93Zy82dGlzY2gvYWJvdXQvPC9h PjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvd2cv c3VpdC9hYm91dC8iIHN0eWxlPSJjb2xvcjogcHVycGxlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVy bGluZTsiIGNsYXNzPSIiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvd2cvc3VpdC9hYm91 dC88L2E+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAw MXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAu MDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQpGYWlyIGNvbW1lbnQuPG86cCBjbGFzcz0iIj48 L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJz cDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7 VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsiIGNsYXNzPSIiPg0KV2UgaGF2ZSB0d28gZXhp c3RpbmcgcHJvcG9zYWxzIC0gRUFUIGFuZCBSQVRTIC0gd2hpY2ggYWRkcmVzcyBhIHNpbWlsYXIg cHJvYmxlbSBzcGFjZSBidXQgdXNpbmcgZGlmZmVyZW50IG1lY2hhbmlzbXMuIFdoaWxlIEkgYmVs aWV2ZSB0aGUgUkFUUyBhbmQgRUFUIGNvbnRyaWJ1dG9ycyBhcmUgaW4gYnJvYWQgYWdyZWVtZW50 IHRoYXQgdGhlcmUgaXMgc2lnbmlmaWNhbnQgYmVuZWZpdCBpbiBicmluZ2luZyBib3RoIHdvcmsg c3RyZWFtcyB1bmRlcg0KIGEgc2luZ2xlIHVtYnJlbGxhLCB0cnlpbmcgdG8gcHJvcGVybHkgaW5j b3Jwb3JhdGUgRUFUIHRocm91Z2ggaW5jcmVtZW50YWwgbW9kaWZpY2F0aW9uIHRvIHRoZSBkcmFm dCBSQVRTIFdHIGNoYXJ0ZXIgdGV4dCBpcyBwcm92aW5nIGNoYWxsZW5naW5nLjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJn aW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90 O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+ Jm5ic3A7PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4NClRoZSBiZWxvdyBw cm9iYWJseSBkaXZlcmdlcyB0b28gZmFyIGZyb20gdGhlIGN1cnJlbnQgdGV4dCBmb3Igc29tZSB0 YXN0ZXMsIGJ1dCBpdCBtYXkgYWRkcmVzcyB5b3VyIHBvaW50IGFuZCBwcm92aWRlIGEgYmFzaXMg Zm9yIGRpc2N1c3Npb24gKGF0IHRoaXMgcG9pbnQgdGhlJm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9n aXRodWIuY29tL2lldGYtcmF0cy9jaGFydGVyL2Jsb2IvUkMyL2lldGYtcmF0cy1jaGFydGVyLm1k IiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFz cz0iIj5HaXRIdWINCiBkcmFmdDwvYT4mbmJzcDtzZWVtcyBhIGxvbmcgd2F5IGJlaGluZCB0aGUg bGlzdCkuIEl0IGlzIGRlbGliZXJhdGVseSBzaWduaWZpY2FudGx5IHNob3J0ZXIgdGhhbiB0aGUg Y3VycmVudCBkcmFmdCAtIEkgaGF2ZSB0cmllZCB0byByZS11c2UgYXMgbXVjaCBleGlzdGluZyB0 ZXh0IGFzIHBvc3NpYmxlLCBidXQgaXQgaXMgaGVhdmlseSByZS1vcmdhbmlzZWQgYW5kIGFicmlk Z2VkLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9u dC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0iIj4N CjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsg Zm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IiBjbGFzcz0i Ij4NCkkgaGF2ZSB0YWtlbiBvbiBib2FyZCB0aGUgY29tbWVudCBmcm9tIENhcnN0ZW4gdGhhdCBw ZXJoYXBzIGEgbWluaW11bSBsZXZlbCBvZiB0ZXJtaW5vbG9neSBpcyBhY2NlcHRhYmxlIGluIGNo YXJ0ZXIgdGV4dCwgYnV0IGRlbGliZXJhdGVseSB0cmllZCB0byBrZWVwIHRoZSBsYW5ndWFnZSBz aW1wbGUgYW5kIGZhaXJseSBnZW5lcmljIHRvIGVuYWJsZSB0aGUgcHJvcGVyIHdvcmsgb2YgdGVy bWlub2xvZ3kgZGVmaW5pdGlvbiB0byB0YWtlIHBsYWNlDQogaW4gdGhlIHJlcXVpcmVtZW50cyBk b2N1bWVudCBhcyB5b3Ugc3VnZ2VzdC48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBm b250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDss IHNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNoOiBub3JtYWw7Ij4NCjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPklu dHJvZHVjdGlvbjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9u dC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IGZvbnQtc3RyZXRj aDogbm9ybWFsOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6 IENvdXJpZXI7IiBjbGFzcz0iIj4tLS0tLS0tLS0tLS08bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDEuNXB0 OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVv dDssIHNlcmlmOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTogOC41cHQ7IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIgY2xhc3M9IiI+UmVtb3RlIGF0dGVzdGF0 aW9uIHByb2NlZHVyZXMgY2FuIGJlIGluY29ycG9yYXRlZCBpbiBuZXR3b3JrIHByb3RvY29scyB0 bzxiciBjbGFzcz0iIj4NCnByb3ZpZGUgdGhlIGJhc2lzIGZvciBlc3RhYmxpc2hpbmcgY2xhaW1z IGFib3V0IGFuIGVudGl0eSBpbiBhIHRydXN0d29ydGh5PGJyIGNsYXNzPSIiPg0KbWFubmVyLiBT dWNoIGNsYWltcyBtYXkgaW5jbHVkZSwgYnV0IGFyZSBub3QgbGltaXRlZCB0bywgZGV2aWNlIGlk ZW50aXR5LDxiciBjbGFzcz0iIj4NCm1hbnVmYWN0dXJpbmcgb3JpZ2luLCBzeXN0ZW0gaW50ZWdy aXR5LCBjb25maWd1cmF0aW9uLCBvcGVyYXRpb25hbCBzdGF0ZSBhbmQ8YnIgY2xhc3M9IiI+DQpt ZWFzdXJlbWVudHMgb2Ygc3RlcHMgd2hpY2ggbGVkIHRvIHRoZSBvcGVyYXRpb25hbCBzdGF0ZS4g U3VjaCBwcm9jZWR1cmVzPGJyIGNsYXNzPSIiPg0KZXhwb3NlIGVudGl0eSBjaGFyYWN0ZXJpc3Rp Y3MgaW4gdGhlIGZvcm0gb2YgY2xhaW0gc2V0cyB3aGljaCBhbGxvdyByZW1vdGU8YnIgY2xhc3M9 IiI+DQpwYXJ0aWVzIHRvIGVzdGFibGlzaCB0aGUgdHJ1c3R3b3J0aGluZXNzIG9mIGEgZGV2aWNl LCBwcm92aWRlIGV2aWRlbmNlIHRoYXQgYTxiciBjbGFzcz0iIj4NCnBhcnRpY3VsYXIgc2V0IG9m IG9wZXJhdGlvbnMgYW5kIGZ1bmN0aW9ucyBhcmUgc3VwcG9ydGVkIGFuZC9vciB0aGF0IHRoZTxi ciBjbGFzcz0iIj4NCmVudGl0eSBpcyBhY3R1YWxseSB3aGF0IGl0IGNsYWltcyB0byBiZS4mbmJz cDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luOiAwaW4gMGluIDEuNXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5 OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyBmb250LXN0cmV0Y2g6IG5vcm1h bDsiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOC41cHQ7IGZvbnQtZmFtaWx5OiBDb3VyaWVy OyIgY2xhc3M9IiI+SW4gdGhlIGFic2VuY2Ugb2Ygc3VjaCBwcm9jZWR1cmVzLCB3aGlsZSBkb21h aW4tc3BlY2lmaWMgYXR0ZXN0YXRpb248YnIgY2xhc3M9IiI+DQptZWNoYW5pc21zIHN1Y2ggYXMg VENHIFRQTSwgRklETyBBbGxpYW5jZSBhdHRlc3RhdGlvbiBhbmQgQW5kcm9pZCBLZXlzdG9yZTxi ciBjbGFzcz0iIj4NCmF0dGVzdGF0aW9uIGV4aXN0LCB0aGVyZSBpcyBubyBjb21tb24gd2F5IGZv ciBhIHJlbW90ZSBwYXJ0eSB0byB0ZWxsIGlmIGRhdGE8YnIgY2xhc3M9IiI+DQpvcmlnaW5hdGVz IGZyb20gYSB0cnVzdHdvcnRoeSBkZXZpY2UgKGUuZy4gYSBUcnVzdGVkIFN5c3RlbSBkZXNpZ25l ZCB0bzxiciBjbGFzcz0iIj4NCnN1cHBvcnQgYSBzcGVjaWZpYyBzZXQgb2Ygb3BlcmF0aW9ucy9m dW5jdGlvbmFsaXRpZXMpIG9yIG5vdC48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDEuNXB0OyBmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlm OyBmb250LXN0cmV0Y2g6IG5vcm1hbDsiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOC41cHQ7 IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIgY2xhc3M9IiI+VGhlIGZvbGxvd2luZyBtaW5pbWFsIHRl cm1pbm9sb2d5IGlzIGRlZmluZWQgZm9yIHRoZSBwdXJwb3NlcyBvZiBjbGFyaWZ5aW5nIHRoZTxi ciBjbGFzcz0iIj4NCldvcmtpbmcgR3JvdXAgY2hhcnRlciB0ZXh0OjxvOnAgY2xhc3M9IiI+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAw aW4gMS41cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBS b21hbiZxdW90Oywgc2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyI+DQo8c3BhbiBzdHlsZT0i Zm9udC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj4tIGF0dGVz dGF0aW9uOiBhIHNldCBvZiBjbGFpbXMgd2hpY2ggY2FuIGJlIHZlcmlmaWVkIGFzIG9yaWdpbmF0 aW5nIGluIGFuPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNw OyBlbnRpdHkuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBmb250 LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNo OiBub3JtYWw7Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTog Q291cmllcjsiIGNsYXNzPSIiPi0gY2xhaW06Jm5ic3A7IGFzIGRlZmluZWQgaW4gUkZDNzUxOS48 bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luOiAwaW4gMGluIDEuNXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAm cXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsi Pg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOC41cHQ7IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIg Y2xhc3M9IiI+LSBlbnRpdHk6IGEgZGV2aWNlIG9yIGRldmljZSBzdWItbW9kdWxlIHRoYXQgY2Fu IGdlbmVyYXRlIGEgY2xhaW0gb3Igc2V0IG9mPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAm bmJzcDsgJm5ic3A7ICZuYnNwOyBjbGFpbXMgd2hpY2ggY2FuIGJlIHZlcmlmaWVkIGJ5IGEgcmVt b3RlIHBhcnR5LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gOXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQt ZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyBmb250LXN0cmV0Y2g6 IG5vcm1hbDsiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOC41cHQ7IGZvbnQtZmFtaWx5OiBD b3VyaWVyOyIgY2xhc3M9IiI+LSByZW1vdGUgcGFydHk6IGFuIGFjdG9yIHJlbW90ZSBmcm9tIGFu IGVudGl0eSB0aGF0IHdpc2hlcyB0byB2ZXJpZnkgd2hldGhlcjxiciBjbGFzcz0iIj4NCiZuYnNw OyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgYSBjbGFpbSBvciBzZXQgb2YgY2xhaW1zIG9y aWdpbmF0ZWQgaW4gYSBnaXZlbiBlbnRpdHkuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAxLjVwdDsgZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBz ZXJpZjsgZm9udC1zdHJldGNoOiBub3JtYWw7Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDgu NXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPkRlc2NyaXB0aW9uIG9mIHRoZSBX b3JraW5nIEdyb3VwPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBm b250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJl dGNoOiBub3JtYWw7Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWls eTogQ291cmllcjsiIGNsYXNzPSIiPi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tPG86 cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNoOiBub3JtYWw7Ij4N CjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNs YXNzPSIiPlRoZSBXb3JraW5nIEdyb3VwIHdpbGwgZGVmaW5lOjxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4g OXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDssIHNlcmlmOyBmb250LXN0cmV0Y2g6IG5vcm1hbDsiPg0KPHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTogOC41cHQ7IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIgY2xhc3M9IiI+LSBTdGFuZGFyZGl6 ZWQgYW5kIGludGVyb3BlcmFibGUgbWVjaGFuaXNtcyB0byBlc3RhYmxpc2ggYSBzdWZmaWNpZW50 IGxldmVsPGJyIGNsYXNzPSIiPg0KJm5ic3A7IG9mIGNvbmZpZGVuY2UgdGhhdCBkYXRhIG9yaWdp bmF0ZXMgZnJvbSBhIHRydXN0d29ydGh5IGVudGl0eSBkZXNpZ25lZCB0bzxiciBjbGFzcz0iIj4N CiZuYnNwOyBzdXBwb3J0IGEgc3BlY2lmaWMgc2V0IG9mIG9wZXJhdGlvbnMvZnVuY3Rpb25hbGl0 aWVzLjxiciBjbGFzcz0iIj4NCi0gU3RhbmRhcmRpemVkIGFuZCBpbnRlcm9wZXJhYmxlIG1lY2hh bmlzbXMgYnVpbGRpbmcgb24gKDEpIHRvIGFsbG93IHJlbW90ZTxiciBjbGFzcz0iIj4NCiZuYnNw OyBwYXJ0aWVzIHRvIGtub3cgdGhlIHByb3ZlbmFuY2UgYW5kIGNoYXJhY3RlcmlzdGljcyBvZiBh biBlbnRpdHkgdGhhdCBtYXkgYmU8YnIgY2xhc3M9IiI+DQombmJzcDsgcmVxdWVzdGluZyBzZXJ2 aWNlcy48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDlwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWls eTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNoOiBub3Jt YWw7Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmll cjsiIGNsYXNzPSIiPlRoZSBXb3JraW5nIEdyb3VwIHdpbGwgaWRlbnRpZnkgc2VjdXJpdHkgZ29h bHMgd2hpY2ggaXQgZXhwZWN0cyBhIHRydXN0d29ydGh5PGJyIGNsYXNzPSIiPg0KZXhlY3V0aW9u IGNvbnRleHQgdG8gYWRkcmVzcywgd2hpY2ggd2lsbCBhc3N1bWUgdGhlIHByZXNlbmNlIG9mIFJv b3RzIG9mPGJyIGNsYXNzPSIiPg0KVHJ1c3QgKGFzIGRlZmluZWQgYnkgTklTVCBbU1A4MDAtMTY0 XSkuIFRoZSBkZXRhaWxlZCBzcGVjaWZpY2F0aW9uIG9mIHN1Y2g8YnIgY2xhc3M9IiI+DQpjb250 ZXh0cyBpcyBvdXQgb2Ygc2NvcGUuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBpbiAxLjVwdDsgZm9udC1zaXpl OiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsg Zm9udC1zdHJldGNoOiBub3JtYWw7Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBm b250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPlRoZSBXb3JraW5nIEdyb3VwIHdpbGwgbWFp bnRhaW4gY2xvc2UgcmVsYXRpb25zaGlwcyB3aXRoIGJvZGllcyB1bmRlcnRha2luZzxiciBjbGFz cz0iIj4NCmNvbXBsZW1lbnRhcnkgd29yayBzdHJlYW1zIGluIHRoZSBhcmVhIG9mIHJlbW90ZSBh dHRlc3RhdGlvbiBzdWNoIGFzPGJyIGNsYXNzPSIiPg0KR2xvYmFsUGxhdGZvcm0sIFRydXN0ZWQg Q29tcHV0aW5nIEdyb3VwIGFuZCBGSURPIEFsbGlhbmNlLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41 cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90Oywgc2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1z aXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj5UaGUgV29ya2luZyBH cm91cCB3aWxsIGNvb3BlcmF0ZSB3aXRoIHRoZSBURUVQIFdvcmtpbmcgR3JvdXAsIHdoaWNoIG1h eTxiciBjbGFzcz0iIj4NCmdlbmVyYXRlIHJlcXVpcmVtZW50cyBmb3IgY2xhaW1zIHJlbGV2YW50 IHRvIFRFRS48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDEuNXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQt ZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyBmb250LXN0cmV0Y2g6 IG5vcm1hbDsgbWluLWhlaWdodDogMTNweDsiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOC41 cHQ7IGZvbnQtZmFtaWx5OiBDb3VyaWVyOyIgY2xhc3M9IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGlu IDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3 IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNoOiBub3JtYWw7Ij4NCjxzcGFuIHN0eWxl PSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPldvcmsg SXRlbXM8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDEuNXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFt aWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyBmb250LXN0cmV0Y2g6IG5v cm1hbDsiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogOC41cHQ7IGZvbnQtZmFtaWx5OiBDb3Vy aWVyOyIgY2xhc3M9IiI+LS0tLS0tLS0tLTxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41cHQ7IGZvbnQt c2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2Vy aWY7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiA4LjVw dDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj5UaGUgV29ya2luZyBHcm91cCB3aWxs IGRldmVsb3Agc3BlY2lmaWNhdGlvbnMgc3VwcG9ydGluZyB0aGUgY3JlYXRpb24gb2Y8YnIgY2xh c3M9IiI+DQppbnRlcm9wZXJhYmxlIHJlbW90ZSBhdHRlc3RhdGlvbiBwcm9jZWR1cmVzIGZvciBl bnRpdGllcyB3aGljaCBpbmNvcnBvcmF0ZSZuYnNwOzxiciBjbGFzcz0iIj4NClJvb3RzIG9mIFRy dXN0LiBUaGUgbWFpbiBkZWxpdmVyYWJsZXMgYXJlIGFzIGZvbGxvd3MuJm5ic3A7PG86cCBjbGFz cz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bjogMGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGlt ZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNoOiBub3JtYWw7Ij4NCjxzcGFu IHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIi Pi0gUHJvZHVjZSBhIHJlcXVpcmVtZW50cyBkb2N1bWVudCBlc3RhYmxpc2hpbmcgYSBjb21tb24g dm9jYWJ1bGFyeSBmb3IgcmVtb3RlPGJyIGNsYXNzPSIiPg0KJm5ic3A7IGF0dGVzdGF0aW9uLCBp ZGVudGlmeWluZyBtZWNoYW5pc21zIHdoaWNoIHdpbGwgYmUgc3VwcG9ydGVkIGZvciBlc3RhYmxp c2hpbmc8YnIgY2xhc3M9IiI+DQombmJzcDsgdHJ1c3QgYmV0d2VlbiBhbiBlbnRpdHkgYW5kIGEg cmVtb3RlIHBhcnR5LCBhbmQgZW51bWVyYXRpbmcgc2FtcGxlIHVzZS1jYXNlczxiciBjbGFzcz0i Ij4NCiZuYnNwOyBmb3IgcmVtb3RlIGF0dGVzdGF0aW9uLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41 cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90Oywgc2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFsOyI+DQo8c3BhbiBzdHlsZT0iZm9udC1z aXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7IiBjbGFzcz0iIj4tIFByb2R1Y2Ugc3Bl Y2lmaWNhdGlvbiB0ZXh0IGRlZmluaW5nIGludGVyb3BlcmFibGUgY3Jvc3MtcGxhdGZvcm0gY2xh aW1zIHdoaWNoPGJyIGNsYXNzPSIiPg0KJm5ic3A7IHByb3ZpZGUgaW5mb3JtYXRpb24gYWJvdXQg YW4gZW50aXR5IGluIHN1cHBvcnQgb2YgdGhlIHJlcXVpcmVkIHVzZS1jYXNlcywgYW5kPGJyIGNs YXNzPSIiPg0KJm5ic3A7IGV4dGVuZGluZyB0aGUgc2V0IG9mIGNsYWltcyBkZWZpbmVkIGluIFJG Qzc1MTkgYW5kIFJGQzgzOTIuIFRoZSBzcGVjaWZpY2F0aW9uPGJyIGNsYXNzPSIiPg0KJm5ic3A7 IHdpbGwgZGVzY3JpYmUgdGhlIHN5bnRheCBmb3IgZWFjaCBjbGFpbSBpbiBhdCBsZWFzdCB0aGUg Zm9sbG93aW5nIGZvcm1hdHM6PGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAtIENCT1IgW1JG QzcwNDldPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAtIEpTT04gW1JGQzcxNTldPGJyIGNs YXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAtIFlBTkcgW1JGQzYwMjBdPG86cCBjbGFzcz0iIj48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGluIDBp biAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMgTmV3IFJv bWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNoOiBub3JtYWw7Ij4NCjxzcGFuIHN0eWxlPSJm b250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPi0gUHJvZHVj ZSBzcGVjaWZpY2F0aW9uIHRleHQgZGVmaW5pbmcgcHJvY2VkdXJlcyBhbmQgY29ycmVzcG9uZGlu ZyBhcmNoaXRlY3R1cmVzPGJyIGNsYXNzPSIiPg0KJm5ic3A7IHN1cHBvcnRpbmcgdmVyaWZpY2F0 aW9uIG9mIGNsYWltcyB3aXRoaW4gYW4gYXR0ZXN0YXRpb24gYmFzZWQgb24gbWVhc3VyZWQgZmls ZTxiciBjbGFzcz0iIj4NCiZuYnNwOyBleGVjdXRpb24gcHJvY2VkdXJlcyBhbmQgc3VwcG9ydGlu Zzo8YnIgY2xhc3M9IiI+DQombmJzcDsgJm5ic3A7IC0gRXhwbGljaXQgYXR0ZXN0YXRpb24gd2hl cmVpbiBhIHNldCBvZiBjbGFpbXMgaXMgdHJhbnNwb3J0ZWQgaW4gdGhlIGF0dGVzdGF0aW9uOzxi ciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgLSBJbXBsaWNpdCBhdHRlc3RhdGlvbiB3aGVyZWlu IGEgc2V0IG9mIGNsYWltcyBpcyBpbXBsaWVkIGJ5IHBvc3Nlc3Npb24gb2YgYSBzZWNyZXQuPG86 cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbjogMGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1 b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNoOiBub3JtYWw7Ij4N CjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNs YXNzPSIiPi0gUHJvZHVjZSBzcGVjaWZpY2F0aW9uIHRleHQgZGVmaW5pbmcgcHJvY2VkdXJlcyBh bmQgY29ycmVzcG9uZGluZyBhcmNoaXRlY3R1cmVzPGJyIGNsYXNzPSIiPg0KJm5ic3A7IHN1cHBv cnRpbmcgdmVyaWZpY2F0aW9uIG9mIGNsYWltcyBlbmNhcHN1bGF0ZWQgaW46PG86cCBjbGFzcz0i Ij48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjog MGluIDBpbiAxLjVwdDsgZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LCBzZXJpZjsgZm9udC1zdHJldGNoOiBub3JtYWw7Ij4NCjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDguNXB0OyBmb250LWZhbWlseTogQ291cmllcjsiIGNsYXNzPSIiPiZu YnNwOyAmbmJzcDsgLSBDQk9SIFdlYiBUb2tlbiBzdHJ1Y3R1cmVzIFtSRkM4MzkyXTxiciBjbGFz cz0iIj4NCiZuYnNwOyAmbmJzcDsgLSBKU09OIFdlYiBUb2tlbiBzdHJ1Y3R1cmVzIFtSRkM3NTE5 XTxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW46IDBpbiAwaW4gMS41cHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6 ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7IGZvbnQtc3RyZXRjaDogbm9ybWFs OyI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiA4LjVwdDsgZm9udC1mYW1pbHk6IENvdXJpZXI7 IiBjbGFzcz0iIj4tIFBlcmZvcm0gcHJpdmFjeSBhbmFseXNpcyBvZiBib3RoIGNsYWltcyBhbmQg dGhlIGNyeXB0b2dyYXBoaWMgcHJvY2VkdXJlcyB1c2VkIHRvPGJyIGNsYXNzPSIiPg0KJm5ic3A7 IGVzdGFibGlzaCB0cnVzdC4gVGhpcyBpbmZvcm1hdGlvbiB3aWxsIGJlIGluY2x1ZGVkIGFzIGFw cHJvcHJpYXRlIGluIHRoZTxiciBjbGFzcz0iIj4NCiZuYnNwOyBkZWxpdmVyYWJsZSBzcGVjaWZp Y2F0aW9ucywgYW5kIG1heSBpbXBseSBleHRlbnNpb24gb2YgcHJvY2VkdXJlcyBkZWZpbmVkIGlu PGJyIGNsYXNzPSIiPg0KJm5ic3A7IG90aGVyIHNwZWNpZmljYXRpb25zIGluIHN1cHBvcnQgb2Yg cHJpdmFjeSBnb2Fscy48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQt c2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2Vy aWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZv bnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywg c2VyaWY7IiBjbGFzcz0iIj4NCkl0IHNlZW1zIHRvIG1lIHRoYXQgdGhlcmUgYXJlIHR3byB3YXlz IHRvIHByb2R1Y2UgdGhlIG1haW4gc3BlY2lmaWNhdGlvbiBkZWxpdmVyYWJsZXMuIEkgaGF2ZSBk ZWxpYmVyYXRlbHkgbGVmdCB0aGUgdGV4dCBhYm92ZSBzbGlnaHRseSB2YWd1ZSBvbiB0aGlzLjxv OnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8dWwgdHlw ZT0iZGlzYyIgc3R5bGU9Im1hcmdpbi1ib3R0b206IDBpbjsiIGNsYXNzPSIiPg0KPGxpIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTog MTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90Oywgc2VyaWY7Ij4N CkEgY2xhaW1zIHNwZWNpZmljYXRpb24gY29tbW9uIHRvIFJBVFMgYW5kIEVBVCB3aXRoIHNlcGFy YXRlIFJBVFMgYW5kIEVBVCBwcm9jZWR1cmUgc3BlY2lmaWNhdGlvbnMuPG86cCBjbGFzcz0iIj48 L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAu MDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDssIHNlcmlmOyI+DQpBIGNsYWltcyBzcGVjaWZpY2F0aW9uIGFsc28gaW5jb3Jwb3Jh dGluZyBFQVQgcHJvY2VkdXJlcyBhbmQgYSBzZXBhcmF0ZSBSQVRTIHByb2NlZHVyZSBzcGVjaWZp Y2F0aW9uLiBUaGlzIHdvdWxkIGJlIG15IHByZWZlcnJlZCBvcHRpb24uPG86cCBjbGFzcz0iIj48 L286cD48L2xpPjwvdWw+DQo8dWwgdHlwZT0iZGlzYyIgc3R5bGU9Im1hcmdpbi1ib3R0b206IDBp bjsiIGNsYXNzPSIiPg0KPHVsIHR5cGU9ImNpcmNsZSIgc3R5bGU9Im1hcmdpbi1ib3R0b206IDBp bjsiIGNsYXNzPSIiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW46IDBpbiAw aW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICZxdW90O1RpbWVzIE5l dyBSb21hbiZxdW90Oywgc2VyaWY7Ij4NCkkgYmVsaWV2ZSB0aGVyZSBhcmUgdmVyeSBmZXcgcHJv Y2VkdXJlcyBuZWVkZWQgZm9yIEVBVCBvdGhlciB0aGFuIHRoZSBwb3NzaWJsZSBuZWVkIHRvIHN1 cHBvcnQgYSBub25jZSB0byBlbnN1cmUgZnJlc2huZXNzPG86cCBjbGFzcz0iIj48L286cD48L2xp PjwvdWw+DQo8L3VsPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2lu OiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtU aW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZu YnNwOzwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFy Z2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVv dDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNlcmlmOyIgY2xhc3M9IiI+DQpKZXJlbXk8bzpwIGNs YXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRv cDogNXB0OyBtYXJnaW4tYm90dG9tOiA1cHQ7IiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwaW4gMGluIDAuMDAwMXB0OyBmb250 LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDssIHNl cmlmOyIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQpOb3RpY2UgaG93IGJ5IGFib3V0IHRoZSBz ZWNvbmQgcGFyYWdyYXBoICg2dGlzY2ggdGFrZXMgYSBiaXQgbG9uZ2VyKSwgZWFjaDxiciBjbGFz cz0iIj4NCmdldHMgaW50byB3aGF0IHRoZSBXRyB3aWxsIGRvPzxiciBjbGFzcz0iIj4NCjxiciBj bGFzcz0iIj4NCi0tPGJyIGNsYXNzPSIiPg0KTWljaGFlbCBSaWNoYXJkc29uICZsdDs8YSBocmVm PSJtYWlsdG86bWNyJiM0MztJRVRGQHNhbmRlbG1hbi5jYSIgc3R5bGU9ImNvbG9yOiBwdXJwbGU7 IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+bWNyJiM0MztJRVRGQHNhbmRl bG1hbi5jYTwvYT4mZ3Q7LCBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3M8YnIgY2xhc3M9IiI+DQot PSBJUHY2IElvVCBjb25zdWx0aW5nID0tPGJyIGNsYXNzPSIiPg0KX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnIgY2xhc3M9IiI+DQpFQVQgbWFpbGluZyBs aXN0PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0ibWFpbHRvOkVBVEBpZXRmLm9yZyIgc3R5bGU9ImNv bG9yOiBwdXJwbGU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+RUFUQGll dGYub3JnPC9hPjxiciBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vZWF0IiBzdHlsZT0iY29sb3I6IHB1cnBsZTsgdGV4dC1kZWNvcmF0aW9u OiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL2VhdDwvYT48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnIg Y2xhc3M9IiI+DQpFQVQgbWFpbGluZyBsaXN0PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0ibWFpbHRv OkVBVEBpZXRmLm9yZyIgY2xhc3M9IiI+RUFUQGlldGYub3JnPC9hPjxiciBjbGFzcz0iIj4NCmh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0PGJyIGNsYXNzPSIiPg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_1F4B0DE532F44F09B25A1A088F108362qtiqualcommcom_-- From nobody Wed Oct 24 07:19:02 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28F4B12F295; Wed, 24 Oct 2018 07:18:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kOemFOm7idJx; Wed, 24 Oct 2018 07:18:52 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C7EB21200D7; Wed, 24 Oct 2018 07:18:52 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id AAD0520008; Wed, 24 Oct 2018 10:18:47 -0400 (EDT) Received: by sandelman.ca (Postfix, from userid 179) id 26394F0; Wed, 24 Oct 2018 10:18:50 -0400 (EDT) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 2444EA1; Wed, 24 Oct 2018 10:18:50 -0400 (EDT) From: Michael Richardson To: Henk Birkholz cc: "Jeremy O'Donoghue" , "Eric Voit \(evoit\)" , "rats\@ietf.org" , "eat\@ietf.org" In-Reply-To: <54613a6a-48f2-2301-5ebf-f1eb9fa208e4@sit.fraunhofer.de> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> <0771A502-32EF-46E9-95FB-55BE0FF04634@qti.qualcomm.com> <54613a6a-48f2-2301-5ebf-f1eb9fa208e4@sit.fraunhofer.de> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 14:18:55 -0000 --=-=-= Content-Type: text/plain Henk Birkholz wrote: > based on Jeremy's proposal we did another big refactoring - also tried to > address everybody's comments, inputs and concerns. >> https://github.com/ietf-rats/charter/blob/RC3/ietf-rats-charter.md Well done! I can live with this text. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlvQf0kACgkQgItw+93Q 3WWT1wf7B1HspBGFOOZWu/N5j5L62xV93B6wUuHRdhoPW4yvAKI9LK0nCO7NDCJV g6rKRCMVyLbzR0dWt1brAmE8NBexfP+pWnpoRzWeDnvtsnEUOAuoHcPAHf1H0+DR MWrfoDZJ6u59NinbVcZC5+qUrj2luBXEiMvSq7Mu8ltqvxJBWjS9blrenBHCYD+V /QTXTwPkwM4u+Ma9wuNgkfy/Ch0KRUl9fajer65s6/EUG5W39ds9qYmeclhQIpYg N7bhcruVhc8vxpPmDEQdTAZkNlAeK5pzyp1+aRWDrIs6anxyWWhPpmTzOzxXvmWk yOizVhX3d9omHwIXqlsoxZ5Y4o2DGw== =aGRk -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Oct 24 07:27:57 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CE45130DC8; Wed, 24 Oct 2018 07:27:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B92uEhvYI5Yo; Wed, 24 Oct 2018 07:27:54 -0700 (PDT) Received: from alexa-out-ams-01.qualcomm.com (alexa-out-ams-01.qualcomm.com [185.23.61.162]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D2C512F295; Wed, 24 Oct 2018 07:27:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1540391273; x=1571927273; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=d+PFaLe7tGvJRRTi4svHO0F8Fxd5ZJj23URzPMWNZJ0=; b=hiIwmS3MgLXXcObA4ZTHxBlJYgS7QMMyGg7V9vmTcgv6BLMUTeYJWfqu cNBVkJ5XICG4TUmaG89sgPrVNYJ1+bBxxSHrK4rSe/Z7ZkDQn2EhJYwe+ i6XlgfGfYkB4TV6UBcGtownoRzE8IS1zIwLknvnuFXxDOF/qQcgQmAw2Y c=; X-IronPort-AV: E=Sophos;i="5.54,420,1534802400"; d="scan'208,217";a="1386908" Received: from ironmsg02-ams.qualcomm.com ([10.251.56.3]) by alexa-out-ams-01.qualcomm.com with ESMTP; 24 Oct 2018 16:27:51 +0200 X-IronPort-AV: E=McAfee;i="5900,7806,9055"; a="6118205" Received: from euamsexm01f.eu.qualcomm.com ([10.251.127.43]) by ironmsg02-ams.qualcomm.com with ESMTP/TLS/AES256-SHA; 24 Oct 2018 16:27:51 +0200 Received: from euamsexm01a.eu.qualcomm.com (10.251.127.40) by euamsexm01f.eu.qualcomm.com (10.251.127.43) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Wed, 24 Oct 2018 16:27:44 +0200 Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by euamsexm01a.eu.qualcomm.com ([10.251.127.40]) with mapi id 15.00.1365.000; Wed, 24 Oct 2018 16:27:44 +0200 From: Jeremy O'Donoghue To: Michael Richardson CC: Henk Birkholz , "Eric Voit (evoit)" , "rats@ietf.org" , "eat@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUa5jws5Kikd8Yz0eHI2cCltl68KUuUD8AgAACe4A= Date: Wed, 24 Oct 2018 14:27:44 +0000 Message-ID: <382E3F35-F9EC-4FA7-8478-A7F504CC69B5@qti.qualcomm.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> <0771A502-32EF-46E9-95FB-55BE0FF04634@qti.qualcomm.com> <54613a6a-48f2-2301-5ebf-f1eb9fa208e4@sit.fraunhofer.de> <18027.1540390730@localhost> In-Reply-To: <18027.1540390730@localhost> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.9.1) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.251.52.12] Content-Type: multipart/alternative; boundary="_000_382E3F35F9EC4FA78478A7F504CC69B5qtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 14:27:55 -0000 --_000_382E3F35F9EC4FA78478A7F504CC69B5qtiqualcommcom_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I can also live with the new text. It may be worth double checking the mail I sent a couple of hours back (e-m= ail crossed Henk's contribution, unfortunately) which addressed comments on= my text, although I think you have captured everything except: 3. Standardized and interoperable mechanisms to protect Claims which may ne= ed to be protected from unauthorised disclosure for privacy and/or security reasons. I would be OK leaving that out of the charter although it would certainly b= e a technical goal of the work on EAT - others may disagree. Jeremy On 24 Oct 2018, at 15:18, Michael Richardson > wrote: Henk Birkholz > wrote: based on Jeremy's proposal we did another big refactoring - also tried to address everybody's comments, inputs and concerns. https://github.com/ietf-rats/charter/blob/RC3/ietf-rats-charter.md Well done! I can live with this text. -- Michael Richardson >, S= andelman Software Works -=3D IPv6 IoT consulting =3D- --_000_382E3F35F9EC4FA78478A7F504CC69B5qtiqualcommcom_ Content-Type: text/html; charset="us-ascii" Content-ID: <1F839D17958D3248B63783D6E0173CA2@qualcomm.com> Content-Transfer-Encoding: quoted-printable I can also live with the new text.

It may be worth double checking the mail I sent a couple of= hours back (e-mail crossed Henk's contribution, unfortunately) which addre= ssed comments on my text, although I think you have captured everything exc= ept:

3. Standardized and interoperable mechanisms to pro= tect Claims which may need to
   be protected from unauthorised disclos= ure for privacy and/or security
   reasons.

I would be OK leaving that out of the charter although it w= ould certainly be a technical goal of the work on EAT - others may disagree= .

Jeremy

On 24 Oct 2018, at 15:18, Michael Richardson <mcr+ietf@sandelman.ca= > wrote:


Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:
based on Jeremy's proposal we did anot= her big refactoring - also tried to
address everybody's comments, inputs and concerns.

https://github.com/ietf= -rats/charter/blob/RC3/ietf-rats-charter.md

Well done!
I can live with this text.

--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
-=3D IPv6 IoT consulting =3D-




--_000_382E3F35F9EC4FA78478A7F504CC69B5qtiqualcommcom_-- From nobody Wed Oct 24 07:54:11 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1C870130E16; Wed, 24 Oct 2018 07:53:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.502 X-Spam-Level: X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00oFVxtWvlZh; Wed, 24 Oct 2018 07:53:55 -0700 (PDT) Received: from rcdn-iport-3.cisco.com (rcdn-iport-3.cisco.com [173.37.86.74]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 182F9123FFD; Wed, 24 Oct 2018 07:53:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=570; q=dns/txt; s=iport; t=1540392834; x=1541602434; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-transfer-encoding:mime-version; bh=dj7i2IK8AxNrSp3v4FWso1ZrA2gSegkYrkbEXbcrJwM=; b=HIbH0E5qXjea6usyfu36p761M2MklMF/RCEkz8gQ2TXyQBL+i+CHkq9e 9XtBYP+YJiosILGb6Hy8PPGqgizkRIiNgUh4q16GA7Axge2hAcnwPYc9U 1DYUbLnoBmu7KpNRojtah8dO505TDNdsVvYkir846gN0F26Tfzxq8UCcK s=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BDAADWhtBb/5BdJa1jGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQcBAQEBAQGBZYIFZn8oCpgbgg2ZDwsBASOBVIJ1AoMLITgWAQMBAQI?= =?us-ascii?q?BAQJtHAyFOgEBAQMBOj8FCwIBCBUDHhAyJQIEAQ0FCIMagXkID6lnhCwBhXA?= =?us-ascii?q?Fi2IXgUE/hCODGwKHOwKeUAkChmGKCR+BQ45tjFyJaAIRFIEmNCGBVXAVgye?= =?us-ascii?q?CJheDSIpSbwGMDYEfAQE?= X-IronPort-AV: E=Sophos;i="5.54,420,1534809600"; d="scan'208";a="460697555" Received: from rcdn-core-8.cisco.com ([173.37.93.144]) by rcdn-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 24 Oct 2018 14:53:53 +0000 Received: from XCH-RTP-013.cisco.com (xch-rtp-013.cisco.com [64.101.220.153]) by rcdn-core-8.cisco.com (8.15.2/8.15.2) with ESMTPS id w9OErrdK002050 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Wed, 24 Oct 2018 14:53:54 GMT Received: from xch-rtp-013.cisco.com (64.101.220.153) by XCH-RTP-013.cisco.com (64.101.220.153) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Wed, 24 Oct 2018 10:53:53 -0400 Received: from xch-rtp-013.cisco.com ([64.101.220.153]) by XCH-RTP-013.cisco.com ([64.101.220.153]) with mapi id 15.00.1395.000; Wed, 24 Oct 2018 10:53:53 -0400 From: "Eric Voit (evoit)" To: Michael Richardson , Henk Birkholz CC: "Jeremy O'Donoghue" , "rats@ietf.org" , "eat@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUa5jnSOPc1XRctEiGkCKHbRL/XaUutNQA///GgCA= Date: Wed, 24 Oct 2018 14:53:53 +0000 Message-ID: <1268876180084e1fa6fa2bfa766cbd86@XCH-RTP-013.cisco.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> <0771A502-32EF-46E9-95FB-55BE0FF04634@qti.qualcomm.com> <54613a6a-48f2-2301-5ebf-f1eb9fa208e4@sit.fraunhofer.de> <18027.1540390730@localhost> In-Reply-To: <18027.1540390730@localhost> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.118.56.234] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.153, xch-rtp-013.cisco.com X-Outbound-Node: rcdn-core-8.cisco.com Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 14:53:59 -0000 I am good with the text as well. =20 > From: Michael Richardson, October 24, 2018 10:19 AM >=20 > Henk Birkholz wrote: > > based on Jeremy's proposal we did another big refactoring - also tr= ied to > > address everybody's comments, inputs and concerns. >=20 > >> https://github.com/ietf-rats/charter/blob/RC3/ietf-rats-charter.md >=20 > Well done! > I can live with this text. >=20 > -- > Michael Richardson , Sandelman Software Works - > =3D IPv6 IoT consulting =3D- >=20 >=20 From nobody Wed Oct 24 08:28:18 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7570A130E05; Wed, 24 Oct 2018 08:28:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uPV4Fl5VkzNH; Wed, 24 Oct 2018 08:28:08 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A32F128D09; Wed, 24 Oct 2018 08:28:08 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 443B420008; Wed, 24 Oct 2018 11:28:04 -0400 (EDT) Received: by sandelman.ca (Postfix, from userid 179) id B2FA01273; Wed, 24 Oct 2018 11:28:06 -0400 (EDT) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id B0F79116E; Wed, 24 Oct 2018 11:28:06 -0400 (EDT) From: Michael Richardson To: "Jeremy O'Donoghue" cc: Henk Birkholz , "Eric Voit (evoit)" , "rats@ietf.org" , "eat@ietf.org" In-Reply-To: <382E3F35-F9EC-4FA7-8478-A7F504CC69B5@qti.qualcomm.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> <0771A502-32EF-46E9-95FB-55BE0FF04634@qti.qualcomm.com> <54613a6a-48f2-2301-5ebf-f1eb9fa208e4@sit.fraunhofer.de> <18027.1540390730@localhost> <382E3F35-F9EC-4FA7-8478-A7F504CC69B5@qti.qualcomm.com> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Date: Wed, 24 Oct 2018 11:28:06 -0400 Message-ID: <3090.1540394886@localhost> Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 15:28:10 -0000 Jeremy O'Donoghue wrote: > on my text, although I think you have captured everything except: > 3. Standardized and interoperable mechanisms to protect Claims which > may need to > be protected from unauthorised disclosure for privacy and/or security > reasons. That sounds like a friendly amendment. From nobody Wed Oct 24 09:28:13 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBFC7130DED; Wed, 24 Oct 2018 09:28:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qug3qclFGgy4; Wed, 24 Oct 2018 09:28:02 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BDB31126F72; Wed, 24 Oct 2018 09:28:00 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9OGRttX017346 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 24 Oct 2018 18:27:56 +0200 Received: from eduroam-pool7-0363.wlan.uni-bremen.de (134.102.113.107) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Wed, 24 Oct 2018 18:27:49 +0200 Date: Wed, 24 Oct 2018 18:27:48 +0200 User-Agent: K-9 Mail for Android In-Reply-To: <8340B1B8-775D-4932-B432-29B715A3B45D@qti.qualcomm.com> References: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> <8340B1B8-775D-4932-B432-29B715A3B45D@qti.qualcomm.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----FDJ1RH0N2KOTYDPUWQ11H6TELC52NJ" Content-Transfer-Encoding: 7bit To: , "Jeremy O'Donoghue" , Carl Wallace CC: Michael Richardson , "Smith, Ned" , "eat@ietf.org" , "rats@ietf.org" From: Henk Birkholz Message-ID: X-Originating-IP: [134.102.113.107] Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 16:28:05 -0000 ------FDJ1RH0N2KOTYDPUWQ11H6TELC52NJ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Please all keep in mind that we are intending to cut work items into phases= =2E While we are starting to agree more than we disagree, I think, we shoul= d continue to pay attention to scoping, please=2E Not now does not mean nev= er! Viele Gr=C3=BC=C3=9Fe, Henk On October 24, 2018 2:46:21 PM GMT+02:00, Jeremy O'Donoghue wrote: >I have the following understanding (possibly misunderstood) from this >thread: > > >* It is desirable to have syntax for incorporating sets of Claims in >structures that are defined in ASN=2E1=2E At the surface level this may b= e >straightforward because claims are essentially (key, value) pairs - the >key potentially being implicit in some cases, but there could be >important semantic differences in the meaning of signing in Attestation >formats vs legacy formats, and there may be challenges in mapping some >CBOR or JSON constructions to ASN=2E1=2E >* The main use-case under discussion is to address mechanisms to >enable an attestation to be presented to a CA in the context of a >certificate request protocol=2E If I have correctly understood this, it >means that a direct mapping of the Claims in an attestation to an X=2E509 >certificate is a non-goal as the CA would be responsible for correctly >interpreting the semantics of the Claims and incorporating them into an >issued certificate in ways that make sense in the X=2E509 world=2E > >I think we need to take care to limit the scope of work items in this >area as there exists a considerable existing body of specifications in >this area=2E Girl has mentioned ACME, and Carl mentioned SCEP, for which >a new version appears to be nearing publication=2E > >My suggestion is that it should be in scope to define a syntax for >describing attestations which which could be transported via >certificate request protocols such as ACME and SCEP, but that the >question of how the semantics of attestations are managed in their >use-cases is a question for the WGs owning those specifications=2E > >Looking at the current SCEP >draft, >it might be sufficient for the CRIAttributes definition (from RFC2986) >to include the ASN=2E1 encoding of an attestation=2E ACME seems to encode >the CSR in RFC2986 for as well, so this might be workable=2E > >In terms of the charter text (which is what is really in scope here) we >could add text to the WG description indicating that the WG will work >with relevant WGs to identify where attestations may be useful in PKI >infrastructures=2E I think the existing charter text already covers the >possibility of defining Claims to enable transport of an X=2E509 >certificate as part of an attestation=2E > >Please let me know if I have misunderstood=2E I will be posting an update >to the text shortly which I believe covers this=2E > >Jeremy > >On 23 Oct 2018, at 20:57, Carl Wallace >> wrote: > > >[nms] Right=2E In order for the CA (verifier) to distinguish the >certifying key is an =E2=80=98attestable key=E2=80=99 vs=2E a traditional= CSR=2E The CA >should look for a signature from the mfg cert over the CSR (certificate >management message?) containing the generated public key=2E I=E2=80=99m s= till not >seeing where there is a self-signed (issued) certificate in the >equation=2E >This began with request to codify binding to certificate request >protocols, not for a self signed certificate=2E --=20 Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E ------FDJ1RH0N2KOTYDPUWQ11H6TELC52NJ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Please all keep in mind that we are= intending to cut work items into phases=2E While we are starting to agree = more than we disagree, I think, we should continue to pay attention to scop= ing, please=2E Not now does not mean never!

Viele Gr=C3=BC=C3=9Fe,

Henk

On October 24, 2018 2:46:21 PM GMT+= 02:00, Jeremy O'Donoghue <jodonogh@qti=2Equalcomm=2Ecom> wrote: I have the following understanding (possibly misunderstood) from this thre= ad:

  • It is desirable to have syntax for incorporating sets of Cl= aims in structures that are defined in ASN=2E1=2E At the surface level this= may be straightforward because claims are essentially (key, value) pairs -= the key potentially being implicit in some cases, but there could be important semantic differences in the mean= ing of signing in Attestation formats vs legacy formats, and there may be c= hallenges in mapping some CBOR or JSON constructions to ASN=2E1=2E
  • The main use-case under discussion is to address mechanisms to e= nable an attestation to be presented to a CA in the context of a certificat= e request protocol=2E If I have correctly understood this, it means that a = direct mapping of the Claims in an attestation to an X=2E509 certificate is a non-goal as the CA would be= responsible for correctly interpreting the semantics of the Claims and inc= orporating them into an issued certificate in ways that make sense in the X= =2E509 world=2E

I think we need to take care to limit the scope of work items in this= area as there exists a considerable existing body of specifications in thi= s area=2E Girl has mentioned ACME, and Carl mentioned SCEP, for which a new= version appears to be nearing publication=2E

My suggestion is that it should be in scope to define a syntax for de= scribing attestations which which could be transported via certificate requ= est protocols such as ACME and SCEP, but that the question of how the seman= tics of attestations are managed in their use-cases is a question for the WGs owning those specifications= =2E

Looking at the current SCEP draft, it = might be sufficient for the CRIAttributes definition (from RFC2986) to incl= ude the ASN=2E1 encoding of an attestation=2E ACME seems to encode the CSR in RFC2986 for as well, so this might be workable=2E

In terms of the charter text (which is what is really in scope here) = we could add text to the WG description indicating that the WG will work wi= th relevant WGs to identify where attestations may be useful in PKI infrast= ructures=2E I think the existing charter text already covers the possibility of defining Claims to enable transpor= t of an X=2E509 certificate as part of an attestation=2E

Please let me know if I have misunderstood=2E I will be posting an up= date to the text shortly which I believe covers this=2E

Jeremy

On 23 Oct 2018, at 20:57, Carl Wallace <carl@redhoundsoftware=2Ecom&= gt; wrote:

<snip>
[nms] Right=2E In order for th= e CA (verifier) to distinguish the certifying key is an ‘attestable k= ey’ vs=2E a traditional CSR=2E The CA should look for a signature fro= m the mfg cert over the CSR (certificate management message?) containing the generated public key=2E I’m still not seeing where t= here is a self-signed (issued) certificate in the equation=2E
This began with request to codify binding to certificate request protocols= , not for a self signed certificate=2E 


--
Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E ------FDJ1RH0N2KOTYDPUWQ11H6TELC52NJ-- From nobody Wed Oct 24 09:32:26 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0167212D4E8; Wed, 24 Oct 2018 09:32:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.3 X-Spam-Level: X-Spam-Status: No, score=-4.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oEKfh73iHc7B; Wed, 24 Oct 2018 09:32:20 -0700 (PDT) Received: from alexa-out-ams-02.qualcomm.com (alexa-out-ams-02.qualcomm.com [185.23.61.163]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 47CEB126F72; Wed, 24 Oct 2018 09:32:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1540398739; x=1571934739; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=dNi8dPkOn3M8ZfUHPx5mIkl/QisaiUW5eTJzo4Gdl+Q=; b=WdyJ7yamUIOyqtFOfPYVdM1ITyBNMSXCvE5lQXJa1E5I+YOpn10tOUw6 RJppr4Lq2xkScUxEkv6EJ0c5kEsAsvRnrV3NGNg6nIzrxlRRaGFBKjokX pmEXeYwNZebHvbT2IDuGi8WfS349KKZHddXSmHbbzSo0clOZ2ZpcTvE2S U=; X-IronPort-AV: E=Sophos;i="5.54,421,1534802400"; d="scan'208,217";a="1388275" Received: from ironmsg02-ams.qualcomm.com ([10.251.56.3]) by alexa-out-ams-02.qualcomm.com with ESMTP; 24 Oct 2018 18:32:17 +0200 X-IronPort-AV: E=McAfee;i="5900,7806,9055"; a="6119156" Received: from euamsexm01b.eu.qualcomm.com ([10.251.127.41]) by ironmsg02-ams.qualcomm.com with ESMTP/TLS/AES256-SHA; 24 Oct 2018 18:32:17 +0200 Received: from euamsexm01a.eu.qualcomm.com (10.251.127.40) by euamsexm01b.eu.qualcomm.com (10.251.127.41) with Microsoft SMTP Server (TLS) id 15.0.1365.1; Wed, 24 Oct 2018 18:32:15 +0200 Received: from euamsexm01a.eu.qualcomm.com ([10.251.127.40]) by euamsexm01a.eu.qualcomm.com ([10.251.127.40]) with mapi id 15.00.1365.000; Wed, 24 Oct 2018 18:32:15 +0200 From: Jeremy O'Donoghue To: Henk Birkholz CC: "eat@ietf.org" , Carl Wallace , Michael Richardson , "Smith, Ned" , "rats@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUavXP5xlM3Oo/GUa0I+2fOxOmhqUs9bMAgAAVBwCAAARWgIAADiwAgAAAmYCAARnZgIAAPd8AgAABPQA= Date: Wed, 24 Oct 2018 16:32:15 +0000 Message-ID: <91CD33FE-A023-464F-A49F-04B38A2A6274@qti.qualcomm.com> References: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> <8340B1B8-775D-4932-B432-29B715A3B45D@qti.qualcomm.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-mailer: Apple Mail (2.3445.9.1) x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.251.52.12] Content-Type: multipart/alternative; boundary="_000_91CD33FEA023464FA49F04B38A2A6274qtiqualcommcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 16:32:24 -0000 --_000_91CD33FEA023464FA49F04B38A2A6274qtiqualcommcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSB0aGluayB5b3UgYWxyZWFkeSBoYXZlIHRleHQgd2hpY2gga2VlcHMgdGhpcyBzY2VuYXJpbyBp biBzY29wZSBpbiB0aGUgbGF0ZXN0IGRyYWZ0ICh0aGUgYml0IGFib3V0IEFTTi4xIGludGVyb3Bl cmFiaWxpdHkpLiBGcm9tIG15IHBlcnNwZWN0aXZlIHRoaXMgaXMgZW5vdWdoIGZvciBub3cuDQoN CkplcmVteQ0KDQpPbiAyNCBPY3QgMjAxOCwgYXQgMTc6MjcsIEhlbmsgQmlya2hvbHogPGhlbmsu Ymlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU8bWFpbHRvOmhlbmsuYmlya2hvbHpAc2l0LmZyYXVu aG9mZXIuZGU+PiB3cm90ZToNCg0KUGxlYXNlIGFsbCBrZWVwIGluIG1pbmQgdGhhdCB3ZSBhcmUg aW50ZW5kaW5nIHRvIGN1dCB3b3JrIGl0ZW1zIGludG8gcGhhc2VzLiBXaGlsZSB3ZSBhcmUgc3Rh cnRpbmcgdG8gYWdyZWUgbW9yZSB0aGFuIHdlIGRpc2FncmVlLCBJIHRoaW5rLCB3ZSBzaG91bGQg Y29udGludWUgdG8gcGF5IGF0dGVudGlvbiB0byBzY29waW5nLCBwbGVhc2UuIE5vdCBub3cgZG9l cyBub3QgbWVhbiBuZXZlciENCg0KVmllbGUgR3LDvMOfZSwNCg0KSGVuaw0KDQpPbiBPY3RvYmVy IDI0LCAyMDE4IDI6NDY6MjEgUE0gR01UKzAyOjAwLCBKZXJlbXkgTydEb25vZ2h1ZSA8am9kb25v Z2hAcXRpLnF1YWxjb21tLmNvbTxtYWlsdG86am9kb25vZ2hAcXRpLnF1YWxjb21tLmNvbT4+IHdy b3RlOg0KSSBoYXZlIHRoZSBmb2xsb3dpbmcgdW5kZXJzdGFuZGluZyAocG9zc2libHkgbWlzdW5k ZXJzdG9vZCkgZnJvbSB0aGlzIHRocmVhZDoNCg0KDQogICogICBJdCBpcyBkZXNpcmFibGUgdG8g aGF2ZSBzeW50YXggZm9yIGluY29ycG9yYXRpbmcgc2V0cyBvZiBDbGFpbXMgaW4gc3RydWN0dXJl cyB0aGF0IGFyZSBkZWZpbmVkIGluIEFTTi4xLiBBdCB0aGUgc3VyZmFjZSBsZXZlbCB0aGlzIG1h eSBiZSBzdHJhaWdodGZvcndhcmQgYmVjYXVzZSBjbGFpbXMgYXJlIGVzc2VudGlhbGx5IChrZXks IHZhbHVlKSBwYWlycyAtIHRoZSBrZXkgcG90ZW50aWFsbHkgYmVpbmcgaW1wbGljaXQgaW4gc29t ZSBjYXNlcywgYnV0IHRoZXJlIGNvdWxkIGJlIGltcG9ydGFudCBzZW1hbnRpYyBkaWZmZXJlbmNl cyBpbiB0aGUgbWVhbmluZyBvZiBzaWduaW5nIGluIEF0dGVzdGF0aW9uIGZvcm1hdHMgdnMgbGVn YWN5IGZvcm1hdHMsIGFuZCB0aGVyZSBtYXkgYmUgY2hhbGxlbmdlcyBpbiBtYXBwaW5nIHNvbWUg Q0JPUiBvciBKU09OIGNvbnN0cnVjdGlvbnMgdG8gQVNOLjEuDQogICogICBUaGUgbWFpbiB1c2Ut Y2FzZSB1bmRlciBkaXNjdXNzaW9uIGlzIHRvIGFkZHJlc3MgbWVjaGFuaXNtcyB0byBlbmFibGUg YW4gYXR0ZXN0YXRpb24gdG8gYmUgcHJlc2VudGVkIHRvIGEgQ0EgaW4gdGhlIGNvbnRleHQgb2Yg YSBjZXJ0aWZpY2F0ZSByZXF1ZXN0IHByb3RvY29sLiBJZiBJIGhhdmUgY29ycmVjdGx5IHVuZGVy c3Rvb2QgdGhpcywgaXQgbWVhbnMgdGhhdCBhIGRpcmVjdCBtYXBwaW5nIG9mIHRoZSBDbGFpbXMg aW4gYW4gYXR0ZXN0YXRpb24gdG8gYW4gWC41MDkgY2VydGlmaWNhdGUgaXMgYSBub24tZ29hbCBh cyB0aGUgQ0Egd291bGQgYmUgcmVzcG9uc2libGUgZm9yIGNvcnJlY3RseSBpbnRlcnByZXRpbmcg dGhlIHNlbWFudGljcyBvZiB0aGUgQ2xhaW1zIGFuZCBpbmNvcnBvcmF0aW5nIHRoZW0gaW50byBh biBpc3N1ZWQgY2VydGlmaWNhdGUgaW4gd2F5cyB0aGF0IG1ha2Ugc2Vuc2UgaW4gdGhlIFguNTA5 IHdvcmxkLg0KDQpJIHRoaW5rIHdlIG5lZWQgdG8gdGFrZSBjYXJlIHRvIGxpbWl0IHRoZSBzY29w ZSBvZiB3b3JrIGl0ZW1zIGluIHRoaXMgYXJlYSBhcyB0aGVyZSBleGlzdHMgYSBjb25zaWRlcmFi bGUgZXhpc3RpbmcgYm9keSBvZiBzcGVjaWZpY2F0aW9ucyBpbiB0aGlzIGFyZWEuIEdpcmwgaGFz IG1lbnRpb25lZCBBQ01FLCBhbmQgQ2FybCBtZW50aW9uZWQgU0NFUCwgZm9yIHdoaWNoIGEgbmV3 IHZlcnNpb24gYXBwZWFycyB0byBiZSBuZWFyaW5nIHB1YmxpY2F0aW9uLg0KDQpNeSBzdWdnZXN0 aW9uIGlzIHRoYXQgaXQgc2hvdWxkIGJlIGluIHNjb3BlIHRvIGRlZmluZSBhIHN5bnRheCBmb3Ig ZGVzY3JpYmluZyBhdHRlc3RhdGlvbnMgd2hpY2ggd2hpY2ggY291bGQgYmUgdHJhbnNwb3J0ZWQg dmlhIGNlcnRpZmljYXRlIHJlcXVlc3QgcHJvdG9jb2xzIHN1Y2ggYXMgQUNNRSBhbmQgU0NFUCwg YnV0IHRoYXQgdGhlIHF1ZXN0aW9uIG9mIGhvdyB0aGUgc2VtYW50aWNzIG9mIGF0dGVzdGF0aW9u cyBhcmUgbWFuYWdlZCAgaW4gdGhlaXIgdXNlLWNhc2VzIGlzIGEgcXVlc3Rpb24gZm9yIHRoZSBX R3Mgb3duaW5nIHRob3NlIHNwZWNpZmljYXRpb25zLg0KDQpMb29raW5nIGF0IHRoZSBjdXJyZW50 IFNDRVAgZHJhZnQ8aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtZ3V0bWFu bi1zY2VwLz9pbmNsdWRlX3RleHQ9MT4sIGl0IG1pZ2h0IGJlIHN1ZmZpY2llbnQgZm9yIHRoZSBD UklBdHRyaWJ1dGVzIGRlZmluaXRpb24gKGZyb20gUkZDMjk4NikgdG8gaW5jbHVkZSB0aGUgQVNO LjEgZW5jb2Rpbmcgb2YgYW4gYXR0ZXN0YXRpb24uIEFDTUUgc2VlbXMgdG8gZW5jb2RlIHRoZSBD U1IgaW4gUkZDMjk4NiBmb3IgYXMgd2VsbCwgc28gdGhpcyBtaWdodCBiZSB3b3JrYWJsZS4NCg0K SW4gdGVybXMgb2YgdGhlIGNoYXJ0ZXIgdGV4dCAod2hpY2ggaXMgd2hhdCBpcyByZWFsbHkgaW4g c2NvcGUgaGVyZSkgd2UgY291bGQgYWRkIHRleHQgdG8gdGhlIFdHIGRlc2NyaXB0aW9uIGluZGlj YXRpbmcgdGhhdCB0aGUgV0cgd2lsbCB3b3JrIHdpdGggcmVsZXZhbnQgV0dzIHRvIGlkZW50aWZ5 IHdoZXJlIGF0dGVzdGF0aW9ucyBtYXkgYmUgdXNlZnVsIGluIFBLSSBpbmZyYXN0cnVjdHVyZXMu IEkgdGhpbmsgdGhlIGV4aXN0aW5nIGNoYXJ0ZXIgdGV4dCBhbHJlYWR5IGNvdmVycyB0aGUgcG9z c2liaWxpdHkgb2YgZGVmaW5pbmcgQ2xhaW1zIHRvIGVuYWJsZSB0cmFuc3BvcnQgb2YgYW4gWC41 MDkgY2VydGlmaWNhdGUgYXMgcGFydCBvZiBhbiBhdHRlc3RhdGlvbi4NCg0KUGxlYXNlIGxldCBt ZSBrbm93IGlmIEkgaGF2ZSBtaXN1bmRlcnN0b29kLiBJIHdpbGwgYmUgcG9zdGluZyBhbiB1cGRh dGUgdG8gdGhlIHRleHQgc2hvcnRseSB3aGljaCBJIGJlbGlldmUgY292ZXJzIHRoaXMuDQoNCkpl cmVteQ0KDQpPbiAyMyBPY3QgMjAxOCwgYXQgMjA6NTcsIENhcmwgV2FsbGFjZSA8Y2FybEByZWRo b3VuZHNvZnR3YXJlLmNvbTxtYWlsdG86Y2FybEByZWRob3VuZHNvZnR3YXJlLmNvbT4+IHdyb3Rl Og0KDQo8c25pcD4NCltubXNdIFJpZ2h0LiBJbiBvcmRlciBmb3IgdGhlIENBICh2ZXJpZmllcikg dG8gZGlzdGluZ3Vpc2ggdGhlIGNlcnRpZnlpbmcga2V5IGlzIGFuIOKAmGF0dGVzdGFibGUga2V5 4oCZIHZzLiBhIHRyYWRpdGlvbmFsIENTUi4gVGhlIENBIHNob3VsZCBsb29rIGZvciBhIHNpZ25h dHVyZSBmcm9tIHRoZSBtZmcgY2VydCBvdmVyIHRoZSBDU1IgKGNlcnRpZmljYXRlIG1hbmFnZW1l bnQgbWVzc2FnZT8pIGNvbnRhaW5pbmcgdGhlIGdlbmVyYXRlZCBwdWJsaWMga2V5LiBJ4oCZbSBz dGlsbCBub3Qgc2VlaW5nIHdoZXJlIHRoZXJlIGlzIGEgc2VsZi1zaWduZWQgKGlzc3VlZCkgY2Vy dGlmaWNhdGUgaW4gdGhlIGVxdWF0aW9uLg0KVGhpcyBiZWdhbiB3aXRoIHJlcXVlc3QgdG8gY29k aWZ5IGJpbmRpbmcgdG8gY2VydGlmaWNhdGUgcmVxdWVzdCBwcm90b2NvbHMsIG5vdCBmb3IgYSBz ZWxmIHNpZ25lZCBjZXJ0aWZpY2F0ZS4NCg0KDQoNCi0tDQpTZW50IGZyb20gbXkgQW5kcm9pZCBk ZXZpY2Ugd2l0aCBLLTkgTWFpbC4gUGxlYXNlIGV4Y3VzZSBteSBicmV2aXR5Lg0KDQo= --_000_91CD33FEA023464FA49F04B38A2A6274qtiqualcommcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgbGluZS1icmVhazogYWZ0 ZXItd2hpdGUtc3BhY2U7IiBjbGFzcz0iIj4NCkkgdGhpbmsgeW91IGFscmVhZHkgaGF2ZSB0ZXh0 IHdoaWNoIGtlZXBzIHRoaXMgc2NlbmFyaW8gaW4gc2NvcGUgaW4gdGhlIGxhdGVzdCBkcmFmdCAo dGhlIGJpdCBhYm91dCBBU04uMSBpbnRlcm9wZXJhYmlsaXR5KS4gRnJvbSBteSBwZXJzcGVjdGl2 ZSB0aGlzIGlzIGVub3VnaCBmb3Igbm93LjxiciBjbGFzcz0iIj4NCjxkaXY+PGJyIGNsYXNzPSIi Pg0KPC9kaXY+DQo8ZGl2PkplcmVteTwvZGl2Pg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8YmxvY2tx dW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gMjQgT2N0IDIwMTgs IGF0IDE3OjI3LCBIZW5rIEJpcmtob2x6ICZsdDs8YSBocmVmPSJtYWlsdG86aGVuay5iaXJraG9s ekBzaXQuZnJhdW5ob2Zlci5kZSIgY2xhc3M9IiI+aGVuay5iaXJraG9sekBzaXQuZnJhdW5ob2Zl ci5kZTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5nZS1u ZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwg MCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHls ZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFs OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlv bjogbm9uZTsgZmxvYXQ6IG5vbmU7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyIgY2xhc3M9 IiI+UGxlYXNlDQogYWxsIGtlZXAgaW4gbWluZCB0aGF0IHdlIGFyZSBpbnRlbmRpbmcgdG8gY3V0 IHdvcmsgaXRlbXMgaW50byBwaGFzZXMuIFdoaWxlIHdlIGFyZSBzdGFydGluZyB0byBhZ3JlZSBt b3JlIHRoYW4gd2UgZGlzYWdyZWUsIEkgdGhpbmssIHdlIHNob3VsZCBjb250aW51ZSB0byBwYXkg YXR0ZW50aW9uIHRvIHNjb3BpbmcsIHBsZWFzZS4gTm90IG5vdyBkb2VzIG5vdCBtZWFuIG5ldmVy ITwvc3Bhbj48YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZh cmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzog bm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zv cm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIi Pg0KPGJyIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxz cGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IGZsb2F0OiBub25lOyBkaXNw bGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPlZpZWxlDQogR3LDvMOfZSw8L3NwYW4+ PGJyIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0 aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNh cHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsg dGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxiciBz dHlsZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQt YWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hp dGUtc3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Ut d2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHls ZT0iY2FyZXQtY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9u dC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5s aW5lICFpbXBvcnRhbnQ7IiBjbGFzcz0iIj5IZW5rPC9zcGFuPjxiciBzdHlsZT0iY2FyZXQtY29s b3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4 dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8YnIgc3R5bGU9ImNhcmV0LWNvbG9yOiBy Z2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDog bm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1p bmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdv cmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVj b3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiIHN0eWxl PSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250 LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1h bDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGln bjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0 aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCk9uIE9jdG9iZXIgMjQsIDIwMTggMjo0 NjoyMSBQTSBHTVQmIzQzOzAyOjAwLCBKZXJlbXkgTydEb25vZ2h1ZSAmbHQ7PGEgaHJlZj0ibWFp bHRvOmpvZG9ub2doQHF0aS5xdWFsY29tbS5jb20iIGNsYXNzPSIiPmpvZG9ub2doQHF0aS5xdWFs Y29tbS5jb208L2E+Jmd0OyB3cm90ZToNCjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIg c3R5bGU9Im1hcmdpbjogMHB0IDBwdCAwcHQgMC44ZXg7IGJvcmRlci1sZWZ0LXdpZHRoOiAxcHg7 IGJvcmRlci1sZWZ0LXN0eWxlOiBzb2xpZDsgYm9yZGVyLWxlZnQtY29sb3I6IHJnYigyMDQsIDIw NCwgMjA0KTsgcGFkZGluZy1sZWZ0OiAxZXg7Ij4NCkkgaGF2ZSB0aGUgZm9sbG93aW5nIHVuZGVy c3RhbmRpbmcgKHBvc3NpYmx5IG1pc3VuZGVyc3Rvb2QpIGZyb20gdGhpcyB0aHJlYWQ6DQo8ZGl2 IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjx1bCBjbGFz cz0iTWFpbE91dGxpbmUiPg0KPGxpIGNsYXNzPSIiPkl0IGlzIGRlc2lyYWJsZSB0byBoYXZlIHN5 bnRheCBmb3IgaW5jb3Jwb3JhdGluZyBzZXRzIG9mIENsYWltcyBpbiBzdHJ1Y3R1cmVzIHRoYXQg YXJlIGRlZmluZWQgaW4gQVNOLjEuIEF0IHRoZSBzdXJmYWNlIGxldmVsIHRoaXMgbWF5IGJlIHN0 cmFpZ2h0Zm9yd2FyZCBiZWNhdXNlIGNsYWltcyBhcmUgZXNzZW50aWFsbHkgKGtleSwgdmFsdWUp IHBhaXJzIC0gdGhlIGtleSBwb3RlbnRpYWxseSBiZWluZyBpbXBsaWNpdCBpbg0KIHNvbWUgY2Fz ZXMsIGJ1dCB0aGVyZSBjb3VsZCBiZSBpbXBvcnRhbnQgc2VtYW50aWMgZGlmZmVyZW5jZXMgaW4g dGhlIG1lYW5pbmcgb2Ygc2lnbmluZyBpbiBBdHRlc3RhdGlvbiBmb3JtYXRzIHZzIGxlZ2FjeSBm b3JtYXRzLCBhbmQgdGhlcmUgbWF5IGJlIGNoYWxsZW5nZXMgaW4gbWFwcGluZyBzb21lIENCT1Ig b3IgSlNPTiBjb25zdHJ1Y3Rpb25zIHRvIEFTTi4xLjwvbGk+PGxpIGNsYXNzPSIiPlRoZSBtYWlu IHVzZS1jYXNlIHVuZGVyIGRpc2N1c3Npb24gaXMgdG8gYWRkcmVzcyBtZWNoYW5pc21zIHRvIGVu YWJsZSBhbiBhdHRlc3RhdGlvbiB0byBiZSBwcmVzZW50ZWQgdG8gYSBDQSBpbiB0aGUgY29udGV4 dCBvZiBhIGNlcnRpZmljYXRlIHJlcXVlc3QgcHJvdG9jb2wuIElmIEkgaGF2ZSBjb3JyZWN0bHkg dW5kZXJzdG9vZCB0aGlzLCBpdCBtZWFucyB0aGF0IGEgZGlyZWN0IG1hcHBpbmcgb2YgdGhlIENs YWltcyBpbg0KIGFuIGF0dGVzdGF0aW9uIHRvIGFuIFguNTA5IGNlcnRpZmljYXRlIGlzIGEgbm9u LWdvYWwgYXMgdGhlIENBIHdvdWxkIGJlIHJlc3BvbnNpYmxlIGZvciBjb3JyZWN0bHkgaW50ZXJw cmV0aW5nIHRoZSBzZW1hbnRpY3Mgb2YgdGhlIENsYWltcyBhbmQgaW5jb3Jwb3JhdGluZyB0aGVt IGludG8gYW4gaXNzdWVkIGNlcnRpZmljYXRlIGluIHdheXMgdGhhdCBtYWtlIHNlbnNlIGluIHRo ZSBYLjUwOSB3b3JsZC48L2xpPjwvdWw+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj5JIHRoaW5rIHdlIG5lZWQgdG8gdGFrZSBjYXJlIHRvIGxpbWl0 IHRoZSBzY29wZSBvZiB3b3JrIGl0ZW1zIGluIHRoaXMgYXJlYSBhcyB0aGVyZSBleGlzdHMgYSBj b25zaWRlcmFibGUgZXhpc3RpbmcgYm9keSBvZiBzcGVjaWZpY2F0aW9ucyBpbiB0aGlzIGFyZWEu IEdpcmwgaGFzIG1lbnRpb25lZCBBQ01FLCBhbmQgQ2FybCBtZW50aW9uZWQgU0NFUCwgZm9yIHdo aWNoIGEgbmV3IHZlcnNpb24gYXBwZWFycyB0byBiZSBuZWFyaW5nDQogcHVibGljYXRpb24uPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5N eSBzdWdnZXN0aW9uIGlzIHRoYXQgaXQgc2hvdWxkIGJlIGluIHNjb3BlIHRvIGRlZmluZSBhIHN5 bnRheCBmb3IgZGVzY3JpYmluZyBhdHRlc3RhdGlvbnMgd2hpY2ggd2hpY2ggY291bGQgYmUgdHJh bnNwb3J0ZWQgdmlhIGNlcnRpZmljYXRlIHJlcXVlc3QgcHJvdG9jb2xzIHN1Y2ggYXMgQUNNRSBh bmQgU0NFUCwgYnV0IHRoYXQgdGhlIHF1ZXN0aW9uIG9mIGhvdyB0aGUgc2VtYW50aWNzIG9mIGF0 dGVzdGF0aW9ucyBhcmUNCiBtYW5hZ2VkPHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPiBpbiB0aGVpciB1c2UtY2FzZXMgaXMgYSBxdWVzdGlvbiBmb3IgdGhl IFdHcyBvd25pbmcgdGhvc2Ugc3BlY2lmaWNhdGlvbnMuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5Mb29raW5nIGF0IHRoZSZuYnNwOzxh IGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWd1dG1hbm4tc2Nl cC8/aW5jbHVkZV90ZXh0PTEiIGNsYXNzPSIiPmN1cnJlbnQgU0NFUCBkcmFmdDwvYT4sIGl0IG1p Z2h0IGJlIHN1ZmZpY2llbnQgZm9yIHRoZSBDUklBdHRyaWJ1dGVzIGRlZmluaXRpb24gKGZyb20g UkZDMjk4NikgdG8gaW5jbHVkZSB0aGUgQVNOLjEgZW5jb2Rpbmcgb2YgYW4gYXR0ZXN0YXRpb24u DQogQUNNRSBzZWVtcyB0byBlbmNvZGUgdGhlIENTUiBpbiBSRkMyOTg2IGZvciBhcyB3ZWxsLCBz byB0aGlzIG1pZ2h0IGJlIHdvcmthYmxlLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+SW4gdGVybXMgb2YgdGhlIGNoYXJ0ZXIgdGV4dCAo d2hpY2ggaXMgd2hhdCBpcyByZWFsbHkgaW4gc2NvcGUgaGVyZSkgd2UgY291bGQgYWRkIHRleHQg dG8gdGhlIFdHIGRlc2NyaXB0aW9uIGluZGljYXRpbmcgdGhhdCB0aGUgV0cgd2lsbCB3b3JrIHdp dGggcmVsZXZhbnQgV0dzIHRvIGlkZW50aWZ5IHdoZXJlIGF0dGVzdGF0aW9ucyBtYXkgYmUgdXNl ZnVsIGluIFBLSSBpbmZyYXN0cnVjdHVyZXMuIEkgdGhpbmsgdGhlIGV4aXN0aW5nDQogY2hhcnRl ciB0ZXh0IGFscmVhZHkgY292ZXJzIHRoZSBwb3NzaWJpbGl0eSBvZiBkZWZpbmluZyBDbGFpbXMg dG8gZW5hYmxlIHRyYW5zcG9ydCBvZiBhbiBYLjUwOSBjZXJ0aWZpY2F0ZSBhcyBwYXJ0IG9mIGFu IGF0dGVzdGF0aW9uLjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+UGxlYXNlIGxldCBtZSBrbm93IGlmIEkgaGF2ZSBtaXN1bmRlcnN0b29k LiBJIHdpbGwgYmUgcG9zdGluZyBhbiB1cGRhdGUgdG8gdGhlIHRleHQgc2hvcnRseSB3aGljaCBJ IGJlbGlldmUgY292ZXJzIHRoaXMuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5KZXJlbXk8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNs YXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi Pk9uIDIzIE9jdCAyMDE4LCBhdCAyMDo1NywgQ2FybCBXYWxsYWNlICZsdDs8YSBocmVmPSJtYWls dG86Y2FybEByZWRob3VuZHNvZnR3YXJlLmNvbSIgY2xhc3M9IiI+Y2FybEByZWRob3VuZHNvZnR3 YXJlLmNvbTwvYT4mZ3Q7IHdyb3RlOjwvZGl2Pg0KPGJyIGNsYXNzPSJBcHBsZS1pbnRlcmNoYW5n ZS1uZXdsaW5lIj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJjYXJldC1j b2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgZm9u dC1zaXplOiAxNHB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3Jt YWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxp Z246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUt c3BhY2U6IG5vcm1hbDsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyI+DQombHQ7c25pcCZndDs8L2Rpdj4NCjxz cGFuIGlkPSJPTEtfU1JDX0JPRFlfU0VDVElPTiIgY2xhc3M9IiIgc3R5bGU9ImNhcmV0LWNvbG9y OiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBmb250LXNp emU6IDE0cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsg Zm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjog c3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7Ij4NCjxibG9ja3F1b3RlIGlkPSJNQUNfT1VUTE9P S19BVFRSSUJVVElPTl9CTE9DS1FVT1RFIiBjbGFzcz0iIiB0eXBlPSJjaXRlIiBzdHlsZT0icGFk ZGluZzogMHB4IDBweCAwcHggNXB4OyBtYXJnaW46IDBweCAwcHggMHB4IDVweDsiPg0KPGRpdiBv PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpvZmZpY2UiIHc9InVybjpzY2hlbWFz LW1pY3Jvc29mdC1jb206b2ZmaWNlOndvcmQiIG09Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5j b20vb2ZmaWNlLzIwMDQvMTIvb21tbCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1o dG1sNDAiIGNsYXNzPSIiPg0KPGRpdiBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1 cnBsZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiIHN0eWxlPSJwYWdlOiBX b3JkU2VjdGlvbjE7Ij4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJtYXJn aW46IDBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGli cmksIHNhbnMtc2VyaWY7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7 Ij5bbm1zXSBSaWdodC4gSW4gb3JkZXIgZm9yIHRoZSBDQSAodmVyaWZpZXIpIHRvIGRpc3Rpbmd1 aXNoIHRoZSBjZXJ0aWZ5aW5nIGtleSBpcyBhbiDigJhhdHRlc3RhYmxlIGtleeKAmSB2cy4gYSB0 cmFkaXRpb25hbCBDU1IuIFRoZSBDQSBzaG91bGQgbG9vayBmb3IgYSBzaWduYXR1cmUgZnJvbSB0 aGUgbWZnIGNlcnQgb3ZlciB0aGUgQ1NSIChjZXJ0aWZpY2F0ZSBtYW5hZ2VtZW50IG1lc3NhZ2U/ KQ0KIGNvbnRhaW5pbmcgdGhlIGdlbmVyYXRlZCBwdWJsaWMga2V5LiBJ4oCZbSBzdGlsbCBub3Qg c2VlaW5nIHdoZXJlIHRoZXJlIGlzIGEgc2VsZi1zaWduZWQgKGlzc3VlZCkgY2VydGlmaWNhdGUg aW4gdGhlIGVxdWF0aW9uLjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9zcGFuPg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0iY2FyZXQt Y29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGZv bnQtc2l6ZTogMTRweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9y bWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyB0ZXh0LWFs aWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRl LXNwYWNlOiBub3JtYWw7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdp ZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiPg0KVGhpcyBiZWdhbiB3aXRoIHJlcXVl c3QgdG8gY29kaWZ5IGJpbmRpbmcgdG8gY2VydGlmaWNhdGUgcmVxdWVzdCBwcm90b2NvbHMsIG5v dCBmb3IgYSBzZWxmIHNpZ25lZCBjZXJ0aWZpY2F0ZS4mbmJzcDs8L2Rpdj4NCjxzcGFuIGlkPSJP TEtfU1JDX0JPRFlfU0VDVElPTiIgY2xhc3M9IiIgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoMCwg MCwgMCk7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBmb250LXNpemU6IDE0cHg7 IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWln aHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRl eHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFs OyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0 LWRlY29yYXRpb246IG5vbmU7Ij4NCjxibG9ja3F1b3RlIGlkPSJNQUNfT1VUTE9PS19BVFRSSUJV VElPTl9CTE9DS1FVT1RFIiBjbGFzcz0iIiB0eXBlPSJjaXRlIiBzdHlsZT0icGFkZGluZzogMHB4 IDBweCAwcHggNXB4OyBtYXJnaW46IDBweCAwcHggMHB4IDVweDsiPg0KPGRpdiBvPSJ1cm46c2No ZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpvZmZpY2UiIHc9InVybjpzY2hlbWFzLW1pY3Jvc29m dC1jb206b2ZmaWNlOndvcmQiIG09Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vb2ZmaWNl LzIwMDQvMTIvb21tbCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiIGNs YXNzPSIiPg0KPGRpdiBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSIgY2xh c3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiIHN0eWxlPSJwYWdlOiBXb3JkU2VjdGlv bjE7Ij4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46IDBpbiAw aW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMt c2VyaWY7Ij4NCjxzcGFuIGNsYXNzPSIiIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7Ij4NCjxkaXYg Y2xhc3M9IiI+PGJyIGNsYXNzPSJ3ZWJraXQtYmxvY2stcGxhY2Vob2xkZXIiPg0KPC9kaXY+DQo8 L3NwYW4+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90 ZT4NCjwvc3Bhbj48L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJn YigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWlu ZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29y ZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNv cmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYigw LCAwLCAwKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd29yZC1z cGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0 aW9uOiBub25lOyBmbG9hdDogbm9uZTsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IiBjbGFz cz0iIj4tLTxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 L3NwYW4+PGJyIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTog SGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5v cm1hbDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10 ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4N CjxzcGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWlseTogSGVs dmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50 LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1h bDsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBu b25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0 LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IGZsb2F0OiBub25lOyBk aXNwbGF5OiBpbmxpbmUgIWltcG9ydGFudDsiIGNsYXNzPSIiPlNlbnQNCiBmcm9tIG15IEFuZHJv aWQgZGV2aWNlIHdpdGggSy05IE1haWwuIFBsZWFzZSBleGN1c2UgbXkgYnJldml0eS48L3NwYW4+ PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxiciBjbGFzcz0iIj4NCjwvYm9keT4NCjwv aHRtbD4NCg== --_000_91CD33FEA023464FA49F04B38A2A6274qtiqualcommcom_-- From nobody Wed Oct 24 09:43:10 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 753D1126CB6; Wed, 24 Oct 2018 09:43:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.9 X-Spam-Level: X-Spam-Status: No, score=-6.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5PBjrA0Yyxvj; Wed, 24 Oct 2018 09:43:04 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 772E612D4E7; Wed, 24 Oct 2018 09:43:04 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9OGh1qv017550 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 24 Oct 2018 18:43:02 +0200 Received: from eduroam-pool7-0363.wlan.uni-bremen.de (134.102.113.107) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Wed, 24 Oct 2018 18:42:55 +0200 Date: Wed, 24 Oct 2018 18:42:53 +0200 User-Agent: K-9 Mail for Android In-Reply-To: <91CD33FE-A023-464F-A49F-04B38A2A6274@qti.qualcomm.com> References: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> <8340B1B8-775D-4932-B432-29B715A3B45D@qti.qualcomm.com> <91CD33FE-A023-464F-A49F-04B38A2A6274@qti.qualcomm.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----3446V243X3O1N6LHF1HMZFUM61TRU2" Content-Transfer-Encoding: 7bit To: "Jeremy O'Donoghue" CC: "eat@ietf.org" , Carl Wallace , Michael Richardson , "Smith, Ned" , "rats@ietf.org" From: Henk Birkholz Message-ID: <543135F2-9D4F-4411-A561-21B4751EBE26@sit.fraunhofer.de> X-Originating-IP: [134.102.113.107] Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 16:43:08 -0000 ------3446V243X3O1N6LHF1HMZFUM61TRU2 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable It is in the current charter text, because I think your answer in the quote= below is well met=2E=20 "ASN=2E1 is already player for a number of attestation formats=2E Any reas= on to exclude it? None I can technically justify=2E" However, even boiling of the ocean is subject to phasing - and the ASN=2E1= related wording is not intended to be a loophole ;-) Viele Gr=C3=BC=C3=9Fe, Henk On October 24, 2018 6:32:15 PM GMT+02:00, Jeremy O'Donoghue wrote: >I think you already have text which keeps this scenario in scope in the >latest draft (the bit about ASN=2E1 interoperability)=2E From my >perspective this is enough for now=2E > >Jeremy > >On 24 Oct 2018, at 17:27, Henk Birkholz >> >wrote: > >Please all keep in mind that we are intending to cut work items into >phases=2E While we are starting to agree more than we disagree, I think, >we should continue to pay attention to scoping, please=2E Not now does >not mean never! > >Viele Gr=C3=BC=C3=9Fe, > >Henk > >On October 24, 2018 2:46:21 PM GMT+02:00, Jeremy O'Donoghue >> wro= te: >I have the following understanding (possibly misunderstood) from this >thread: > > >* It is desirable to have syntax for incorporating sets of Claims in >structures that are defined in ASN=2E1=2E At the surface level this may b= e >straightforward because claims are essentially (key, value) pairs - the >key potentially being implicit in some cases, but there could be >important semantic differences in the meaning of signing in Attestation >formats vs legacy formats, and there may be challenges in mapping some >CBOR or JSON constructions to ASN=2E1=2E >* The main use-case under discussion is to address mechanisms to >enable an attestation to be presented to a CA in the context of a >certificate request protocol=2E If I have correctly understood this, it >means that a direct mapping of the Claims in an attestation to an X=2E509 >certificate is a non-goal as the CA would be responsible for correctly >interpreting the semantics of the Claims and incorporating them into an >issued certificate in ways that make sense in the X=2E509 world=2E > >I think we need to take care to limit the scope of work items in this >area as there exists a considerable existing body of specifications in >this area=2E Girl has mentioned ACME, and Carl mentioned SCEP, for which >a new version appears to be nearing publication=2E > >My suggestion is that it should be in scope to define a syntax for >describing attestations which which could be transported via >certificate request protocols such as ACME and SCEP, but that the >question of how the semantics of attestations are managed in their >use-cases is a question for the WGs owning those specifications=2E > >Looking at the current SCEP >draft, >it might be sufficient for the CRIAttributes definition (from RFC2986) >to include the ASN=2E1 encoding of an attestation=2E ACME seems to encode >the CSR in RFC2986 for as well, so this might be workable=2E > >In terms of the charter text (which is what is really in scope here) we >could add text to the WG description indicating that the WG will work >with relevant WGs to identify where attestations may be useful in PKI >infrastructures=2E I think the existing charter text already covers the >possibility of defining Claims to enable transport of an X=2E509 >certificate as part of an attestation=2E > >Please let me know if I have misunderstood=2E I will be posting an update >to the text shortly which I believe covers this=2E > >Jeremy > >On 23 Oct 2018, at 20:57, Carl Wallace >> wrote: > > >[nms] Right=2E In order for the CA (verifier) to distinguish the >certifying key is an =E2=80=98attestable key=E2=80=99 vs=2E a traditional= CSR=2E The CA >should look for a signature from the mfg cert over the CSR (certificate >management message?) containing the generated public key=2E I=E2=80=99m s= till not >seeing where there is a self-signed (issued) certificate in the >equation=2E >This began with request to codify binding to certificate request >protocols, not for a self signed certificate=2E > > > >-- >Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E --=20 Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E ------3446V243X3O1N6LHF1HMZFUM61TRU2 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable It is in the current charter text, = because I think your answer in the quote below is well met=2E

"ASN=2E1 is already player for a number of attestation formats=2E Any= reason to exclude it?

None I can technically justify=2E"

However, even boiling of the ocean is subject to phasing - and the ASN=2E1= related wording is not intended to be a loophole ;-)

Viele Gr=C3=BC=C3=9Fe,

Henk



On October 24, 2018 6:32:15 PM GMT+02:0= 0, Jeremy O'Donoghue <jodonogh@qti=2Equalcomm=2Ecom> wrote: I think you already have text which keeps this scenario in scope in the la= test draft (the bit about ASN=2E1 interoperability)=2E From my perspective = this is enough for now=2E

Jeremy

On 24 Oct 2018, at 17:27, Henk Birkholz <henk=2Ebirkholz@sit= =2Efraunhofer=2Ede> wrote:

Please all keep in mind that we are intending to cut work items into phases=2E W= hile we are starting to agree more than we disagree, I think, we should con= tinue to pay attention to scoping, please=2E Not now does not mean never!

Viele Grüße,

Henk

On October 24, 2018 2:46:21 PM GMT+02:00, Jeremy O'Donoghue <jodonogh@qti=2Equalcomm= =2Ecom> wrote:
I have the following understanding (possibly misunderstood) from this thre= ad:

  • It is desirable to have syntax for incorporating sets of Cl= aims in structures that are defined in ASN=2E1=2E At the surface level this= may be straightforward because claims are essentially (key, value) pairs -= the key potentially being implicit in some cases, but there could be important semantic differences in the mean= ing of signing in Attestation formats vs legacy formats, and there may be c= hallenges in mapping some CBOR or JSON constructions to ASN=2E1=2E
  • The main use-case under discussion is to address mechanisms to e= nable an attestation to be presented to a CA in the context of a certificat= e request protocol=2E If I have correctly understood this, it means that a = direct mapping of the Claims in an attestation to an X=2E509 certificate is a non-goal as the CA would be= responsible for correctly interpreting the semantics of the Claims and inc= orporating them into an issued certificate in ways that make sense in the X= =2E509 world=2E

I think we need to take care to limit the scope of work it= ems in this area as there exists a considerable existing body of specificat= ions in this area=2E Girl has mentioned ACME, and Carl mentioned SCEP, for = which a new version appears to be nearing publication=2E

My suggestion is that it should be in scope to define a sy= ntax for describing attestations which which could be transported via certi= ficate request protocols such as ACME and SCEP, but that the question of ho= w the semantics of attestations are managed  in their use-c= ases is a question for the WGs owning those specifications=2E

Looking at the current SCEP dr= aft, it might be sufficient for the CRIAttributes definition (from RFC2= 986) to include the ASN=2E1 encoding of an attestation=2E ACME seems to encode the CSR in RFC2986 for as well, so this might be wor= kable=2E

In terms of the charter text (which is what is really in s= cope here) we could add text to the WG description indicating that the WG w= ill work with relevant WGs to identify where attestations may be useful in = PKI infrastructures=2E I think the existing charter text already covers the possibility of defining Claims to enable = transport of an X=2E509 certificate as part of an attestation=2E

Please let me know if I have misunderstood=2E I will be po= sting an update to the text shortly which I believe covers this=2E

Jeremy

On 23 Oct 2018, at 20:57, Carl Wallace <carl@redhoundsoftware=2Ecom&= gt; wrote:

<snip>
[nms] Right=2E In order for th= e CA (verifier) to distinguish the certifying key is an ‘attestable k= ey’ vs=2E a traditional CSR=2E The CA should look for a signature fro= m the mfg cert over the CSR (certificate management message?) containing the generated public key=2E I’m still not seeing where t= here is a self-signed (issued) certificate in the equation=2E
This began with request to codify binding to certificate request protocols= , not for a self signed certificate=2E 



-- 
Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E


--
Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E ------3446V243X3O1N6LHF1HMZFUM61TRU2-- From nobody Wed Oct 24 09:45:42 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 04ACA126CB6 for ; Wed, 24 Oct 2018 09:45:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lYFL1A0CSDUH for ; Wed, 24 Oct 2018 09:45:34 -0700 (PDT) Received: from mail-qk1-x729.google.com (mail-qk1-x729.google.com [IPv6:2607:f8b0:4864:20::729]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A211112EB11 for ; Wed, 24 Oct 2018 09:45:34 -0700 (PDT) Received: by mail-qk1-x729.google.com with SMTP id p3-v6so3794453qkb.5 for ; Wed, 24 Oct 2018 09:45:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version; bh=Vcoztq+of6qOwz38a5RqxCsJl7RkwjnQvKge6zvjILo=; b=PffOOEcI0lmoyscE4OgwHCenefb8b23kfWvgW4J1tBwK2CEJoQbW/IE5zTQWS+32RU kejyaqWaNrlDvNa6canCSfi6mII8Ls1oHhVbTWVliiGcbsQRY56jT0WisXySi3dPDHko x1dUTRJgfrYqSXrTODq98ZUogdUnex7FeQ7E4= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version; bh=Vcoztq+of6qOwz38a5RqxCsJl7RkwjnQvKge6zvjILo=; b=TqjYDGX1WEt0grPJgZerckV/DEaPl2CSgQX1yFK5EEa96Pc6F7E2VqR4/+YFcNFsF3 ZLlKIAZqH79gJqNY7/bl8d0w1m+pb0pCywTwtG0rqfsFuiv5cPIzeXZXMzFqC6yHIDP+ n4xoWY1jOsf5GLz9pFgkVC1bolTYqhfmxvjOLfD23MkncG0/4XJsn+Z9uIVl88CxeHaL fx2PBN5vGnNFYvHZ0aOZf9xnvlrdRTZ1lxjtSkvTcwBB0QxNcEzNtmwk1ElZ8TZzuXBZ R8dcVRaH/x7hxmlvjRpSu7ppe9PPnoyzCOGsgpML3CawuLaJti9ZAbuwQ/N/vknpgG/3 uQCA== X-Gm-Message-State: AGRZ1gI+HKz7huZ5G4TbAHT/wJY8+UTDUflTAUuY+QckyrJ3x0q1iPrg SqoORXq7Zxrn6Bay8BbMpomO8XWeNI0= X-Google-Smtp-Source: AJdET5eKhRoGefgichNwUS/qkpkGhHpSKnhZ6EtROxzfKNbIW+svIzhW+7Ln49tXzIStXZqlVr/5fw== X-Received: by 2002:a37:8282:: with SMTP id e124-v6mr3149721qkd.76.1540399533522; Wed, 24 Oct 2018 09:45:33 -0700 (PDT) Received: from [192.168.2.27] (pool-108-28-91-61.washdc.fios.verizon.net. [108.28.91.61]) by smtp.googlemail.com with ESMTPSA id x1-v6sm4783291qkx.93.2018.10.24.09.45.28 (version=TLS1 cipher=AES128-SHA bits=128/128); Wed, 24 Oct 2018 09:45:32 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Wed, 24 Oct 2018 12:45:22 -0400 From: Carl Wallace To: Henk Birkholz , Jeremy O'Donoghue CC: Michael Richardson , "Smith, Ned" , "eat@ietf.org" , "rats@ietf.org" Message-ID: Thread-Topic: [Rats] [EAT] Attestation BoF charter updates? References: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> <8340B1B8-775D-4932-B432-29B715A3B45D@qti.qualcomm.com> <91CD33FE-A023-464F-A49F-04B38A2A6274@qti.qualcomm.com> <543135F2-9D4F-4411-A561-21B4751EBE26@sit.fraunhofer.de> In-Reply-To: <543135F2-9D4F-4411-A561-21B4751EBE26@sit.fraunhofer.de> Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3623229932_19512313" Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 16:45:37 -0000 > This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. --B_3623229932_19512313 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Not sure I follow. From: RATS on behalf of Henk Birkholz Date: Wednesday, October 24, 2018 at 12:42 PM To: Jeremy O'Donoghue Cc: Michael Richardson , "Smith, Ned" , Carl Wallace , "eat@ietf.org" , "rats@ietf.org" Subject: Re: [Rats] [EAT] Attestation BoF charter updates? > It is in the current charter text, because I think your answer in the quo= te > below is well met. >=20 > "ASN.1 is already player for a number of attestation formats. Any reason = to > exclude it? >=20 > None I can technically justify." >=20 > However, even boiling of the ocean is subject to phasing - and the ASN.1 > related wording is not intended to be a loophole ;-) >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 >=20 >=20 > On October 24, 2018 6:32:15 PM GMT+02:00, Jeremy O'Donoghue > wrote: >> I think you already have text which keeps this scenario in scope in the >> latest draft (the bit about ASN.1 interoperability). From my perspective= this >> is enough for now. >>=20 >> Jeremy >>=20 >>> On 24 Oct 2018, at 17:27, Henk Birkholz >>> wrote: >>>=20 >>> Please all keep in mind that we are intending to cut work items into ph= ases. >>> While we are starting to agree more than we disagree, I think, we shoul= d >>> continue to pay attention to scoping, please. Not now does not mean nev= er! >>>=20 >>> Viele Gr=C3=BC=C3=9Fe, >>>=20 >>> Henk >>>=20 >>> On October 24, 2018 2:46:21 PM GMT+02:00, Jeremy O'Donoghue >>> wrote: >>>> I have the following understanding (possibly misunderstood) from this >>>> thread:=20 >>>>=20 >>>> * It is desirable to have syntax for incorporating sets of Claims in >>>> structures that are defined in ASN.1. At the surface level this may be >>>> straightforward because claims are essentially (key, value) pairs - th= e key >>>> potentially being implicit in some cases, but there could be important >>>> semantic differences in the meaning of signing in Attestation formats = vs >>>> legacy formats, and there may be challenges in mapping some CBOR or JS= ON >>>> constructions to ASN.1. >>>> * The main use-case under discussion is to address mechanisms to enabl= e an >>>> attestation to be presented to a CA in the context of a certificate re= quest >>>> protocol. If I have correctly understood this, it means that a direct >>>> mapping of the Claims in an attestation to an X.509 certificate is a >>>> non-goal as the CA would be responsible for correctly interpreting the >>>> semantics of the Claims and incorporating them into an issued certific= ate >>>> in ways that make sense in the X.509 world. >>>>=20 >>>> I think we need to take care to limit the scope of work items in this = area >>>> as there exists a considerable existing body of specifications in this >>>> area. Girl has mentioned ACME, and Carl mentioned SCEP, for which a ne= w >>>> version appears to be nearing publication. >>>>=20 >>>> My suggestion is that it should be in scope to define a syntax for >>>> describing attestations which which could be transported via certifica= te >>>> request protocols such as ACME and SCEP, but that the question of how = the >>>> semantics of attestations are managed in their use-cases is a questio= n for >>>> the WGs owning those specifications. >>>>=20 >>>> Looking at the current SCEP draft >>>> = , it >>>> might be sufficient for the CRIAttributes definition (from RFC2986) to >>>> include the ASN.1 encoding of an attestation. ACME seems to encode the= CSR >>>> in RFC2986 for as well, so this might be workable. >>>>=20 >>>> In terms of the charter text (which is what is really in scope here) w= e >>>> could add text to the WG description indicating that the WG will work = with >>>> relevant WGs to identify where attestations may be useful in PKI >>>> infrastructures. I think the existing charter text already covers the >>>> possibility of defining Claims to enable transport of an X.509 certifi= cate >>>> as part of an attestation. >>>>=20 >>>> Please let me know if I have misunderstood. I will be posting an updat= e to >>>> the text shortly which I believe covers this. >>>>=20 >>>> Jeremy >>>>=20 >>>>> On 23 Oct 2018, at 20:57, Carl Wallace wr= ote: >>>>>=20 >>>>> >>>>>> [nms] Right. In order for the CA (verifier) to distinguish the certi= fying >>>>>> key is an =E2=80=98attestable key=E2=80=99 vs. a traditional CSR. The CA should = look for >>>>>> a signature from the mfg cert over the CSR (certificate management >>>>>> message?) containing the generated public key. I=E2=80=99m still not seein= g where >>>>>> there is a self-signed (issued) certificate in the equation. >>>>> This began with request to codify binding to certificate request >>>>> protocols, not for a self signed certificate. >>>>>>=20 >>>>=20 >>>=20 >>> --=20 >>> Sent from my Android device with K-9 Mail. Please excuse my brevity. >>=20 >=20 > --=20 > Sent from my Android device with K-9 Mail. Please excuse my brevity. > _______________________________________________ RATS mailing list > RATS@ietf.org https://www.ietf.org/mailman/listinfo/rats --B_3623229932_19512313 Content-type: text/html; charset="UTF-8" Content-transfer-encoding: quoted-printable
Not sure I follow.
=
From: RATS <rats-bounces@ietf.org> on behalf of Henk Birk= holz <henk.birkholz@sit.= fraunhofer.de>
Date: Wednes= day, October 24, 2018 at 12:42 PM
To: Jeremy O'Donoghue <jodonog= h@qti.qualcomm.com>
Cc: Mic= hael Richardson <mcr+ietf@sandelma= n.ca>, "Smith, Ned" <ned.smit= h@intel.com>, Carl Wallace <carl@redhoundsoftware.com>, "eat@i= etf.org" <eat@ietf.org>, "rats@ietf.org" <rats@ietf.org>
Subject: = Re: [Rats] [EAT] Attestation BoF charter updates?

It is= in the current charter text, because I think your answer in the quote below= is well met.

"ASN.1 is already player for a number of attestation formats. Any reason to= exclude it?

None I can technically justify."

However, even boiling of the ocean is subject to phasing - and the ASN.1 re= lated wording is not intended to be a loophole ;-)

Viele Gr=C3=BC=C3=9Fe,

Henk



On October 24, 2018 6:32:15 PM= GMT+02:00, Jeremy O'Donoghue <jodonogh@qti.qualcomm.com> wrote:
I think you already have text which keeps this scenario in scope in the lat= est draft (the bit about ASN.1 interoperability). From my perspective this i= s enough for now.

Jeremy
=
On 24 Oct 2018, = at 17:27, Henk Birkholz <henk.birkholz@sit.fraunhofer.de> wrote:

Please all keep in mind that we are intending to cut work items into phases. Whil= e we are starting to agree more than we disagree, I think, we should continu= e to pay attention to scoping, please. Not now does not mean never!
Viele Gr=C3=BC=C3=9Fe,

Henk

On October 24, 2018 2:46:21 PM GMT+02:00, Jeremy O'Donoghue <jodonogh@qti.qualcomm.com> w= rote:
I have the following understanding (possibly misunderstood) from this threa= d:

  • It is desirable to have syntax for incorporating sets of Claims in = structures that are defined in ASN.1. At the surface level this may be strai= ghtforward because claims are essentially (key, value) pairs - the key poten= tially being implicit in some cases, but there could be important semantic differences in the meani= ng of signing in Attestation formats vs legacy formats, and there may be cha= llenges in mapping some CBOR or JSON constructions to ASN.1.
  • The main use-case under discussion is to address mechanisms to enable an a= ttestation to be presented to a CA in the context of a certificate request p= rotocol. If I have correctly understood this, it means that a direct mapping= of the Claims in an attestation to an X.509 certificate is a non-goal as the CA would be re= sponsible for correctly interpreting the semantics of the Claims and incorpo= rating them into an issued certificate in ways that make sense in the X.509 = world.

I think we ne= ed to take care to limit the scope of work items in this area as there exist= s a considerable existing body of specifications in this area. Girl has ment= ioned ACME, and Carl mentioned SCEP, for which a new version appears to be n= earing publication.

My sugges= tion is that it should be in scope to define a syntax for describing attesta= tions which which could be transported via certificate request protocols suc= h as ACME and SCEP, but that the question of how the semantics of attestatio= ns are managed  in their use-case= s is a question for the WGs owning those specifications.
=
Looking at the current SCEP= draft, it might be sufficient for the CRIAttributes definition (from RF= C2986) to include the ASN.1 encoding of an attestation. ACME seems to encode the CSR in RFC2986 for as well, so this might be work= able.

In terms of the ch= arter text (which is what is really in scope here) we could add text to the = WG description indicating that the WG will work with relevant WGs to identif= y where attestations may be useful in PKI infrastructures. I think the exist= ing charter text already covers the possibility of defining Claims to enable t= ransport of an X.509 certificate as part of an attestation.

Please let me know if I have misundersto= od. I will be posting an update to the text shortly which I believe covers t= his.

Jeremy

On 23 Oct= 2018, at 20:57, Carl Wallace <carl@redhoundsoftware.com> wrote:

<snip>
[nms] Righ= t. In order for the CA (verifier) to distinguish the certifying key is an &#= 8216;attestable key’ vs. a traditional CSR. The CA should look for a s= ignature from the mfg cert over the CSR (certificate management message?) containing the generated public key. I’m still not seeing where ther= e is a self-signed (issued) certificate in the equation.
<= /div>
This began with request to codify binding to certificate request protocols,= not for a self signed certificate. 

<= /span>
<= /div>

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.


--
Sent from my Android device with K-9 Mail. Please excuse my brevity.
<= /div>_______________________________________________ RATS mailing list RATS@ietf.org https://www.ietf.org/m= ailman/listinfo/rats
--B_3623229932_19512313-- From nobody Wed Oct 24 09:55:42 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D0201288BD; Wed, 24 Oct 2018 09:55:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YXsKVyKlxe_E; Wed, 24 Oct 2018 09:55:32 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B3E3130E23; Wed, 24 Oct 2018 09:55:31 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9OGtSc4017706 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Wed, 24 Oct 2018 18:55:29 +0200 Received: from [134.102.160.95] (134.102.160.95) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Wed, 24 Oct 2018 18:55:23 +0200 To: Carl Wallace , "Jeremy O'Donoghue" CC: Michael Richardson , "Smith, Ned" , "eat@ietf.org" , "rats@ietf.org" References: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> <8340B1B8-775D-4932-B432-29B715A3B45D@qti.qualcomm.com> <91CD33FE-A023-464F-A49F-04B38A2A6274@qti.qualcomm.com> <543135F2-9D4F-4411-A561-21B4751EBE26@sit.fraunhofer.de> From: Henk Birkholz Message-ID: Date: Wed, 24 Oct 2018 18:55:22 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.160.95] Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 16:55:36 -0000 Hello Carl, as ASN.1 has been there for quite some time, virtually anything is in some way represented via an ASN.1 based format in some way, I'd say. Of course this opens up a very wide spectrum of attestation related content, too. That does not mean everything attestation related represented via something ASN.1 based is in scope for the initial phase. We have to make a few careful decisions here, is all I am saying. "we could add text to the WG description indicating that the WG will work with relevant WGs to identify where attestations may be useful in PKI infrastructures" could likely prove to be a very big endeavor and should maybe be included in a later phase? We are excluding provisioning at the moment and that seems to be significant more vital to remote attestation procedures (IMHO). I am highlighting this as a point of reference wrt to scoping. Viele Grüße, Henk On 10/24/2018 06:45 PM, Carl Wallace wrote: > Not sure I follow. > > From: RATS > on > behalf of Henk Birkholz > > Date: Wednesday, October 24, 2018 at 12:42 PM > To: Jeremy O'Donoghue > > Cc: Michael Richardson >, "Smith, Ned" >, Carl Wallace >, "eat@ietf.org > " >, > "rats@ietf.org " > > Subject: Re: [Rats] [EAT] Attestation BoF charter updates? > > It is in the current charter text, because I think your answer in > the quote below is well met. > > "ASN.1 is already player for a number of attestation formats. Any > reason to exclude it? > > None I can technically justify." > > However, even boiling of the ocean is subject to phasing - and the > ASN.1 related wording is not intended to be a loophole ;-) > > Viele Grüße, > > Henk > > > > On October 24, 2018 6:32:15 PM GMT+02:00, Jeremy O'Donoghue > > wrote: > > I think you already have text which keeps this scenario in scope > in the latest draft (the bit about ASN.1 interoperability). From > my perspective this is enough for now. > > Jeremy > >> On 24 Oct 2018, at 17:27, Henk Birkholz >> > > wrote: >> >> Please all keep in mind that we are intending to cut work >> items into phases. While we are starting to agree more than we >> disagree, I think, we should continue to pay attention to >> scoping, please. Not now does not mean never! >> >> Viele Grüße, >> >> Henk >> >> On October 24, 2018 2:46:21 PM GMT+02:00, Jeremy O'Donoghue >> > >> wrote: >> >> I have the following understanding (possibly >> misunderstood) from this thread: >> >> * It is desirable to have syntax for incorporating sets >> of Claims in structures that are defined in ASN.1. At >> the surface level this may be straightforward because >> claims are essentially (key, value) pairs - the key >> potentially being implicit in some cases, but there >> could be important semantic differences in the meaning >> of signing in Attestation formats vs legacy formats, >> and there may be challenges in mapping some CBOR or >> JSON constructions to ASN.1. >> * The main use-case under discussion is to address >> mechanisms to enable an attestation to be presented to >> a CA in the context of a certificate request protocol. >> If I have correctly understood this, it means that a >> direct mapping of the Claims in an attestation to an >> X.509 certificate is a non-goal as the CA would be >> responsible for correctly interpreting the semantics >> of the Claims and incorporating them into an issued >> certificate in ways that make sense in the X.509 world. >> >> >> I think we need to take care to limit the scope of work >> items in this area as there exists a considerable existing >> body of specifications in this area. Girl has mentioned >> ACME, and Carl mentioned SCEP, for which a new version >> appears to be nearing publication. >> >> My suggestion is that it should be in scope to define a >> syntax for describing attestations which which could be >> transported via certificate request protocols such as ACME >> and SCEP, but that the question of how the semantics of >> attestations are managedin their use-cases is a question >> for the WGs owning those specifications. >> >> Looking at the current SCEP draft >> , >> it might be sufficient for the CRIAttributes definition >> (from RFC2986) to include the ASN.1 encoding of an >> attestation. ACME seems to encode the CSR in RFC2986 for >> as well, so this might be workable. >> >> In terms of the charter text (which is what is really in >> scope here) we could add text to the WG description >> indicating that the WG will work with relevant WGs to >> identify where attestations may be useful in PKI >> infrastructures. I think the existing charter text already >> covers the possibility of defining Claims to enable >> transport of an X.509 certificate as part of an attestation. >> >> Please let me know if I have misunderstood. I will be >> posting an update to the text shortly which I believe >> covers this. >> >> Jeremy >> >>> On 23 Oct 2018, at 20:57, Carl Wallace >>> >> > wrote: >>> >>> >>>> [nms] Right. In order for the CA (verifier) to >>>> distinguish the certifying key is an ‘attestable key’ >>>> vs. a traditional CSR. The CA should look for a >>>> signature from the mfg cert over the CSR (certificate >>>> management message?) containing the generated public >>>> key. I’m still not seeing where there is a self-signed >>>> (issued) certificate in the equation. >>> This began with request to codify binding to certificate >>> request protocols, not for a self signed certificate. >>>> >> >> >> -- >> Sent from my Android device with K-9 Mail. Please excuse my >> brevity. > > > -- > Sent from my Android device with K-9 Mail. Please excuse my brevity. > _______________________________________________ RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Wed Oct 24 10:00:04 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F9991288BD for ; Wed, 24 Oct 2018 09:59:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qqWXK6Y7FZ_E for ; Wed, 24 Oct 2018 09:59:50 -0700 (PDT) Received: from mail-qt1-x834.google.com (mail-qt1-x834.google.com [IPv6:2607:f8b0:4864:20::834]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37027130E23 for ; Wed, 24 Oct 2018 09:59:50 -0700 (PDT) Received: by mail-qt1-x834.google.com with SMTP id a10-v6so6400449qtp.2 for ; Wed, 24 Oct 2018 09:59:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version:content-transfer-encoding; bh=DVhaabc95KVH8xiQ5o2br8IZJAQ51bgMMSDKWOjT4n0=; b=G0iMuafBuXfigyjeyVMsVAUid8I4YAu58SjztHRpilnqOinzgnZmH+TNDR7fAdBt6Z fqCq0/ufVpht51wtncYAqhYmHtRQpx2zyOPNzqQmhP0PRZDf9uxX22LCoGsJ5ydVKqf8 6PATay6k9oRqQgn0eD0u5nCyf9sKO91GUWvSs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version :content-transfer-encoding; bh=DVhaabc95KVH8xiQ5o2br8IZJAQ51bgMMSDKWOjT4n0=; b=gWxKO8wkrzEPa7U33oOK2RgLWJkYbMDAlPnidibn6yS56MrqyBK6s45amKxHXlF3An ghX8VTxDGJDI+HNd0FbcE15AUuBR9g5aWdAtal5tTNr01zihQuQYW+9cnQMYEZYvK6o4 N2joqpvvlHf843mftvm5gzT4xMkF5+9bqfti/10mScfb7H9/CenKyxvS32iYAjCcDX0F DZsSUBSUUuXSEP5YeE3PscCvvbzZcRWV5nJZlNmrVMZ9zgXQHyazOv9a0huAel5ifnfm 90p+yP7BygBclQkiycFDdUxpSa1EOjFA/fLKpA8PxRPeQC9wIlRN8ChMMi5V8jf7jzCR 8Eyg== X-Gm-Message-State: AGRZ1gLkgHo2eKDEzxg3IfvlCdtsZV6MRmp1+9q26v68RsirjdFub3bk 9DiKMk7vS5oJRQb9rbtUPcBO0A== X-Google-Smtp-Source: AJdET5dYm+2jmw5aUUljGxqMYP+0v/ustgB02WEs1Vx6ry+6ngQLwWVGS7Ud0Ss7hp2cgSUNtnMhYg== X-Received: by 2002:a0c:ec45:: with SMTP id n5mr3168788qvq.91.1540400389077; Wed, 24 Oct 2018 09:59:49 -0700 (PDT) Received: from [192.168.2.27] (pool-108-28-91-61.washdc.fios.verizon.net. [108.28.91.61]) by smtp.googlemail.com with ESMTPSA id m64-v6sm3077277qkf.18.2018.10.24.09.59.45 (version=TLS1 cipher=AES128-SHA bits=128/128); Wed, 24 Oct 2018 09:59:48 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Wed, 24 Oct 2018 12:59:41 -0400 From: Carl Wallace To: Henk Birkholz , Jeremy O'Donoghue CC: Michael Richardson , "Smith, Ned" , "eat@ietf.org" , "rats@ietf.org" Message-ID: Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? References: <581DD29C-85D9-4BD8-A0EE-41761ED773B4@intel.com> <8340B1B8-775D-4932-B432-29B715A3B45D@qti.qualcomm.com> <91CD33FE-A023-464F-A49F-04B38A2A6274@qti.qualcomm.com> <543135F2-9D4F-4411-A561-21B4751EBE26@sit.fraunhofer.de> In-Reply-To: Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 16:59:54 -0000 Got it. No boiling the ocean intended. Goal for me is to present attestations to CAs to inform cert issuance. This typically involves ASN.1 and cert mgmt protocols (of which there sadly are many). Multiplicity of cert mgmt protocols notwithstanding, this ought not be too much scope creep here. A single attribute definition could serve at least three of them. On 10/24/18, 12:55 PM, "EAT on behalf of Henk Birkholz" wrote: >Hello Carl, > >as ASN.1 has been there for quite some time, virtually anything is in >some way represented via an ASN.1 based format in some way, I'd say. Of >course this opens up a very wide spectrum of attestation related >content, too. > >That does not mean everything attestation related represented via >something ASN.1 based is in scope for the initial phase. We have to make >a few careful decisions here, is all I am saying. > >"we could add text to the WG description indicating that the WG will >work with relevant WGs to identify where attestations may be useful in >PKI infrastructures" could likely prove to be a very big endeavor and >should maybe be included in a later phase? We are excluding provisioning >at the moment and that seems to be significant more vital to remote >attestation procedures (IMHO). I am highlighting this as a point of >reference wrt to scoping. > >Viele Gr=C3=BC=C3=9Fe, > >Henk > > >On 10/24/2018 06:45 PM, Carl Wallace wrote: >> Not sure I follow. >>=20 >> From: RATS > on >> behalf of Henk Birkholz > > >> Date: Wednesday, October 24, 2018 at 12:42 PM >> To: Jeremy O'Donoghue > > >> Cc: Michael Richardson > >, "Smith, Ned" > >, Carl Wallace > >, "eat@ietf.org >> " >, >> "rats@ietf.org " > > >> Subject: Re: [Rats] [EAT] Attestation BoF charter updates? >>=20 >> It is in the current charter text, because I think your answer in >> the quote below is well met. >>=20 >> "ASN.1 is already player for a number of attestation formats. Any >> reason to exclude it? >>=20 >> None I can technically justify." >>=20 >> However, even boiling of the ocean is subject to phasing - and the >> ASN.1 related wording is not intended to be a loophole ;-) >>=20 >> Viele Gr=C3=BC=C3=9Fe, >>=20 >> Henk >>=20 >>=20 >>=20 >> On October 24, 2018 6:32:15 PM GMT+02:00, Jeremy O'Donoghue >> > >>wrote: >>=20 >> I think you already have text which keeps this scenario in scope >> in the latest draft (the bit about ASN.1 interoperability). From >> my perspective this is enough for now. >>=20 >> Jeremy >>=20 >>> On 24 Oct 2018, at 17:27, Henk Birkholz >>> >> > wrote: >>> >>> Please all keep in mind that we are intending to cut work >>> items into phases. While we are starting to agree more than we >>> disagree, I think, we should continue to pay attention to >>> scoping, please. Not now does not mean never! >>> >>> Viele Gr=C3=BC=C3=9Fe, >>> >>> Henk >>> >>> On October 24, 2018 2:46:21 PM GMT+02:00, Jeremy O'Donoghue >>> > >>> wrote: >>> >>> I have the following understanding (possibly >>> misunderstood) from this thread: >>> >>> * It is desirable to have syntax for incorporating sets >>> of Claims in structures that are defined in ASN.1. At >>> the surface level this may be straightforward because >>> claims are essentially (key, value) pairs - the key >>> potentially being implicit in some cases, but there >>> could be important semantic differences in the meaning >>> of signing in Attestation formats vs legacy formats, >>> and there may be challenges in mapping some CBOR or >>> JSON constructions to ASN.1. >>> * The main use-case under discussion is to address >>> mechanisms to enable an attestation to be presented to >>> a CA in the context of a certificate request protocol. >>> If I have correctly understood this, it means that a >>> direct mapping of the Claims in an attestation to an >>> X.509 certificate is a non-goal as the CA would be >>> responsible for correctly interpreting the semantics >>> of the Claims and incorporating them into an issued >>> certificate in ways that make sense in the X.509 world. >>> >>> >>> I think we need to take care to limit the scope of work >>> items in this area as there exists a considerable existing >>> body of specifications in this area. Girl has mentioned >>> ACME, and Carl mentioned SCEP, for which a new version >>> appears to be nearing publication. >>> >>> My suggestion is that it should be in scope to define a >>> syntax for describing attestations which which could be >>> transported via certificate request protocols such as ACME >>> and SCEP, but that the question of how the semantics of >>> attestations are managedin their use-cases is a question >>> for the WGs owning those specifications. >>> >>> Looking at the current SCEP draft >>> =20 >>>, >>> it might be sufficient for the CRIAttributes definition >>> (from RFC2986) to include the ASN.1 encoding of an >>> attestation. ACME seems to encode the CSR in RFC2986 for >>> as well, so this might be workable. >>> >>> In terms of the charter text (which is what is really in >>> scope here) we could add text to the WG description >>> indicating that the WG will work with relevant WGs to >>> identify where attestations may be useful in PKI >>> infrastructures. I think the existing charter text already >>> covers the possibility of defining Claims to enable >>> transport of an X.509 certificate as part of an >>>attestation. >>> >>> Please let me know if I have misunderstood. I will be >>> posting an update to the text shortly which I believe >>> covers this. >>> >>> Jeremy >>> >>>> On 23 Oct 2018, at 20:57, Carl Wallace >>>> >>> > wrote: >>>> >>>> >>>>> [nms] Right. In order for the CA (verifier) to >>>>> distinguish the certifying key is an =E2=80=98attestable key=E2=80=99 >>>>> vs. a traditional CSR. The CA should look for a >>>>> signature from the mfg cert over the CSR (certificate >>>>> management message?) containing the generated public >>>>> key. I=E2=80=99m still not seeing where there is a self-signed >>>>> (issued) certificate in the equation. >>>> This began with request to codify binding to certificate >>>> request protocols, not for a self signed certificate. >>>>> >>> >>> >>> -- >>> Sent from my Android device with K-9 Mail. Please excuse my >>> brevity. >>=20 >>=20 >> --=20 >> Sent from my Android device with K-9 Mail. Please excuse my brevity. >> _______________________________________________ RATS mailing list >> RATS@ietf.org >> https://www.ietf.org/mailman/listinfo/rats >>=20 > >_______________________________________________ >EAT mailing list >EAT@ietf.org >https://www.ietf.org/mailman/listinfo/eat From nobody Wed Oct 24 10:31:54 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E689D129619; Wed, 24 Oct 2018 10:31:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xCKFD613eCkr; Wed, 24 Oct 2018 10:31:44 -0700 (PDT) Received: from mga05.intel.com (mga05.intel.com [192.55.52.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D7AD1288BD; Wed, 24 Oct 2018 10:31:44 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga005.jf.intel.com ([10.7.209.41]) by fmsmga105.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 24 Oct 2018 10:31:20 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.54,421,1534834800"; d="scan'208,217";a="268466935" Received: from orsmsx108.amr.corp.intel.com ([10.22.240.6]) by orsmga005.jf.intel.com with ESMTP; 24 Oct 2018 10:31:19 -0700 Received: from orsmsx155.amr.corp.intel.com (10.22.240.21) by ORSMSX108.amr.corp.intel.com (10.22.240.6) with Microsoft SMTP Server (TLS) id 14.3.319.2; Wed, 24 Oct 2018 10:31:19 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.251]) by ORSMSX155.amr.corp.intel.com ([169.254.7.228]) with mapi id 14.03.0319.002; Wed, 24 Oct 2018 10:31:18 -0700 From: "Smith, Ned" To: Jeremy O'Donoghue , "Eric Voit (evoit)" CC: Michael Richardson , "eat@ietf.org" , "rats@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Thread-Index: AQHUat5gF5XODrEVOE6MFEmu1KniJaUtlTEAgAEmEQCAABbTgP//1uwA Date: Wed, 24 Oct 2018 17:31:18 +0000 Message-ID: <2AF948FC-A5F0-4067-82BA-20A9C2FD83F1@intel.com> References: <5D773C02-5083-4B10-A705-782E28FD8ADB@island-resort.com> <3347AA26-3FA1-4067-8378-51B533BA77FB@island-resort.com> <570FEF0C-FD3A-4EBF-B8E6-7B13D2FD8E22@qti.qualcomm.com> <7544.1540242117@localhost> <46150D67-97E7-457F-9C8B-D2B3060978CA@qti.qualcomm.com> <0771A502-32EF-46E9-95FB-55BE0FF04634@qti.qualcomm.com> <1F4B0DE5-32F4-4F09-B25A-1A088F108362@qti.qualcomm.com> In-Reply-To: <1F4B0DE5-32F4-4F09-B25A-1A088F108362@qti.qualcomm.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.3.181015 x-originating-ip: [10.24.14.77] Content-Type: multipart/alternative; boundary="_000_2AF948FCA5F0406782BA20A9C2FD83F1intelcom_" MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 17:31:46 -0000 --_000_2AF948FCA5F0406782BA20A9C2FD83F1intelcom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 QWdyZWUuIEhlbmNlIHRoZSBuZWVkIGZvciB0aGUgY2hhcnRlciBzY29wZSB0byBpbmNsdWRlIHRl cm1pbm9sb2d5IGRlZmluaXRpb24gLyBjbGFyaWZpY2F0aW9uIHdvcmsgKHdoaWNoIGl0IGRvZXMp Lg0KKzEgb24gdGhlIHByb3Bvc2VkIG1hcmt1cC9tYXJrZG93biBjaGFuZ2VzLg0KLU5lZA0KDQpP biAxMC8yNC8xOCwgNTo1OSBBTSwgIkVBVCBvbiBiZWhhbGYgb2YgSmVyZW15IE8nRG9ub2dodWUi IDxlYXQtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86ZWF0LWJvdW5jZXNAaWV0Zi5vcmc+IG9uIGJl aGFsZiBvZiBqb2Rvbm9naEBxdGkucXVhbGNvbW0uY29tPG1haWx0bzpqb2Rvbm9naEBxdGkucXVh bGNvbW0uY29tPj4gd3JvdGU6DQoNCsK3ICAgICAgICAgYWxpZ25zIG1vcmUgY2xvc2VseSB3aXRo IE5JU1QgdGVybWlub2xvZ3kgLSBub3RlIHRoYXQgTklTVCBkb2VzIG5vdCBoYXZlIGEgY2xlYXIg c2V0IG9mIGRlZmluaXRpb25zIGZvciBhbGwgb2YgdGhlIHRlcm1pbm9sb2d5IHVzZWQsIHNvIHNv bWUgb2YgdGhlIHRleHQgaXMgbXkgaW50ZXJwcmV0YXRpb24gb2YgdGhlIGNvbnRlbnQgb2YgU1Ag ODAwLTY0LCBhaWRlZCBieSB0aGUgaW5wdXQgZnJvbSBOZWQuDQo= --_000_2AF948FCA5F0406782BA20A9C2FD83F1intelcom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpXaW5nZGluZ3M7DQoJcGFub3NlLTE6NSAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0x OjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpEZW5nWGlh bjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OiJcQERlbmdYaWFuIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAx IDEgMSAxO30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6LXdlYmtpdC1zdGFuZGFyZDsNCglw YW5vc2UtMToyIDExIDYgNCAyIDIgMiAyIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0K cC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0K CW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5 OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5l O30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1hbDANCgl7bXNvLXN0 eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1y aWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGlu Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0Kc3Bhbi5FbWFpbFN0eWxlMTgNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJZm9udC12YXJpYW50Om5vcm1hbCAh aW1wb3J0YW50Ow0KCWNvbG9yOndpbmRvd3RleHQ7DQoJdGV4dC10cmFuc2Zvcm06bm9uZTsNCglt c28tY29udGV4dHVhbC1hbHRlcm5hdGVzOnllczsNCglmb250LXdlaWdodDpub3JtYWw7DQoJZm9u dC1zdHlsZTpub3JtYWw7DQoJdGV4dC1kZWNvcmF0aW9uOm5vbmUgbm9uZTsNCgl2ZXJ0aWNhbC1h bGlnbjpiYXNlbGluZTt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQt b25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjgu NWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRT ZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERlZmluaXRpb25zICovDQpA bGlzdCBsMA0KCXttc28tbGlzdC1pZDoxOTExOTU4NDQ4Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlk czoxMzU5MDk5ODkwO30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDouNWlu Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxp c3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDoxLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCW1zby1hbnNpLWZvbnQtc2l6 ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3IjsNCgltc28tYmlkaS1mb250LWZh bWlseToiVGltZXMgTmV3IFJvbWFuIjt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFi LXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5Oldp bmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVs bGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglt c28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlz dCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNp emU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCglt c28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZv bnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5Oldpbmdk aW5nczt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28t YW5zaS1mb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBs MDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10 ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCgltc28tYW5zaS1mb250LXNpemU6 MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBp bjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJv ZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O21zby1jb250ZXh0dWFsLWFsdGVybmF0ZXM6eWVzIj5BZ3JlZS4gSGVuY2UgdGhl IG5lZWQgZm9yIHRoZSBjaGFydGVyIHNjb3BlIHRvIGluY2x1ZGUgdGVybWlub2xvZ3kgZGVmaW5p dGlvbiAvIGNsYXJpZmljYXRpb24gd29yayAod2hpY2ggaXQgZG9lcykuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7bXNvLWNvbnRleHR1YWwtYWx0ZXJuYXRlczp5ZXMiPiYjNDM7MSBvbiB0aGUgcHJvcG9zZWQg bWFya3VwL21hcmtkb3duIGNoYW5nZXMuDQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDttc28tY29udGV4dHVh bC1hbHRlcm5hdGVzOnllcyI+LU5lZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O21zby1jb250ZXh0dWFsLWFs dGVybmF0ZXM6eWVzIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDouNWluIj5PbiAxMC8yNC8x OCwgNTo1OSBBTSwgJnF1b3Q7RUFUIG9uIGJlaGFsZiBvZiBKZXJlbXkgTydEb25vZ2h1ZSZxdW90 OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmVhdC1ib3VuY2VzQGlldGYub3JnIj5lYXQtYm91bmNlc0Bp ZXRmLm9yZzwvYT4gb24gYmVoYWxmIG9mDQo8YSBocmVmPSJtYWlsdG86am9kb25vZ2hAcXRpLnF1 YWxjb21tLmNvbSI+am9kb25vZ2hAcXRpLnF1YWxjb21tLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVmdDoxLjBpbjt0ZXh0LWluZGVudDotLjI1aW47 bXNvLWxpc3Q6bDAgbGV2ZWwxIGxmbzEiPg0KPCFbaWYgIXN1cHBvcnRMaXN0c10+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9sO2NvbG9yOmJsYWNrIj48c3Bh biBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj7CtzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90 O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IVtlbmRpZl0+PHNwYW4gc3R5 bGU9ImZvbnQtZmFtaWx5OiZxdW90Oy13ZWJraXQtc3RhbmRhcmQmcXVvdDssc2VyaWY7Y29sb3I6 YmxhY2siPmFsaWducyBtb3JlIGNsb3NlbHkgd2l0aCBOSVNUIHRlcm1pbm9sb2d5IC0gbm90ZSB0 aGF0IE5JU1QgZG9lcyBub3QgaGF2ZSBhIGNsZWFyIHNldCBvZiBkZWZpbml0aW9ucyBmb3IgYWxs IG9mIHRoZSB0ZXJtaW5vbG9neSB1c2VkLCBzbyBzb21lIG9mIHRoZSB0ZXh0IGlzIG15IGludGVy cHJldGF0aW9uDQogb2YgdGhlIGNvbnRlbnQgb2YgU1AgODAwLTY0LCBhaWRlZCBieSB0aGUgaW5w dXQgZnJvbSBOZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0 bWw+DQo= --_000_2AF948FCA5F0406782BA20A9C2FD83F1intelcom_-- From nobody Wed Oct 24 10:50:49 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 742E212777C; Wed, 24 Oct 2018 10:50:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pumYeEXAHSDV; Wed, 24 Oct 2018 10:50:44 -0700 (PDT) Received: from mga11.intel.com (mga11.intel.com [192.55.52.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A1D3124C04; Wed, 24 Oct 2018 10:50:44 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga006.jf.intel.com ([10.7.209.51]) by fmsmga102.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 24 Oct 2018 10:50:43 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.54,421,1534834800"; d="scan'208";a="85281192" Received: from orsmsx110.amr.corp.intel.com ([10.22.240.8]) by orsmga006.jf.intel.com with ESMTP; 24 Oct 2018 10:50:43 -0700 Received: from orsmsx116.amr.corp.intel.com (10.22.240.14) by ORSMSX110.amr.corp.intel.com (10.22.240.8) with Microsoft SMTP Server (TLS) id 14.3.319.2; Wed, 24 Oct 2018 10:50:42 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.251]) by ORSMSX116.amr.corp.intel.com ([169.254.7.58]) with mapi id 14.03.0319.002; Wed, 24 Oct 2018 10:50:42 -0700 From: "Smith, Ned" To: Henk Birkholz , Jeremy O'Donoghue , "Eric Voit (evoit)" , "rats@ietf.org" CC: Michael Richardson , "eat@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? - Charter introduction section Thread-Index: AQHUa8IVLU0WKPVOlUqOqmiRiqHnQg== Date: Wed, 24 Oct 2018 17:50:42 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.3.181015 x-originating-ip: [10.24.14.77] Content-Type: text/plain; charset="utf-8" Content-ID: <73468AEDA89EEC41815286F535F818FD@intel.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? - Charter introduction section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 17:50:46 -0000 W25tc10gVGhlIGludHJvZHVjdGlvbiBpbmNsdWRlcyB0aGUgZm9sbG93aW5nIGxpc3Qgb2YgaW5m b3JtYXRpb24gb2JqZWN0cyB0byB3aGljaCBhdHRlc3RhdGlvbiBtaWdodCBwZXJ0YWluOg0KIlRv IGltcHJvdmUgdGhlIGNvbmZpZGVuY2UgaW4gYSBjb21tdW5pY2F0aW9uIHBhcnRuZXIncyB0cnVz dHdvcnRoaW5lc3MgYSByZWx5aW5nIHBhcnR5IHJlcXVpcmVzIHRydXN0ZWQgY2xhaW1zIG9yIHNw ZWNpZmljIGV2aWRlbmNlIGFib3V0Og0KDQoqIGRldmljZSBpZGVudGl0eSwNCiogY2xhaW0gb3Jp Z2luYXRpb24vcHJvdmVuYW5jZSwNCiogbWFudWZhY3R1cmluZyBvcmlnaW4sDQoqIHN5c3RlbSBp bnRlZ3JpdHksDQoqIGNvbmZpZ3VyYXRpb24sIG9yDQoqIG9wZXJhdGlvbmFsIHN0YXRlIGFuZCBt ZWFzdXJlbWVudHMgb2Ygc3RlcHMgd2hpY2ggbGVkIHRvIHRoZSBvcGVyYXRpb25hbCBzdGF0ZS4i DQoNCkEgcmVhc29uYWJsZSBpbnRlcnByZXRhdGlvbiBjb3VsZCBleGNsdWRlIHN1Yi1tb2R1bGUg ZW52aXJvbm1lbnRzIChlLmcuIFRydXN0Wm9uZSwgU0dYIEVuY2xhdmUsIFZNKSBhcyBwb3RlbnRp YWxseSBoYXZpbmcgZGlmZmVyZW50ICJ0cnVzdGVkIGNsYWltcyBvciBzcGVjaWZpYyBldmlkZW5j ZSIgdGhhbiB0aGUgImRldmljZSIuIEhlbmNlLCBpdCBtaWdodCBtYWtlIHNlbnNlIHRvIGFkZCAi c3ViLW1vZHVsZXMgb3Igcm9vdHMtb2YtdHJ1c3QiIHRvIHRoZSBsaXN0Lg0KDQotTmVkDQoNCu+7 v09uIDEwLzI0LzE4LCA1OjU2IEFNLCAiRUFUIG9uIGJlaGFsZiBvZiBIZW5rIEJpcmtob2x6IiA8 ZWF0LWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGhlbmsuYmlya2hvbHpAc2l0LmZyYXVu aG9mZXIuZGU+IHdyb3RlOg0KDQogICAgSGkgYWxsLA0KICAgIA0KICAgIGJhc2VkIG9uIEplcmVt eSdzIHByb3Bvc2FsIHdlIGRpZCBhbm90aGVyIGJpZyByZWZhY3RvcmluZyAtIGFsc28gdHJpZWQg DQogICAgdG8gYWRkcmVzcyBldmVyeWJvZHkncyBjb21tZW50cywgaW5wdXRzIGFuZCBjb25jZXJu cy4NCiAgICANCiAgICA+IGh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMvY2hhcnRlci9ibG9i L1JDMy9pZXRmLXJhdHMtY2hhcnRlci5tZA0KW25tc10gTm90ZTogdGhpcyByZWZlcmVuY2UgZG9l c24ndCBkaXNhbWJpZ3VhdGUgdGhlIHZlcnNpb24gb2YgdGhlIGNoYXJ0ZXIgbWQgYW5kIEkgYmVs aWV2ZSB0aGVyZSBhcmUgZW1haWxzIHRoYXQgaGF2ZSBjcm9zc2VkIHdoZXJlIG1heSBiZSBhIG1v cmUgcmVjZW50IHZlcnNpb24gc29tZXdoZXJlLg0KICAgIA0KICAgIFBsZWFzZSBub3RlIHRoYXQg dGhpcyBjaGFydGVyIHRleHQgaXMgaW50ZW5kZWQgdG8gYmUgYSBmaXJzdCBwaGFzZSwgDQogICAg d2hpY2ggaXMgdGhlIHJlYXNvbiB3aHksIGZvciBleGFtcGxlLCB0aGVyZSBzdGlsbCBpcyBubyBt ZW50aW9uaW5nIGFib3V0IA0KICAgIHByb3Zpc2lvbmluZywgcHJvZmlsZXMsIG9yIG1vcmUgZGV0 YWlscyBhYm91dCBvdXQtb2YtYmFuZCBkZXBlbmRlbmNpZXMuDQogICAgDQogICAgQXMgTWljaGFl bCBoaWdobGlnaHRlZCwgbW9zdCB0eXBlcyBvZiBjb250ZW50IGJlbG9uZyBpbnRvIGRyYWZ0cy4g VGhhdCANCiAgICBzYWlkIC0gb24gb25lIGhhbmQgdGhlIGNoYXJ0ZXIgaXMgYSBraW5kIG9mICJj b250cmFjdCIgd3J0IHRvIHNjb3BlIGFuZCANCiAgICBvdXRwdXQsIG9uIHRoZSBvdGhlciBoYW5k IHdlIGRvIG5vdCB3YW50IHRvIGJvaWwgdGhlIG9jZWFuIChhdCBsZWFzdCBub3QgDQogICAgYWxs IGF0IG9uY2UuLi4pLg0KICAgIA0KICAgIFZpZWxlIEdyw7zDn2UsDQogICAgDQogICAgSGVuaw0K ICAgIA0KICAgIE9uIDEwLzI0LzIwMTggMDE6MzYgUE0sIEplcmVteSBPJ0Rvbm9naHVlIHdyb3Rl Og0KICAgID4gSEkgRXJpYywNCiAgICA+IA0KICAgID4+IE9uIDIzIE9jdCAyMDE4LCBhdCAxOTow NCwgRXJpYyBWb2l0IChldm9pdCkgPGV2b2l0QGNpc2NvLmNvbSANCiAgICA+PiA8bWFpbHRvOmV2 b2l0QGNpc2NvLmNvbT4+IHdyb3RlOg0KICAgID4+DQogICAgPj4gSGkgSmVyZW15LA0KICAgID4+ IFRoYW5rcyBmb3IgdGFraW5nIGEgY3V0IGF0IHRoaXMgY2hhcnRlciBzaW1wbGlmaWNhdGlvbi4g IFRoZXJlIGFyZSBhIA0KICAgID4+IGZldyBhcmVhcyBjb3ZlcmVkIHdpdGhpbiB0aGVHaXRIdWIg R29hbHMgDQogICAgPj4gPGh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMvY2hhcnRlci9ibG9i L1JDMi9pZXRmLXJhdHMtY2hhcnRlci5tZD53aGljaCANCiAgICA+PiBJIGNhbuKAmXQgZWFzaWx5 IG1hcCB0byB5b3VyIHRleHQgYmVsb3cuICBDb3VsZCB5b3UgdGFsayBhYm91dCBob3cgdGhlc2Ug DQogICAgPj4gZWxlbWVudHMgYXJlIGNvdmVyZWQgKG9yIG5vdCk/ICAgRm9yIGNvbnRleHQsIEkg YW0gd29ya2luZyBmcm9tIHRoZSANCiAgICA+PiBwZXJzcGVjdGl2ZSBvZnJlbW90ZSBhdHRlc3Rh dGlvbiBhcHBsaWNhdGlvbiANCiAgICA+PiA8aHR0cHM6Ly93d3cuY2lzY28uY29tL2MvZGFtL2Vu L3VzL3RkL2RvY3MvY2xvdWQtc3lzdGVtcy1tYW5hZ2VtZW50L2FwcGxpY2F0aW9uLXBvbGljeS1p bmZyYXN0cnVjdHVyZS1jb250cm9sbGVyLWVudGVycHJpc2UtbW9kdWxlLzEtNS14L2ludGVncml0 eV92ZXJpZmljYXRpb24vdXNlci1ndWlkZS9DaXNjb19JbnRlZ3JpdHlfVmVyaWZpY2F0aW9uX0Fw cGxpY2F0aW9uX0FQSUMtRU1fVXNlcl9HdWlkZV8xXzVfMF94LnBkZj5kZXZlbG9wZXIgDQogICAg Pj4gdHJ5aW5nIHRvIHN0YW5kYXJkaXplIHRoZSBpbnRlcmZhY2VzIGJldHdlZW4gYSBjb250cm9s bGVyICh3aGljaCBpcyANCiAgICA+PiBhY3RpbmcgYXMgYSBjbGFpbSB2ZXJpZmllcikgYW5kIGEg bmV0d29yayBlbGVtZW50ICh3aGljaCBpbmNsdWRlcyBUQ0cgDQogICAgPj4gYmFzZWQgc3Vic3lz dGVtcy4pDQogICAgPj4gRm9yIG15IGFwcGxpY2F0aW9uIHRvIHdvcmsgcHJvcGVybHksIHRoZXJl IGFyZSBzZXZlcmFsIHRoaW5ncyBuZWVkZWQgDQogICAgPj4gd2l0aGluIGEgbmV0d29yayBjb250 cm9sbGVyIHRvIHZhbGlkYXRlIHRoZSBhc3NlcnRlZCBjbGFpbXMgY29taW5nIG91dCANCiAgICA+ PiBvZiBhIHJvdXRlci4gIFRoZXNlIGluY2x1ZGU6DQogICAgPj4gwrdIb3cgZG8gd2UgZXhwb3Nl IHRoZSBhdHRlc3RhdGlvbiBldmlkZW5jZSB3aGljaCBjYW4gYmUgdXNlZCB0byANCiAgICA+PiB2 YWxpZGF0ZSBhc3NlcnRlZCBjbGFpbXM/DQogICAgPiANCiAgICA+IEkgdGhpbmsgdGhhdCB0aGUg bmVlZCB0byBhZGRyZXNzIHRoaXMgaXMgY292ZXJlZCBzdWZmaWNpZW50bHkgZm9yIGEgV0cgDQog ICAgPiBDaGFydGVyIGJ5IHRoZSBzdGF0ZW1lbnQgIlByb2R1Y2UgYSBzcGVjaWZpY2F0aW9uIGRl ZmluaW5nIHByb2NlZHVyZXMgDQogICAgPiBhbmQgY29ycmVzcG9uZGluZyBhcmNoaXRlY3R1cmVz 4oCoIHN1cHBvcnRpbmcgdmVyaWZpY2F0aW9uIG9mIENsYWltcyIuDQogICAgPiANCiAgICA+IElm IHZlcmlmaWNhdGlvbiBvZiBDbGFpbXMgcmVxdWlyZXMgc3BlY2lmaWMgZm9ybXMgb2YgYXR0ZXN0 YXRpb24gDQogICAgPiBldmlkZW5jZSAoZS5nLiBhIHNldCBvZiBtZWFzdXJlbWVudHMgZ2VuZXJh dGVkIGJ5IGEgVFBNKSwgdGhlbiBpdCBpcyANCiAgICA+IHByb3Blcmx5IGEgbWF0dGVyIGZvciBh biBSRkMgdG8gc3BlY2lmeSB0aGlzLCBhcyBNaWNoYWVsIHN1Z2dlc3RzLg0KICAgID4gDQogICAg Pj4gwrdIb3cgZG8gd2Uga25vdyB3aGljaCByb290IG9mIHRydXN0IHdoaWNoIHdhcyB1c2VkIHRv IGdlbmVyYXRlIHRoZSANCiAgICA+PiBhdHRlc3RhdGlvbiBldmlkZW5jZSAoZS5nLiwgYXBwbGlj YXRpb24gZXZlbnQgbG9ncyksIGFuZCBob3cgZG9lcyBhIA0KICAgID4+IHZlcmlmaWVyIGRpZmZl cmVudGlhdGUgdGhpcyBmcm9tIHRoZSByb290LW9mLXRydXN0IHdoaWNoIGFzc2VydHMgDQogICAg Pj4gY2xhaW1zIG1hZGUgdXBvbiB0aGlzIGV2aWRlbmNlPw0KICAgID4gDQogICAgPiBBZ2Fpbiwg SSB0aGluayB0aGlzIGlzIGEgbWF0dGVyIGZvciBzcGVjaWZpY2F0aW9uIHJhdGhlciB0aGFuIGNo YXJ0ZXIuIA0KICAgID4gVGhlcmUgYXJlIGEgbnVtYmVyIG9mIGRpZmZlcmVudCB3YXlzIGluIHdo aWNoIFJvb3RzIG9mIFRydXN0IGNhbiBiZSANCiAgICA+IHJlYWxpc2VkIGFuZCBtYW55IHBvc3Np YmxlIGRldmljZSBhcmNoaXRlY3R1cmVzLiBUaGUgRUFUIGRyYWZ0IGFsbG93cyANCiAgICA+IG9u ZSBSb1QgdG8gaW5jbHVkZSBhbiBhdHRlc3RhdGlvbiBnZW5lcmF0ZWQgYnkgYSBkaWZmZXJlbnQg Um9ULCBmb3IgDQogICAgPiBleGFtcGxlLiBJIGJlbGlldmUgdGhlIFJBVFMgZHJhZnQgYWxzbyBw cm92aWRlcyB0ZWNobmljYWwgbWVjaGFuaXNtcyBieSANCiAgICA+IHdoaWNoIHRoaXMgY2FuIGJl IGFjaGlldmVkLg0KICAgID4gDQogICAgPj4gwrdXaGF0IGVudGl0aWVzIGFyZSBhbGxvd2VkIHRv IHJlYWQgdGhlIGluZm8gYXNzZXJ0ZWQgY2xhaW1zPyAgV2hhdCANCiAgICA+PiBzdWJzZXQgb2Yg dGhlc2UgY2FuIHNlZSB0aGUgcmF3IGF0dGVzdGF0aW9uIGV2aWRlbmNlPw0KICAgID4+IFRoZXNl IHF1ZXN0aW9ucyBhcmUgc2lnbmlmaWNhbnQgYmVjYXVzZSByb3V0ZXJzL3N3aXRjaGVzIGFyZSBu b3QgDQogICAgPj4gbW9ub2xpdGhpYyBkZXZpY2VzLiAgSW4gZmFjdCwgdGhleSBhcmUgY29tcG9z ZWQgb2Ygc3Vic3lzdGVtcyB3aXRoIA0KICAgID4+IGRpZmZlcmVudCBsZXZlbHMgb2YgdHJ1c3R3 b3J0aGluZXNzLiBBcyB0aGUgSUVURiBvZnRlbiBhaW1zIGF0IA0KICAgID4+IHByb3RvY29sIHNw ZWNpZmljYXRpb25zIGF0IHRoZSBpbnRlci1kZXZpY2UgbGV2ZWwsIEkgYW0gbG9va2luZyBmb3Ig DQogICAgPj4gY292ZXJhZ2Ugb2Ygc3VjaCBxdWVzdGlvbnMgaW4gdGhlIGNoYXJ0ZXIuDQogICAg PiANCiAgICA+IEkgYWdyZWUgd2l0aCB5b3UgaGVyZSBhcyB0aGUgc2FtZSBpc3N1ZSBhcHBsaWVz IHRvIGNsYWltcyB3aXRoIHByaXZhY3kgDQogICAgPiBpbXBsaWNhdGlvbnMuIEFzIGFuIGV4YW1w bGUsIEkgbWF5IHdpc2ggdG8gcHJlc2VudCBhIHVuaXF1ZSBkZXZpY2UgSUQgdG8gDQogICAgPiBh IHNvY2lhbCBtZWRpYSB3ZWJzaXRlIGJ1dCBub3QgbXkgbG9jYXRpb24uDQogICAgPiANCiAgICA+ IEkgaGF2ZSBhZGRlZCBidWxsZXQgcG9pbnQgMyB0byB0aGUgZHJhZnQgLSB3aGljaCBJIHdpbGwg cG9zdCBzZXBhcmF0ZWx5LiANCiAgICA+IExldCBtZSBrbm93IGlmIHlvdSB0aGluayB0aGlzIGFk ZHJlc3NlcyB5b3VyIGNvbmNlcm5zIHN1ZmZpY2llbnRseS4NCiAgICA+IA0KICAgID4gQmVzdCBy ZWdhcmRzDQogICAgPiBKZXJlbXkNCiAgICA+IA0KICAgID4+IFRoYW5rcywNCiAgICA+PiBFcmlj DQogICAgPj4gKkZyb206KkplcmVteSBPJ0Rvbm9naHVlLCBPY3RvYmVyIDIzLCAyMDE4IDEwOjQw IEFNDQogICAgPj4NCiAgICA+PiBPbiAyMiBPY3QgMjAxOCwgYXQgMjI6MDEsIE1pY2hhZWwgUmlj aGFyZHNvbiA8bWNyK2lldGZAc2FuZGVsbWFuLmNhIA0KICAgID4+IDxtYWlsdG86bWNyK2lldGZA c2FuZGVsbWFuLmNhPj4gd3JvdGU6DQogICAgPj4NCiAgICA+Pg0KICAgID4+ICAgICBKZXJlbXkg TydEb25vZ2h1ZSA8am9kb25vZ2hAcXRpLnF1YWxjb21tLmNvbQ0KICAgID4+ICAgICA8bWFpbHRv OmpvZG9ub2doQHF0aS5xdWFsY29tbS5jb20+PiB3cm90ZToNCiAgICA+Pg0KICAgID4+ICAgICAg ICAgVGhpcyBpcyBhIHZlcnkgdXNlZnVsIGNvbnRyaWJ1dGlvbiwgTGF1cmVuY2UuDQogICAgPj4N CiAgICA+Pg0KICAgID4+DQogICAgPj4gICAgICAgICBUaGUgY3VycmVudCBkcmFmdCB0ZXh0IGlz IHRvbyBzdHJvbmdseSBiaWFzZWQgdG93YXJkcw0KICAgID4+ICAgICAgICAgYXR0ZXN0YXRpb24g YmFzZWQNCiAgICA+PiAgICAgICAgIG9uIG1lYXN1cmVtZW50LCBhbmQgZG9lcyBub3QgYWRlcXVh dGVseSBjb3ZlciBvdGhlciBtZWNoYW5pc21zDQogICAgPj4gICAgICAgICB3aGljaA0KICAgID4+ ICAgICAgICAgYXJlIGFscmVhZHkNCiAgICA+Pg0KICAgID4+DQogICAgPj4gICAgIEJ1dCwgaXQn cyBmb3IgdGhlIGNoYXJ0ZXIsIGZvciB0aGUgV0csIGl0J3Mgbm90IGEgdHJlYXRpc2Ugb24NCiAg ICA+PiAgICAgYXR0ZXN0YXRpb24NCiAgICA+PiAgICAgaXRzZWxmLg0KICAgID4+DQogICAgPj4g ICAgIFRoaXMgaXMgYWxsIHN1cHBvc2VkIHRvIGJlICptZXRhKiB0ZXh0IGFib3V0IGF0dGVzdGF0 aW9uLCBhYm91dA0KICAgID4+ICAgICB3aGF0IHdlIHdhbnQNCiAgICA+PiAgICAgdG8gc2F5IGFi b3V0IGF0dGVzdGF0aW9uIGluIHRoZSBkb2N1bWVudHMsIG5vdCBhYm91dCB3aGF0DQogICAgPj4g ICAgIGF0dGVzdGF0aW9uIGlzLg0KICAgID4+DQogICAgPj4gICAgIFBsZWFzZSBnbyByZWFkIHNv bWUgb3RoZXIgSUVURiBjaGFydGVyczoNCiAgICA+Pg0KICAgID4+ICAgICBodHRwczovL2RhdGF0 cmFja2VyLmlldGYub3JnL3dnLzZsby9hYm91dC8NCiAgICA+PiAgICAgaHR0cHM6Ly9kYXRhdHJh Y2tlci5pZXRmLm9yZy93Zy82dGlzY2gvYWJvdXQvDQogICAgPj4gICAgIGh0dHBzOi8vZGF0YXRy YWNrZXIuaWV0Zi5vcmcvd2cvc3VpdC9hYm91dC8NCiAgICA+Pg0KICAgID4+IEZhaXIgY29tbWVu dC4NCiAgICA+PiBXZSBoYXZlIHR3byBleGlzdGluZyBwcm9wb3NhbHMgLSBFQVQgYW5kIFJBVFMg LSB3aGljaCBhZGRyZXNzIGEgDQogICAgPj4gc2ltaWxhciBwcm9ibGVtIHNwYWNlIGJ1dCB1c2lu ZyBkaWZmZXJlbnQgbWVjaGFuaXNtcy4gV2hpbGUgSSBiZWxpZXZlIA0KICAgID4+IHRoZSBSQVRT IGFuZCBFQVQgY29udHJpYnV0b3JzIGFyZSBpbiBicm9hZCBhZ3JlZW1lbnQgdGhhdCB0aGVyZSBp cyANCiAgICA+PiBzaWduaWZpY2FudCBiZW5lZml0IGluIGJyaW5naW5nIGJvdGggd29yayBzdHJl YW1zIHVuZGVyIGEgc2luZ2xlIA0KICAgID4+IHVtYnJlbGxhLCB0cnlpbmcgdG8gcHJvcGVybHkg aW5jb3Jwb3JhdGUgRUFUIHRocm91Z2ggaW5jcmVtZW50YWwgDQogICAgPj4gbW9kaWZpY2F0aW9u IHRvIHRoZSBkcmFmdCBSQVRTIFdHIGNoYXJ0ZXIgdGV4dCBpcyBwcm92aW5nIGNoYWxsZW5naW5n Lg0KICAgID4+IFRoZSBiZWxvdyBwcm9iYWJseSBkaXZlcmdlcyB0b28gZmFyIGZyb20gdGhlIGN1 cnJlbnQgdGV4dCBmb3Igc29tZSANCiAgICA+PiB0YXN0ZXMsIGJ1dCBpdCBtYXkgYWRkcmVzcyB5 b3VyIHBvaW50IGFuZCBwcm92aWRlIGEgYmFzaXMgZm9yIA0KICAgID4+IGRpc2N1c3Npb24gKGF0 IHRoaXMgcG9pbnQgdGhlIEdpdEh1YiBkcmFmdCANCiAgICA+PiA8aHR0cHM6Ly9naXRodWIuY29t L2lldGYtcmF0cy9jaGFydGVyL2Jsb2IvUkMyL2lldGYtcmF0cy1jaGFydGVyLm1kPiBzZWVtcyAN CiAgICA+PiBhIGxvbmcgd2F5IGJlaGluZCB0aGUgbGlzdCkuIEl0IGlzIGRlbGliZXJhdGVseSBz aWduaWZpY2FudGx5IHNob3J0ZXIgDQogICAgPj4gdGhhbiB0aGUgY3VycmVudCBkcmFmdCAtIEkg aGF2ZSB0cmllZCB0byByZS11c2UgYXMgbXVjaCBleGlzdGluZyB0ZXh0IA0KICAgID4+IGFzIHBv c3NpYmxlLCBidXQgaXQgaXMgaGVhdmlseSByZS1vcmdhbmlzZWQgYW5kIGFicmlkZ2VkLg0KICAg ID4+IEkgaGF2ZSB0YWtlbiBvbiBib2FyZCB0aGUgY29tbWVudCBmcm9tIENhcnN0ZW4gdGhhdCBw ZXJoYXBzIGEgbWluaW11bSANCiAgICA+PiBsZXZlbCBvZiB0ZXJtaW5vbG9neSBpcyBhY2NlcHRh YmxlIGluIGNoYXJ0ZXIgdGV4dCwgYnV0IGRlbGliZXJhdGVseSANCiAgICA+PiB0cmllZCB0byBr ZWVwIHRoZSBsYW5ndWFnZSBzaW1wbGUgYW5kIGZhaXJseSBnZW5lcmljIHRvIGVuYWJsZSB0aGUg DQogICAgPj4gcHJvcGVyIHdvcmsgb2YgdGVybWlub2xvZ3kgZGVmaW5pdGlvbiB0byB0YWtlIHBs YWNlIGluIHRoZSANCiAgICA+PiByZXF1aXJlbWVudHMgZG9jdW1lbnQgYXMgeW91IHN1Z2dlc3Qu DQogICAgPj4NCiAgICA+PiBJbnRyb2R1Y3Rpb24NCiAgICA+Pg0KICAgID4+IC0tLS0tLS0tLS0t LQ0KICAgID4+DQogICAgPj4gUmVtb3RlIGF0dGVzdGF0aW9uIHByb2NlZHVyZXMgY2FuIGJlIGlu Y29ycG9yYXRlZCBpbiBuZXR3b3JrIHByb3RvY29scyB0bw0KICAgID4+IHByb3ZpZGUgdGhlIGJh c2lzIGZvciBlc3RhYmxpc2hpbmcgY2xhaW1zIGFib3V0IGFuIGVudGl0eSBpbiBhIHRydXN0d29y dGh5DQogICAgPj4gbWFubmVyLiBTdWNoIGNsYWltcyBtYXkgaW5jbHVkZSwgYnV0IGFyZSBub3Qg bGltaXRlZCB0bywgZGV2aWNlIGlkZW50aXR5LA0KICAgID4+IG1hbnVmYWN0dXJpbmcgb3JpZ2lu LCBzeXN0ZW0gaW50ZWdyaXR5LCBjb25maWd1cmF0aW9uLCBvcGVyYXRpb25hbCANCiAgICA+PiBz dGF0ZSBhbmQNCiAgICA+PiBtZWFzdXJlbWVudHMgb2Ygc3RlcHMgd2hpY2ggbGVkIHRvIHRoZSBv cGVyYXRpb25hbCBzdGF0ZS4gU3VjaCBwcm9jZWR1cmVzDQogICAgPj4gZXhwb3NlIGVudGl0eSBj aGFyYWN0ZXJpc3RpY3MgaW4gdGhlIGZvcm0gb2YgY2xhaW0gc2V0cyB3aGljaCBhbGxvdyByZW1v dGUNCiAgICA+PiBwYXJ0aWVzIHRvIGVzdGFibGlzaCB0aGUgdHJ1c3R3b3J0aGluZXNzIG9mIGEg ZGV2aWNlLCBwcm92aWRlIGV2aWRlbmNlIA0KICAgID4+IHRoYXQgYQ0KICAgID4+IHBhcnRpY3Vs YXIgc2V0IG9mIG9wZXJhdGlvbnMgYW5kIGZ1bmN0aW9ucyBhcmUgc3VwcG9ydGVkIGFuZC9vciB0 aGF0IHRoZQ0KICAgID4+IGVudGl0eSBpcyBhY3R1YWxseSB3aGF0IGl0IGNsYWltcyB0byBiZS4N CiAgICA+Pg0KICAgID4+IEluIHRoZSBhYnNlbmNlIG9mIHN1Y2ggcHJvY2VkdXJlcywgd2hpbGUg ZG9tYWluLXNwZWNpZmljIGF0dGVzdGF0aW9uDQogICAgPj4gbWVjaGFuaXNtcyBzdWNoIGFzIFRD RyBUUE0sIEZJRE8gQWxsaWFuY2UgYXR0ZXN0YXRpb24gYW5kIEFuZHJvaWQgS2V5c3RvcmUNCiAg ICA+PiBhdHRlc3RhdGlvbiBleGlzdCwgdGhlcmUgaXMgbm8gY29tbW9uIHdheSBmb3IgYSByZW1v dGUgcGFydHkgdG8gdGVsbCANCiAgICA+PiBpZiBkYXRhDQogICAgPj4gb3JpZ2luYXRlcyBmcm9t IGEgdHJ1c3R3b3J0aHkgZGV2aWNlIChlLmcuIGEgVHJ1c3RlZCBTeXN0ZW0gZGVzaWduZWQgdG8N CiAgICA+PiBzdXBwb3J0IGEgc3BlY2lmaWMgc2V0IG9mIG9wZXJhdGlvbnMvZnVuY3Rpb25hbGl0 aWVzKSBvciBub3QuDQogICAgPj4NCiAgICA+PiBUaGUgZm9sbG93aW5nIG1pbmltYWwgdGVybWlu b2xvZ3kgaXMgZGVmaW5lZCBmb3IgdGhlIHB1cnBvc2VzIG9mIA0KICAgID4+IGNsYXJpZnlpbmcg dGhlDQogICAgPj4gV29ya2luZyBHcm91cCBjaGFydGVyIHRleHQ6DQogICAgPj4NCiAgICA+PiAt IGF0dGVzdGF0aW9uOiBhIHNldCBvZiBjbGFpbXMgd2hpY2ggY2FuIGJlIHZlcmlmaWVkIGFzIG9y aWdpbmF0aW5nIGluIGFuDQogICAgPj4gICAgICAgICAgIGVudGl0eS4NCiAgICA+Pg0KICAgID4+ IC0gY2xhaW06ICBhcyBkZWZpbmVkIGluIFJGQzc1MTkuDQogICAgPj4NCiAgICA+PiAtIGVudGl0 eTogYSBkZXZpY2Ugb3IgZGV2aWNlIHN1Yi1tb2R1bGUgdGhhdCBjYW4gZ2VuZXJhdGUgYSBjbGFp bSBvciANCiAgICA+PiBzZXQgb2YNCiAgICA+PiAgICAgICAgICAgY2xhaW1zIHdoaWNoIGNhbiBi ZSB2ZXJpZmllZCBieSBhIHJlbW90ZSBwYXJ0eS4NCiAgICA+Pg0KICAgID4+IC0gcmVtb3RlIHBh cnR5OiBhbiBhY3RvciByZW1vdGUgZnJvbSBhbiBlbnRpdHkgdGhhdCB3aXNoZXMgdG8gdmVyaWZ5 IA0KICAgID4+IHdoZXRoZXINCiAgICA+PiAgICAgICAgICAgYSBjbGFpbSBvciBzZXQgb2YgY2xh aW1zIG9yaWdpbmF0ZWQgaW4gYSBnaXZlbiBlbnRpdHkuDQogICAgPj4NCiAgICA+PiBEZXNjcmlw dGlvbiBvZiB0aGUgV29ya2luZyBHcm91cA0KICAgID4+DQogICAgPj4gLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0NCiAgICA+Pg0KICAgID4+IFRoZSBXb3JraW5nIEdyb3VwIHdpbGwg ZGVmaW5lOg0KICAgID4+DQogICAgPj4gLSBTdGFuZGFyZGl6ZWQgYW5kIGludGVyb3BlcmFibGUg bWVjaGFuaXNtcyB0byBlc3RhYmxpc2ggYSBzdWZmaWNpZW50IA0KICAgID4+IGxldmVsDQogICAg Pj4gICBvZiBjb25maWRlbmNlIHRoYXQgZGF0YSBvcmlnaW5hdGVzIGZyb20gYSB0cnVzdHdvcnRo eSBlbnRpdHkgZGVzaWduZWQgdG8NCiAgICA+PiAgIHN1cHBvcnQgYSBzcGVjaWZpYyBzZXQgb2Yg b3BlcmF0aW9ucy9mdW5jdGlvbmFsaXRpZXMuDQogICAgPj4gLSBTdGFuZGFyZGl6ZWQgYW5kIGlu dGVyb3BlcmFibGUgbWVjaGFuaXNtcyBidWlsZGluZyBvbiAoMSkgdG8gYWxsb3cgDQogICAgPj4g cmVtb3RlDQogICAgPj4gICBwYXJ0aWVzIHRvIGtub3cgdGhlIHByb3ZlbmFuY2UgYW5kIGNoYXJh Y3RlcmlzdGljcyBvZiBhbiBlbnRpdHkgdGhhdCANCiAgICA+PiBtYXkgYmUNCiAgICA+PiAgIHJl cXVlc3Rpbmcgc2VydmljZXMuDQogICAgPj4NCiAgICA+PiBUaGUgV29ya2luZyBHcm91cCB3aWxs IGlkZW50aWZ5IHNlY3VyaXR5IGdvYWxzIHdoaWNoIGl0IGV4cGVjdHMgYSANCiAgICA+PiB0cnVz dHdvcnRoeQ0KICAgID4+IGV4ZWN1dGlvbiBjb250ZXh0IHRvIGFkZHJlc3MsIHdoaWNoIHdpbGwg YXNzdW1lIHRoZSBwcmVzZW5jZSBvZiBSb290cyBvZg0KICAgID4+IFRydXN0IChhcyBkZWZpbmVk IGJ5IE5JU1QgW1NQODAwLTE2NF0pLiBUaGUgZGV0YWlsZWQgc3BlY2lmaWNhdGlvbiBvZiBzdWNo DQogICAgPj4gY29udGV4dHMgaXMgb3V0IG9mIHNjb3BlLg0KICAgID4+DQogICAgPj4gVGhlIFdv cmtpbmcgR3JvdXAgd2lsbCBtYWludGFpbiBjbG9zZSByZWxhdGlvbnNoaXBzIHdpdGggYm9kaWVz IA0KICAgID4+IHVuZGVydGFraW5nDQogICAgPj4gY29tcGxlbWVudGFyeSB3b3JrIHN0cmVhbXMg aW4gdGhlIGFyZWEgb2YgcmVtb3RlIGF0dGVzdGF0aW9uIHN1Y2ggYXMNCiAgICA+PiBHbG9iYWxQ bGF0Zm9ybSwgVHJ1c3RlZCBDb21wdXRpbmcgR3JvdXAgYW5kIEZJRE8gQWxsaWFuY2UuDQogICAg Pj4NCiAgICA+PiBUaGUgV29ya2luZyBHcm91cCB3aWxsIGNvb3BlcmF0ZSB3aXRoIHRoZSBURUVQ IFdvcmtpbmcgR3JvdXAsIHdoaWNoIG1heQ0KICAgID4+IGdlbmVyYXRlIHJlcXVpcmVtZW50cyBm b3IgY2xhaW1zIHJlbGV2YW50IHRvIFRFRS4NCiAgICA+Pg0KICAgID4+IFdvcmsgSXRlbXMNCiAg ICA+Pg0KICAgID4+IC0tLS0tLS0tLS0NCiAgICA+Pg0KICAgID4+IFRoZSBXb3JraW5nIEdyb3Vw IHdpbGwgZGV2ZWxvcCBzcGVjaWZpY2F0aW9ucyBzdXBwb3J0aW5nIHRoZSBjcmVhdGlvbiBvZg0K ICAgID4+IGludGVyb3BlcmFibGUgcmVtb3RlIGF0dGVzdGF0aW9uIHByb2NlZHVyZXMgZm9yIGVu dGl0aWVzIHdoaWNoIA0KICAgID4+IGluY29ycG9yYXRlDQogICAgPj4gUm9vdHMgb2YgVHJ1c3Qu IFRoZSBtYWluIGRlbGl2ZXJhYmxlcyBhcmUgYXMgZm9sbG93cy4NCiAgICA+Pg0KICAgID4+IC0g UHJvZHVjZSBhIHJlcXVpcmVtZW50cyBkb2N1bWVudCBlc3RhYmxpc2hpbmcgYSBjb21tb24gdm9j YWJ1bGFyeSBmb3IgDQogICAgPj4gcmVtb3RlDQogICAgPj4gICBhdHRlc3RhdGlvbiwgaWRlbnRp ZnlpbmcgbWVjaGFuaXNtcyB3aGljaCB3aWxsIGJlIHN1cHBvcnRlZCBmb3IgDQogICAgPj4gZXN0 YWJsaXNoaW5nDQogICAgPj4gICB0cnVzdCBiZXR3ZWVuIGFuIGVudGl0eSBhbmQgYSByZW1vdGUg cGFydHksIGFuZCBlbnVtZXJhdGluZyBzYW1wbGUgDQogICAgPj4gdXNlLWNhc2VzDQogICAgPj4g ICBmb3IgcmVtb3RlIGF0dGVzdGF0aW9uLg0KICAgID4+DQogICAgPj4gLSBQcm9kdWNlIHNwZWNp ZmljYXRpb24gdGV4dCBkZWZpbmluZyBpbnRlcm9wZXJhYmxlIGNyb3NzLXBsYXRmb3JtIA0KICAg ID4+IGNsYWltcyB3aGljaA0KICAgID4+ICAgcHJvdmlkZSBpbmZvcm1hdGlvbiBhYm91dCBhbiBl bnRpdHkgaW4gc3VwcG9ydCBvZiB0aGUgcmVxdWlyZWQgDQogICAgPj4gdXNlLWNhc2VzLCBhbmQN CiAgICA+PiAgIGV4dGVuZGluZyB0aGUgc2V0IG9mIGNsYWltcyBkZWZpbmVkIGluIFJGQzc1MTkg YW5kIFJGQzgzOTIuIFRoZSANCiAgICA+PiBzcGVjaWZpY2F0aW9uDQogICAgPj4gICB3aWxsIGRl c2NyaWJlIHRoZSBzeW50YXggZm9yIGVhY2ggY2xhaW0gaW4gYXQgbGVhc3QgdGhlIGZvbGxvd2lu ZyANCiAgICA+PiBmb3JtYXRzOg0KICAgID4+ICAgICAtIENCT1IgW1JGQzcwNDldDQogICAgPj4g ICAgIC0gSlNPTiBbUkZDNzE1OV0NCiAgICA+PiAgICAgLSBZQU5HIFtSRkM2MDIwXQ0KICAgID4+ DQogICAgPj4gLSBQcm9kdWNlIHNwZWNpZmljYXRpb24gdGV4dCBkZWZpbmluZyBwcm9jZWR1cmVz IGFuZCBjb3JyZXNwb25kaW5nIA0KICAgID4+IGFyY2hpdGVjdHVyZXMNCiAgICA+PiAgIHN1cHBv cnRpbmcgdmVyaWZpY2F0aW9uIG9mIGNsYWltcyB3aXRoaW4gYW4gYXR0ZXN0YXRpb24gYmFzZWQg b24gDQogICAgPj4gbWVhc3VyZWQgZmlsZQ0KICAgID4+ICAgZXhlY3V0aW9uIHByb2NlZHVyZXMg YW5kIHN1cHBvcnRpbmc6DQogICAgPj4gICAgIC0gRXhwbGljaXQgYXR0ZXN0YXRpb24gd2hlcmVp biBhIHNldCBvZiBjbGFpbXMgaXMgdHJhbnNwb3J0ZWQgaW4gDQogICAgPj4gdGhlIGF0dGVzdGF0 aW9uOw0KICAgID4+ICAgICAtIEltcGxpY2l0IGF0dGVzdGF0aW9uIHdoZXJlaW4gYSBzZXQgb2Yg Y2xhaW1zIGlzIGltcGxpZWQgYnkgDQogICAgPj4gcG9zc2Vzc2lvbiBvZiBhIHNlY3JldC4NCiAg ICA+Pg0KICAgID4+IC0gUHJvZHVjZSBzcGVjaWZpY2F0aW9uIHRleHQgZGVmaW5pbmcgcHJvY2Vk dXJlcyBhbmQgY29ycmVzcG9uZGluZyANCiAgICA+PiBhcmNoaXRlY3R1cmVzDQogICAgPj4gICBz dXBwb3J0aW5nIHZlcmlmaWNhdGlvbiBvZiBjbGFpbXMgZW5jYXBzdWxhdGVkIGluOg0KICAgID4+ DQogICAgPj4gICAgIC0gQ0JPUiBXZWIgVG9rZW4gc3RydWN0dXJlcyBbUkZDODM5Ml0NCiAgICA+ PiAgICAgLSBKU09OIFdlYiBUb2tlbiBzdHJ1Y3R1cmVzIFtSRkM3NTE5XQ0KICAgID4+DQogICAg Pj4gLSBQZXJmb3JtIHByaXZhY3kgYW5hbHlzaXMgb2YgYm90aCBjbGFpbXMgYW5kIHRoZSBjcnlw dG9ncmFwaGljIA0KICAgID4+IHByb2NlZHVyZXMgdXNlZCB0bw0KICAgID4+ICAgZXN0YWJsaXNo IHRydXN0LiBUaGlzIGluZm9ybWF0aW9uIHdpbGwgYmUgaW5jbHVkZWQgYXMgYXBwcm9wcmlhdGUg aW4gdGhlDQogICAgPj4gICBkZWxpdmVyYWJsZSBzcGVjaWZpY2F0aW9ucywgYW5kIG1heSBpbXBs eSBleHRlbnNpb24gb2YgcHJvY2VkdXJlcyANCiAgICA+PiBkZWZpbmVkIGluDQogICAgPj4gICBv dGhlciBzcGVjaWZpY2F0aW9ucyBpbiBzdXBwb3J0IG9mIHByaXZhY3kgZ29hbHMuDQogICAgPj4N CiAgICA+PiBJdCBzZWVtcyB0byBtZSB0aGF0IHRoZXJlIGFyZSB0d28gd2F5cyB0byBwcm9kdWNl IHRoZSBtYWluIA0KICAgID4+IHNwZWNpZmljYXRpb24gZGVsaXZlcmFibGVzLiBJIGhhdmUgZGVs aWJlcmF0ZWx5IGxlZnQgdGhlIHRleHQgYWJvdmUgDQogICAgPj4gc2xpZ2h0bHkgdmFndWUgb24g dGhpcy4NCiAgICA+Pg0KICAgID4+ICAgKiBBIGNsYWltcyBzcGVjaWZpY2F0aW9uIGNvbW1vbiB0 byBSQVRTIGFuZCBFQVQgd2l0aCBzZXBhcmF0ZSBSQVRTDQogICAgPj4gICAgIGFuZCBFQVQgcHJv Y2VkdXJlIHNwZWNpZmljYXRpb25zLg0KICAgID4+ICAgKiBBIGNsYWltcyBzcGVjaWZpY2F0aW9u IGFsc28gaW5jb3Jwb3JhdGluZyBFQVQgcHJvY2VkdXJlcyBhbmQgYQ0KICAgID4+ICAgICBzZXBh cmF0ZSBSQVRTIHByb2NlZHVyZSBzcGVjaWZpY2F0aW9uLiBUaGlzIHdvdWxkIGJlIG15IHByZWZl cnJlZA0KICAgID4+ICAgICBvcHRpb24uDQogICAgPj4NCiAgICA+PiAgICAgICBvIEkgYmVsaWV2 ZSB0aGVyZSBhcmUgdmVyeSBmZXcgcHJvY2VkdXJlcyBuZWVkZWQgZm9yIEVBVCBvdGhlcg0KICAg ID4+ICAgICAgICAgdGhhbiB0aGUgcG9zc2libGUgbmVlZCB0byBzdXBwb3J0IGEgbm9uY2UgdG8g ZW5zdXJlIGZyZXNobmVzcw0KICAgID4+DQogICAgPj4gSmVyZW15DQogICAgPj4NCiAgICA+Pg0K ICAgID4+ICAgICBOb3RpY2UgaG93IGJ5IGFib3V0IHRoZSBzZWNvbmQgcGFyYWdyYXBoICg2dGlz Y2ggdGFrZXMgYSBiaXQNCiAgICA+PiAgICAgbG9uZ2VyKSwgZWFjaA0KICAgID4+ICAgICBnZXRz IGludG8gd2hhdCB0aGUgV0cgd2lsbCBkbz8NCiAgICA+Pg0KICAgID4+ICAgICAtLQ0KICAgID4+ ICAgICBNaWNoYWVsIFJpY2hhcmRzb24gPG1jcitJRVRGQHNhbmRlbG1hbi5jYQ0KICAgID4+ICAg ICA8bWFpbHRvOm1jcitJRVRGQHNhbmRlbG1hbi5jYT4+LCBTYW5kZWxtYW4gU29mdHdhcmUgV29y a3MNCiAgICA+PiAgICAgLT0gSVB2NiBJb1QgY29uc3VsdGluZyA9LQ0KICAgID4+ICAgICBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgID4+ICAgICBF QVQgbWFpbGluZyBsaXN0DQogICAgPj4gICAgIEVBVEBpZXRmLm9yZyA8bWFpbHRvOkVBVEBpZXRm Lm9yZz4NCiAgICA+PiAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9l YXQNCiAgICA+Pg0KICAgID4gDQogICAgPiANCiAgICA+IA0KICAgID4gX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICA+IEVBVCBtYWlsaW5nIGxpc3QN CiAgICA+IEVBVEBpZXRmLm9yZw0KICAgID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9lYXQNCiAgICA+IA0KICAgIA0KICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fDQogICAgRUFUIG1haWxpbmcgbGlzdA0KICAgIEVBVEBpZXRm Lm9yZw0KICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0DQogICAg DQoNCg== From nobody Wed Oct 24 11:04:06 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE76E1276D0; Wed, 24 Oct 2018 11:03:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VzliNjw8mW5S; Wed, 24 Oct 2018 11:03:54 -0700 (PDT) Received: from mga02.intel.com (mga02.intel.com [134.134.136.20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 73818126DBF; Wed, 24 Oct 2018 11:03:54 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga001.jf.intel.com ([10.7.209.18]) by orsmga101.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 24 Oct 2018 11:03:53 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.54,421,1534834800"; d="scan'208";a="102334333" Received: from orsmsx107.amr.corp.intel.com ([10.22.240.5]) by orsmga001.jf.intel.com with ESMTP; 24 Oct 2018 11:03:53 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.251]) by ORSMSX107.amr.corp.intel.com ([169.254.1.14]) with mapi id 14.03.0319.002; Wed, 24 Oct 2018 11:03:53 -0700 From: "Smith, Ned" To: Henk Birkholz , Jeremy O'Donoghue , "Eric Voit (evoit)" , "rats@ietf.org" CC: Michael Richardson , "eat@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? Charter goals section Thread-Index: AQHUa8Ps/SH+g99RQkW/JYfM8PLlYg== Date: Wed, 24 Oct 2018 18:03:53 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.3.181015 x-originating-ip: [10.24.14.77] Content-Type: text/plain; charset="utf-8" Content-ID: <9C60ADEE19CE274D909962AFE07B67D4@intel.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? Charter goals section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 18:03:58 -0000 W25tc10gVGhlIGdvYWxzIHNlY3Rpb24gYnVsbGV0ICMyIHN0YXRlczoNCiJTdGFuZGFyZGl6ZWQg YW5kIGludGVyb3BlcmFibGUgbWVjaGFuaXNtcyBidWlsZGluZyBvbiAoMS4pIHRvIGFsbG93IHJl bHlpbmcgcGFydGllcyB0byBrbm93IHRoZSBhdHRlc3RhdGlvbiBwcm92ZW5hbmNlIGFuZCBjaGFy YWN0ZXJpc3RpY3Mgd2l0aCByZXNwZWN0IHRvIHN5c3RlbXMgdGhhdCBtYXkgcmVxdWVzdCBzZXJ2 aWNlcyBvciBwcm92aWRlIGluZm9ybWF0aW9uIHRvIHRoZSByZWx5aW5nIHBhcnR5LiINCltubXNd IEknbSBub3Qgc3VyZSB0aGUgd29yZHMgd2F5IHdoYXQgaXMgZXhwZWN0ZWQuIElzIHRoZSBwaHJh c2UgIi4uLnN5c3RlbXMgdGhhdCBtYXkgcmVxdWVzdCBzZXJ2aWNlcyBvciBwcm92aWRlIGluZm9y bWF0aW9uIHRvIHRoZSByZWx5aW5nIHBhcnR5IiBtb3JlIGNvcnJlY3QgaWYgc3RhdGVkIGFzICIu Li5zeXN0ZW1zIHRoYXQgbWF5IHJlcXVlc3Qgc2VydmljZXMgZnJvbSBhIHJlbHlpbmcgcGFydHkg b3IgcHJvdmlkZSBpbmZvcm1hdGlvbiB0byB0aGUgcmVseWluZyBwYXJ0eSI/IElmIHNvLCBJJ20g bm90IGNlcnRhaW4gdGhpcyBpcyBjb3JyZWN0LiBUaGUgcmVseWluZyBwYXJ0eSBpcyBsaWtlbHkg cmVxdWVzdGluZyBzZXJ2aWNlcyBmcm9tIHRoZSBzeXN0ZW0gb3IgdGhlIHN5c3RlbSBpcyBzdXBw bHlpbmcgaW5mb3JtYXRpb24gdG8gdGhlIHJlbHlpbmcgcGFydHkuIE1heWJlIHRoZSBzZW50ZW5j ZSBiZWxvdyBtb3JlIGFjY3VyYXRlbHkgY2FwdHVyZXMgdGhlIGludGVuZGVkIGludGVyYWN0aW9u IHNlbWFudGljcz8NCg0KZS5nLg0KMi4gU3RhbmRhcmRpemVkIGFuZCBpbnRlcm9wZXJhYmxlIG1l Y2hhbmlzbXMgYnVpbGRpbmcgb24gKDEuKSB0byBhbGxvdyByZWx5aW5nIHBhcnRpZXMgdG8ga25v dyB0aGUgYXR0ZXN0YXRpb24gcHJvdmVuYW5jZSBhbmQgY2hhcmFjdGVyaXN0aWNzIHdpdGggcmVz cGVjdCB0byBzeXN0ZW1zIGZyb20gd2hpY2ggaXQgbWF5IHJlcXVlc3Qgc2VydmljZXMsIGNvbnN1 bWUgaW5mb3JtYXRpb24gb3IgdG8gd2hpY2ggaXQgbWF5IHByb3ZpZGUgaW5mb3JtYXRpb24uICh3 aGVyZSAnaXQnIHJlZmVycyB0byByZWx5aW5nIHBhcnR5KQ0KLU5lZA0KDQrvu79PbiAxMC8yNC8x OCwgNTo1NiBBTSwgIkVBVCBvbiBiZWhhbGYgb2YgSGVuayBCaXJraG9seiIgPGVhdC1ib3VuY2Vz QGlldGYub3JnIG9uIGJlaGFsZiBvZiBoZW5rLmJpcmtob2x6QHNpdC5mcmF1bmhvZmVyLmRlPiB3 cm90ZToNCg0KICAgIEhpIGFsbCwNCiAgICANCiAgICBiYXNlZCBvbiBKZXJlbXkncyBwcm9wb3Nh bCB3ZSBkaWQgYW5vdGhlciBiaWcgcmVmYWN0b3JpbmcgLSBhbHNvIHRyaWVkIA0KICAgIHRvIGFk ZHJlc3MgZXZlcnlib2R5J3MgY29tbWVudHMsIGlucHV0cyBhbmQgY29uY2VybnMuDQogICAgDQog ICAgPiBodHRwczovL2dpdGh1Yi5jb20vaWV0Zi1yYXRzL2NoYXJ0ZXIvYmxvYi9SQzMvaWV0Zi1y YXRzLWNoYXJ0ZXIubWQNCiAgICANCiAgICBQbGVhc2Ugbm90ZSB0aGF0IHRoaXMgY2hhcnRlciB0 ZXh0IGlzIGludGVuZGVkIHRvIGJlIGEgZmlyc3QgcGhhc2UsIA0KICAgIHdoaWNoIGlzIHRoZSBy ZWFzb24gd2h5LCBmb3IgZXhhbXBsZSwgdGhlcmUgc3RpbGwgaXMgbm8gbWVudGlvbmluZyBhYm91 dCANCiAgICBwcm92aXNpb25pbmcsIHByb2ZpbGVzLCBvciBtb3JlIGRldGFpbHMgYWJvdXQgb3V0 LW9mLWJhbmQgZGVwZW5kZW5jaWVzLg0KICAgIA0KICAgIEFzIE1pY2hhZWwgaGlnaGxpZ2h0ZWQs IG1vc3QgdHlwZXMgb2YgY29udGVudCBiZWxvbmcgaW50byBkcmFmdHMuIFRoYXQgDQogICAgc2Fp ZCAtIG9uIG9uZSBoYW5kIHRoZSBjaGFydGVyIGlzIGEga2luZCBvZiAiY29udHJhY3QiIHdydCB0 byBzY29wZSBhbmQgDQogICAgb3V0cHV0LCBvbiB0aGUgb3RoZXIgaGFuZCB3ZSBkbyBub3Qgd2Fu dCB0byBib2lsIHRoZSBvY2VhbiAoYXQgbGVhc3Qgbm90IA0KICAgIGFsbCBhdCBvbmNlLi4uKS4N CiAgICANCiAgICBWaWVsZSBHcsO8w59lLA0KICAgIA0KICAgIEhlbmsNCiAgICANCiAgICBPbiAx MC8yNC8yMDE4IDAxOjM2IFBNLCBKZXJlbXkgTydEb25vZ2h1ZSB3cm90ZToNCiAgICA+IEhJIEVy aWMsDQogICAgPiANCiAgICA+PiBPbiAyMyBPY3QgMjAxOCwgYXQgMTk6MDQsIEVyaWMgVm9pdCAo ZXZvaXQpIDxldm9pdEBjaXNjby5jb20gDQogICAgPj4gPG1haWx0bzpldm9pdEBjaXNjby5jb20+ PiB3cm90ZToNCiAgICA+Pg0KICAgID4+IEhpIEplcmVteSwNCiAgICA+PiBUaGFua3MgZm9yIHRh a2luZyBhIGN1dCBhdCB0aGlzIGNoYXJ0ZXIgc2ltcGxpZmljYXRpb24uICBUaGVyZSBhcmUgYSAN CiAgICA+PiBmZXcgYXJlYXMgY292ZXJlZCB3aXRoaW4gdGhlR2l0SHViIEdvYWxzIA0KICAgID4+ IDxodHRwczovL2dpdGh1Yi5jb20vaWV0Zi1yYXRzL2NoYXJ0ZXIvYmxvYi9SQzIvaWV0Zi1yYXRz LWNoYXJ0ZXIubWQ+d2hpY2ggDQogICAgPj4gSSBjYW7igJl0IGVhc2lseSBtYXAgdG8geW91ciB0 ZXh0IGJlbG93LiAgQ291bGQgeW91IHRhbGsgYWJvdXQgaG93IHRoZXNlIA0KICAgID4+IGVsZW1l bnRzIGFyZSBjb3ZlcmVkIChvciBub3QpPyAgIEZvciBjb250ZXh0LCBJIGFtIHdvcmtpbmcgZnJv bSB0aGUgDQogICAgPj4gcGVyc3BlY3RpdmUgb2ZyZW1vdGUgYXR0ZXN0YXRpb24gYXBwbGljYXRp b24gDQogICAgPj4gPGh0dHBzOi8vd3d3LmNpc2NvLmNvbS9jL2RhbS9lbi91cy90ZC9kb2NzL2Ns b3VkLXN5c3RlbXMtbWFuYWdlbWVudC9hcHBsaWNhdGlvbi1wb2xpY3ktaW5mcmFzdHJ1Y3R1cmUt Y29udHJvbGxlci1lbnRlcnByaXNlLW1vZHVsZS8xLTUteC9pbnRlZ3JpdHlfdmVyaWZpY2F0aW9u L3VzZXItZ3VpZGUvQ2lzY29fSW50ZWdyaXR5X1ZlcmlmaWNhdGlvbl9BcHBsaWNhdGlvbl9BUElD LUVNX1VzZXJfR3VpZGVfMV81XzBfeC5wZGY+ZGV2ZWxvcGVyIA0KICAgID4+IHRyeWluZyB0byBz dGFuZGFyZGl6ZSB0aGUgaW50ZXJmYWNlcyBiZXR3ZWVuIGEgY29udHJvbGxlciAod2hpY2ggaXMg DQogICAgPj4gYWN0aW5nIGFzIGEgY2xhaW0gdmVyaWZpZXIpIGFuZCBhIG5ldHdvcmsgZWxlbWVu dCAod2hpY2ggaW5jbHVkZXMgVENHIA0KICAgID4+IGJhc2VkIHN1YnN5c3RlbXMuKQ0KICAgID4+ IEZvciBteSBhcHBsaWNhdGlvbiB0byB3b3JrIHByb3Blcmx5LCB0aGVyZSBhcmUgc2V2ZXJhbCB0 aGluZ3MgbmVlZGVkIA0KICAgID4+IHdpdGhpbiBhIG5ldHdvcmsgY29udHJvbGxlciB0byB2YWxp ZGF0ZSB0aGUgYXNzZXJ0ZWQgY2xhaW1zIGNvbWluZyBvdXQgDQogICAgPj4gb2YgYSByb3V0ZXIu ICBUaGVzZSBpbmNsdWRlOg0KICAgID4+IMK3SG93IGRvIHdlIGV4cG9zZSB0aGUgYXR0ZXN0YXRp b24gZXZpZGVuY2Ugd2hpY2ggY2FuIGJlIHVzZWQgdG8gDQogICAgPj4gdmFsaWRhdGUgYXNzZXJ0 ZWQgY2xhaW1zPw0KICAgID4gDQogICAgPiBJIHRoaW5rIHRoYXQgdGhlIG5lZWQgdG8gYWRkcmVz cyB0aGlzIGlzIGNvdmVyZWQgc3VmZmljaWVudGx5IGZvciBhIFdHIA0KICAgID4gQ2hhcnRlciBi eSB0aGUgc3RhdGVtZW50ICJQcm9kdWNlIGEgc3BlY2lmaWNhdGlvbiBkZWZpbmluZyBwcm9jZWR1 cmVzIA0KICAgID4gYW5kIGNvcnJlc3BvbmRpbmcgYXJjaGl0ZWN0dXJlc+KAqCBzdXBwb3J0aW5n IHZlcmlmaWNhdGlvbiBvZiBDbGFpbXMiLg0KICAgID4gDQogICAgPiBJZiB2ZXJpZmljYXRpb24g b2YgQ2xhaW1zIHJlcXVpcmVzIHNwZWNpZmljIGZvcm1zIG9mIGF0dGVzdGF0aW9uIA0KICAgID4g ZXZpZGVuY2UgKGUuZy4gYSBzZXQgb2YgbWVhc3VyZW1lbnRzIGdlbmVyYXRlZCBieSBhIFRQTSks IHRoZW4gaXQgaXMgDQogICAgPiBwcm9wZXJseSBhIG1hdHRlciBmb3IgYW4gUkZDIHRvIHNwZWNp ZnkgdGhpcywgYXMgTWljaGFlbCBzdWdnZXN0cy4NCiAgICA+IA0KICAgID4+IMK3SG93IGRvIHdl IGtub3cgd2hpY2ggcm9vdCBvZiB0cnVzdCB3aGljaCB3YXMgdXNlZCB0byBnZW5lcmF0ZSB0aGUg DQogICAgPj4gYXR0ZXN0YXRpb24gZXZpZGVuY2UgKGUuZy4sIGFwcGxpY2F0aW9uIGV2ZW50IGxv Z3MpLCBhbmQgaG93IGRvZXMgYSANCiAgICA+PiB2ZXJpZmllciBkaWZmZXJlbnRpYXRlIHRoaXMg ZnJvbSB0aGUgcm9vdC1vZi10cnVzdCB3aGljaCBhc3NlcnRzIA0KICAgID4+IGNsYWltcyBtYWRl IHVwb24gdGhpcyBldmlkZW5jZT8NCiAgICA+IA0KICAgID4gQWdhaW4sIEkgdGhpbmsgdGhpcyBp cyBhIG1hdHRlciBmb3Igc3BlY2lmaWNhdGlvbiByYXRoZXIgdGhhbiBjaGFydGVyLiANCiAgICA+ IFRoZXJlIGFyZSBhIG51bWJlciBvZiBkaWZmZXJlbnQgd2F5cyBpbiB3aGljaCBSb290cyBvZiBU cnVzdCBjYW4gYmUgDQogICAgPiByZWFsaXNlZCBhbmQgbWFueSBwb3NzaWJsZSBkZXZpY2UgYXJj aGl0ZWN0dXJlcy4gVGhlIEVBVCBkcmFmdCBhbGxvd3MgDQogICAgPiBvbmUgUm9UIHRvIGluY2x1 ZGUgYW4gYXR0ZXN0YXRpb24gZ2VuZXJhdGVkIGJ5IGEgZGlmZmVyZW50IFJvVCwgZm9yIA0KICAg ID4gZXhhbXBsZS4gSSBiZWxpZXZlIHRoZSBSQVRTIGRyYWZ0IGFsc28gcHJvdmlkZXMgdGVjaG5p Y2FsIG1lY2hhbmlzbXMgYnkgDQogICAgPiB3aGljaCB0aGlzIGNhbiBiZSBhY2hpZXZlZC4NCiAg ICA+IA0KICAgID4+IMK3V2hhdCBlbnRpdGllcyBhcmUgYWxsb3dlZCB0byByZWFkIHRoZSBpbmZv IGFzc2VydGVkIGNsYWltcz8gIFdoYXQgDQogICAgPj4gc3Vic2V0IG9mIHRoZXNlIGNhbiBzZWUg dGhlIHJhdyBhdHRlc3RhdGlvbiBldmlkZW5jZT8NCiAgICA+PiBUaGVzZSBxdWVzdGlvbnMgYXJl IHNpZ25pZmljYW50IGJlY2F1c2Ugcm91dGVycy9zd2l0Y2hlcyBhcmUgbm90IA0KICAgID4+IG1v bm9saXRoaWMgZGV2aWNlcy4gIEluIGZhY3QsIHRoZXkgYXJlIGNvbXBvc2VkIG9mIHN1YnN5c3Rl bXMgd2l0aCANCiAgICA+PiBkaWZmZXJlbnQgbGV2ZWxzIG9mIHRydXN0d29ydGhpbmVzcy4gQXMg dGhlIElFVEYgb2Z0ZW4gYWltcyBhdCANCiAgICA+PiBwcm90b2NvbCBzcGVjaWZpY2F0aW9ucyBh dCB0aGUgaW50ZXItZGV2aWNlIGxldmVsLCBJIGFtIGxvb2tpbmcgZm9yIA0KICAgID4+IGNvdmVy YWdlIG9mIHN1Y2ggcXVlc3Rpb25zIGluIHRoZSBjaGFydGVyLg0KICAgID4gDQogICAgPiBJIGFn cmVlIHdpdGggeW91IGhlcmUgYXMgdGhlIHNhbWUgaXNzdWUgYXBwbGllcyB0byBjbGFpbXMgd2l0 aCBwcml2YWN5IA0KICAgID4gaW1wbGljYXRpb25zLiBBcyBhbiBleGFtcGxlLCBJIG1heSB3aXNo IHRvIHByZXNlbnQgYSB1bmlxdWUgZGV2aWNlIElEIHRvIA0KICAgID4gYSBzb2NpYWwgbWVkaWEg d2Vic2l0ZSBidXQgbm90IG15IGxvY2F0aW9uLg0KICAgID4gDQogICAgPiBJIGhhdmUgYWRkZWQg YnVsbGV0IHBvaW50IDMgdG8gdGhlIGRyYWZ0IC0gd2hpY2ggSSB3aWxsIHBvc3Qgc2VwYXJhdGVs eS4gDQogICAgPiBMZXQgbWUga25vdyBpZiB5b3UgdGhpbmsgdGhpcyBhZGRyZXNzZXMgeW91ciBj b25jZXJucyBzdWZmaWNpZW50bHkuDQogICAgPiANCiAgICA+IEJlc3QgcmVnYXJkcw0KICAgID4g SmVyZW15DQogICAgPiANCiAgICA+PiBUaGFua3MsDQogICAgPj4gRXJpYw0KICAgID4+ICpGcm9t OipKZXJlbXkgTydEb25vZ2h1ZSwgT2N0b2JlciAyMywgMjAxOCAxMDo0MCBBTQ0KICAgID4+DQog ICAgPj4gT24gMjIgT2N0IDIwMTgsIGF0IDIyOjAxLCBNaWNoYWVsIFJpY2hhcmRzb24gPG1jcitp ZXRmQHNhbmRlbG1hbi5jYSANCiAgICA+PiA8bWFpbHRvOm1jcitpZXRmQHNhbmRlbG1hbi5jYT4+ IHdyb3RlOg0KICAgID4+DQogICAgPj4NCiAgICA+PiAgICAgSmVyZW15IE8nRG9ub2dodWUgPGpv ZG9ub2doQHF0aS5xdWFsY29tbS5jb20NCiAgICA+PiAgICAgPG1haWx0bzpqb2Rvbm9naEBxdGku cXVhbGNvbW0uY29tPj4gd3JvdGU6DQogICAgPj4NCiAgICA+PiAgICAgICAgIFRoaXMgaXMgYSB2 ZXJ5IHVzZWZ1bCBjb250cmlidXRpb24sIExhdXJlbmNlLg0KICAgID4+DQogICAgPj4NCiAgICA+ Pg0KICAgID4+ICAgICAgICAgVGhlIGN1cnJlbnQgZHJhZnQgdGV4dCBpcyB0b28gc3Ryb25nbHkg Ymlhc2VkIHRvd2FyZHMNCiAgICA+PiAgICAgICAgIGF0dGVzdGF0aW9uIGJhc2VkDQogICAgPj4g ICAgICAgICBvbiBtZWFzdXJlbWVudCwgYW5kIGRvZXMgbm90IGFkZXF1YXRlbHkgY292ZXIgb3Ro ZXIgbWVjaGFuaXNtcw0KICAgID4+ICAgICAgICAgd2hpY2gNCiAgICA+PiAgICAgICAgIGFyZSBh bHJlYWR5DQogICAgPj4NCiAgICA+Pg0KICAgID4+ICAgICBCdXQsIGl0J3MgZm9yIHRoZSBjaGFy dGVyLCBmb3IgdGhlIFdHLCBpdCdzIG5vdCBhIHRyZWF0aXNlIG9uDQogICAgPj4gICAgIGF0dGVz dGF0aW9uDQogICAgPj4gICAgIGl0c2VsZi4NCiAgICA+Pg0KICAgID4+ICAgICBUaGlzIGlzIGFs bCBzdXBwb3NlZCB0byBiZSAqbWV0YSogdGV4dCBhYm91dCBhdHRlc3RhdGlvbiwgYWJvdXQNCiAg ICA+PiAgICAgd2hhdCB3ZSB3YW50DQogICAgPj4gICAgIHRvIHNheSBhYm91dCBhdHRlc3RhdGlv biBpbiB0aGUgZG9jdW1lbnRzLCBub3QgYWJvdXQgd2hhdA0KICAgID4+ICAgICBhdHRlc3RhdGlv biBpcy4NCiAgICA+Pg0KICAgID4+ICAgICBQbGVhc2UgZ28gcmVhZCBzb21lIG90aGVyIElFVEYg Y2hhcnRlcnM6DQogICAgPj4NCiAgICA+PiAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9y Zy93Zy82bG8vYWJvdXQvDQogICAgPj4gICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv d2cvNnRpc2NoL2Fib3V0Lw0KICAgID4+ICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3Jn L3dnL3N1aXQvYWJvdXQvDQogICAgPj4NCiAgICA+PiBGYWlyIGNvbW1lbnQuDQogICAgPj4gV2Ug aGF2ZSB0d28gZXhpc3RpbmcgcHJvcG9zYWxzIC0gRUFUIGFuZCBSQVRTIC0gd2hpY2ggYWRkcmVz cyBhIA0KICAgID4+IHNpbWlsYXIgcHJvYmxlbSBzcGFjZSBidXQgdXNpbmcgZGlmZmVyZW50IG1l Y2hhbmlzbXMuIFdoaWxlIEkgYmVsaWV2ZSANCiAgICA+PiB0aGUgUkFUUyBhbmQgRUFUIGNvbnRy aWJ1dG9ycyBhcmUgaW4gYnJvYWQgYWdyZWVtZW50IHRoYXQgdGhlcmUgaXMgDQogICAgPj4gc2ln bmlmaWNhbnQgYmVuZWZpdCBpbiBicmluZ2luZyBib3RoIHdvcmsgc3RyZWFtcyB1bmRlciBhIHNp bmdsZSANCiAgICA+PiB1bWJyZWxsYSwgdHJ5aW5nIHRvIHByb3Blcmx5IGluY29ycG9yYXRlIEVB VCB0aHJvdWdoIGluY3JlbWVudGFsIA0KICAgID4+IG1vZGlmaWNhdGlvbiB0byB0aGUgZHJhZnQg UkFUUyBXRyBjaGFydGVyIHRleHQgaXMgcHJvdmluZyBjaGFsbGVuZ2luZy4NCiAgICA+PiBUaGUg YmVsb3cgcHJvYmFibHkgZGl2ZXJnZXMgdG9vIGZhciBmcm9tIHRoZSBjdXJyZW50IHRleHQgZm9y IHNvbWUgDQogICAgPj4gdGFzdGVzLCBidXQgaXQgbWF5IGFkZHJlc3MgeW91ciBwb2ludCBhbmQg cHJvdmlkZSBhIGJhc2lzIGZvciANCiAgICA+PiBkaXNjdXNzaW9uIChhdCB0aGlzIHBvaW50IHRo ZSBHaXRIdWIgZHJhZnQgDQogICAgPj4gPGh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMvY2hh cnRlci9ibG9iL1JDMi9pZXRmLXJhdHMtY2hhcnRlci5tZD4gc2VlbXMgDQogICAgPj4gYSBsb25n IHdheSBiZWhpbmQgdGhlIGxpc3QpLiBJdCBpcyBkZWxpYmVyYXRlbHkgc2lnbmlmaWNhbnRseSBz aG9ydGVyIA0KICAgID4+IHRoYW4gdGhlIGN1cnJlbnQgZHJhZnQgLSBJIGhhdmUgdHJpZWQgdG8g cmUtdXNlIGFzIG11Y2ggZXhpc3RpbmcgdGV4dCANCiAgICA+PiBhcyBwb3NzaWJsZSwgYnV0IGl0 IGlzIGhlYXZpbHkgcmUtb3JnYW5pc2VkIGFuZCBhYnJpZGdlZC4NCiAgICA+PiBJIGhhdmUgdGFr ZW4gb24gYm9hcmQgdGhlIGNvbW1lbnQgZnJvbSBDYXJzdGVuIHRoYXQgcGVyaGFwcyBhIG1pbmlt dW0gDQogICAgPj4gbGV2ZWwgb2YgdGVybWlub2xvZ3kgaXMgYWNjZXB0YWJsZSBpbiBjaGFydGVy IHRleHQsIGJ1dCBkZWxpYmVyYXRlbHkgDQogICAgPj4gdHJpZWQgdG8ga2VlcCB0aGUgbGFuZ3Vh Z2Ugc2ltcGxlIGFuZCBmYWlybHkgZ2VuZXJpYyB0byBlbmFibGUgdGhlIA0KICAgID4+IHByb3Bl ciB3b3JrIG9mIHRlcm1pbm9sb2d5IGRlZmluaXRpb24gdG8gdGFrZSBwbGFjZSBpbiB0aGUgDQog ICAgPj4gcmVxdWlyZW1lbnRzIGRvY3VtZW50IGFzIHlvdSBzdWdnZXN0Lg0KICAgID4+DQogICAg Pj4gSW50cm9kdWN0aW9uDQogICAgPj4NCiAgICA+PiAtLS0tLS0tLS0tLS0NCiAgICA+Pg0KICAg ID4+IFJlbW90ZSBhdHRlc3RhdGlvbiBwcm9jZWR1cmVzIGNhbiBiZSBpbmNvcnBvcmF0ZWQgaW4g bmV0d29yayBwcm90b2NvbHMgdG8NCiAgICA+PiBwcm92aWRlIHRoZSBiYXNpcyBmb3IgZXN0YWJs aXNoaW5nIGNsYWltcyBhYm91dCBhbiBlbnRpdHkgaW4gYSB0cnVzdHdvcnRoeQ0KICAgID4+IG1h bm5lci4gU3VjaCBjbGFpbXMgbWF5IGluY2x1ZGUsIGJ1dCBhcmUgbm90IGxpbWl0ZWQgdG8sIGRl dmljZSBpZGVudGl0eSwNCiAgICA+PiBtYW51ZmFjdHVyaW5nIG9yaWdpbiwgc3lzdGVtIGludGVn cml0eSwgY29uZmlndXJhdGlvbiwgb3BlcmF0aW9uYWwgDQogICAgPj4gc3RhdGUgYW5kDQogICAg Pj4gbWVhc3VyZW1lbnRzIG9mIHN0ZXBzIHdoaWNoIGxlZCB0byB0aGUgb3BlcmF0aW9uYWwgc3Rh dGUuIFN1Y2ggcHJvY2VkdXJlcw0KICAgID4+IGV4cG9zZSBlbnRpdHkgY2hhcmFjdGVyaXN0aWNz IGluIHRoZSBmb3JtIG9mIGNsYWltIHNldHMgd2hpY2ggYWxsb3cgcmVtb3RlDQogICAgPj4gcGFy dGllcyB0byBlc3RhYmxpc2ggdGhlIHRydXN0d29ydGhpbmVzcyBvZiBhIGRldmljZSwgcHJvdmlk ZSBldmlkZW5jZSANCiAgICA+PiB0aGF0IGENCiAgICA+PiBwYXJ0aWN1bGFyIHNldCBvZiBvcGVy YXRpb25zIGFuZCBmdW5jdGlvbnMgYXJlIHN1cHBvcnRlZCBhbmQvb3IgdGhhdCB0aGUNCiAgICA+ PiBlbnRpdHkgaXMgYWN0dWFsbHkgd2hhdCBpdCBjbGFpbXMgdG8gYmUuDQogICAgPj4NCiAgICA+ PiBJbiB0aGUgYWJzZW5jZSBvZiBzdWNoIHByb2NlZHVyZXMsIHdoaWxlIGRvbWFpbi1zcGVjaWZp YyBhdHRlc3RhdGlvbg0KICAgID4+IG1lY2hhbmlzbXMgc3VjaCBhcyBUQ0cgVFBNLCBGSURPIEFs bGlhbmNlIGF0dGVzdGF0aW9uIGFuZCBBbmRyb2lkIEtleXN0b3JlDQogICAgPj4gYXR0ZXN0YXRp b24gZXhpc3QsIHRoZXJlIGlzIG5vIGNvbW1vbiB3YXkgZm9yIGEgcmVtb3RlIHBhcnR5IHRvIHRl bGwgDQogICAgPj4gaWYgZGF0YQ0KICAgID4+IG9yaWdpbmF0ZXMgZnJvbSBhIHRydXN0d29ydGh5 IGRldmljZSAoZS5nLiBhIFRydXN0ZWQgU3lzdGVtIGRlc2lnbmVkIHRvDQogICAgPj4gc3VwcG9y dCBhIHNwZWNpZmljIHNldCBvZiBvcGVyYXRpb25zL2Z1bmN0aW9uYWxpdGllcykgb3Igbm90Lg0K ICAgID4+DQogICAgPj4gVGhlIGZvbGxvd2luZyBtaW5pbWFsIHRlcm1pbm9sb2d5IGlzIGRlZmlu ZWQgZm9yIHRoZSBwdXJwb3NlcyBvZiANCiAgICA+PiBjbGFyaWZ5aW5nIHRoZQ0KICAgID4+IFdv cmtpbmcgR3JvdXAgY2hhcnRlciB0ZXh0Og0KICAgID4+DQogICAgPj4gLSBhdHRlc3RhdGlvbjog YSBzZXQgb2YgY2xhaW1zIHdoaWNoIGNhbiBiZSB2ZXJpZmllZCBhcyBvcmlnaW5hdGluZyBpbiBh bg0KICAgID4+ICAgICAgICAgICBlbnRpdHkuDQogICAgPj4NCiAgICA+PiAtIGNsYWltOiAgYXMg ZGVmaW5lZCBpbiBSRkM3NTE5Lg0KICAgID4+DQogICAgPj4gLSBlbnRpdHk6IGEgZGV2aWNlIG9y IGRldmljZSBzdWItbW9kdWxlIHRoYXQgY2FuIGdlbmVyYXRlIGEgY2xhaW0gb3IgDQogICAgPj4g c2V0IG9mDQogICAgPj4gICAgICAgICAgIGNsYWltcyB3aGljaCBjYW4gYmUgdmVyaWZpZWQgYnkg YSByZW1vdGUgcGFydHkuDQogICAgPj4NCiAgICA+PiAtIHJlbW90ZSBwYXJ0eTogYW4gYWN0b3Ig cmVtb3RlIGZyb20gYW4gZW50aXR5IHRoYXQgd2lzaGVzIHRvIHZlcmlmeSANCiAgICA+PiB3aGV0 aGVyDQogICAgPj4gICAgICAgICAgIGEgY2xhaW0gb3Igc2V0IG9mIGNsYWltcyBvcmlnaW5hdGVk IGluIGEgZ2l2ZW4gZW50aXR5Lg0KICAgID4+DQogICAgPj4gRGVzY3JpcHRpb24gb2YgdGhlIFdv cmtpbmcgR3JvdXANCiAgICA+Pg0KICAgID4+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tDQogICAgPj4NCiAgICA+PiBUaGUgV29ya2luZyBHcm91cCB3aWxsIGRlZmluZToNCiAgICA+ Pg0KICAgID4+IC0gU3RhbmRhcmRpemVkIGFuZCBpbnRlcm9wZXJhYmxlIG1lY2hhbmlzbXMgdG8g ZXN0YWJsaXNoIGEgc3VmZmljaWVudCANCiAgICA+PiBsZXZlbA0KICAgID4+ICAgb2YgY29uZmlk ZW5jZSB0aGF0IGRhdGEgb3JpZ2luYXRlcyBmcm9tIGEgdHJ1c3R3b3J0aHkgZW50aXR5IGRlc2ln bmVkIHRvDQogICAgPj4gICBzdXBwb3J0IGEgc3BlY2lmaWMgc2V0IG9mIG9wZXJhdGlvbnMvZnVu Y3Rpb25hbGl0aWVzLg0KICAgID4+IC0gU3RhbmRhcmRpemVkIGFuZCBpbnRlcm9wZXJhYmxlIG1l Y2hhbmlzbXMgYnVpbGRpbmcgb24gKDEpIHRvIGFsbG93IA0KICAgID4+IHJlbW90ZQ0KICAgID4+ ICAgcGFydGllcyB0byBrbm93IHRoZSBwcm92ZW5hbmNlIGFuZCBjaGFyYWN0ZXJpc3RpY3Mgb2Yg YW4gZW50aXR5IHRoYXQgDQogICAgPj4gbWF5IGJlDQogICAgPj4gICByZXF1ZXN0aW5nIHNlcnZp Y2VzLg0KICAgID4+DQogICAgPj4gVGhlIFdvcmtpbmcgR3JvdXAgd2lsbCBpZGVudGlmeSBzZWN1 cml0eSBnb2FscyB3aGljaCBpdCBleHBlY3RzIGEgDQogICAgPj4gdHJ1c3R3b3J0aHkNCiAgICA+ PiBleGVjdXRpb24gY29udGV4dCB0byBhZGRyZXNzLCB3aGljaCB3aWxsIGFzc3VtZSB0aGUgcHJl c2VuY2Ugb2YgUm9vdHMgb2YNCiAgICA+PiBUcnVzdCAoYXMgZGVmaW5lZCBieSBOSVNUIFtTUDgw MC0xNjRdKS4gVGhlIGRldGFpbGVkIHNwZWNpZmljYXRpb24gb2Ygc3VjaA0KICAgID4+IGNvbnRl eHRzIGlzIG91dCBvZiBzY29wZS4NCiAgICA+Pg0KICAgID4+IFRoZSBXb3JraW5nIEdyb3VwIHdp bGwgbWFpbnRhaW4gY2xvc2UgcmVsYXRpb25zaGlwcyB3aXRoIGJvZGllcyANCiAgICA+PiB1bmRl cnRha2luZw0KICAgID4+IGNvbXBsZW1lbnRhcnkgd29yayBzdHJlYW1zIGluIHRoZSBhcmVhIG9m IHJlbW90ZSBhdHRlc3RhdGlvbiBzdWNoIGFzDQogICAgPj4gR2xvYmFsUGxhdGZvcm0sIFRydXN0 ZWQgQ29tcHV0aW5nIEdyb3VwIGFuZCBGSURPIEFsbGlhbmNlLg0KICAgID4+DQogICAgPj4gVGhl IFdvcmtpbmcgR3JvdXAgd2lsbCBjb29wZXJhdGUgd2l0aCB0aGUgVEVFUCBXb3JraW5nIEdyb3Vw LCB3aGljaCBtYXkNCiAgICA+PiBnZW5lcmF0ZSByZXF1aXJlbWVudHMgZm9yIGNsYWltcyByZWxl dmFudCB0byBURUUuDQogICAgPj4NCiAgICA+PiBXb3JrIEl0ZW1zDQogICAgPj4NCiAgICA+PiAt LS0tLS0tLS0tDQogICAgPj4NCiAgICA+PiBUaGUgV29ya2luZyBHcm91cCB3aWxsIGRldmVsb3Ag c3BlY2lmaWNhdGlvbnMgc3VwcG9ydGluZyB0aGUgY3JlYXRpb24gb2YNCiAgICA+PiBpbnRlcm9w ZXJhYmxlIHJlbW90ZSBhdHRlc3RhdGlvbiBwcm9jZWR1cmVzIGZvciBlbnRpdGllcyB3aGljaCAN CiAgICA+PiBpbmNvcnBvcmF0ZQ0KICAgID4+IFJvb3RzIG9mIFRydXN0LiBUaGUgbWFpbiBkZWxp dmVyYWJsZXMgYXJlIGFzIGZvbGxvd3MuDQogICAgPj4NCiAgICA+PiAtIFByb2R1Y2UgYSByZXF1 aXJlbWVudHMgZG9jdW1lbnQgZXN0YWJsaXNoaW5nIGEgY29tbW9uIHZvY2FidWxhcnkgZm9yIA0K ICAgID4+IHJlbW90ZQ0KICAgID4+ICAgYXR0ZXN0YXRpb24sIGlkZW50aWZ5aW5nIG1lY2hhbmlz bXMgd2hpY2ggd2lsbCBiZSBzdXBwb3J0ZWQgZm9yIA0KICAgID4+IGVzdGFibGlzaGluZw0KICAg ID4+ICAgdHJ1c3QgYmV0d2VlbiBhbiBlbnRpdHkgYW5kIGEgcmVtb3RlIHBhcnR5LCBhbmQgZW51 bWVyYXRpbmcgc2FtcGxlIA0KICAgID4+IHVzZS1jYXNlcw0KICAgID4+ICAgZm9yIHJlbW90ZSBh dHRlc3RhdGlvbi4NCiAgICA+Pg0KICAgID4+IC0gUHJvZHVjZSBzcGVjaWZpY2F0aW9uIHRleHQg ZGVmaW5pbmcgaW50ZXJvcGVyYWJsZSBjcm9zcy1wbGF0Zm9ybSANCiAgICA+PiBjbGFpbXMgd2hp Y2gNCiAgICA+PiAgIHByb3ZpZGUgaW5mb3JtYXRpb24gYWJvdXQgYW4gZW50aXR5IGluIHN1cHBv cnQgb2YgdGhlIHJlcXVpcmVkIA0KICAgID4+IHVzZS1jYXNlcywgYW5kDQogICAgPj4gICBleHRl bmRpbmcgdGhlIHNldCBvZiBjbGFpbXMgZGVmaW5lZCBpbiBSRkM3NTE5IGFuZCBSRkM4MzkyLiBU aGUgDQogICAgPj4gc3BlY2lmaWNhdGlvbg0KICAgID4+ICAgd2lsbCBkZXNjcmliZSB0aGUgc3lu dGF4IGZvciBlYWNoIGNsYWltIGluIGF0IGxlYXN0IHRoZSBmb2xsb3dpbmcgDQogICAgPj4gZm9y bWF0czoNCiAgICA+PiAgICAgLSBDQk9SIFtSRkM3MDQ5XQ0KICAgID4+ICAgICAtIEpTT04gW1JG QzcxNTldDQogICAgPj4gICAgIC0gWUFORyBbUkZDNjAyMF0NCiAgICA+Pg0KICAgID4+IC0gUHJv ZHVjZSBzcGVjaWZpY2F0aW9uIHRleHQgZGVmaW5pbmcgcHJvY2VkdXJlcyBhbmQgY29ycmVzcG9u ZGluZyANCiAgICA+PiBhcmNoaXRlY3R1cmVzDQogICAgPj4gICBzdXBwb3J0aW5nIHZlcmlmaWNh dGlvbiBvZiBjbGFpbXMgd2l0aGluIGFuIGF0dGVzdGF0aW9uIGJhc2VkIG9uIA0KICAgID4+IG1l YXN1cmVkIGZpbGUNCiAgICA+PiAgIGV4ZWN1dGlvbiBwcm9jZWR1cmVzIGFuZCBzdXBwb3J0aW5n Og0KICAgID4+ICAgICAtIEV4cGxpY2l0IGF0dGVzdGF0aW9uIHdoZXJlaW4gYSBzZXQgb2YgY2xh aW1zIGlzIHRyYW5zcG9ydGVkIGluIA0KICAgID4+IHRoZSBhdHRlc3RhdGlvbjsNCiAgICA+PiAg ICAgLSBJbXBsaWNpdCBhdHRlc3RhdGlvbiB3aGVyZWluIGEgc2V0IG9mIGNsYWltcyBpcyBpbXBs aWVkIGJ5IA0KICAgID4+IHBvc3Nlc3Npb24gb2YgYSBzZWNyZXQuDQogICAgPj4NCiAgICA+PiAt IFByb2R1Y2Ugc3BlY2lmaWNhdGlvbiB0ZXh0IGRlZmluaW5nIHByb2NlZHVyZXMgYW5kIGNvcnJl c3BvbmRpbmcgDQogICAgPj4gYXJjaGl0ZWN0dXJlcw0KICAgID4+ICAgc3VwcG9ydGluZyB2ZXJp ZmljYXRpb24gb2YgY2xhaW1zIGVuY2Fwc3VsYXRlZCBpbjoNCiAgICA+Pg0KICAgID4+ICAgICAt IENCT1IgV2ViIFRva2VuIHN0cnVjdHVyZXMgW1JGQzgzOTJdDQogICAgPj4gICAgIC0gSlNPTiBX ZWIgVG9rZW4gc3RydWN0dXJlcyBbUkZDNzUxOV0NCiAgICA+Pg0KICAgID4+IC0gUGVyZm9ybSBw cml2YWN5IGFuYWx5c2lzIG9mIGJvdGggY2xhaW1zIGFuZCB0aGUgY3J5cHRvZ3JhcGhpYyANCiAg ICA+PiBwcm9jZWR1cmVzIHVzZWQgdG8NCiAgICA+PiAgIGVzdGFibGlzaCB0cnVzdC4gVGhpcyBp bmZvcm1hdGlvbiB3aWxsIGJlIGluY2x1ZGVkIGFzIGFwcHJvcHJpYXRlIGluIHRoZQ0KICAgID4+ ICAgZGVsaXZlcmFibGUgc3BlY2lmaWNhdGlvbnMsIGFuZCBtYXkgaW1wbHkgZXh0ZW5zaW9uIG9m IHByb2NlZHVyZXMgDQogICAgPj4gZGVmaW5lZCBpbg0KICAgID4+ICAgb3RoZXIgc3BlY2lmaWNh dGlvbnMgaW4gc3VwcG9ydCBvZiBwcml2YWN5IGdvYWxzLg0KICAgID4+DQogICAgPj4gSXQgc2Vl bXMgdG8gbWUgdGhhdCB0aGVyZSBhcmUgdHdvIHdheXMgdG8gcHJvZHVjZSB0aGUgbWFpbiANCiAg ICA+PiBzcGVjaWZpY2F0aW9uIGRlbGl2ZXJhYmxlcy4gSSBoYXZlIGRlbGliZXJhdGVseSBsZWZ0 IHRoZSB0ZXh0IGFib3ZlIA0KICAgID4+IHNsaWdodGx5IHZhZ3VlIG9uIHRoaXMuDQogICAgPj4N CiAgICA+PiAgICogQSBjbGFpbXMgc3BlY2lmaWNhdGlvbiBjb21tb24gdG8gUkFUUyBhbmQgRUFU IHdpdGggc2VwYXJhdGUgUkFUUw0KICAgID4+ICAgICBhbmQgRUFUIHByb2NlZHVyZSBzcGVjaWZp Y2F0aW9ucy4NCiAgICA+PiAgICogQSBjbGFpbXMgc3BlY2lmaWNhdGlvbiBhbHNvIGluY29ycG9y YXRpbmcgRUFUIHByb2NlZHVyZXMgYW5kIGENCiAgICA+PiAgICAgc2VwYXJhdGUgUkFUUyBwcm9j ZWR1cmUgc3BlY2lmaWNhdGlvbi4gVGhpcyB3b3VsZCBiZSBteSBwcmVmZXJyZWQNCiAgICA+PiAg ICAgb3B0aW9uLg0KICAgID4+DQogICAgPj4gICAgICAgbyBJIGJlbGlldmUgdGhlcmUgYXJlIHZl cnkgZmV3IHByb2NlZHVyZXMgbmVlZGVkIGZvciBFQVQgb3RoZXINCiAgICA+PiAgICAgICAgIHRo YW4gdGhlIHBvc3NpYmxlIG5lZWQgdG8gc3VwcG9ydCBhIG5vbmNlIHRvIGVuc3VyZSBmcmVzaG5l c3MNCiAgICA+Pg0KICAgID4+IEplcmVteQ0KICAgID4+DQogICAgPj4NCiAgICA+PiAgICAgTm90 aWNlIGhvdyBieSBhYm91dCB0aGUgc2Vjb25kIHBhcmFncmFwaCAoNnRpc2NoIHRha2VzIGEgYml0 DQogICAgPj4gICAgIGxvbmdlciksIGVhY2gNCiAgICA+PiAgICAgZ2V0cyBpbnRvIHdoYXQgdGhl IFdHIHdpbGwgZG8/DQogICAgPj4NCiAgICA+PiAgICAgLS0NCiAgICA+PiAgICAgTWljaGFlbCBS aWNoYXJkc29uIDxtY3IrSUVURkBzYW5kZWxtYW4uY2ENCiAgICA+PiAgICAgPG1haWx0bzptY3Ir SUVURkBzYW5kZWxtYW4uY2E+PiwgU2FuZGVsbWFuIFNvZnR3YXJlIFdvcmtzDQogICAgPj4gICAg IC09IElQdjYgSW9UIGNvbnN1bHRpbmcgPS0NCiAgICA+PiAgICAgX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICA+PiAgICAgRUFUIG1haWxpbmcgbGlz dA0KICAgID4+ICAgICBFQVRAaWV0Zi5vcmcgPG1haWx0bzpFQVRAaWV0Zi5vcmc+DQogICAgPj4g ICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0DQogICAgPj4NCiAg ICA+IA0KICAgID4gDQogICAgPiANCiAgICA+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fDQogICAgPiBFQVQgbWFpbGluZyBsaXN0DQogICAgPiBFQVRAaWV0 Zi5vcmcNCiAgICA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0DQog ICAgPiANCiAgICANCiAgICBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fXw0KICAgIEVBVCBtYWlsaW5nIGxpc3QNCiAgICBFQVRAaWV0Zi5vcmcNCiAgICBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2VhdA0KICAgIA0KDQo= From nobody Wed Oct 24 11:19:43 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 591D212777C; Wed, 24 Oct 2018 11:19:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CuIFlOKRVqLS; Wed, 24 Oct 2018 11:19:39 -0700 (PDT) Received: from mga09.intel.com (mga09.intel.com [134.134.136.24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7FE2E124C04; Wed, 24 Oct 2018 11:19:39 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga002.fm.intel.com ([10.253.24.26]) by orsmga102.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 24 Oct 2018 11:19:38 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.54,421,1534834800"; d="scan'208";a="98262504" Received: from orsmsx102.amr.corp.intel.com ([10.22.225.129]) by fmsmga002.fm.intel.com with ESMTP; 24 Oct 2018 11:19:38 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.251]) by ORSMSX102.amr.corp.intel.com ([169.254.3.38]) with mapi id 14.03.0319.002; Wed, 24 Oct 2018 11:19:37 -0700 From: "Smith, Ned" To: Henk Birkholz , Jeremy O'Donoghue , "Eric Voit (evoit)" , "rats@ietf.org" CC: Michael Richardson , "eat@ietf.org" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? - Program of Work section Thread-Index: AQHUa8YfPGfZHuzPKUqu9mx1YxA8eQ== Date: Wed, 24 Oct 2018 18:19:37 +0000 Message-ID: <0199DB00-E76E-4664-BE02-E2AF4F4B6AEC@intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.3.181015 x-originating-ip: [10.24.14.77] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? - Program of Work section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Oct 2018 18:19:42 -0000 W25tc10gVGhlIFByb2dyYW0gb2YgV29yayBzZWN0aW9uICgyLikgaGFzIHRoZSBmb2xsb3dpbmcg c3RhdGVtZW50Og0KIlNwZWNpZnkgaW50ZXJvcGVyYWJsZSBjcm9zcy1wbGF0Zm9ybSBjbGFpbXMg d2hpY2ggcHJvdmlkZSBpbmZvcm1hdGlvbiBhYm91dCBzeXN0ZW1zIGFuZCBlbnRpdGllcyBpbiBz dXBwb3J0IG9mIHRoZSByZXF1aXJlZCB1c2UtY2FzZXMsIGFuZCBleHRlbmRpbmcgdGhlIHNldCBv ZiBjbGFpbXMgZGVmaW5lZCBpbiBSRkM3NTE5IGFuZCBSRkM4MzkyLiBUaGUgc3BlY2lmaWNhdGlv biB3aWxsIGRlc2NyaWJlIHRoZSBzeW50YXggZm9yIGVhY2ggY2xhaW0gaW4gYXQgbGVhc3QgdGhl IGZvbGxvd2luZyBmb3JtYXRzOg0KDQpDQk9SIFtSRkM3MDQ5XQ0KSlNPTiBbUkZDNzE1OV0NCnVz aW5nIG1vZGVsaW5nIGxhbmd1YWdlcywgc3VjaCBhczoNCg0KWUFORyBbUkZDNjAyMF0NCkNEREwg W0ktRC5pZXRmLWNib3ItY2RkbF0NCndoaWxlIHJldGFpbmluZyBpbnRlcm9wZXJhYmlsaXR5IHdp dGggZXhpc3RpbmcgZm9ybWF0cyBiYXNlZCBvbiBBU04uMSwgaWYgcG9zc2libGUgYW5kIGZlYXNp YmxlLiINCltubXNdIFRoZSBpbnRlbnQgaXMgKHNob3VsZCBiZT8pIHRoYXQgZXhpc3RpbmcgQVNO LjEgZm9ybWF0dGVkIGNsYWltcyBzaG91bGQgYmUgc2VtYW50aWNhbGx5IHNpbWlsYXIvc2FtZSBh cyB0aGVpciBDQk9SL0pTT04vWUFORy9DRERMIGNvdW50ZXJwYXJ0cy4gSWYgdGhlIFdHIGRlZmlu ZXMgY2xhaW1zIGZvciB3aGljaCB0aGVyZSBpc24ndCBhIHByZS1leGlzdGluZyBzdGFuZGFyZGl6 ZWQgQVNOLjEgcmVwcmVzZW50YXRpb24uIEl0IHNob3VsZCBiZSB3aXRoaW4gdGhlIHNjb3BlIG9m IHRoZSBXRyB0byBkZWZpbmUgdGhlIEFTTi4xIHJlcHJlc2VudGF0aW9uLiBIZW5jZSwgdGhlIHNl bnRlbmNlICIuLi53aGlsZSByZXRhaW5pbmcgaW50ZXJvcGVyYWJpbGl0eSB3aXRoIGV4aXN0aW5n IGZvcm1hdHMgYmFzZWQgb24gQVNOLjEsIGlmIHBvc3NpYmxlIGFuZCBmZWFzaWJsZS4iIE1pZ2h0 IGJldHRlciBiZSBzdGF0ZWQgYXM6DQoiLi4ud2hpbGUgcmV0YWluaW5nIGludGVyb3BlcmFiaWxp dHkgd2l0aCBleGlzdGluZyBmb3JtYXRzIGJhc2VkIG9uIEFTTi4xLCB3aGVyZSBjbGFpbSBzZW1h bnRpY3MgYXJlIHRoZSBzYW1lICh2ZXJ5IHNpbWlsYXIpLiINCiJDbGFpbXMgdGhhdCBhcmUgdW5p cXVlIHRvIHRoZSBlZmZvcnRzIG9mIHRoaXMgd29ya2luZyBncm91cCBtYXkgaW5jbHVkZSBkZWZp bml0aW9uIG9mIGl0cyBBU04uMSByZXByZXNlbnRhdGlvbi4iDQotTmVkDQoNCu+7v09uIDEwLzI0 LzE4LCA1OjU2IEFNLCAiRUFUIG9uIGJlaGFsZiBvZiBIZW5rIEJpcmtob2x6IiA8ZWF0LWJvdW5j ZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGhlbmsuYmlya2hvbHpAc2l0LmZyYXVuaG9mZXIuZGU+ IHdyb3RlOg0KDQogICAgSGkgYWxsLA0KICAgIA0KICAgIGJhc2VkIG9uIEplcmVteSdzIHByb3Bv c2FsIHdlIGRpZCBhbm90aGVyIGJpZyByZWZhY3RvcmluZyAtIGFsc28gdHJpZWQgDQogICAgdG8g YWRkcmVzcyBldmVyeWJvZHkncyBjb21tZW50cywgaW5wdXRzIGFuZCBjb25jZXJucy4NCiAgICAN CiAgICA+IGh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMvY2hhcnRlci9ibG9iL1JDMy9pZXRm LXJhdHMtY2hhcnRlci5tZA0KICAgIA0KICAgIFBsZWFzZSBub3RlIHRoYXQgdGhpcyBjaGFydGVy IHRleHQgaXMgaW50ZW5kZWQgdG8gYmUgYSBmaXJzdCBwaGFzZSwgDQogICAgd2hpY2ggaXMgdGhl IHJlYXNvbiB3aHksIGZvciBleGFtcGxlLCB0aGVyZSBzdGlsbCBpcyBubyBtZW50aW9uaW5nIGFi b3V0IA0KICAgIHByb3Zpc2lvbmluZywgcHJvZmlsZXMsIG9yIG1vcmUgZGV0YWlscyBhYm91dCBv dXQtb2YtYmFuZCBkZXBlbmRlbmNpZXMuDQogICAgDQogICAgQXMgTWljaGFlbCBoaWdobGlnaHRl ZCwgbW9zdCB0eXBlcyBvZiBjb250ZW50IGJlbG9uZyBpbnRvIGRyYWZ0cy4gVGhhdCANCiAgICBz YWlkIC0gb24gb25lIGhhbmQgdGhlIGNoYXJ0ZXIgaXMgYSBraW5kIG9mICJjb250cmFjdCIgd3J0 IHRvIHNjb3BlIGFuZCANCiAgICBvdXRwdXQsIG9uIHRoZSBvdGhlciBoYW5kIHdlIGRvIG5vdCB3 YW50IHRvIGJvaWwgdGhlIG9jZWFuIChhdCBsZWFzdCBub3QgDQogICAgYWxsIGF0IG9uY2UuLi4p Lg0KICAgIA0KICAgIFZpZWxlIEdyw7zDn2UsDQogICAgDQogICAgSGVuaw0KICAgIA0KICAgIE9u IDEwLzI0LzIwMTggMDE6MzYgUE0sIEplcmVteSBPJ0Rvbm9naHVlIHdyb3RlOg0KICAgID4gSEkg RXJpYywNCiAgICA+IA0KICAgID4+IE9uIDIzIE9jdCAyMDE4LCBhdCAxOTowNCwgRXJpYyBWb2l0 IChldm9pdCkgPGV2b2l0QGNpc2NvLmNvbSANCiAgICA+PiA8bWFpbHRvOmV2b2l0QGNpc2NvLmNv bT4+IHdyb3RlOg0KICAgID4+DQogICAgPj4gSGkgSmVyZW15LA0KICAgID4+IFRoYW5rcyBmb3Ig dGFraW5nIGEgY3V0IGF0IHRoaXMgY2hhcnRlciBzaW1wbGlmaWNhdGlvbi4gIFRoZXJlIGFyZSBh IA0KICAgID4+IGZldyBhcmVhcyBjb3ZlcmVkIHdpdGhpbiB0aGVHaXRIdWIgR29hbHMgDQogICAg Pj4gPGh0dHBzOi8vZ2l0aHViLmNvbS9pZXRmLXJhdHMvY2hhcnRlci9ibG9iL1JDMi9pZXRmLXJh dHMtY2hhcnRlci5tZD53aGljaCANCiAgICA+PiBJIGNhbuKAmXQgZWFzaWx5IG1hcCB0byB5b3Vy IHRleHQgYmVsb3cuICBDb3VsZCB5b3UgdGFsayBhYm91dCBob3cgdGhlc2UgDQogICAgPj4gZWxl bWVudHMgYXJlIGNvdmVyZWQgKG9yIG5vdCk/ICAgRm9yIGNvbnRleHQsIEkgYW0gd29ya2luZyBm cm9tIHRoZSANCiAgICA+PiBwZXJzcGVjdGl2ZSBvZnJlbW90ZSBhdHRlc3RhdGlvbiBhcHBsaWNh dGlvbiANCiAgICA+PiA8aHR0cHM6Ly93d3cuY2lzY28uY29tL2MvZGFtL2VuL3VzL3RkL2RvY3Mv Y2xvdWQtc3lzdGVtcy1tYW5hZ2VtZW50L2FwcGxpY2F0aW9uLXBvbGljeS1pbmZyYXN0cnVjdHVy ZS1jb250cm9sbGVyLWVudGVycHJpc2UtbW9kdWxlLzEtNS14L2ludGVncml0eV92ZXJpZmljYXRp b24vdXNlci1ndWlkZS9DaXNjb19JbnRlZ3JpdHlfVmVyaWZpY2F0aW9uX0FwcGxpY2F0aW9uX0FQ SUMtRU1fVXNlcl9HdWlkZV8xXzVfMF94LnBkZj5kZXZlbG9wZXIgDQogICAgPj4gdHJ5aW5nIHRv IHN0YW5kYXJkaXplIHRoZSBpbnRlcmZhY2VzIGJldHdlZW4gYSBjb250cm9sbGVyICh3aGljaCBp cyANCiAgICA+PiBhY3RpbmcgYXMgYSBjbGFpbSB2ZXJpZmllcikgYW5kIGEgbmV0d29yayBlbGVt ZW50ICh3aGljaCBpbmNsdWRlcyBUQ0cgDQogICAgPj4gYmFzZWQgc3Vic3lzdGVtcy4pDQogICAg Pj4gRm9yIG15IGFwcGxpY2F0aW9uIHRvIHdvcmsgcHJvcGVybHksIHRoZXJlIGFyZSBzZXZlcmFs IHRoaW5ncyBuZWVkZWQgDQogICAgPj4gd2l0aGluIGEgbmV0d29yayBjb250cm9sbGVyIHRvIHZh bGlkYXRlIHRoZSBhc3NlcnRlZCBjbGFpbXMgY29taW5nIG91dCANCiAgICA+PiBvZiBhIHJvdXRl ci4gIFRoZXNlIGluY2x1ZGU6DQogICAgPj4gwrdIb3cgZG8gd2UgZXhwb3NlIHRoZSBhdHRlc3Rh dGlvbiBldmlkZW5jZSB3aGljaCBjYW4gYmUgdXNlZCB0byANCiAgICA+PiB2YWxpZGF0ZSBhc3Nl cnRlZCBjbGFpbXM/DQogICAgPiANCiAgICA+IEkgdGhpbmsgdGhhdCB0aGUgbmVlZCB0byBhZGRy ZXNzIHRoaXMgaXMgY292ZXJlZCBzdWZmaWNpZW50bHkgZm9yIGEgV0cgDQogICAgPiBDaGFydGVy IGJ5IHRoZSBzdGF0ZW1lbnQgIlByb2R1Y2UgYSBzcGVjaWZpY2F0aW9uIGRlZmluaW5nIHByb2Nl ZHVyZXMgDQogICAgPiBhbmQgY29ycmVzcG9uZGluZyBhcmNoaXRlY3R1cmVz4oCoIHN1cHBvcnRp bmcgdmVyaWZpY2F0aW9uIG9mIENsYWltcyIuDQogICAgPiANCiAgICA+IElmIHZlcmlmaWNhdGlv biBvZiBDbGFpbXMgcmVxdWlyZXMgc3BlY2lmaWMgZm9ybXMgb2YgYXR0ZXN0YXRpb24gDQogICAg PiBldmlkZW5jZSAoZS5nLiBhIHNldCBvZiBtZWFzdXJlbWVudHMgZ2VuZXJhdGVkIGJ5IGEgVFBN KSwgdGhlbiBpdCBpcyANCiAgICA+IHByb3Blcmx5IGEgbWF0dGVyIGZvciBhbiBSRkMgdG8gc3Bl Y2lmeSB0aGlzLCBhcyBNaWNoYWVsIHN1Z2dlc3RzLg0KICAgID4gDQogICAgPj4gwrdIb3cgZG8g d2Uga25vdyB3aGljaCByb290IG9mIHRydXN0IHdoaWNoIHdhcyB1c2VkIHRvIGdlbmVyYXRlIHRo ZSANCiAgICA+PiBhdHRlc3RhdGlvbiBldmlkZW5jZSAoZS5nLiwgYXBwbGljYXRpb24gZXZlbnQg bG9ncyksIGFuZCBob3cgZG9lcyBhIA0KICAgID4+IHZlcmlmaWVyIGRpZmZlcmVudGlhdGUgdGhp cyBmcm9tIHRoZSByb290LW9mLXRydXN0IHdoaWNoIGFzc2VydHMgDQogICAgPj4gY2xhaW1zIG1h ZGUgdXBvbiB0aGlzIGV2aWRlbmNlPw0KICAgID4gDQogICAgPiBBZ2FpbiwgSSB0aGluayB0aGlz IGlzIGEgbWF0dGVyIGZvciBzcGVjaWZpY2F0aW9uIHJhdGhlciB0aGFuIGNoYXJ0ZXIuIA0KICAg ID4gVGhlcmUgYXJlIGEgbnVtYmVyIG9mIGRpZmZlcmVudCB3YXlzIGluIHdoaWNoIFJvb3RzIG9m IFRydXN0IGNhbiBiZSANCiAgICA+IHJlYWxpc2VkIGFuZCBtYW55IHBvc3NpYmxlIGRldmljZSBh cmNoaXRlY3R1cmVzLiBUaGUgRUFUIGRyYWZ0IGFsbG93cyANCiAgICA+IG9uZSBSb1QgdG8gaW5j bHVkZSBhbiBhdHRlc3RhdGlvbiBnZW5lcmF0ZWQgYnkgYSBkaWZmZXJlbnQgUm9ULCBmb3IgDQog ICAgPiBleGFtcGxlLiBJIGJlbGlldmUgdGhlIFJBVFMgZHJhZnQgYWxzbyBwcm92aWRlcyB0ZWNo bmljYWwgbWVjaGFuaXNtcyBieSANCiAgICA+IHdoaWNoIHRoaXMgY2FuIGJlIGFjaGlldmVkLg0K ICAgID4gDQogICAgPj4gwrdXaGF0IGVudGl0aWVzIGFyZSBhbGxvd2VkIHRvIHJlYWQgdGhlIGlu Zm8gYXNzZXJ0ZWQgY2xhaW1zPyAgV2hhdCANCiAgICA+PiBzdWJzZXQgb2YgdGhlc2UgY2FuIHNl ZSB0aGUgcmF3IGF0dGVzdGF0aW9uIGV2aWRlbmNlPw0KICAgID4+IFRoZXNlIHF1ZXN0aW9ucyBh cmUgc2lnbmlmaWNhbnQgYmVjYXVzZSByb3V0ZXJzL3N3aXRjaGVzIGFyZSBub3QgDQogICAgPj4g bW9ub2xpdGhpYyBkZXZpY2VzLiAgSW4gZmFjdCwgdGhleSBhcmUgY29tcG9zZWQgb2Ygc3Vic3lz dGVtcyB3aXRoIA0KICAgID4+IGRpZmZlcmVudCBsZXZlbHMgb2YgdHJ1c3R3b3J0aGluZXNzLiBB cyB0aGUgSUVURiBvZnRlbiBhaW1zIGF0IA0KICAgID4+IHByb3RvY29sIHNwZWNpZmljYXRpb25z IGF0IHRoZSBpbnRlci1kZXZpY2UgbGV2ZWwsIEkgYW0gbG9va2luZyBmb3IgDQogICAgPj4gY292 ZXJhZ2Ugb2Ygc3VjaCBxdWVzdGlvbnMgaW4gdGhlIGNoYXJ0ZXIuDQogICAgPiANCiAgICA+IEkg YWdyZWUgd2l0aCB5b3UgaGVyZSBhcyB0aGUgc2FtZSBpc3N1ZSBhcHBsaWVzIHRvIGNsYWltcyB3 aXRoIHByaXZhY3kgDQogICAgPiBpbXBsaWNhdGlvbnMuIEFzIGFuIGV4YW1wbGUsIEkgbWF5IHdp c2ggdG8gcHJlc2VudCBhIHVuaXF1ZSBkZXZpY2UgSUQgdG8gDQogICAgPiBhIHNvY2lhbCBtZWRp YSB3ZWJzaXRlIGJ1dCBub3QgbXkgbG9jYXRpb24uDQogICAgPiANCiAgICA+IEkgaGF2ZSBhZGRl ZCBidWxsZXQgcG9pbnQgMyB0byB0aGUgZHJhZnQgLSB3aGljaCBJIHdpbGwgcG9zdCBzZXBhcmF0 ZWx5LiANCiAgICA+IExldCBtZSBrbm93IGlmIHlvdSB0aGluayB0aGlzIGFkZHJlc3NlcyB5b3Vy IGNvbmNlcm5zIHN1ZmZpY2llbnRseS4NCiAgICA+IA0KICAgID4gQmVzdCByZWdhcmRzDQogICAg PiBKZXJlbXkNCiAgICA+IA0KICAgID4+IFRoYW5rcywNCiAgICA+PiBFcmljDQogICAgPj4gKkZy b206KkplcmVteSBPJ0Rvbm9naHVlLCBPY3RvYmVyIDIzLCAyMDE4IDEwOjQwIEFNDQogICAgPj4N CiAgICA+PiBPbiAyMiBPY3QgMjAxOCwgYXQgMjI6MDEsIE1pY2hhZWwgUmljaGFyZHNvbiA8bWNy K2lldGZAc2FuZGVsbWFuLmNhIA0KICAgID4+IDxtYWlsdG86bWNyK2lldGZAc2FuZGVsbWFuLmNh Pj4gd3JvdGU6DQogICAgPj4NCiAgICA+Pg0KICAgID4+ICAgICBKZXJlbXkgTydEb25vZ2h1ZSA8 am9kb25vZ2hAcXRpLnF1YWxjb21tLmNvbQ0KICAgID4+ICAgICA8bWFpbHRvOmpvZG9ub2doQHF0 aS5xdWFsY29tbS5jb20+PiB3cm90ZToNCiAgICA+Pg0KICAgID4+ICAgICAgICAgVGhpcyBpcyBh IHZlcnkgdXNlZnVsIGNvbnRyaWJ1dGlvbiwgTGF1cmVuY2UuDQogICAgPj4NCiAgICA+Pg0KICAg ID4+DQogICAgPj4gICAgICAgICBUaGUgY3VycmVudCBkcmFmdCB0ZXh0IGlzIHRvbyBzdHJvbmds eSBiaWFzZWQgdG93YXJkcw0KICAgID4+ICAgICAgICAgYXR0ZXN0YXRpb24gYmFzZWQNCiAgICA+ PiAgICAgICAgIG9uIG1lYXN1cmVtZW50LCBhbmQgZG9lcyBub3QgYWRlcXVhdGVseSBjb3ZlciBv dGhlciBtZWNoYW5pc21zDQogICAgPj4gICAgICAgICB3aGljaA0KICAgID4+ICAgICAgICAgYXJl IGFscmVhZHkNCiAgICA+Pg0KICAgID4+DQogICAgPj4gICAgIEJ1dCwgaXQncyBmb3IgdGhlIGNo YXJ0ZXIsIGZvciB0aGUgV0csIGl0J3Mgbm90IGEgdHJlYXRpc2Ugb24NCiAgICA+PiAgICAgYXR0 ZXN0YXRpb24NCiAgICA+PiAgICAgaXRzZWxmLg0KICAgID4+DQogICAgPj4gICAgIFRoaXMgaXMg YWxsIHN1cHBvc2VkIHRvIGJlICptZXRhKiB0ZXh0IGFib3V0IGF0dGVzdGF0aW9uLCBhYm91dA0K ICAgID4+ICAgICB3aGF0IHdlIHdhbnQNCiAgICA+PiAgICAgdG8gc2F5IGFib3V0IGF0dGVzdGF0 aW9uIGluIHRoZSBkb2N1bWVudHMsIG5vdCBhYm91dCB3aGF0DQogICAgPj4gICAgIGF0dGVzdGF0 aW9uIGlzLg0KICAgID4+DQogICAgPj4gICAgIFBsZWFzZSBnbyByZWFkIHNvbWUgb3RoZXIgSUVU RiBjaGFydGVyczoNCiAgICA+Pg0KICAgID4+ICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL3dnLzZsby9hYm91dC8NCiAgICA+PiAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9y Zy93Zy82dGlzY2gvYWJvdXQvDQogICAgPj4gICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5v cmcvd2cvc3VpdC9hYm91dC8NCiAgICA+Pg0KICAgID4+IEZhaXIgY29tbWVudC4NCiAgICA+PiBX ZSBoYXZlIHR3byBleGlzdGluZyBwcm9wb3NhbHMgLSBFQVQgYW5kIFJBVFMgLSB3aGljaCBhZGRy ZXNzIGEgDQogICAgPj4gc2ltaWxhciBwcm9ibGVtIHNwYWNlIGJ1dCB1c2luZyBkaWZmZXJlbnQg bWVjaGFuaXNtcy4gV2hpbGUgSSBiZWxpZXZlIA0KICAgID4+IHRoZSBSQVRTIGFuZCBFQVQgY29u dHJpYnV0b3JzIGFyZSBpbiBicm9hZCBhZ3JlZW1lbnQgdGhhdCB0aGVyZSBpcyANCiAgICA+PiBz aWduaWZpY2FudCBiZW5lZml0IGluIGJyaW5naW5nIGJvdGggd29yayBzdHJlYW1zIHVuZGVyIGEg c2luZ2xlIA0KICAgID4+IHVtYnJlbGxhLCB0cnlpbmcgdG8gcHJvcGVybHkgaW5jb3Jwb3JhdGUg RUFUIHRocm91Z2ggaW5jcmVtZW50YWwgDQogICAgPj4gbW9kaWZpY2F0aW9uIHRvIHRoZSBkcmFm dCBSQVRTIFdHIGNoYXJ0ZXIgdGV4dCBpcyBwcm92aW5nIGNoYWxsZW5naW5nLg0KICAgID4+IFRo ZSBiZWxvdyBwcm9iYWJseSBkaXZlcmdlcyB0b28gZmFyIGZyb20gdGhlIGN1cnJlbnQgdGV4dCBm b3Igc29tZSANCiAgICA+PiB0YXN0ZXMsIGJ1dCBpdCBtYXkgYWRkcmVzcyB5b3VyIHBvaW50IGFu ZCBwcm92aWRlIGEgYmFzaXMgZm9yIA0KICAgID4+IGRpc2N1c3Npb24gKGF0IHRoaXMgcG9pbnQg dGhlIEdpdEh1YiBkcmFmdCANCiAgICA+PiA8aHR0cHM6Ly9naXRodWIuY29tL2lldGYtcmF0cy9j aGFydGVyL2Jsb2IvUkMyL2lldGYtcmF0cy1jaGFydGVyLm1kPiBzZWVtcyANCiAgICA+PiBhIGxv bmcgd2F5IGJlaGluZCB0aGUgbGlzdCkuIEl0IGlzIGRlbGliZXJhdGVseSBzaWduaWZpY2FudGx5 IHNob3J0ZXIgDQogICAgPj4gdGhhbiB0aGUgY3VycmVudCBkcmFmdCAtIEkgaGF2ZSB0cmllZCB0 byByZS11c2UgYXMgbXVjaCBleGlzdGluZyB0ZXh0IA0KICAgID4+IGFzIHBvc3NpYmxlLCBidXQg aXQgaXMgaGVhdmlseSByZS1vcmdhbmlzZWQgYW5kIGFicmlkZ2VkLg0KICAgID4+IEkgaGF2ZSB0 YWtlbiBvbiBib2FyZCB0aGUgY29tbWVudCBmcm9tIENhcnN0ZW4gdGhhdCBwZXJoYXBzIGEgbWlu aW11bSANCiAgICA+PiBsZXZlbCBvZiB0ZXJtaW5vbG9neSBpcyBhY2NlcHRhYmxlIGluIGNoYXJ0 ZXIgdGV4dCwgYnV0IGRlbGliZXJhdGVseSANCiAgICA+PiB0cmllZCB0byBrZWVwIHRoZSBsYW5n dWFnZSBzaW1wbGUgYW5kIGZhaXJseSBnZW5lcmljIHRvIGVuYWJsZSB0aGUgDQogICAgPj4gcHJv cGVyIHdvcmsgb2YgdGVybWlub2xvZ3kgZGVmaW5pdGlvbiB0byB0YWtlIHBsYWNlIGluIHRoZSAN CiAgICA+PiByZXF1aXJlbWVudHMgZG9jdW1lbnQgYXMgeW91IHN1Z2dlc3QuDQogICAgPj4NCiAg ICA+PiBJbnRyb2R1Y3Rpb24NCiAgICA+Pg0KICAgID4+IC0tLS0tLS0tLS0tLQ0KICAgID4+DQog ICAgPj4gUmVtb3RlIGF0dGVzdGF0aW9uIHByb2NlZHVyZXMgY2FuIGJlIGluY29ycG9yYXRlZCBp biBuZXR3b3JrIHByb3RvY29scyB0bw0KICAgID4+IHByb3ZpZGUgdGhlIGJhc2lzIGZvciBlc3Rh Ymxpc2hpbmcgY2xhaW1zIGFib3V0IGFuIGVudGl0eSBpbiBhIHRydXN0d29ydGh5DQogICAgPj4g bWFubmVyLiBTdWNoIGNsYWltcyBtYXkgaW5jbHVkZSwgYnV0IGFyZSBub3QgbGltaXRlZCB0bywg ZGV2aWNlIGlkZW50aXR5LA0KICAgID4+IG1hbnVmYWN0dXJpbmcgb3JpZ2luLCBzeXN0ZW0gaW50 ZWdyaXR5LCBjb25maWd1cmF0aW9uLCBvcGVyYXRpb25hbCANCiAgICA+PiBzdGF0ZSBhbmQNCiAg ICA+PiBtZWFzdXJlbWVudHMgb2Ygc3RlcHMgd2hpY2ggbGVkIHRvIHRoZSBvcGVyYXRpb25hbCBz dGF0ZS4gU3VjaCBwcm9jZWR1cmVzDQogICAgPj4gZXhwb3NlIGVudGl0eSBjaGFyYWN0ZXJpc3Rp Y3MgaW4gdGhlIGZvcm0gb2YgY2xhaW0gc2V0cyB3aGljaCBhbGxvdyByZW1vdGUNCiAgICA+PiBw YXJ0aWVzIHRvIGVzdGFibGlzaCB0aGUgdHJ1c3R3b3J0aGluZXNzIG9mIGEgZGV2aWNlLCBwcm92 aWRlIGV2aWRlbmNlIA0KICAgID4+IHRoYXQgYQ0KICAgID4+IHBhcnRpY3VsYXIgc2V0IG9mIG9w ZXJhdGlvbnMgYW5kIGZ1bmN0aW9ucyBhcmUgc3VwcG9ydGVkIGFuZC9vciB0aGF0IHRoZQ0KICAg ID4+IGVudGl0eSBpcyBhY3R1YWxseSB3aGF0IGl0IGNsYWltcyB0byBiZS4NCiAgICA+Pg0KICAg ID4+IEluIHRoZSBhYnNlbmNlIG9mIHN1Y2ggcHJvY2VkdXJlcywgd2hpbGUgZG9tYWluLXNwZWNp ZmljIGF0dGVzdGF0aW9uDQogICAgPj4gbWVjaGFuaXNtcyBzdWNoIGFzIFRDRyBUUE0sIEZJRE8g QWxsaWFuY2UgYXR0ZXN0YXRpb24gYW5kIEFuZHJvaWQgS2V5c3RvcmUNCiAgICA+PiBhdHRlc3Rh dGlvbiBleGlzdCwgdGhlcmUgaXMgbm8gY29tbW9uIHdheSBmb3IgYSByZW1vdGUgcGFydHkgdG8g dGVsbCANCiAgICA+PiBpZiBkYXRhDQogICAgPj4gb3JpZ2luYXRlcyBmcm9tIGEgdHJ1c3R3b3J0 aHkgZGV2aWNlIChlLmcuIGEgVHJ1c3RlZCBTeXN0ZW0gZGVzaWduZWQgdG8NCiAgICA+PiBzdXBw b3J0IGEgc3BlY2lmaWMgc2V0IG9mIG9wZXJhdGlvbnMvZnVuY3Rpb25hbGl0aWVzKSBvciBub3Qu DQogICAgPj4NCiAgICA+PiBUaGUgZm9sbG93aW5nIG1pbmltYWwgdGVybWlub2xvZ3kgaXMgZGVm aW5lZCBmb3IgdGhlIHB1cnBvc2VzIG9mIA0KICAgID4+IGNsYXJpZnlpbmcgdGhlDQogICAgPj4g V29ya2luZyBHcm91cCBjaGFydGVyIHRleHQ6DQogICAgPj4NCiAgICA+PiAtIGF0dGVzdGF0aW9u OiBhIHNldCBvZiBjbGFpbXMgd2hpY2ggY2FuIGJlIHZlcmlmaWVkIGFzIG9yaWdpbmF0aW5nIGlu IGFuDQogICAgPj4gICAgICAgICAgIGVudGl0eS4NCiAgICA+Pg0KICAgID4+IC0gY2xhaW06ICBh cyBkZWZpbmVkIGluIFJGQzc1MTkuDQogICAgPj4NCiAgICA+PiAtIGVudGl0eTogYSBkZXZpY2Ug b3IgZGV2aWNlIHN1Yi1tb2R1bGUgdGhhdCBjYW4gZ2VuZXJhdGUgYSBjbGFpbSBvciANCiAgICA+ PiBzZXQgb2YNCiAgICA+PiAgICAgICAgICAgY2xhaW1zIHdoaWNoIGNhbiBiZSB2ZXJpZmllZCBi eSBhIHJlbW90ZSBwYXJ0eS4NCiAgICA+Pg0KICAgID4+IC0gcmVtb3RlIHBhcnR5OiBhbiBhY3Rv ciByZW1vdGUgZnJvbSBhbiBlbnRpdHkgdGhhdCB3aXNoZXMgdG8gdmVyaWZ5IA0KICAgID4+IHdo ZXRoZXINCiAgICA+PiAgICAgICAgICAgYSBjbGFpbSBvciBzZXQgb2YgY2xhaW1zIG9yaWdpbmF0 ZWQgaW4gYSBnaXZlbiBlbnRpdHkuDQogICAgPj4NCiAgICA+PiBEZXNjcmlwdGlvbiBvZiB0aGUg V29ya2luZyBHcm91cA0KICAgID4+DQogICAgPj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0NCiAgICA+Pg0KICAgID4+IFRoZSBXb3JraW5nIEdyb3VwIHdpbGwgZGVmaW5lOg0KICAg ID4+DQogICAgPj4gLSBTdGFuZGFyZGl6ZWQgYW5kIGludGVyb3BlcmFibGUgbWVjaGFuaXNtcyB0 byBlc3RhYmxpc2ggYSBzdWZmaWNpZW50IA0KICAgID4+IGxldmVsDQogICAgPj4gICBvZiBjb25m aWRlbmNlIHRoYXQgZGF0YSBvcmlnaW5hdGVzIGZyb20gYSB0cnVzdHdvcnRoeSBlbnRpdHkgZGVz aWduZWQgdG8NCiAgICA+PiAgIHN1cHBvcnQgYSBzcGVjaWZpYyBzZXQgb2Ygb3BlcmF0aW9ucy9m dW5jdGlvbmFsaXRpZXMuDQogICAgPj4gLSBTdGFuZGFyZGl6ZWQgYW5kIGludGVyb3BlcmFibGUg bWVjaGFuaXNtcyBidWlsZGluZyBvbiAoMSkgdG8gYWxsb3cgDQogICAgPj4gcmVtb3RlDQogICAg Pj4gICBwYXJ0aWVzIHRvIGtub3cgdGhlIHByb3ZlbmFuY2UgYW5kIGNoYXJhY3RlcmlzdGljcyBv ZiBhbiBlbnRpdHkgdGhhdCANCiAgICA+PiBtYXkgYmUNCiAgICA+PiAgIHJlcXVlc3Rpbmcgc2Vy dmljZXMuDQogICAgPj4NCiAgICA+PiBUaGUgV29ya2luZyBHcm91cCB3aWxsIGlkZW50aWZ5IHNl Y3VyaXR5IGdvYWxzIHdoaWNoIGl0IGV4cGVjdHMgYSANCiAgICA+PiB0cnVzdHdvcnRoeQ0KICAg ID4+IGV4ZWN1dGlvbiBjb250ZXh0IHRvIGFkZHJlc3MsIHdoaWNoIHdpbGwgYXNzdW1lIHRoZSBw cmVzZW5jZSBvZiBSb290cyBvZg0KICAgID4+IFRydXN0IChhcyBkZWZpbmVkIGJ5IE5JU1QgW1NQ ODAwLTE2NF0pLiBUaGUgZGV0YWlsZWQgc3BlY2lmaWNhdGlvbiBvZiBzdWNoDQogICAgPj4gY29u dGV4dHMgaXMgb3V0IG9mIHNjb3BlLg0KICAgID4+DQogICAgPj4gVGhlIFdvcmtpbmcgR3JvdXAg d2lsbCBtYWludGFpbiBjbG9zZSByZWxhdGlvbnNoaXBzIHdpdGggYm9kaWVzIA0KICAgID4+IHVu ZGVydGFraW5nDQogICAgPj4gY29tcGxlbWVudGFyeSB3b3JrIHN0cmVhbXMgaW4gdGhlIGFyZWEg b2YgcmVtb3RlIGF0dGVzdGF0aW9uIHN1Y2ggYXMNCiAgICA+PiBHbG9iYWxQbGF0Zm9ybSwgVHJ1 c3RlZCBDb21wdXRpbmcgR3JvdXAgYW5kIEZJRE8gQWxsaWFuY2UuDQogICAgPj4NCiAgICA+PiBU aGUgV29ya2luZyBHcm91cCB3aWxsIGNvb3BlcmF0ZSB3aXRoIHRoZSBURUVQIFdvcmtpbmcgR3Jv dXAsIHdoaWNoIG1heQ0KICAgID4+IGdlbmVyYXRlIHJlcXVpcmVtZW50cyBmb3IgY2xhaW1zIHJl bGV2YW50IHRvIFRFRS4NCiAgICA+Pg0KICAgID4+IFdvcmsgSXRlbXMNCiAgICA+Pg0KICAgID4+ IC0tLS0tLS0tLS0NCiAgICA+Pg0KICAgID4+IFRoZSBXb3JraW5nIEdyb3VwIHdpbGwgZGV2ZWxv cCBzcGVjaWZpY2F0aW9ucyBzdXBwb3J0aW5nIHRoZSBjcmVhdGlvbiBvZg0KICAgID4+IGludGVy b3BlcmFibGUgcmVtb3RlIGF0dGVzdGF0aW9uIHByb2NlZHVyZXMgZm9yIGVudGl0aWVzIHdoaWNo IA0KICAgID4+IGluY29ycG9yYXRlDQogICAgPj4gUm9vdHMgb2YgVHJ1c3QuIFRoZSBtYWluIGRl bGl2ZXJhYmxlcyBhcmUgYXMgZm9sbG93cy4NCiAgICA+Pg0KICAgID4+IC0gUHJvZHVjZSBhIHJl cXVpcmVtZW50cyBkb2N1bWVudCBlc3RhYmxpc2hpbmcgYSBjb21tb24gdm9jYWJ1bGFyeSBmb3Ig DQogICAgPj4gcmVtb3RlDQogICAgPj4gICBhdHRlc3RhdGlvbiwgaWRlbnRpZnlpbmcgbWVjaGFu aXNtcyB3aGljaCB3aWxsIGJlIHN1cHBvcnRlZCBmb3IgDQogICAgPj4gZXN0YWJsaXNoaW5nDQog ICAgPj4gICB0cnVzdCBiZXR3ZWVuIGFuIGVudGl0eSBhbmQgYSByZW1vdGUgcGFydHksIGFuZCBl bnVtZXJhdGluZyBzYW1wbGUgDQogICAgPj4gdXNlLWNhc2VzDQogICAgPj4gICBmb3IgcmVtb3Rl IGF0dGVzdGF0aW9uLg0KICAgID4+DQogICAgPj4gLSBQcm9kdWNlIHNwZWNpZmljYXRpb24gdGV4 dCBkZWZpbmluZyBpbnRlcm9wZXJhYmxlIGNyb3NzLXBsYXRmb3JtIA0KICAgID4+IGNsYWltcyB3 aGljaA0KICAgID4+ICAgcHJvdmlkZSBpbmZvcm1hdGlvbiBhYm91dCBhbiBlbnRpdHkgaW4gc3Vw cG9ydCBvZiB0aGUgcmVxdWlyZWQgDQogICAgPj4gdXNlLWNhc2VzLCBhbmQNCiAgICA+PiAgIGV4 dGVuZGluZyB0aGUgc2V0IG9mIGNsYWltcyBkZWZpbmVkIGluIFJGQzc1MTkgYW5kIFJGQzgzOTIu IFRoZSANCiAgICA+PiBzcGVjaWZpY2F0aW9uDQogICAgPj4gICB3aWxsIGRlc2NyaWJlIHRoZSBz eW50YXggZm9yIGVhY2ggY2xhaW0gaW4gYXQgbGVhc3QgdGhlIGZvbGxvd2luZyANCiAgICA+PiBm b3JtYXRzOg0KICAgID4+ICAgICAtIENCT1IgW1JGQzcwNDldDQogICAgPj4gICAgIC0gSlNPTiBb UkZDNzE1OV0NCiAgICA+PiAgICAgLSBZQU5HIFtSRkM2MDIwXQ0KICAgID4+DQogICAgPj4gLSBQ cm9kdWNlIHNwZWNpZmljYXRpb24gdGV4dCBkZWZpbmluZyBwcm9jZWR1cmVzIGFuZCBjb3JyZXNw b25kaW5nIA0KICAgID4+IGFyY2hpdGVjdHVyZXMNCiAgICA+PiAgIHN1cHBvcnRpbmcgdmVyaWZp Y2F0aW9uIG9mIGNsYWltcyB3aXRoaW4gYW4gYXR0ZXN0YXRpb24gYmFzZWQgb24gDQogICAgPj4g bWVhc3VyZWQgZmlsZQ0KICAgID4+ICAgZXhlY3V0aW9uIHByb2NlZHVyZXMgYW5kIHN1cHBvcnRp bmc6DQogICAgPj4gICAgIC0gRXhwbGljaXQgYXR0ZXN0YXRpb24gd2hlcmVpbiBhIHNldCBvZiBj bGFpbXMgaXMgdHJhbnNwb3J0ZWQgaW4gDQogICAgPj4gdGhlIGF0dGVzdGF0aW9uOw0KICAgID4+ ICAgICAtIEltcGxpY2l0IGF0dGVzdGF0aW9uIHdoZXJlaW4gYSBzZXQgb2YgY2xhaW1zIGlzIGlt cGxpZWQgYnkgDQogICAgPj4gcG9zc2Vzc2lvbiBvZiBhIHNlY3JldC4NCiAgICA+Pg0KICAgID4+ IC0gUHJvZHVjZSBzcGVjaWZpY2F0aW9uIHRleHQgZGVmaW5pbmcgcHJvY2VkdXJlcyBhbmQgY29y cmVzcG9uZGluZyANCiAgICA+PiBhcmNoaXRlY3R1cmVzDQogICAgPj4gICBzdXBwb3J0aW5nIHZl cmlmaWNhdGlvbiBvZiBjbGFpbXMgZW5jYXBzdWxhdGVkIGluOg0KICAgID4+DQogICAgPj4gICAg IC0gQ0JPUiBXZWIgVG9rZW4gc3RydWN0dXJlcyBbUkZDODM5Ml0NCiAgICA+PiAgICAgLSBKU09O IFdlYiBUb2tlbiBzdHJ1Y3R1cmVzIFtSRkM3NTE5XQ0KICAgID4+DQogICAgPj4gLSBQZXJmb3Jt IHByaXZhY3kgYW5hbHlzaXMgb2YgYm90aCBjbGFpbXMgYW5kIHRoZSBjcnlwdG9ncmFwaGljIA0K ICAgID4+IHByb2NlZHVyZXMgdXNlZCB0bw0KICAgID4+ICAgZXN0YWJsaXNoIHRydXN0LiBUaGlz IGluZm9ybWF0aW9uIHdpbGwgYmUgaW5jbHVkZWQgYXMgYXBwcm9wcmlhdGUgaW4gdGhlDQogICAg Pj4gICBkZWxpdmVyYWJsZSBzcGVjaWZpY2F0aW9ucywgYW5kIG1heSBpbXBseSBleHRlbnNpb24g b2YgcHJvY2VkdXJlcyANCiAgICA+PiBkZWZpbmVkIGluDQogICAgPj4gICBvdGhlciBzcGVjaWZp Y2F0aW9ucyBpbiBzdXBwb3J0IG9mIHByaXZhY3kgZ29hbHMuDQogICAgPj4NCiAgICA+PiBJdCBz ZWVtcyB0byBtZSB0aGF0IHRoZXJlIGFyZSB0d28gd2F5cyB0byBwcm9kdWNlIHRoZSBtYWluIA0K ICAgID4+IHNwZWNpZmljYXRpb24gZGVsaXZlcmFibGVzLiBJIGhhdmUgZGVsaWJlcmF0ZWx5IGxl ZnQgdGhlIHRleHQgYWJvdmUgDQogICAgPj4gc2xpZ2h0bHkgdmFndWUgb24gdGhpcy4NCiAgICA+ Pg0KICAgID4+ICAgKiBBIGNsYWltcyBzcGVjaWZpY2F0aW9uIGNvbW1vbiB0byBSQVRTIGFuZCBF QVQgd2l0aCBzZXBhcmF0ZSBSQVRTDQogICAgPj4gICAgIGFuZCBFQVQgcHJvY2VkdXJlIHNwZWNp ZmljYXRpb25zLg0KICAgID4+ICAgKiBBIGNsYWltcyBzcGVjaWZpY2F0aW9uIGFsc28gaW5jb3Jw b3JhdGluZyBFQVQgcHJvY2VkdXJlcyBhbmQgYQ0KICAgID4+ICAgICBzZXBhcmF0ZSBSQVRTIHBy b2NlZHVyZSBzcGVjaWZpY2F0aW9uLiBUaGlzIHdvdWxkIGJlIG15IHByZWZlcnJlZA0KICAgID4+ ICAgICBvcHRpb24uDQogICAgPj4NCiAgICA+PiAgICAgICBvIEkgYmVsaWV2ZSB0aGVyZSBhcmUg dmVyeSBmZXcgcHJvY2VkdXJlcyBuZWVkZWQgZm9yIEVBVCBvdGhlcg0KICAgID4+ICAgICAgICAg dGhhbiB0aGUgcG9zc2libGUgbmVlZCB0byBzdXBwb3J0IGEgbm9uY2UgdG8gZW5zdXJlIGZyZXNo bmVzcw0KICAgID4+DQogICAgPj4gSmVyZW15DQogICAgPj4NCiAgICA+Pg0KICAgID4+ICAgICBO b3RpY2UgaG93IGJ5IGFib3V0IHRoZSBzZWNvbmQgcGFyYWdyYXBoICg2dGlzY2ggdGFrZXMgYSBi aXQNCiAgICA+PiAgICAgbG9uZ2VyKSwgZWFjaA0KICAgID4+ICAgICBnZXRzIGludG8gd2hhdCB0 aGUgV0cgd2lsbCBkbz8NCiAgICA+Pg0KICAgID4+ICAgICAtLQ0KICAgID4+ICAgICBNaWNoYWVs IFJpY2hhcmRzb24gPG1jcitJRVRGQHNhbmRlbG1hbi5jYQ0KICAgID4+ICAgICA8bWFpbHRvOm1j citJRVRGQHNhbmRlbG1hbi5jYT4+LCBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MNCiAgICA+PiAg ICAgLT0gSVB2NiBJb1QgY29uc3VsdGluZyA9LQ0KICAgID4+ICAgICBfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KICAgID4+ICAgICBFQVQgbWFpbGluZyBs aXN0DQogICAgPj4gICAgIEVBVEBpZXRmLm9yZyA8bWFpbHRvOkVBVEBpZXRmLm9yZz4NCiAgICA+ PiAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQNCiAgICA+Pg0K ICAgID4gDQogICAgPiANCiAgICA+IA0KICAgID4gX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCiAgICA+IEVBVCBtYWlsaW5nIGxpc3QNCiAgICA+IEVBVEBp ZXRmLm9yZw0KICAgID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9lYXQN CiAgICA+IA0KICAgIA0KICAgIF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQogICAgRUFUIG1haWxpbmcgbGlzdA0KICAgIEVBVEBpZXRmLm9yZw0KICAgIGh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vZWF0DQogICAgDQoNCg== From nobody Thu Oct 25 06:15:15 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55DC6130E3E for ; Thu, 25 Oct 2018 06:15:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id noXIppYebhbt for ; Thu, 25 Oct 2018 06:15:09 -0700 (PDT) Received: from p3plsmtpa06-06.prod.phx3.secureserver.net (p3plsmtpa06-06.prod.phx3.secureserver.net [173.201.192.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1DB58130E27 for ; Thu, 25 Oct 2018 06:15:09 -0700 (PDT) Received: from 2405-9800-ba10.44.pool1.tls1b-bcr02.myaisfibre.com ([184.22.84.59]) by :SMTPAUTH: with ESMTPSA id FfTcg2B8U9HIzFfTdglvWb; Thu, 25 Oct 2018 06:15:08 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Laurence Lundblade In-Reply-To: <0199DB00-E76E-4664-BE02-E2AF4F4B6AEC@intel.com> Date: Thu, 25 Oct 2018 20:15:03 +0700 Cc: Henk Birkholz , Jeremy O'Donoghue , "Eric Voit (evoit)" , "rats@ietf.org" , Michael Richardson , "eat@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <526BB5AC-60A8-4CD3-95F4-39F210E4D2FB@island-resort.com> References: <0199DB00-E76E-4664-BE02-E2AF4F4B6AEC@intel.com> To: "Smith, Ned" X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfA9v/qRBb3hQnioGQWzWjSL1de4nP0nLw0N2tM3p9IRaajZzscNUTJrvRZJe4rb1xZeLt3EcKmgyQUDqpdP5uezVNES1fL8ChV9Tk7vFseOWRssZG1Zw KdLpV2UtQ2k3bC82j3fzb7wBRv4YGBcF6/RIvXspL8QTkfloo76Mv+SlPH1foGixm4OpOBzq6zEPH2tnIkEOqjB0SgeRv8xcvNgLvdwQIM13gSAMJrvItCTn c2ooDHwykm2adruNlPQA0B75rUKGLmR2YTXOiS6pKm+NViQ/VdqWme8e42lVOpkwS2dWL+e2rMQtI536WAHwW4bVsLNXZ8bBVEu9bXJJuydFO3VeOYjtf1q9 UJDegouTrTNf7hLdVl5Ecx+zzskTwRzmWEWjR2glHNLaHTa9CXI= Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? - Program of Work section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Oct 2018 13:15:13 -0000 The new charter looks pretty good to me.=20 Some comments on claims formats. The way I=E2=80=99ve been thinking of support for multiple formats = (JSON, CBOR, ASN.1...) is that we do the main work of defining the claim = semantics first. Those semantics are in common for all the syntaxes. = JSON, CBOR, etc. are just syntaxes. Agreed we should look at existing claim definitions and avoid re = inventing. They should be from any source though, not just ASN.1.=20 I want to bring up the issue of interoperability when there are multiple = syntaxes (CBOR, JSON, ASN.1=E2=80=A6) and securing schemes (COSE, JOSE, = CMS=E2=80=A6). I think the device should be able to pick one format and = only implement that. I don=E2=80=99t think there should be format = negotiation. The relying party thus must implement all variants for = there to be full interoperability.=20 It might be possible to have some intermediate service that translates = the syntax of claims (e.g. from CBOR to ASN.1), but then that = intermediary would have to re sign which means it would have to be fully = trusted as part of the end-end security model. So I am making some argument against ASN.1 and anything beyond JSON and = CBOR. The more formats there are the more work the relying parties will = have to do and of course some won=E2=80=99t implement all the formats = and then we=E2=80=99ll have less interop. LL BTW, the first EAT implementation I did used CMS because COSE wasn=E2=80=99= t ready. I did a pretty small CMS implementation and then later a pretty = small COSE Sign1 implementation. COSE Sign1 was easier and less code. > On Oct 25, 2018, at 1:19 AM, Smith, Ned wrote: >=20 > [nms] The Program of Work section (2.) has the following statement: > "Specify interoperable cross-platform claims which provide information = about systems and entities in support of the required use-cases, and = extending the set of claims defined in RFC7519 and RFC8392. The = specification will describe the syntax for each claim in at least the = following formats: >=20 > CBOR [RFC7049] > JSON [RFC7159] > using modeling languages, such as: >=20 > YANG [RFC6020] > CDDL [I-D.ietf-cbor-cddl] > while retaining interoperability with existing formats based on ASN.1, = if possible and feasible." > [nms] The intent is (should be?) that existing ASN.1 formatted claims = should be semantically similar/same as their CBOR/JSON/YANG/CDDL = counterparts. If the WG defines claims for which there isn't a = pre-existing standardized ASN.1 representation. It should be within the = scope of the WG to define the ASN.1 representation. Hence, the sentence = "...while retaining interoperability with existing formats based on = ASN.1, if possible and feasible." Might better be stated as: > "...while retaining interoperability with existing formats based on = ASN.1, where claim semantics are the same (very similar)." > "Claims that are unique to the efforts of this working group may = include definition of its ASN.1 representation." > -Ned >=20 > =EF=BB=BFOn 10/24/18, 5:56 AM, "EAT on behalf of Henk Birkholz" = = wrote: >=20 > Hi all, >=20 > based on Jeremy's proposal we did another big refactoring - also = tried=20 > to address everybody's comments, inputs and concerns. >=20 >> https://github.com/ietf-rats/charter/blob/RC3/ietf-rats-charter.md >=20 > Please note that this charter text is intended to be a first phase,=20= > which is the reason why, for example, there still is no mentioning = about=20 > provisioning, profiles, or more details about out-of-band = dependencies. >=20 > As Michael highlighted, most types of content belong into drafts. = That=20 > said - on one hand the charter is a kind of "contract" wrt to scope = and=20 > output, on the other hand we do not want to boil the ocean (at = least not=20 > all at once...). >=20 > Viele Gr=C3=BC=C3=9Fe, >=20 > Henk >=20 > On 10/24/2018 01:36 PM, Jeremy O'Donoghue wrote: >> HI Eric, >>=20 >>> On 23 Oct 2018, at 19:04, Eric Voit (evoit) >> > wrote: >>>=20 >>> Hi Jeremy, >>> Thanks for taking a cut at this charter simplification. There are a=20= >>> few areas covered within theGitHub Goals=20 >>> = which=20= >>> I can=E2=80=99t easily map to your text below. Could you talk about = how these=20 >>> elements are covered (or not)? For context, I am working from the=20= >>> perspective ofremote attestation application=20 >>> = developer=20 >>> trying to standardize the interfaces between a controller (which is=20= >>> acting as a claim verifier) and a network element (which includes = TCG=20 >>> based subsystems.) >>> For my application to work properly, there are several things needed=20= >>> within a network controller to validate the asserted claims coming = out=20 >>> of a router. These include: >>> =C2=B7How do we expose the attestation evidence which can be used to=20= >>> validate asserted claims? >>=20 >> I think that the need to address this is covered sufficiently for a = WG=20 >> Charter by the statement "Produce a specification defining procedures=20= >> and corresponding architectures > supporting verification of Claims". >>=20 >> If verification of Claims requires specific forms of attestation=20 >> evidence (e.g. a set of measurements generated by a TPM), then it is=20= >> properly a matter for an RFC to specify this, as Michael suggests. >>=20 >>> =C2=B7How do we know which root of trust which was used to generate = the=20 >>> attestation evidence (e.g., application event logs), and how does a=20= >>> verifier differentiate this from the root-of-trust which asserts=20 >>> claims made upon this evidence? >>=20 >> Again, I think this is a matter for specification rather than = charter.=20 >> There are a number of different ways in which Roots of Trust can be=20= >> realised and many possible device architectures. The EAT draft allows=20= >> one RoT to include an attestation generated by a different RoT, for=20= >> example. I believe the RATS draft also provides technical mechanisms = by=20 >> which this can be achieved. >>=20 >>> =C2=B7What entities are allowed to read the info asserted claims? = What=20 >>> subset of these can see the raw attestation evidence? >>> These questions are significant because routers/switches are not=20 >>> monolithic devices. In fact, they are composed of subsystems with=20= >>> different levels of trustworthiness. As the IETF often aims at=20 >>> protocol specifications at the inter-device level, I am looking for=20= >>> coverage of such questions in the charter. >>=20 >> I agree with you here as the same issue applies to claims with = privacy=20 >> implications. As an example, I may wish to present a unique device ID = to=20 >> a social media website but not my location. >>=20 >> I have added bullet point 3 to the draft - which I will post = separately.=20 >> Let me know if you think this addresses your concerns sufficiently. >>=20 >> Best regards >> Jeremy >>=20 >>> Thanks, >>> Eric >>> *From:*Jeremy O'Donoghue, October 23, 2018 10:40 AM >>>=20 >>> On 22 Oct 2018, at 22:01, Michael Richardson >> > wrote: >>>=20 >>>=20 >>> Jeremy O'Donoghue >> > wrote: >>>=20 >>> This is a very useful contribution, Laurence. >>>=20 >>>=20 >>>=20 >>> The current draft text is too strongly biased towards >>> attestation based >>> on measurement, and does not adequately cover other = mechanisms >>> which >>> are already >>>=20 >>>=20 >>> But, it's for the charter, for the WG, it's not a treatise on >>> attestation >>> itself. >>>=20 >>> This is all supposed to be *meta* text about attestation, about >>> what we want >>> to say about attestation in the documents, not about what >>> attestation is. >>>=20 >>> Please go read some other IETF charters: >>>=20 >>> https://datatracker.ietf.org/wg/6lo/about/ >>> https://datatracker.ietf.org/wg/6tisch/about/ >>> https://datatracker.ietf.org/wg/suit/about/ >>>=20 >>> Fair comment. >>> We have two existing proposals - EAT and RATS - which address a=20 >>> similar problem space but using different mechanisms. While I = believe=20 >>> the RATS and EAT contributors are in broad agreement that there is=20= >>> significant benefit in bringing both work streams under a single=20 >>> umbrella, trying to properly incorporate EAT through incremental=20 >>> modification to the draft RATS WG charter text is proving = challenging. >>> The below probably diverges too far from the current text for some=20= >>> tastes, but it may address your point and provide a basis for=20 >>> discussion (at this point the GitHub draft=20 >>> = seems=20 >>> a long way behind the list). It is deliberately significantly = shorter=20 >>> than the current draft - I have tried to re-use as much existing = text=20 >>> as possible, but it is heavily re-organised and abridged. >>> I have taken on board the comment from Carsten that perhaps a = minimum=20 >>> level of terminology is acceptable in charter text, but deliberately=20= >>> tried to keep the language simple and fairly generic to enable the=20= >>> proper work of terminology definition to take place in the=20 >>> requirements document as you suggest. >>>=20 >>> Introduction >>>=20 >>> ------------ >>>=20 >>> Remote attestation procedures can be incorporated in network = protocols to >>> provide the basis for establishing claims about an entity in a = trustworthy >>> manner. Such claims may include, but are not limited to, device = identity, >>> manufacturing origin, system integrity, configuration, operational=20= >>> state and >>> measurements of steps which led to the operational state. Such = procedures >>> expose entity characteristics in the form of claim sets which allow = remote >>> parties to establish the trustworthiness of a device, provide = evidence=20 >>> that a >>> particular set of operations and functions are supported and/or that = the >>> entity is actually what it claims to be. >>>=20 >>> In the absence of such procedures, while domain-specific attestation >>> mechanisms such as TCG TPM, FIDO Alliance attestation and Android = Keystore >>> attestation exist, there is no common way for a remote party to tell=20= >>> if data >>> originates from a trustworthy device (e.g. a Trusted System designed = to >>> support a specific set of operations/functionalities) or not. >>>=20 >>> The following minimal terminology is defined for the purposes of=20 >>> clarifying the >>> Working Group charter text: >>>=20 >>> - attestation: a set of claims which can be verified as originating = in an >>> entity. >>>=20 >>> - claim: as defined in RFC7519. >>>=20 >>> - entity: a device or device sub-module that can generate a claim or=20= >>> set of >>> claims which can be verified by a remote party. >>>=20 >>> - remote party: an actor remote from an entity that wishes to verify=20= >>> whether >>> a claim or set of claims originated in a given entity. >>>=20 >>> Description of the Working Group >>>=20 >>> -------------------------------- >>>=20 >>> The Working Group will define: >>>=20 >>> - Standardized and interoperable mechanisms to establish a = sufficient=20 >>> level >>> of confidence that data originates from a trustworthy entity = designed to >>> support a specific set of operations/functionalities. >>> - Standardized and interoperable mechanisms building on (1) to allow=20= >>> remote >>> parties to know the provenance and characteristics of an entity = that=20 >>> may be >>> requesting services. >>>=20 >>> The Working Group will identify security goals which it expects a=20 >>> trustworthy >>> execution context to address, which will assume the presence of = Roots of >>> Trust (as defined by NIST [SP800-164]). The detailed specification = of such >>> contexts is out of scope. >>>=20 >>> The Working Group will maintain close relationships with bodies=20 >>> undertaking >>> complementary work streams in the area of remote attestation such as >>> GlobalPlatform, Trusted Computing Group and FIDO Alliance. >>>=20 >>> The Working Group will cooperate with the TEEP Working Group, which = may >>> generate requirements for claims relevant to TEE. >>>=20 >>> Work Items >>>=20 >>> ---------- >>>=20 >>> The Working Group will develop specifications supporting the = creation of >>> interoperable remote attestation procedures for entities which=20 >>> incorporate >>> Roots of Trust. The main deliverables are as follows. >>>=20 >>> - Produce a requirements document establishing a common vocabulary = for=20 >>> remote >>> attestation, identifying mechanisms which will be supported for=20 >>> establishing >>> trust between an entity and a remote party, and enumerating sample=20= >>> use-cases >>> for remote attestation. >>>=20 >>> - Produce specification text defining interoperable cross-platform=20= >>> claims which >>> provide information about an entity in support of the required=20 >>> use-cases, and >>> extending the set of claims defined in RFC7519 and RFC8392. The=20 >>> specification >>> will describe the syntax for each claim in at least the following=20= >>> formats: >>> - CBOR [RFC7049] >>> - JSON [RFC7159] >>> - YANG [RFC6020] >>>=20 >>> - Produce specification text defining procedures and corresponding=20= >>> architectures >>> supporting verification of claims within an attestation based on=20 >>> measured file >>> execution procedures and supporting: >>> - Explicit attestation wherein a set of claims is transported in=20= >>> the attestation; >>> - Implicit attestation wherein a set of claims is implied by=20 >>> possession of a secret. >>>=20 >>> - Produce specification text defining procedures and corresponding=20= >>> architectures >>> supporting verification of claims encapsulated in: >>>=20 >>> - CBOR Web Token structures [RFC8392] >>> - JSON Web Token structures [RFC7519] >>>=20 >>> - Perform privacy analysis of both claims and the cryptographic=20 >>> procedures used to >>> establish trust. This information will be included as appropriate = in the >>> deliverable specifications, and may imply extension of procedures=20= >>> defined in >>> other specifications in support of privacy goals. >>>=20 >>> It seems to me that there are two ways to produce the main=20 >>> specification deliverables. I have deliberately left the text above=20= >>> slightly vague on this. >>>=20 >>> * A claims specification common to RATS and EAT with separate RATS >>> and EAT procedure specifications. >>> * A claims specification also incorporating EAT procedures and a >>> separate RATS procedure specification. This would be my preferred >>> option. >>>=20 >>> o I believe there are very few procedures needed for EAT other >>> than the possible need to support a nonce to ensure freshness >>>=20 >>> Jeremy >>>=20 >>>=20 >>> Notice how by about the second paragraph (6tisch takes a bit >>> longer), each >>> gets into what the WG will do? >>>=20 >>> -- >>> Michael Richardson >> >, Sandelman Software Works >>> -=3D IPv6 IoT consulting =3D- >>> _______________________________________________ >>> EAT mailing list >>> EAT@ietf.org >>> https://www.ietf.org/mailman/listinfo/eat >>>=20 >>=20 >>=20 >>=20 >> _______________________________________________ >> EAT mailing list >> EAT@ietf.org >> https://www.ietf.org/mailman/listinfo/eat >>=20 >=20 > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat >=20 >=20 > _______________________________________________ > EAT mailing list > EAT@ietf.org > https://www.ietf.org/mailman/listinfo/eat From nobody Thu Oct 25 06:47:24 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6230A120072 for ; Thu, 25 Oct 2018 06:47:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZP3ZVLo3nhFj for ; Thu, 25 Oct 2018 06:47:14 -0700 (PDT) Received: from mail-qk1-x72e.google.com (mail-qk1-x72e.google.com [IPv6:2607:f8b0:4864:20::72e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB962130E5A for ; Thu, 25 Oct 2018 06:47:14 -0700 (PDT) Received: by mail-qk1-x72e.google.com with SMTP id x11-v6so5693940qkl.7 for ; Thu, 25 Oct 2018 06:47:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version:content-transfer-encoding; bh=7QSh1INakwlKADKpzIr7S00HO9wGfoUdeylm3h99Lmg=; b=XB1VzuWM7kxw0SuhoK9jqB6h5q/cqItEDADG3/DEfm56cVjKDrSeVpeT+8rnyWUdbm m2EXYuGMKCR7xTPG2joismi2xCLL86qjRo4gpEc146siMBuxHTz3chCqAEL/NtKYzFjX Qvz3taTbuiLWk0nPDepZnlSD41r5ZJ8LRVHuk= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version :content-transfer-encoding; bh=7QSh1INakwlKADKpzIr7S00HO9wGfoUdeylm3h99Lmg=; b=M58ITL92mt2UzgwImYaqycPMNX2Y5tJB2GVwQx3jzMmEYNheLzcGOgRfQshf5EWqMt Wp8ZVF/A1mj/BTHw/GritRvY7D3oumhb9Y1e8zxXp8w/M2PamTZuvPLI2f2msdANtqEy KyTIjPwXFhii3HQtSo12zGscolXuTJgjh1K7UJl3PhF+OLh8cJcUepV58Ue8C2u7Q1/Z NzFwtnWispwBsrxoE3Qi8PlzyQdKMBNjzFK/ug9QtdGR4JUlVGAME6WijllKK3klSN1c i4yOfFSbfwiJ5H360ZdHOEEdNM0EN+K4Z2b+QEKrQutxcdntojsxPhhDhxmdephI/VmE Hhvw== X-Gm-Message-State: AGRZ1gIquFNe5f93Sgr1CoNvV2dZMfpmDfBmQoD3+NMC0LgproQJmn/o 00sRl2mWlKGVaSK/JncyRMva0Q== X-Google-Smtp-Source: AJdET5e9RdAbvZj+LUkhggqfjrS4+tvXb0aj0811tI7kq1lCvtgVL2lBMuFt0rVukv73uC7OUMevTQ== X-Received: by 2002:a37:b345:: with SMTP id c66-v6mr1507046qkf.47.1540475233606; Thu, 25 Oct 2018 06:47:13 -0700 (PDT) Received: from [192.168.2.27] (pool-108-28-91-61.washdc.fios.verizon.net. [108.28.91.61]) by smtp.googlemail.com with ESMTPSA id w53-v6sm6069079qtw.87.2018.10.25.06.47.10 (version=TLS1 cipher=AES128-SHA bits=128/128); Thu, 25 Oct 2018 06:47:12 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Thu, 25 Oct 2018 09:47:06 -0400 From: Carl Wallace To: Laurence Lundblade , "Smith, Ned" CC: "Eric Voit (evoit)" , Henk Birkholz , "eat@ietf.org" , Michael Richardson , "rats@ietf.org" , Jeremy O'Donoghue Message-ID: Thread-Topic: [Rats] [EAT] Attestation BoF charter updates? - Program of Work section References: <0199DB00-E76E-4664-BE02-E2AF4F4B6AEC@intel.com> <526BB5AC-60A8-4CD3-95F4-39F210E4D2FB@island-resort.com> In-Reply-To: <526BB5AC-60A8-4CD3-95F4-39F210E4D2FB@island-resort.com> Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? - Program of Work section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Oct 2018 13:47:17 -0000 On 10/25/18, 9:15 AM, "RATS on behalf of Laurence Lundblade" wrote: > > >So I am making some argument against ASN.1 and anything beyond JSON and >CBOR. The more formats there are the more work the relying parties will >have to do and of course some won=E2=80=99t implement all the formats and then >we=E2=80=99ll have less interop. [CW] At least where the claims are related to cryptographic keys, ASN.1 is likely unavoidable as it's part of the environment. Avoiding it is not likely to help interop. =20 From nobody Thu Oct 25 07:11:34 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC23F130E59 for ; Thu, 25 Oct 2018 07:11:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y77jNpdzEQUS for ; Thu, 25 Oct 2018 07:11:32 -0700 (PDT) Received: from p3plsmtpa08-09.prod.phx3.secureserver.net (p3plsmtpa08-09.prod.phx3.secureserver.net [173.201.193.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19032128A6E for ; Thu, 25 Oct 2018 07:11:32 -0700 (PDT) Received: from 2405-9800-ba10.44.pool1.tls1b-bcr02.myaisfibre.com ([184.22.84.59]) by :SMTPAUTH: with ESMTPSA id FgMAgrVBosYcLFgMCgpFO2; Thu, 25 Oct 2018 07:11:31 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Laurence Lundblade In-Reply-To: Date: Thu, 25 Oct 2018 21:11:26 +0700 Cc: "Smith, Ned" , "Eric Voit (evoit)" , Jeremy O'Donoghue , "eat@ietf.org" , Michael Richardson , "rats@ietf.org" , Henk Birkholz Content-Transfer-Encoding: quoted-printable Message-Id: <662EFF28-BC29-4C1F-BB00-086D449D6F0A@island-resort.com> References: <0199DB00-E76E-4664-BE02-E2AF4F4B6AEC@intel.com> <526BB5AC-60A8-4CD3-95F4-39F210E4D2FB@island-resort.com> To: Carl Wallace X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfBkeRlfSsjm8EfiEIOKctP77cBCDxk3Gy4ZaFM7NFoZQSlBX7eUKccg7QPErWdFWLKLX1X3g44rWexwET4y8ZO6mJ5MzdpSZ1yUJAVNbpo6A95FCszXF bVDpy8JvOVXVNvXAeo0sM3OtGocR+DA6MglweyjhFTeG7UZtrKyRXwkqKTLbiHD3B+RwD8euLNV7nffOqxw56LcNDJyePtkq90LSH7obVvx4nZa9ml9PMgW3 787HvZAag+FFUEbm00USnUSmglgOoV8OP1Akg6PoIiVDhDXIAXPy/UquGHdU+6GIz996J2tpZfhb+2CWoQHI8Irt9Lm/fXrw730DNzVO6Nv/q3cGImFI18Hf CM3eK+b5Kppofh6d4WWfKjogaJUqpwHRnzy546mLWHccEgte+6PKlQBUXr2IKiZPINklO/pMf8KPLMrP7i5MAzgnaEVkMQ== Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? - Program of Work section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Oct 2018 14:11:34 -0000 > On Oct 25, 2018, at 8:47 PM, Carl Wallace = wrote: >=20 >=20 > On 10/25/18, 9:15 AM, "RATS on behalf of Laurence Lundblade" > wrote: >=20 >> >>=20 >> So I am making some argument against ASN.1 and anything beyond JSON = and >> CBOR. The more formats there are the more work the relying parties = will >> have to do and of course some won=E2=80=99t implement all the formats = and then >> we=E2=80=99ll have less interop. >=20 > [CW] At least where the claims are related to cryptographic keys, = ASN.1 is > likely unavoidable as it's part of the environment. Avoiding it is not > likely to help interop. For an attestation in the vein of EAT you have a series of claims that = are signed. The sane thing to do is pick one format and apply it all the = way through. The claims are in JOSE format and you sign with JWT. The = claims are in CBOR and you sign with COSE. The claims are ASN.1 and you = sign in CMS.=20 It would be possible to have something like a PKCS10 CSR stuffed into a = CBOR byte string in a CBOR/COSE format attestation, but the overall = format of the attestation is CBOR/COSE. Maybe this is what you are = after?=20 Agreed that we might actually have to do this since there is no CBOR = format CSR (yet).=20 I can also see having to use X.509 for establishing trust in signing = keys since there is no CBOR format for certificates (yet). Jim Schaad = was working on extensions to COSE for this. Any other examples?=20 I would hope we can avoid CMS and creating ASN.1 syntax for every claim = we define. LL From nobody Thu Oct 25 07:36:15 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6D43130E9D; Thu, 25 Oct 2018 07:36:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dsvAW3otz6zH; Thu, 25 Oct 2018 07:35:57 -0700 (PDT) Received: from EUR01-DB5-obe.outbound.protection.outlook.com (mail-db5eur01on0077.outbound.protection.outlook.com [104.47.2.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B7AB7128CF3; Thu, 25 Oct 2018 07:35:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EEb/14nOqxqd4J0XLoZR2LAUin9hezoKYi/7QkFoz34=; b=NbpgaOg+tIhlVL5em1hN1TG+tmaiiMQh7dqhCwvCuMtE+N47nc4lKp+/49xF2O/05FpsVOXsU5vKpWctqY6jjKA3xx7NaPxnOIzjUAtPsdoNY0IPdckTSUCtec1mP0JVRHOXS8jiAM4HRKZNSD0wtC+AGsejz2ETofNVqJTtsCs= Received: from AM0PR08MB3265.eurprd08.prod.outlook.com (52.134.94.22) by AM0PR08MB3265.eurprd08.prod.outlook.com (52.134.94.22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1273.19; Thu, 25 Oct 2018 14:35:54 +0000 Received: from AM0PR08MB3265.eurprd08.prod.outlook.com ([fe80::a883:b5bd:c8a9:f8f5]) by AM0PR08MB3265.eurprd08.prod.outlook.com ([fe80::a883:b5bd:c8a9:f8f5%5]) with mapi id 15.20.1273.021; Thu, 25 Oct 2018 14:35:54 +0000 From: Marcus Streets To: Carl Wallace , Laurence Lundblade , "Smith, Ned" CC: "Eric Voit (evoit)" , Jeremy O'Donoghue , "eat@ietf.org" , Michael Richardson , "rats@ietf.org" , Henk Birkholz Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? - Program of Work section Thread-Index: AQHUa8YfPGfZHuzPKUqu9mx1YxA8eaUv8e6AgAAI9ACAAAmd4A== Date: Thu, 25 Oct 2018 14:35:54 +0000 Message-ID: References: <0199DB00-E76E-4664-BE02-E2AF4F4B6AEC@intel.com> <526BB5AC-60A8-4CD3-95F4-39F210E4D2FB@island-resort.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Marcus.Streets@arm.com; x-originating-ip: [217.140.106.55] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM0PR08MB3265; 6:c1i4qRQB+3qh8XKT1Eqt5szJ6HEFdfYYHVotj3Udt+tNMENqnaTnZ/y6PgUnlKdd8vqlfjC/4IcKhsClCosTpAq36LbCbCLGK8k1S/ARnHkY4jxPPjFu7o7sE8aHyHZeF4HhBt0WG1HvMDw1RI8oZTvU327LKh+YbfHdtu5/lXUqzGy+11eUWzE86emVJZFDz+PfJryarauRCsN40UHLRAdOD8sDuidZTnPrEd4x6rVl3AQzMuWcfUTsBOZIqa4zAc1OV9smzEscbvPXNs1HdTvR0vlWAwqDiVjIp9/oN7t5agTGJBQFCnOWM2f3yoA1ta4pKCAwwkx/5lPd8Au3X2L7LzK8Ydi8bHe2Lx75jdRPd71bWxJRLRSkHcly4JICX24ZLMNsiReXo2FtxapLRMy40xEWJXlhvmrcVzv4MIENxFsdBB3TDKKnzki0qrfeF6YP4kXS7vMea9QeDkcknQ==; 5:triDjqtzduDW0v9i6VzKHyvBUZ78HoR3Iwl8xPtVaHNKqEuElKk9tdT7W4DtSdXp8STT4EudREAwBr2mQNxEBDV8QXleaMwP62xHoP5AZugkP1bao7y2pxGIqsXNaS0DW1fLwrWQMq/2wqKLNX6VXJP/lqrkA6SyZu2YxN05+ZE=; 7:id1Cv9DnHhJlM+DZQCNIBnW4+aWYefuK3dkAHqJA4LSMuhSNthnseyp5ZWHSmbeFvIdKGPeNHRJ57s+L/es9ukzNG3qj0vuiCCtCRtPCXsmWI4N/u0h9Un9Pv/IYYlIVY26fvlzj096q0j50yK/2Rg== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 40ad1108-ea27-49a5-2e8e-08d63a872b87 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:AM0PR08MB3265; x-ms-traffictypediagnostic: AM0PR08MB3265: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(228905959029699)(95692535739014); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(10201501046)(93006095)(93001095)(3002001)(3231355)(944501410)(52105095)(6055026)(148016)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123564045)(20161123560045)(201708071742011)(7699051)(76991095); SRVR:AM0PR08MB3265; BCL:0; PCL:0; RULEID:; SRVR:AM0PR08MB3265; x-forefront-prvs: 083691450C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(136003)(396003)(39860400002)(366004)(346002)(376002)(40434004)(13464003)(199004)(189003)(2900100001)(14454004)(7696005)(8936002)(99286004)(6436002)(105586002)(6246003)(106356001)(229853002)(53546011)(6506007)(5024004)(14444005)(478600001)(6116002)(97736004)(81166006)(3846002)(102836004)(81156014)(66066001)(76176011)(55016002)(7736002)(5250100002)(316002)(9686003)(110136005)(2906002)(54906003)(966005)(74316002)(476003)(4326008)(15650500001)(26005)(5660300001)(256004)(33656002)(305945005)(6306002)(25786009)(8676002)(72206003)(186003)(86362001)(68736007)(71200400001)(71190400001)(53936002)(446003)(486006)(11346002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM0PR08MB3265; H:AM0PR08MB3265.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: PJu0HorA6ann8ckQDFDp1O1oCkrwwSfA8+XiV2deV+X/xz0mz0u2BQ/1muXukL/Adsqf7RLKren4Zi6fDBKRM4GjyrIjIWab+Wd327YHCXbdRY8LtgB4yYix2WNr4XOcszi0e/0M9Nt6SpRP8Fwmwgsoxioc/qbE4Nz90FW7b7SwbRwEPf/Tp/73/t7b5/sk5dOYMXIiORWMOI2s8qpjbvrVvXLyaxHZaJ2lFse+Er9d/QmC9ef0F0W1AmzxgnNyBWW/tdhTVJsmOvAiWqvpy1ObZRT1u8jkVI2hQfkBWpLLWUE5Eq5qoveMikeEgDXx3fHSEG+5K0kJ7hkrh0RbRFWu4w1kw3AcouM1mwM6AKc= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 40ad1108-ea27-49a5-2e8e-08d63a872b87 X-MS-Exchange-CrossTenant-originalarrivaltime: 25 Oct 2018 14:35:54.4028 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR08MB3265 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? - Program of Work section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Oct 2018 14:36:07 -0000 VGhhdCBpcyBhbiBhcmd1bWVudCBmb3IgbmV2ZXIgZml4aW5nIGFueXRoaW5nLg0KDQpXZSBjYW4g ZGVmaW5lIGEgQ0JPUiBmb3JtYXQgZm9yIGNlcnRpZmljYXRlcyBhbmQgcmVjb21tZW5kIHBlb3Bs ZSB1c2UgaXQuDQpJZiB0aGF0IGNyZWF0ZXMgYSBuZWVkLCBzZXJ2aWNlIHByb3ZpZGVycyB3aWxs IG9mZmVyIHRvIHNlbGwgY2VydGlmaWNhdGVzIGluIHRoZSBjb3JyZWN0IGZvcm1hdC4NCg0KDQoN Ci0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBFQVQgPGVhdC1ib3VuY2VzQGlldGYu b3JnPiBPbiBCZWhhbGYgT2YgQ2FybCBXYWxsYWNlDQpTZW50OiBUaHVyc2RheSwgT2N0b2JlciAy NSwgMjAxOCAyOjQ3IFBNDQpUbzogTGF1cmVuY2UgTHVuZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29y dC5jb20+OyBTbWl0aCwgTmVkIDxuZWQuc21pdGhAaW50ZWwuY29tPg0KQ2M6IEVyaWMgVm9pdCAo ZXZvaXQpIDxldm9pdEBjaXNjby5jb20+OyBKZXJlbXkgTydEb25vZ2h1ZSA8am9kb25vZ2hAcXRp LnF1YWxjb21tLmNvbT47IGVhdEBpZXRmLm9yZzsgTWljaGFlbCBSaWNoYXJkc29uIDxtY3IraWV0 ZkBzYW5kZWxtYW4uY2E+OyByYXRzQGlldGYub3JnOyBIZW5rIEJpcmtob2x6IDxoZW5rLmJpcmto b2x6QHNpdC5mcmF1bmhvZmVyLmRlPg0KU3ViamVjdDogUmU6IFtFQVRdIFtSYXRzXSBBdHRlc3Rh dGlvbiBCb0YgY2hhcnRlciB1cGRhdGVzPyAtIFByb2dyYW0gb2YgV29yayBzZWN0aW9uDQoNCg0K T24gMTAvMjUvMTgsIDk6MTUgQU0sICJSQVRTIG9uIGJlaGFsZiBvZiBMYXVyZW5jZSBMdW5kYmxh ZGUiDQo8cmF0cy1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBsZ2xAaXNsYW5kLXJlc29y dC5jb20+IHdyb3RlOg0KDQo+PHNuaXA+DQo+DQo+U28gSSBhbSBtYWtpbmcgc29tZSBhcmd1bWVu dCBhZ2FpbnN0IEFTTi4xIGFuZCBhbnl0aGluZyBiZXlvbmQgSlNPTiBhbmQNCj5DQk9SLiAgVGhl IG1vcmUgZm9ybWF0cyB0aGVyZSBhcmUgdGhlIG1vcmUgd29yayB0aGUgcmVseWluZyBwYXJ0aWVz DQo+d2lsbCBoYXZlIHRvIGRvIGFuZCBvZiBjb3Vyc2Ugc29tZSB3b27igJl0IGltcGxlbWVudCBh bGwgdGhlIGZvcm1hdHMgYW5kDQo+dGhlbiB3ZeKAmWxsIGhhdmUgbGVzcyBpbnRlcm9wLg0KDQpb Q1ddIEF0IGxlYXN0IHdoZXJlIHRoZSBjbGFpbXMgYXJlIHJlbGF0ZWQgdG8gY3J5cHRvZ3JhcGhp YyBrZXlzLCBBU04uMSBpcyBsaWtlbHkgdW5hdm9pZGFibGUgYXMgaXQncyBwYXJ0IG9mIHRoZSBl bnZpcm9ubWVudC4gQXZvaWRpbmcgaXQgaXMgbm90IGxpa2VseSB0byBoZWxwIGludGVyb3AuDQoN Cg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkVBVCBt YWlsaW5nIGxpc3QNCkVBVEBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9lYXQNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWls IGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJp dmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5v dGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRl bnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3Jl IG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg== From nobody Thu Oct 25 07:43:49 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C0FD4130E67 for ; Thu, 25 Oct 2018 07:43:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8X3kYkoeBSh3 for ; Thu, 25 Oct 2018 07:43:39 -0700 (PDT) Received: from mail-qk1-x72c.google.com (mail-qk1-x72c.google.com [IPv6:2607:f8b0:4864:20::72c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 250C5130E66 for ; Thu, 25 Oct 2018 07:43:38 -0700 (PDT) Received: by mail-qk1-x72c.google.com with SMTP id q184-v6so5846792qkd.3 for ; Thu, 25 Oct 2018 07:43:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version:content-transfer-encoding; bh=fHvbesJK9fkxR8lEwdidWbI5dn8DyrWjc4MoomrInbc=; b=P6wp8/ukH6MGqCF8Z56+vHgmIzGVbDwjqXqVlQ6o1ekKVHmvIUDutuVfRGxwQtpYpI 7jXXdBEDv3rNasb0dMtDr59HkAro25KkrOVsfBxW/pagMUfTU6ffBx3NtusdwdmSppnn hSDlYbktwDiAx5tbK2oauqhD49TqLmaHKDVYc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version :content-transfer-encoding; bh=fHvbesJK9fkxR8lEwdidWbI5dn8DyrWjc4MoomrInbc=; b=IRmfYHJasouqqj2bE3bXnWtwc+9uTxXyfBtPJk1mOuXjYm5ILFzMzVuApS5w+hZN/W Rpb+zjY53uf5YK6QacGVw42z0ynkk5JGdhAAIoho7dovBjOSWUBDdcOenE/f+kPyDHnJ FUUVFU5jsKvkr2MOFnKQGDUnJWVAyvEWooLhHKsJqF3OX6xttnC9Y0eRTkNo7UJXG8zx UHlYWPvVuKr2Y47iyJquwLRd92xmZ/FOOb4aZIV7ozMSvBUlTvx+G+oljhkK5d9hwcnl D+W6Dp3m6ioA+AjwhfK9Vt7oN0VXwum+pSYsNED5aG/uw0S1hC4VULv1BGm5pgsqG4yS u6wA== X-Gm-Message-State: AGRZ1gJz0HMMkh2hu1nJE+SrOITvfuSx1jcVV4hoYzhsFydwbpihrfM1 HPWajx2Xi/WyKRIFP9LBJHAXOw== X-Google-Smtp-Source: AJdET5eAvR3W5cMV7fd9ynHiGOk/wViHvofs6McJWP6d9YfdRfSISWfBLw/UoxcfYAUTMLsJ8Xmn8g== X-Received: by 2002:a37:1fc8:: with SMTP id n69mr1718519qkh.175.1540478616750; Thu, 25 Oct 2018 07:43:36 -0700 (PDT) Received: from [192.168.2.27] (pool-108-28-91-61.washdc.fios.verizon.net. [108.28.91.61]) by smtp.googlemail.com with ESMTPSA id s21-v6sm6441640qth.11.2018.10.25.07.43.32 (version=TLS1 cipher=AES128-SHA bits=128/128); Thu, 25 Oct 2018 07:43:36 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Thu, 25 Oct 2018 10:43:27 -0400 From: Carl Wallace To: Marcus Streets , Laurence Lundblade , "Smith, Ned" CC: "Eric Voit (evoit)" , Jeremy O'Donoghue , "eat@ietf.org" , Michael Richardson , "rats@ietf.org" , Henk Birkholz Message-ID: Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? - Program of Work section References: <0199DB00-E76E-4664-BE02-E2AF4F4B6AEC@intel.com> <526BB5AC-60A8-4CD3-95F4-39F210E4D2FB@island-resort.com> In-Reply-To: Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? - Program of Work section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Oct 2018 14:43:42 -0000 The point is not an alternative certificate format, but to define the binding between of an attestation with a certificate request. On 10/25/18, 10:35 AM, "Marcus Streets" wrote: >That is an argument for never fixing anything. > >We can define a CBOR format for certificates and recommend people use it. >If that creates a need, service providers will offer to sell certificates >in the correct format. > > > >-----Original Message----- >From: EAT On Behalf Of Carl Wallace >Sent: Thursday, October 25, 2018 2:47 PM >To: Laurence Lundblade ; Smith, Ned > >Cc: Eric Voit (evoit) ; Jeremy O'Donoghue >; eat@ietf.org; Michael Richardson >; rats@ietf.org; Henk Birkholz > >Subject: Re: [EAT] [Rats] Attestation BoF charter updates? - Program of >Work section > > >On 10/25/18, 9:15 AM, "RATS on behalf of Laurence Lundblade" > wrote: > >> >> >>So I am making some argument against ASN.1 and anything beyond JSON and >>CBOR. The more formats there are the more work the relying parties >>will have to do and of course some won=E2=80=99t implement all the formats and >>then we=E2=80=99ll have less interop. > >[CW] At least where the claims are related to cryptographic keys, ASN.1 >is likely unavoidable as it's part of the environment. Avoiding it is not >likely to help interop. > > >_______________________________________________ >EAT mailing list >EAT@ietf.org >https://www.ietf.org/mailman/listinfo/eat >IMPORTANT NOTICE: The contents of this email and any attachments are >confidential and may also be privileged. If you are not the intended >recipient, please notify the sender immediately and do not disclose the >contents to any other person, use it for any purpose, or store or copy >the information in any medium. Thank you. From nobody Thu Oct 25 08:06:48 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 621E3130E6B for ; Thu, 25 Oct 2018 08:06:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=redhoundsoftware.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uzbcOR_Kmuz2 for ; Thu, 25 Oct 2018 08:06:45 -0700 (PDT) Received: from mail-qt1-x82e.google.com (mail-qt1-x82e.google.com [IPv6:2607:f8b0:4864:20::82e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BE219127133 for ; Thu, 25 Oct 2018 08:06:44 -0700 (PDT) Received: by mail-qt1-x82e.google.com with SMTP id l41-v6so10226626qtl.8 for ; Thu, 25 Oct 2018 08:06:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhoundsoftware.com; s=google; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :references:in-reply-to:mime-version:content-transfer-encoding; bh=119jJuIvtLEeN6N1h3NpaRls5guOJXN8BizxuHS9JBk=; b=RuOljfFV9kGcA5uXARH30jYOLy/bJNU1V0ZYayJE5fUZ2gSkMpzBYYEM2zpFybvXeM VrIuTjSRsv5m9Dr2ZcaEPULlkPcYcmjX+h1IGi0kw4+gUMgwBQPYIJ06T/NHTunA7K1q WqL5Uta6yAuZ+9JYRY3a8IAf2w6Dga+CSd9TE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:user-agent:date:subject:from:to:cc:message-id :thread-topic:references:in-reply-to:mime-version :content-transfer-encoding; bh=119jJuIvtLEeN6N1h3NpaRls5guOJXN8BizxuHS9JBk=; b=osb3nyrZTtzr3X2lGRTlVQMfYXsi8CPkVRYnzVSPsB/lI/8JfgJ0Me4JSjS/0v7jUi eXi3SJES4JYuzTQsPOUa3ktG+pBO/dOLW+HlYQXBLJmezftvNk2ARGnX7h+fZUFXE3be AUPUQgHzE2H/C9d5eJ36+nBcndiroRfuLk0AFyxc/UJTkAfItP8CCTjoshf5QhynhFSe qoyiIqQXWvFjorlfJvSAt1Xxe964h46g8crTfo5UW3mcXZcYFYB5ny9P1OlHYFkr9YJS WLnEi+DPkFDYt+vzHbYbZwkRQbd01cBtYgZbRSiHJ/bIamn3vMIXj9yVydbxKIcZafFD Ok4A== X-Gm-Message-State: AGRZ1gLlLYYjdZ0gNHYsPlH4Aovfq3R6lz95Eqx++7bWKntYxVFvXvdn MtPgVhfPIxc+6jjaeAkVBLB86g== X-Google-Smtp-Source: AJdET5c8iCmecjgX+CvgjdWuEV52Z0eVxA5BppcWf3tNnYhmpJlnmE/5XEbD+4cxBzu+IoIbiJLE4g== X-Received: by 2002:a0c:9311:: with SMTP id d17mr1962188qvd.54.1540480003701; Thu, 25 Oct 2018 08:06:43 -0700 (PDT) Received: from [192.168.2.27] (pool-108-28-91-61.washdc.fios.verizon.net. [108.28.91.61]) by smtp.googlemail.com with ESMTPSA id h49-v6sm6349731qth.32.2018.10.25.08.06.37 (version=TLS1 cipher=AES128-SHA bits=128/128); Thu, 25 Oct 2018 08:06:42 -0700 (PDT) User-Agent: Microsoft-MacOutlook/14.7.6.170621 Date: Thu, 25 Oct 2018 11:06:31 -0400 From: Carl Wallace To: Laurence Lundblade CC: "Smith, Ned" , "Eric Voit (evoit)" , Jeremy O'Donoghue , "eat@ietf.org" , Michael Richardson , "rats@ietf.org" , Henk Birkholz Message-ID: Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? - Program of Work section References: <0199DB00-E76E-4664-BE02-E2AF4F4B6AEC@intel.com> <526BB5AC-60A8-4CD3-95F4-39F210E4D2FB@island-resort.com> <662EFF28-BC29-4C1F-BB00-086D449D6F0A@island-resort.com> In-Reply-To: <662EFF28-BC29-4C1F-BB00-086D449D6F0A@island-resort.com> Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? - Program of Work section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Oct 2018 15:06:47 -0000 On 10/25/18, 10:11 AM, "Laurence Lundblade" wrote: > >> On Oct 25, 2018, at 8:47 PM, Carl Wallace >>wrote: >>=20 >>=20 >> On 10/25/18, 9:15 AM, "RATS on behalf of Laurence Lundblade" >> wrote: >>=20 >>> >>>=20 >>> So I am making some argument against ASN.1 and anything beyond JSON and >>> CBOR. The more formats there are the more work the relying parties >>>will >>> have to do and of course some won=E2=80=99t implement all the formats and the= n >>> we=E2=80=99ll have less interop. >>=20 >> [CW] At least where the claims are related to cryptographic keys, ASN.1 >>is >> likely unavoidable as it's part of the environment. Avoiding it is not >> likely to help interop. > > >For an attestation in the vein of EAT you have a series of claims that >are signed. The sane thing to do is pick one format and apply it all the >way through. The claims are in JOSE format and you sign with JWT. The >claims are in CBOR and you sign with COSE. The claims are ASN.1 and you >sign in CMS. [CW] It may shake out such that the claims I care about could be ASN.1 from top to bottom but I doubt it. Mixing formats doesn't seem like a problem. Base64 encodings of DER encoded structures are quite common in XML and JSON, for example. Including COSE or JOSE structure as an attribute in an ASN.1 structure seems fine too. >=20 > >It would be possible to have something like a PKCS10 CSR stuffed into a >CBOR byte string in a CBOR/COSE format attestation, but the overall >format of the attestation is CBOR/COSE. Maybe this is what you are after? [CW] Not exactly. The CSR would contain a mix of data that is originated by/protected by a hardware component and data that is external (e.g., challenge password). It's not clear to me orchestrating including the P10 in the attestation is the right path. Including a signed claim about key provenance in a standard cert request seems sufficient and easy enough. > >Agreed that we might actually have to do this since there is no CBOR >format CSR (yet). [CW] Not sure why that would be required. There was earlier mention of not boiling the ocean, trying to recast everything as CBOR doesn't seem wise. >=20 > >I can also see having to use X.509 for establishing trust in signing keys >since there is no CBOR format for certificates (yet). Jim Schaad was >working on extensions to COSE for this. > >Any other examples? [CW] I shared a pile of examples via GitHub some weeks back - https://github.com/Purebred/SampleAttestations. I will add Pixel 3 artifacts soon. I am not suggesting these as a basis for standardization, but as illustrative of how attestations are used in certificate requests in some environments. At present, w.r.t. demonstrating key provenance, we are using: - Android attestations (X.509 certificates that chain to a specific root represented as a certs-only SignedData), - Yubikey attestations (X.509 certificates that chain to a specific rootrepresented as a certs-only SignedData) and - Surface Pro TPM attestations (CMC requests that wrap a mix of TCG and Microsoft structures). [CW] Each of these is attached to a SCEP request as an attribute. The attestations are verified and the public key from the attestation is compared to the public key in the SCEP request. We have another variant that does use CBOR for some claims. In that case the Google attestation certificate is included in the CBOR similar to your description above but the CBOR layer isn't demonstrating key provenance in this case. SCEP, CMC and EST all use similar attributes. It is not unlikely that a single spec defining one or more attributes to convey attestations could be shared by all three.=20 >=20 > >I would hope we can avoid CMS and creating ASN.1 syntax for every claim >we define. [CW] I can't imagine this would be necessary. > >LL > > From nobody Thu Oct 25 17:22:25 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6C01130E13; Thu, 25 Oct 2018 17:22:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AEXxlgfJ35uz; Thu, 25 Oct 2018 17:22:10 -0700 (PDT) Received: from mga05.intel.com (mga05.intel.com [192.55.52.43]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 320AD130E1A; Thu, 25 Oct 2018 17:22:10 -0700 (PDT) X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from orsmga003.jf.intel.com ([10.7.209.27]) by fmsmga105.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 25 Oct 2018 17:22:09 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.54,426,1534834800"; d="scan'208";a="95098995" Received: from orsmsx110.amr.corp.intel.com ([10.22.240.8]) by orsmga003.jf.intel.com with ESMTP; 25 Oct 2018 17:22:09 -0700 Received: from orsmsx109.amr.corp.intel.com ([169.254.11.251]) by ORSMSX110.amr.corp.intel.com ([169.254.10.20]) with mapi id 14.03.0319.002; Thu, 25 Oct 2018 17:22:08 -0700 From: "Smith, Ned" To: Carl Wallace , Laurence Lundblade CC: "Eric Voit (evoit)" , Jeremy O'Donoghue , "eat@ietf.org" , "Michael Richardson" , "rats@ietf.org" , "Henk Birkholz" Thread-Topic: [EAT] [Rats] Attestation BoF charter updates? - Program of Work section Thread-Index: AQHUbGypHLAw4V05zku/ro+eJdOFdKUwhR6AgAAkEwA= Date: Fri, 26 Oct 2018 00:22:08 +0000 Message-ID: References: <0199DB00-E76E-4664-BE02-E2AF4F4B6AEC@intel.com> <526BB5AC-60A8-4CD3-95F4-39F210E4D2FB@island-resort.com> <662EFF28-BC29-4C1F-BB00-086D449D6F0A@island-resort.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.10.3.181015 x-originating-ip: [10.255.68.37] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? - Program of Work section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2018 00:22:19 -0000 SSBleHBlY3QgYSBjb21tb24gYXR0ZXN0YXRpb24gc2NlbmFyaW8gY2FuIGJlIGNoYXJhY3Rlcml6 ZWQgYXMgYW4gWC41MDkgY2VydGlmaWNhdGUgY2hhaW4gaGF2aW5nIGFuIEVFIGNlcnRpZmljYXRl IHdob3NlIHByaXZhdGUga2V5IG93bmVyIHNpZ25zIGEgZG9jdW1lbnQgY29udGFpbmluZyBjbGFp bXMuIFRoZSBkb2N1bWVudCBjb3VsZCBiZSBleHByZXNzZWQgaW4gYW55IG9mIHRoZSBmb3JtYXRz IGJlaW5nIGRpc2N1c3NlZCBoZXJlLiBVc2UgY2FzZSBjb250ZXh0IG1heSBwbGF5IGEgcm9sZSBp biBkZXRlcm1pbmluZyB3aGljaCBkb2N1bWVudCBmb3JtYXQgaXMgYXBwcm9wcmlhdGUsIGFuZCBJ IGRvbid0IGJlbGlldmUgaXQgaXMgbmVjZXNzYXJpbHkgdGhlIG9iamVjdGl2ZSBvZiB0aGUgY2hh cnRlciB0byBwcm9tb3RlIGEgcGhpbG9zb3BoaWNhbCBiaWFzIHRvd2FyZCBhbnkgcGFydGljdWxh ciBmb3JtYXQsIHRob3VnaCBpdCBkb2VzIG1ha2Ugc2Vuc2UgZm9yIHRoZSBXRyBhbmQgY2hhcnRl ciB0byBzZXQgc29tZSBwcmlvcml0aWVzIC0gdHJ5aW5nIG5vdCB0byBib2lsIHRoZSBvY2Vhbi4g DQoNClRoZXJlIHNlZW1zIHRvIGJlIHVzZSBjYXNlIGNvbnRleHQgKGF0IGxlYXN0IGJ5IHRoZSBw YXJ0aWNpcGFudHMgaW4gdGhlIEJPRikgZm9yIDMgbWF5YmUgNCBmb3JtYXRzIHdoZXJlIEFTTi4x IGFwcGVhcnMgdG8gYmUgdGhlIG9uZSBvbiB0aGUgZWRnZSAoQ0JPUiwgSlNPTiwgWUFORyBiZWlu ZyB0aGUgb3RoZXIgbGVzcyBkZWJhdGVkIGZvcm1hdHMpLiBBU04uMSBpc24ndCBpdHNlbGYgYSBj cnlwdG9ncmFwaGljIGRvY3VtZW50IGZvcm1hdCAoSU1PKTsgZm9yIHRoYXQgd2UgbmVlZCB0byB0 dXJuIHRvIHNvbWV0aGluZyBsaWtlIENNUyBvciBYLjUwOS4gDQoNCkEgc2Vjb25kLCBsaWtlbHkg dG8gYmUgcG9wdWxhciBhdHRlc3RhdGlvbiBzY2VuYXJpbywgY2FuIGJlIGNoYXJhY3Rlcml6ZWQg YXMgYW4gWC41MDkgY2VydGlmaWNhdGUgY2hhaW4gaGF2aW5nIGFuZCBFRSBjZXJ0aWZpY2F0ZSBj b250YWluaW5nIGNsYWltcyBpbiBhbiBleHRlbnNpb24gKG9yIGxldmVyYWdlcyBzb21lIG90aGVy IGV4dGVuc2liaWxpdHkgY2FwYWJpbGl0eSBkZXNjcmliZWQgYnkgUkZDNTI4MCkuIEluIHRoaXMg c2NlbmFyaW8sIGl0IHNlZW1zIHJlYXNvbmFibGUgZm9yIHRoZSBXRyB0byBoYXZlIGFuIEFTTi4x IGRlc2NyaXB0aW9uIG9mIHRoZSBub3JtYXRpdmUgc2V0IG9mIGNsYWltcyB0byBhdm9pZCBvdGhl ciBvcmdhbml6YXRpb25zIGNvbWluZyB1cCB3aXRoIHNsaWdodCAoYnV0IHNlbWFudGljYWxseSBz aW1pbGFyKSB2YXJpYW50cy4gDQoNCklmIHRoZXJlIGlzIGEgdXNlIGNhc2UgZm9yIENNUywgUkZD NTc1NSAoYXR0cmlidXRlIGNlcnRzKSBvciBzb21ldGhpbmcgZWxzZSB0aGF0IGRlc2NyaWJlcyBh IGNyeXB0b2dyYXBoaWMgZG9jdW1lbnQgZXhwcmVzc2VkIGluIEFTTi4xLCB0aGVuIGl0IGlzIGEg c21hbGwgLyBwb3NzaWJseSBpbmNvbnNlcXVlbnRpYWwgc3RlcCByZXF1aXJlZCB0byBpbmNsdWRl IHRoZSBBU04uMSBmb3JtYXR0ZWQgY2xhaW1zIGludG8gb25lIG9mIHRoZXNlIG90aGVyIGRvY3Vt ZW50IHN0cnVjdHVyZXMuIA0KDQpDb25jZXB0dWFsbHksIHRoZSAnZG9jdW1lbnQnIGNvbnNpc3Rz IG9mIGEgY2xhaW1zIHBhcnQgYW5kIGEgc2lnbmF0dXJlIHBhcnQuIFRoZSBjbGFpbSBwYXJ0IGNv dWxkIGJlIGV4cHJlc3NlZCBpbiBvbmUgZm9ybWF0IChlLmcuIENCT1IpIHdoaWxlIHRoZSBzaWdu YXR1cmUgcGFydCBleHByZXNzZWQgaW4gYSBkaWZmZXJlbnQgZm9ybWF0IChlLmcuIEpXVCkuIEdp dmVuIHRoYXQgcGVyc3BlY3RpdmUgd2UgY2FuIG1ha2UgbGlzdHMgb2YgZm9ybWF0IHR5cGVzIGZv ciBjbGFpbXMgYW5kIGFub3RoZXIgZm9yIHNpZ25lZCBkb2N1bWVudHMuDQpFLmcuDQpDbGFpbXMg Zm9ybWF0IHBvc3NpYmlsaXRpZXM6DQoJLSBDQk9SLCBKU09OLCBZQU5HLCBBU04uMQ0KDQpDcnlw dG9ncmFwaGljIGRvY3VtZW50IGZvcm1hdCBwb3NzaWJpbGl0aWVzOg0KCS0gQ1dULCBKV1QsIFlB TkcoPyksIENNUywgWC41MDkgQ2VydCAoUkZDNTI4MCksIEF0dHIgQ2VydCAoUkZDNTc1NSkNCg0K VGhlIGNoYXJ0ZXIgLyBXRyBjb3VsZCBzZXQgZGlmZmVyZW50IHByaW9yaXRpZXMgZm9yIGVhY2gg bGlzdC4gSXQgY291bGQgYWxzbyBzZXQgcHJpb3JpdHkgZm9yLCBhbmQvb3IgbGltaXQsIGNyb3Nz LWZvcm1hdCBlbnZlbG9waW5nIChlLmcuIEpTT04gQ2xhaW0gaW5zaWRlIGEgWUFORyBjcnlwdG9n cmFwaGljIGRvY3VtZW50IGV0YykuDQoNCkEgdGhpcmQsIHBvc3NpYmx5IGxpa2VseSBhdHRlc3Rh dGlvbiBzY2VuYXJpbyBtaWdodCBkbyBhd2F5IHdpdGggdGhlIFguNTA5IGNlcnRpZmljYXRlIGNo YWluIGZhdm9yaW5nIGZvciBleGFtcGxlIGEgc2lnbmVkLWRvY3VtZW50LW9ubHkgbW9kZWwgb3Ig cG9zc2libHkgYW4gYWx0ZXJuYXRpdmUgY2VydGlmaWNhdGUgY2hhaW4gdXNpbmcgQ1dUPyBJIGRv bid0IGtub3cgaWYgYW55b25lIGlzIHN0cm9uZ2x5IGFkdm9jYXRpbmcgdXNlIGNhc2VzIGluIHRo aXMgdGhpcmQgc2NlbmFyaW8uIElmIG5vdCwgaXQgbWFrZXMgc2Vuc2UgdG8gbGVhdmUgaXQgb3V0 IG9mIHRoZSBjaGFydGVyIGZvciBub3cuIA0KDQotTmVkDQoNCu+7v09uIDEwLzI1LzE4LCA4OjA2 IEFNLCAiQ2FybCBXYWxsYWNlIiA8Y2FybEByZWRob3VuZHNvZnR3YXJlLmNvbT4gd3JvdGU6DQoN CiAgICANCiAgICANCiAgICBPbiAxMC8yNS8xOCwgMTA6MTEgQU0sICJMYXVyZW5jZSBMdW5kYmxh ZGUiIDxsZ2xAaXNsYW5kLXJlc29ydC5jb20+IHdyb3RlOg0KICAgIA0KICAgID4NCiAgICA+PiBP biBPY3QgMjUsIDIwMTgsIGF0IDg6NDcgUE0sIENhcmwgV2FsbGFjZSA8Y2FybEByZWRob3VuZHNv ZnR3YXJlLmNvbT4NCiAgICA+Pndyb3RlOg0KICAgID4+IA0KICAgID4+IA0KICAgID4+IE9uIDEw LzI1LzE4LCA5OjE1IEFNLCAiUkFUUyBvbiBiZWhhbGYgb2YgTGF1cmVuY2UgTHVuZGJsYWRlIg0K ICAgID4+IDxyYXRzLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGxnbEBpc2xhbmQtcmVz b3J0LmNvbT4gd3JvdGU6DQogICAgPj4gDQogICAgPj4+IDxzbmlwPg0KICAgID4+PiANCiAgICA+ Pj4gU28gSSBhbSBtYWtpbmcgc29tZSBhcmd1bWVudCBhZ2FpbnN0IEFTTi4xIGFuZCBhbnl0aGlu ZyBiZXlvbmQgSlNPTiBhbmQNCiAgICA+Pj4gQ0JPUi4gIFRoZSBtb3JlIGZvcm1hdHMgdGhlcmUg YXJlIHRoZSBtb3JlIHdvcmsgdGhlIHJlbHlpbmcgcGFydGllcw0KICAgID4+PndpbGwNCiAgICA+ Pj4gaGF2ZSB0byBkbyBhbmQgb2YgY291cnNlIHNvbWUgd29u4oCZdCBpbXBsZW1lbnQgYWxsIHRo ZSBmb3JtYXRzIGFuZCB0aGVuDQogICAgPj4+IHdl4oCZbGwgaGF2ZSBsZXNzIGludGVyb3AuDQog ICAgPj4gDQogICAgPj4gW0NXXSBBdCBsZWFzdCB3aGVyZSB0aGUgY2xhaW1zIGFyZSByZWxhdGVk IHRvIGNyeXB0b2dyYXBoaWMga2V5cywgQVNOLjENCiAgICA+PmlzDQogICAgPj4gbGlrZWx5IHVu YXZvaWRhYmxlIGFzIGl0J3MgcGFydCBvZiB0aGUgZW52aXJvbm1lbnQuIEF2b2lkaW5nIGl0IGlz IG5vdA0KICAgID4+IGxpa2VseSB0byBoZWxwIGludGVyb3AuDQogICAgPg0KICAgID4NCiAgICA+ Rm9yIGFuIGF0dGVzdGF0aW9uIGluIHRoZSB2ZWluIG9mIEVBVCB5b3UgaGF2ZSBhIHNlcmllcyBv ZiBjbGFpbXMgdGhhdA0KICAgID5hcmUgc2lnbmVkLiBUaGUgc2FuZSB0aGluZyB0byBkbyBpcyBw aWNrIG9uZSBmb3JtYXQgYW5kIGFwcGx5IGl0IGFsbCB0aGUNCiAgICA+d2F5IHRocm91Z2guIFRo ZSBjbGFpbXMgYXJlIGluIEpPU0UgZm9ybWF0IGFuZCB5b3Ugc2lnbiB3aXRoIEpXVC4gVGhlDQog ICAgPmNsYWltcyBhcmUgaW4gQ0JPUiBhbmQgeW91IHNpZ24gd2l0aCBDT1NFLiBUaGUgY2xhaW1z IGFyZSBBU04uMSBhbmQgeW91DQogICAgPnNpZ24gaW4gQ01TLg0KICAgIFtDV10gSXQgbWF5IHNo YWtlIG91dCBzdWNoIHRoYXQgdGhlIGNsYWltcyBJIGNhcmUgYWJvdXQgY291bGQgYmUgQVNOLjEN CiAgICBmcm9tIHRvcCB0byBib3R0b20gYnV0IEkgZG91YnQgaXQuIE1peGluZyBmb3JtYXRzIGRv ZXNuJ3Qgc2VlbSBsaWtlIGENCiAgICBwcm9ibGVtLiBCYXNlNjQgZW5jb2RpbmdzIG9mIERFUiBl bmNvZGVkIHN0cnVjdHVyZXMgYXJlIHF1aXRlIGNvbW1vbiBpbg0KICAgIFhNTCBhbmQgSlNPTiwg Zm9yIGV4YW1wbGUuIEluY2x1ZGluZyBDT1NFIG9yIEpPU0Ugc3RydWN0dXJlIGFzIGFuDQogICAg YXR0cmlidXRlIGluIGFuIEFTTi4xIHN0cnVjdHVyZSBzZWVtcyBmaW5lIHRvby4NCiAgICA+IA0K ICAgID4NCiAgICA+SXQgd291bGQgYmUgcG9zc2libGUgdG8gaGF2ZSBzb21ldGhpbmcgbGlrZSBh IFBLQ1MxMCBDU1Igc3R1ZmZlZCBpbnRvIGENCiAgICA+Q0JPUiBieXRlIHN0cmluZyBpbiBhIENC T1IvQ09TRSBmb3JtYXQgYXR0ZXN0YXRpb24sIGJ1dCB0aGUgb3ZlcmFsbA0KICAgID5mb3JtYXQg b2YgdGhlIGF0dGVzdGF0aW9uIGlzIENCT1IvQ09TRS4gTWF5YmUgdGhpcyBpcyB3aGF0IHlvdSBh cmUgYWZ0ZXI/DQogICAgDQogICAgW0NXXSBOb3QgZXhhY3RseS4gVGhlIENTUiB3b3VsZCBjb250 YWluIGEgbWl4IG9mIGRhdGEgdGhhdCBpcyBvcmlnaW5hdGVkDQogICAgYnkvcHJvdGVjdGVkIGJ5 IGEgaGFyZHdhcmUgY29tcG9uZW50IGFuZCBkYXRhIHRoYXQgaXMgZXh0ZXJuYWwgKGUuZy4sDQog ICAgY2hhbGxlbmdlIHBhc3N3b3JkKS4gSXQncyBub3QgY2xlYXIgdG8gbWUgb3JjaGVzdHJhdGlu ZyBpbmNsdWRpbmcgdGhlIFAxMA0KICAgIGluIHRoZSBhdHRlc3RhdGlvbiBpcyB0aGUgcmlnaHQg cGF0aC4gSW5jbHVkaW5nIGEgc2lnbmVkIGNsYWltIGFib3V0IGtleQ0KICAgIHByb3ZlbmFuY2Ug aW4gYSBzdGFuZGFyZCBjZXJ0IHJlcXVlc3Qgc2VlbXMgc3VmZmljaWVudCBhbmQgZWFzeSBlbm91 Z2guDQogICAgPg0KICAgID5BZ3JlZWQgdGhhdCB3ZSBtaWdodCBhY3R1YWxseSBoYXZlIHRvIGRv IHRoaXMgc2luY2UgdGhlcmUgaXMgbm8gQ0JPUg0KICAgID5mb3JtYXQgQ1NSICh5ZXQpLg0KICAg IA0KICAgIFtDV10gTm90IHN1cmUgd2h5IHRoYXQgd291bGQgYmUgcmVxdWlyZWQuIFRoZXJlIHdh cyBlYXJsaWVyIG1lbnRpb24gb2Ygbm90DQogICAgYm9pbGluZyB0aGUgb2NlYW4sIHRyeWluZyB0 byByZWNhc3QgZXZlcnl0aGluZyBhcyBDQk9SIGRvZXNuJ3Qgc2VlbSB3aXNlLg0KICAgID4gDQog ICAgPg0KICAgID5JIGNhbiBhbHNvIHNlZSBoYXZpbmcgdG8gdXNlIFguNTA5IGZvciBlc3RhYmxp c2hpbmcgdHJ1c3QgaW4gc2lnbmluZyBrZXlzDQogICAgPnNpbmNlIHRoZXJlIGlzIG5vIENCT1Ig Zm9ybWF0IGZvciBjZXJ0aWZpY2F0ZXMgKHlldCkuIEppbSBTY2hhYWQgd2FzDQogICAgPndvcmtp bmcgb24gZXh0ZW5zaW9ucyB0byBDT1NFIGZvciB0aGlzLg0KICAgID4NCiAgICA+QW55IG90aGVy IGV4YW1wbGVzPw0KICAgIA0KICAgIFtDV10gSSBzaGFyZWQgYSBwaWxlIG9mIGV4YW1wbGVzIHZp YSBHaXRIdWIgc29tZSB3ZWVrcyBiYWNrIC0NCiAgICBodHRwczovL2dpdGh1Yi5jb20vUHVyZWJy ZWQvU2FtcGxlQXR0ZXN0YXRpb25zLiBJIHdpbGwgYWRkIFBpeGVsIDMNCiAgICBhcnRpZmFjdHMg c29vbi4gSSBhbSBub3Qgc3VnZ2VzdGluZyB0aGVzZSBhcyBhIGJhc2lzIGZvciBzdGFuZGFyZGl6 YXRpb24sDQogICAgYnV0IGFzIGlsbHVzdHJhdGl2ZSBvZiBob3cgYXR0ZXN0YXRpb25zIGFyZSB1 c2VkIGluIGNlcnRpZmljYXRlIHJlcXVlc3RzDQogICAgaW4gc29tZSBlbnZpcm9ubWVudHMuIEF0 IHByZXNlbnQsIHcuci50LiBkZW1vbnN0cmF0aW5nIGtleSBwcm92ZW5hbmNlLCB3ZQ0KICAgIGFy ZSB1c2luZzoNCiAgICAJLSBBbmRyb2lkIGF0dGVzdGF0aW9ucyAoWC41MDkgY2VydGlmaWNhdGVz IHRoYXQgY2hhaW4gdG8gYSBzcGVjaWZpYyByb290DQogICAgcmVwcmVzZW50ZWQgYXMgYSBjZXJ0 cy1vbmx5IFNpZ25lZERhdGEpLA0KICAgIAktIFl1YmlrZXkgYXR0ZXN0YXRpb25zIChYLjUwOSBj ZXJ0aWZpY2F0ZXMgdGhhdCBjaGFpbiB0byBhIHNwZWNpZmljDQogICAgcm9vdHJlcHJlc2VudGVk IGFzIGEgY2VydHMtb25seSBTaWduZWREYXRhKSBhbmQNCiAgICAJLSBTdXJmYWNlIFBybyBUUE0g YXR0ZXN0YXRpb25zIChDTUMgcmVxdWVzdHMgdGhhdCB3cmFwIGEgbWl4IG9mIFRDRyBhbmQNCiAg ICBNaWNyb3NvZnQgc3RydWN0dXJlcykuDQogICAgDQogICAgW0NXXSBFYWNoIG9mIHRoZXNlIGlz IGF0dGFjaGVkIHRvIGEgU0NFUCByZXF1ZXN0IGFzIGFuIGF0dHJpYnV0ZS4gVGhlDQogICAgYXR0 ZXN0YXRpb25zIGFyZSB2ZXJpZmllZCBhbmQgdGhlIHB1YmxpYyBrZXkgZnJvbSB0aGUgYXR0ZXN0 YXRpb24gaXMNCiAgICBjb21wYXJlZCB0byB0aGUgcHVibGljIGtleSBpbiB0aGUgU0NFUCByZXF1 ZXN0LiBXZSBoYXZlIGFub3RoZXIgdmFyaWFudA0KICAgIHRoYXQgZG9lcyB1c2UgQ0JPUiBmb3Ig c29tZSBjbGFpbXMuIEluIHRoYXQgY2FzZSB0aGUgR29vZ2xlIGF0dGVzdGF0aW9uDQogICAgY2Vy dGlmaWNhdGUgaXMgaW5jbHVkZWQgaW4gdGhlIENCT1Igc2ltaWxhciB0byB5b3VyIGRlc2NyaXB0 aW9uIGFib3ZlIGJ1dA0KICAgIHRoZSBDQk9SIGxheWVyIGlzbid0IGRlbW9uc3RyYXRpbmcga2V5 IHByb3ZlbmFuY2UgaW4gdGhpcyBjYXNlLiBTQ0VQLCBDTUMNCiAgICBhbmQgRVNUIGFsbCB1c2Ug c2ltaWxhciBhdHRyaWJ1dGVzLiBJdCBpcyBub3QgdW5saWtlbHkgdGhhdCBhIHNpbmdsZSBzcGVj DQogICAgZGVmaW5pbmcgb25lIG9yIG1vcmUgYXR0cmlidXRlcyB0byBjb252ZXkgYXR0ZXN0YXRp b25zIGNvdWxkIGJlIHNoYXJlZCBieQ0KICAgIGFsbCB0aHJlZS4gDQogICAgPiANCiAgICA+DQog ICAgPkkgd291bGQgaG9wZSB3ZSBjYW4gYXZvaWQgQ01TIGFuZCBjcmVhdGluZyBBU04uMSBzeW50 YXggZm9yIGV2ZXJ5IGNsYWltDQogICAgPndlIGRlZmluZS4NCiAgICANCiAgICBbQ1ddIEkgY2Fu J3QgaW1hZ2luZSB0aGlzIHdvdWxkIGJlIG5lY2Vzc2FyeS4NCiAgICA+DQogICAgPkxMDQogICAg Pg0KICAgID4NCiAgICANCiAgICANCiAgICANCg0K From nobody Thu Oct 25 22:13:16 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1FB37130DC9 for ; Thu, 25 Oct 2018 22:13:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s1yhjFGwXgY1 for ; Thu, 25 Oct 2018 22:13:05 -0700 (PDT) Received: from p3plsmtpa06-05.prod.phx3.secureserver.net (p3plsmtpa06-05.prod.phx3.secureserver.net [173.201.192.106]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1BE55130D7A for ; Thu, 25 Oct 2018 22:13:04 -0700 (PDT) Received: from 2405-9800-ba10.44.pool1.tls1b-bcr02.myaisfibre.com ([184.22.89.130]) by :SMTPAUTH: with ESMTPSA id FuQdgS5VfCAU6FuQegrhuJ; Thu, 25 Oct 2018 22:13:04 -0700 From: Laurence Lundblade Message-Id: <4E928A1C-F207-4661-B176-0DADF12EF705@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_C0759A6E-6F86-4F62-9487-09D29F6ECE12" Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Fri, 26 Oct 2018 12:12:58 +0700 In-Reply-To: Cc: Carl Wallace , "Eric Voit (evoit)" , Jeremy O'Donoghue , "eat@ietf.org" , Michael Richardson , "rats@ietf.org" , Henk Birkholz To: "Smith, Ned" References: <0199DB00-E76E-4664-BE02-E2AF4F4B6AEC@intel.com> <526BB5AC-60A8-4CD3-95F4-39F210E4D2FB@island-resort.com> <662EFF28-BC29-4C1F-BB00-086D449D6F0A@island-resort.com> X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfGvjDiYsMaaQ1BAJ33UaqxO93MXiCK1ItjlUD630Gz3g+yxmWBm3g91RF5UvkqaTa3Y0f+Tsbs7uPamNUT23ybNCH3bs1duw1jJXrokOtIqPVWiQP4Eu cloD/51IG5bM58L9/grTRm89dRZIAQK/EcQ8XDU77GGzD/bdpS9D+jffgfs/Vl/ZXqGcJexEVV9bZhFK0oIaVWy30msMxd7XvnPNDnk2DfWkHiX0luGESwQF evVRn3EDlN62Zev9B2TkElkr9V4A4W8/+OnM9eBeEjrg4Vej0iGfnWnD+MtD37dJFXSr8bUhX+boeAK3fj+nMvdJAdCVqVShFzNJOaN+GrOdE3t4CB2tydED JCK+/YJCAgd0beQy5uGuIIahjGfBUkQ0oBPcLrmnQpT9W8P4LlofSKC4C8JULCbIjjZqMOtbPsV5m+31w1daGRmYH9EAkg== Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? - Program of Work section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2018 05:13:09 -0000 --Apple-Mail=_C0759A6E-6F86-4F62-9487-09D29F6ECE12 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 (This isn=E2=80=99t really charter bashing anymore; think we=E2=80=99re = mostly done with that) I=E2=80=99ll put this in the form of a proposal: A set of claims about a device is aggregated into a 'token' (this is the = term used in CWT/JWT) or =E2=80=98document'. That token/document will be = signed. We will support only two formats for the token/document. CWT: Claims are mainly in CBOR format, but we can stuff other things = like commonly used ASN.1, XML, JSON... structures into an individual = claim if necessary. Signing is COSE format, though COSE headers might = carry X.509 certs to help identify and chain up to the verification key. JWT: Claims are mainly in JSON format, but we can stuff other things = like commonly used ASN.1, XML, CBOR=E2=80=A6 structures into an = individual claim if necessary. Signing is JOSE format, though JOSE = headers might carry X.509 certs to help identify and chain up to the = verification key. The number of formats should be minimized for interoperability so there = are only two. There will be no top-level token/document formatted in = ASN.1, XML or other. The main singing of the token will never be CMS. = X.509 will not be used for the token/document format. YANG and/or CDDL will be used describe the claims that are to be encoded = in CBOR and JSON. (YANG and CDDL are not encoding formats, just a = language for describing structures at a higher level) The good thing about CBOR and JSON and CWT and JWT is that they are good = friends. CBOR was designed for easy conversion to/from JSON. CWT and JWT = already share claims. I=E2=80=99m not sure if this addresses Carl=E2=80=99s use cases yet.=20 LL > On Oct 26, 2018, at 7:22 AM, Smith, Ned wrote: >=20 > I expect a common attestation scenario can be characterized as an = X.509 certificate chain having an EE certificate whose private key owner = signs a document containing claims. The document could be expressed in = any of the formats being discussed here. Use case context may play a = role in determining which document format is appropriate, and I don't = believe it is necessarily the objective of the charter to promote a = philosophical bias toward any particular format, though it does make = sense for the WG and charter to set some priorities - trying not to boil = the ocean.=20 >=20 > There seems to be use case context (at least by the participants in = the BOF) for 3 maybe 4 formats where ASN.1 appears to be the one on the = edge (CBOR, JSON, YANG being the other less debated formats). ASN.1 = isn't itself a cryptographic document format (IMO); for that we need to = turn to something like CMS or X.509.=20 >=20 > A second, likely to be popular attestation scenario, can be = characterized as an X.509 certificate chain having and EE certificate = containing claims in an extension (or leverages some other extensibility = capability described by RFC5280). In this scenario, it seems reasonable = for the WG to have an ASN.1 description of the normative set of claims = to avoid other organizations coming up with slight (but semantically = similar) variants.=20 >=20 > If there is a use case for CMS, RFC5755 (attribute certs) or something = else that describes a cryptographic document expressed in ASN.1, then it = is a small / possibly inconsequential step required to include the ASN.1 = formatted claims into one of these other document structures.=20 >=20 > Conceptually, the 'document' consists of a claims part and a signature = part. The claim part could be expressed in one format (e.g. CBOR) while = the signature part expressed in a different format (e.g. JWT). Given = that perspective we can make lists of format types for claims and = another for signed documents. > E.g. > Claims format possibilities: > - CBOR, JSON, YANG, ASN.1 >=20 > Cryptographic document format possibilities: > - CWT, JWT, YANG(?), CMS, X.509 Cert (RFC5280), Attr Cert = (RFC5755) >=20 > The charter / WG could set different priorities for each list. It = could also set priority for, and/or limit, cross-format enveloping (e.g. = JSON Claim inside a YANG cryptographic document etc). >=20 > A third, possibly likely attestation scenario might do away with the = X.509 certificate chain favoring for example a signed-document-only = model or possibly an alternative certificate chain using CWT? I don't = know if anyone is strongly advocating use cases in this third scenario. = If not, it makes sense to leave it out of the charter for now.=20 >=20 > -Ned >=20 > =EF=BB=BFOn 10/25/18, 8:06 AM, "Carl Wallace" = wrote: >=20 >=20 >=20 > On 10/25/18, 10:11 AM, "Laurence Lundblade" = wrote: >=20 >>=20 >>> On Oct 25, 2018, at 8:47 PM, Carl Wallace = >>> wrote: >>>=20 >>>=20 >>> On 10/25/18, 9:15 AM, "RATS on behalf of Laurence Lundblade" >>> wrote: >>>=20 >>>> >>>>=20 >>>> So I am making some argument against ASN.1 and anything beyond JSON = and >>>> CBOR. The more formats there are the more work the relying parties >>>> will >>>> have to do and of course some won=E2=80=99t implement all the = formats and then >>>> we=E2=80=99ll have less interop. >>>=20 >>> [CW] At least where the claims are related to cryptographic keys, = ASN.1 >>> is >>> likely unavoidable as it's part of the environment. Avoiding it is = not >>> likely to help interop. >>=20 >>=20 >> For an attestation in the vein of EAT you have a series of claims = that >> are signed. The sane thing to do is pick one format and apply it all = the >> way through. The claims are in JOSE format and you sign with JWT. The >> claims are in CBOR and you sign with COSE. The claims are ASN.1 and = you >> sign in CMS. > [CW] It may shake out such that the claims I care about could be = ASN.1 > from top to bottom but I doubt it. Mixing formats doesn't seem like = a > problem. Base64 encodings of DER encoded structures are quite = common in > XML and JSON, for example. Including COSE or JOSE structure as an > attribute in an ASN.1 structure seems fine too. >>=20 >>=20 >> It would be possible to have something like a PKCS10 CSR stuffed into = a >> CBOR byte string in a CBOR/COSE format attestation, but the overall >> format of the attestation is CBOR/COSE. Maybe this is what you are = after? >=20 > [CW] Not exactly. The CSR would contain a mix of data that is = originated > by/protected by a hardware component and data that is external = (e.g., > challenge password). It's not clear to me orchestrating including = the P10 > in the attestation is the right path. Including a signed claim = about key > provenance in a standard cert request seems sufficient and easy = enough. >>=20 >> Agreed that we might actually have to do this since there is no CBOR >> format CSR (yet). >=20 > [CW] Not sure why that would be required. There was earlier mention = of not > boiling the ocean, trying to recast everything as CBOR doesn't seem = wise. >>=20 >>=20 >> I can also see having to use X.509 for establishing trust in signing = keys >> since there is no CBOR format for certificates (yet). Jim Schaad was >> working on extensions to COSE for this. >>=20 >> Any other examples? >=20 > [CW] I shared a pile of examples via GitHub some weeks back - > https://github.com/Purebred/SampleAttestations. I will add Pixel 3 > artifacts soon. I am not suggesting these as a basis for = standardization, > but as illustrative of how attestations are used in certificate = requests > in some environments. At present, w.r.t. demonstrating key = provenance, we > are using: > - Android attestations (X.509 certificates that chain to a = specific root > represented as a certs-only SignedData), > - Yubikey attestations (X.509 certificates that chain to a = specific > rootrepresented as a certs-only SignedData) and > - Surface Pro TPM attestations (CMC requests that wrap a mix of = TCG and > Microsoft structures). >=20 > [CW] Each of these is attached to a SCEP request as an attribute. = The > attestations are verified and the public key from the attestation = is > compared to the public key in the SCEP request. We have another = variant > that does use CBOR for some claims. In that case the Google = attestation > certificate is included in the CBOR similar to your description = above but > the CBOR layer isn't demonstrating key provenance in this case. = SCEP, CMC > and EST all use similar attributes. It is not unlikely that a = single spec > defining one or more attributes to convey attestations could be = shared by > all three.=20 >>=20 >>=20 >> I would hope we can avoid CMS and creating ASN.1 syntax for every = claim >> we define. >=20 > [CW] I can't imagine this would be necessary. >>=20 >> LL >>=20 >>=20 >=20 >=20 >=20 >=20 --Apple-Mail=_C0759A6E-6F86-4F62-9487-09D29F6ECE12 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
(This isn=E2=80=99t really charter bashing anymore; think = we=E2=80=99re mostly done with that)

I=E2=80=99ll put this in the form of a proposal:

A = set of claims about a device is aggregated into a 'token' (this is the = term used in CWT/JWT) or =E2=80=98document'. That token/document will be = signed.  We will support only two formats for the = token/document.

CWT: = Claims are mainly in CBOR format, but we can stuff other things like = commonly used ASN.1, XML, JSON...  structures into an individual = claim if necessary. Signing is COSE format, though COSE headers might = carry X.509 certs to help identify and chain up to the verification = key.

JWT: Claims are mainly in JSON format, but we = can stuff other things like commonly used ASN.1, XML, CBOR=E2=80=A6 = structures into an individual claim if necessary. Signing is JOSE = format, though JOSE headers might carry X.509 certs to help identify and = chain up to the verification key.

The number of formats should be minimized for = interoperability so there are only two. There will be no top-level = token/document formatted in ASN.1, XML or other. The main singing of the = token will never be CMS.  X.509 will not be used for the = token/document format.

YANG and/or CDDL = will be used describe the claims that are to be encoded in CBOR and = JSON. (YANG and CDDL are not encoding formats, just a language for = describing structures at a higher level)

The good = thing about CBOR and JSON and CWT and JWT is that they are good friends. = CBOR was designed for easy conversion to/from JSON. CWT and JWT already = share claims.

I=E2=80=99m not sure if this addresses Carl=E2=80=99s use = cases yet. 

LL



On Oct 26, 2018, at 7:22 AM, Smith, Ned = <ned.smith@intel.com> wrote:

I = expect a common attestation scenario can be characterized as an X.509 = certificate chain having an EE certificate whose private key owner signs = a document containing claims. The document could be expressed in any of = the formats being discussed here. Use case context may play a role in = determining which document format is appropriate, and I don't believe it = is necessarily the objective of the charter to promote a philosophical = bias toward any particular format, though it does make sense for the WG = and charter to set some priorities - trying not to boil the ocean.

There seems to be use case context (at least = by the participants in the BOF) for 3 maybe 4 formats where ASN.1 = appears to be the one on the edge (CBOR, JSON, YANG being the other less = debated formats). ASN.1 isn't itself a cryptographic document format = (IMO); for that we need to turn to something like CMS or X.509.

A second, likely to be popular attestation = scenario, can be characterized as an X.509 certificate chain having and = EE certificate containing claims in an extension (or leverages some = other extensibility capability described by RFC5280). In this scenario, = it seems reasonable for the WG to have an ASN.1 description of the = normative set of claims to avoid other organizations coming up with = slight (but semantically similar) variants.

If there is a use case for CMS, RFC5755 (attribute certs) or = something else that describes a cryptographic document expressed in = ASN.1, then it is a small / possibly inconsequential step required to = include the ASN.1 formatted claims into one of these other document = structures.

Conceptually, the 'document' = consists of a claims part and a signature part. The claim part could be = expressed in one format (e.g. CBOR) while the signature part expressed = in a different format (e.g. JWT). Given that perspective we can make = lists of format types for claims and another for signed documents.
E.g.
Claims format possibilities:
= - CBOR, JSON, YANG, ASN.1

Cryptographic document format possibilities:
= - CWT, JWT, YANG(?), CMS, X.509 Cert (RFC5280), Attr Cert = (RFC5755)

The charter / WG could set = different priorities for each list. It could also set priority for, = and/or limit, cross-format enveloping (e.g. JSON Claim inside a YANG = cryptographic document etc).

A third, = possibly likely attestation scenario might do away with the X.509 = certificate chain favoring for example a signed-document-only model or = possibly an alternative certificate chain using CWT? I don't know if = anyone is strongly advocating use cases in this third scenario. If not, = it makes sense to leave it out of the charter for now.

-Ned

=EF=BB=BFOn 10/25/18, 8:06 = AM, "Carl Wallace" <carl@redhoundsoftware.com> wrote:



   On 10/25/18, = 10:11 AM, "Laurence Lundblade" <lgl@island-resort.com> wrote:


On Oct 25, 2018, at 8:47 PM, Carl Wallace = <carl@redhoundsoftware.com>
wrote:


On 10/25/18, 9:15 AM, "RATS on = behalf of Laurence Lundblade"
<rats-bounces@ietf.org= on behalf of lgl@island-resort.com> wrote:

<snip>

So I am making some argument against ASN.1 and = anything beyond JSON and
CBOR.  The more formats = there are the more work the relying parties
will
have to do and of course some won=E2=80=99t implement all the = formats and then
we=E2=80=99ll have less interop.

[CW] At least where the claims = are related to cryptographic keys, ASN.1
is
likely unavoidable as it's part of the environment. Avoiding = it is not
likely to help interop.


For an attestation = in the vein of EAT you have a series of claims that
are = signed. The sane thing to do is pick one format and apply it all the
way through. The claims are in JOSE format and you sign with = JWT. The
claims are in CBOR and you sign with COSE. The = claims are ASN.1 and you
sign in CMS.
   [CW] It may shake out such = that the claims I care about could be ASN.1
=    from top to bottom but I doubt it. Mixing formats = doesn't seem like a
   problem. Base64 = encodings of DER encoded structures are quite common in
=    XML and JSON, for example. Including COSE or JOSE = structure as an
   attribute in an ASN.1 = structure seems fine too.


It would be possible to have = something like a PKCS10 CSR stuffed into a
CBOR byte = string in a CBOR/COSE format attestation, but the overall
format of the attestation is CBOR/COSE. Maybe this is what = you are after?

=    [CW] Not exactly. The CSR would contain a mix of data = that is originated
   by/protected by a = hardware component and data that is external (e.g.,
=    challenge password). It's not clear to me = orchestrating including the P10
   in the = attestation is the right path. Including a signed claim about key
   provenance in a standard cert request = seems sufficient and easy enough.

Agreed that we might actually have to do this = since there is no CBOR
format CSR (yet).

   [CW] Not sure = why that would be required. There was earlier mention of not
   boiling the ocean, trying to recast = everything as CBOR doesn't seem wise.


I can also see = having to use X.509 for establishing trust in signing keys
since there is no CBOR format for certificates (yet). Jim = Schaad was
working on extensions to COSE for this.

Any other examples?

   [CW] I shared = a pile of examples via GitHub some weeks back -
=    https://github.com/Purebred/SampleAttestations. I will = add Pixel 3
   artifacts soon. I am not = suggesting these as a basis for standardization,
=    but as illustrative of how attestations are used in = certificate requests
   in some = environments. At present, w.r.t. demonstrating key provenance, we
   are using:
=     - Android attestations (X.509 = certificates that chain to a specific root
=    represented as a certs-only SignedData),
=     - Yubikey attestations (X.509 = certificates that chain to a specific
=    rootrepresented as a certs-only SignedData) and
    - Surface Pro TPM attestations = (CMC requests that wrap a mix of TCG and
=    Microsoft structures).

=    [CW] Each of these is attached to a SCEP request as an = attribute. The
   attestations are = verified and the public key from the attestation is
=    compared to the public key in the SCEP request. We = have another variant
   that does use CBOR = for some claims. In that case the Google attestation
=    certificate is included in the CBOR similar to your = description above but
   the CBOR layer = isn't demonstrating key provenance in this case. SCEP, CMC
=    and EST all use similar attributes. It is not unlikely = that a single spec
   defining one or more = attributes to convey attestations could be shared by
=    all three.


I would hope we can avoid CMS = and creating ASN.1 syntax for every claim
we define.

   [CW] I can't = imagine this would be necessary.

LL







= --Apple-Mail=_C0759A6E-6F86-4F62-9487-09D29F6ECE12-- From nobody Fri Oct 26 07:31:00 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2115130DF3; Fri, 26 Oct 2018 07:30:51 -0700 (PDT) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER SECTION, Non-encoded 8-bit data (char 9C hex): Received: ...s kaduk@ATHENA.MIT.EDU)\n\t\234by outgoing.mit[...] X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sCkxkNLXXnU0; Fri, 26 Oct 2018 07:30:50 -0700 (PDT) Received: from dmz-mailsec-scanner-6.mit.edu (dmz-mailsec-scanner-6.mit.edu [18.7.68.35]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 63D48130DEF; Fri, 26 Oct 2018 07:30:50 -0700 (PDT) X-AuditID: 12074423-239ff7000000408f-49-5bd32516740f Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-6.mit.edu (Symantec Messaging Gateway) with SMTP id 7E.59.16527.71523DB5; Fri, 26 Oct 2018 10:30:48 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-2.mit.edu (8.14.7/8.9.2) with ESMTP id w9QEUeHg007444; Fri, 26 Oct 2018 10:30:42 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id w9QEUXkn031526 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 26 Oct 2018 10:30:36 -0400 Date: Fri, 26 Oct 2018 09:30:33 -0500 From: Benjamin Kaduk To: Laurence Lundblade Cc: "Smith, Ned" , "Eric Voit (evoit)" , "Jeremy O'Donoghue" , "eat@ietf.org" , "rats@ietf.org" , Carl Wallace , Michael Richardson , Henk Birkholz Message-ID: <20181026143033.GK45914@kduck.kaduk.org> References: <0199DB00-E76E-4664-BE02-E2AF4F4B6AEC@intel.com> <526BB5AC-60A8-4CD3-95F4-39F210E4D2FB@island-resort.com> <662EFF28-BC29-4C1F-BB00-086D449D6F0A@island-resort.com> <4E928A1C-F207-4661-B176-0DADF12EF705@island-resort.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <4E928A1C-F207-4661-B176-0DADF12EF705@island-resort.com> User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrEKsWRmVeSWpSXmKPExsUixG6noiuhejnaoH+pvMXqxZuYLH727WW2 eLF6NZNFw7+/rBbtFw6wWPw485DJoudQP7vFyR3nWS2WLd/F7sDpMeX3RlaPJUt+Mnks3vOS yePo8jKPRVOfMXrsm7Gb3aNlzh5mj44HNxgDOKK4bFJSczLLUov07RK4MtY/kS6YyF3xYBdb A2MTZxcjJ4eEgIlE+6obzF2MXBxCAmuYJCbN2s4G4WxklJg2dwUrhHOXSeLNjrtsIC0sAqoS E2acZwSx2QRUJBq6LwO1c3CICOhJ7O7jA6lnFvjEJLG+6yQrSI2wQJjEru9fwGxeoHX9278y Qgz9xSSx7fESqISgxMmZT1hAbGYBdYk/8y6BDWUWkJZY/o8DIiwv0bx1NjOIzSngKtHXsBes XFRAWWJv3yH2CYyCs5BMmoVk0iyESbOQTFrAyLKKUTYlt0o3NzEzpzg1Wbc4OTEvL7VI10wv N7NELzWldBMjOKpclHcwvuzzPsQowMGoxMMr8PdStBBrYllxZe4hRkkOJiVR3pcyl6OF+JLy UyozEosz4otKc1KLDzFKcDArifBageR4UxIrq1KL8mFS0hwsSuK8E1sWRwsJpCeWpGanphak FsFkZTg4lCR4zysDNQoWpaanVqRl5pQgpJk4OEGG8wANZ1YBGV5ckJhbnJkOkT/FqCglznsD pFkAJJFRmgfXC0p6Etn7a14xigO9IszrDdLOA0yYcN2vgAYzAQ2eoXABZHBJIkJKqoHRVUR6 iZTWOqtd4pmituUX229eEJk+5ZmrcINrxi9zR05NJ4+dOsnmIasPX4473GhdMj2lzsrhbuaZ 5ReYd2Xz1TG+i/LS43x+aeax1ZtMXE9ILNqdM+POouLbvze+X3zmyJdzckd1OPqOKtw8NOeF eon9pV5L533BM2rZHpg0zphzlYF7l8R0JZbijERDLeai4kQASuSb51UDAAA= Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? - Program of Work section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2018 14:30:52 -0000 On Fri, Oct 26, 2018 at 12:12:58PM +0700, Laurence Lundblade wrote: > (This isn’t really charter bashing anymore; think we’re mostly done with that) > > I’ll put this in the form of a proposal: > > A set of claims about a device is aggregated into a 'token' (this is the term used in CWT/JWT) or ‘document'. That token/document will be signed. We will support only two formats for the token/document. > > CWT: Claims are mainly in CBOR format, but we can stuff other things like commonly used ASN.1, XML, JSON... structures into an individual claim if necessary. Signing is COSE format, though COSE headers might carry X.509 certs to help identify and chain up to the verification key. > > JWT: Claims are mainly in JSON format, but we can stuff other things like commonly used ASN.1, XML, CBOR… structures into an individual claim if necessary. Signing is JOSE format, though JOSE headers might carry X.509 certs to help identify and chain up to the verification key. There is perhaps something of a philosophical question about stuffing ASN.1, XML, etc. structures into individual claims, in that "can you really trust the signer to vouch for what it's signing if the signed contents are in a format unknown to the signer?" There are certainly ways to delegate or chain trust so that the answer to the question is "yes", but I do not think we should ignore the question entirely. -Ben From nobody Fri Oct 26 07:49:07 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8578B130DF6 for ; Fri, 26 Oct 2018 07:49:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QXpS29KZ-06x for ; Fri, 26 Oct 2018 07:49:04 -0700 (PDT) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7E5F11292F1 for ; Fri, 26 Oct 2018 07:49:04 -0700 (PDT) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id w9QEn2qr030026 for ; Fri, 26 Oct 2018 10:49:02 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu w9QEn2qr030026 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1540565342; bh=65xErD4pyFSGDXgteR3noJGXT5vuxy4JeKUD1VRAynw=; h=From:To:Subject:Date:From; b=JpOzQSN0X8w6eEqKF7DMvY6czjTwAo6WXJxUUq+67EZ0boUj5I5xIYPsI9LIJ/HW6 6B99BcfUu89sEvtWww+R0V77M0s3oU05JUD/ZVnkNcSBw0oyfkjX2xOqVbUyB9cups ggfFAaZFQxnANWFAQSDUlC31XjeuL0JbdlBAQeLI= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id w9QEmtxm035078 for ; Fri, 26 Oct 2018 10:48:55 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0399.000; Fri, 26 Oct 2018 10:48:55 -0400 From: Roman Danyliw To: "rats@ietf.org" Thread-Topic: Preliminary RATS Bof Agenda v2 Thread-Index: AdRtOjcHq6i6a8T1R1WYQvVdEmAcfw== Date: Fri, 26 Oct 2018 14:48:54 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0181A32823@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Rats] Preliminary RATS Bof Agenda v2 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2018 14:49:06 -0000 Hello! To synthesize the earlier conversation on the agenda at [1], please conside= r the following: (It reshuffles the topics around why they are on the agenda; and leaves stu= bs for where we might need more conversation.) =3D=3D[ snip ]=3D=3D 1) Introduction, Logistics and Agenda Bash (chairs) 2) Problem Statement (Ned & Henk) -- Problem Statement -- Who has this problem? -- Related work in and outside the IETF 3) State of the Practice (3a) Cisco (Eric)=20 Compromise Trustworthy Visibility in Working Systems -- https://www.cisco.com/c/dam/en/us/td/docs/cloud-systems-management/appli= cation-policy-infrastructure-controller-enterprise-module/1-5-x/integrity_v= erification/user-guide/Cisco_Integrity_Verification_Application_APIC-EM_Use= r_Guide_1_5_0_x.pdf (3b) ??? FIDO, Android Keystore, etc ??? 4) An Attestation Format (TBD) -- The Entity Attestation Token -- draft-mandyam-eat-00 5) Discussion (open mic) 6) Charter Text Discussion (chairs) 7) Wrap-Up (chairs) =3D=3D[ snip ]=3D=3D Comments? Regards, Roman [1] https://www.ietf.org/mail-archive/web/rats/current/msg00141.html From nobody Fri Oct 26 07:56:43 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0555B130E09 for ; Fri, 26 Oct 2018 07:56:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H1fg9JF8ewB4 for ; Fri, 26 Oct 2018 07:56:33 -0700 (PDT) Received: from p3plsmtpa09-02.prod.phx3.secureserver.net (p3plsmtpa09-02.prod.phx3.secureserver.net [173.201.193.231]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53645130E06 for ; Fri, 26 Oct 2018 07:56:33 -0700 (PDT) Received: from 2405-9800-ba10.44.pool1.tls1b-bcr02.myaisfibre.com ([184.22.80.254]) by :SMTPAUTH: with ESMTPSA id G3XHgUi4O0XzPG3XJgBw1U; Fri, 26 Oct 2018 07:56:32 -0700 Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Laurence Lundblade In-Reply-To: <20181026143033.GK45914@kduck.kaduk.org> Date: Fri, 26 Oct 2018 21:56:27 +0700 Cc: "Eric Voit (evoit)" , Jeremy O'Donoghue , "eat@ietf.org" , "rats@ietf.org" , Carl Wallace , Michael Richardson , "Smith, Ned" , Henk Birkholz Content-Transfer-Encoding: quoted-printable Message-Id: <4B026885-9349-412C-8E47-A71BB866EDCC@island-resort.com> References: <0199DB00-E76E-4664-BE02-E2AF4F4B6AEC@intel.com> <526BB5AC-60A8-4CD3-95F4-39F210E4D2FB@island-resort.com> <662EFF28-BC29-4C1F-BB00-086D449D6F0A@island-resort.com> <4E928A1C-F207-4661-B176-0DADF12EF705@island-resort.com> <20181026143033.GK45914@kduck.kaduk.org> To: Benjamin Kaduk X-Mailer: Apple Mail (2.3445.9.1) X-CMAE-Envelope: MS4wfAS5sAcpFrE0WYDZA2Ykcstmw/KHcAhujTGqUgN8WPrw3BReysRXjTurTSYHmIQ0H2jquPYQfgOawA96bxFC0Mp7l6xSY7mhAoaPux6d5x1wfLzQ+h4q Bl+hgNWS7xuqbjyhdnZCT5ttFT+OUBJOBAZvzUqHeQBtEZlbNxQIrytsddMvwzpvzXINm56tve5WyjSBO2M03NGuni/+sNF/T1FUOdKzHDj0KrRv0QJIM+1n P30Ih+8qIea2MJLI6QxsYt/C8OT40nyonw484co03AFiYXkMgP8HwUtbVjbIag9TDvevD2NdroS7xfivbvliqjTHbz/G7Vnf0wzZtyQDRN3fPU3RijHrZLCu L/VcY9m2Us4CFd9UsJHeihHyv/3M7w9x7xhH9qGh3aTzvf6WZS3GG3LVBOgh393ajHKUy8aLgMcaxfjZSVwk/AKB3PFIoEhHvcdzVxGwusDmTwHKkv0= Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? - Program of Work section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2018 14:56:36 -0000 See end... > On Oct 26, 2018, at 9:30 PM, Benjamin Kaduk wrote: >=20 > On Fri, Oct 26, 2018 at 12:12:58PM +0700, Laurence Lundblade wrote: >> (This isn=E2=80=99t really charter bashing anymore; think we=E2=80=99re= mostly done with that) >>=20 >> I=E2=80=99ll put this in the form of a proposal: >>=20 >> A set of claims about a device is aggregated into a 'token' (this is = the term used in CWT/JWT) or =E2=80=98document'. That token/document = will be signed. We will support only two formats for the = token/document. >>=20 >> CWT: Claims are mainly in CBOR format, but we can stuff other things = like commonly used ASN.1, XML, JSON... structures into an individual = claim if necessary. Signing is COSE format, though COSE headers might = carry X.509 certs to help identify and chain up to the verification key. >>=20 >> JWT: Claims are mainly in JSON format, but we can stuff other things = like commonly used ASN.1, XML, CBOR=E2=80=A6 structures into an = individual claim if necessary. Signing is JOSE format, though JOSE = headers might carry X.509 certs to help identify and chain up to the = verification key. >=20 > There is perhaps something of a philosophical question about stuffing > ASN.1, XML, etc. structures into individual claims, in that "can you = really > trust the signer to vouch for what it's signing if the signed contents = are > in a format unknown to the signer?" There are certainly ways to = delegate > or chain trust so that the answer to the question is "yes", but I do = not > think we should ignore the question entirely. I don=E2=80=99t think the format matters in this case. The basis for the = signer trusting what it signs is not dependent on the format. Some one = feeding bad data to the signer could just as well feed it in the format = the signer typically uses. What matters is the SW architecture and implementation on the device. In = a simple set up the signer might be in the kernel and only sign data = that also came from the kernel. Or it could be in TrustZone or an = embedded Secure Element and only sign data that came from the same. In = something more complicated the signer could be in the kernel and accept = data from user mode processes, but mark it specially (this is what the = submods claims is for in EAT). The nonce from the relying party always = comes from far away, but it is special and it doesn=E2=80=99t matter. If = a MiTM changes the nonce, the relying party will know.=20 LL From nobody Fri Oct 26 08:08:01 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1CCC130DF4; Fri, 26 Oct 2018 08:07:52 -0700 (PDT) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER SECTION, Non-encoded 8-bit data (char 9C hex): Received: ...s kaduk@ATHENA.MIT.EDU)\n\t\234by outgoing.mit[...] X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NTSm2wVzyB8h; Fri, 26 Oct 2018 08:07:51 -0700 (PDT) Received: from dmz-mailsec-scanner-4.mit.edu (dmz-mailsec-scanner-4.mit.edu [18.9.25.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C04C8127332; Fri, 26 Oct 2018 08:07:50 -0700 (PDT) X-AuditID: 1209190f-a3dff70000000158-28-5bd32dc4da8d Received: from mailhub-auth-2.mit.edu ( [18.7.62.36]) (using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-4.mit.edu (Symantec Messaging Gateway) with SMTP id C4.10.00344.5CD23DB5; Fri, 26 Oct 2018 11:07:49 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-2.mit.edu (8.14.7/8.9.2) with ESMTP id w9QF5RBh010190; Fri, 26 Oct 2018 11:05:29 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) by outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id w9QF5LSn012837 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 26 Oct 2018 11:05:24 -0400 Date: Fri, 26 Oct 2018 10:05:21 -0500 From: Benjamin Kaduk To: Laurence Lundblade Cc: "Eric Voit (evoit)" , "Jeremy O'Donoghue" , "eat@ietf.org" , Michael Richardson , Carl Wallace , "rats@ietf.org" , "Smith, Ned" , Henk Birkholz Message-ID: <20181026150521.GM45914@kduck.kaduk.org> References: <0199DB00-E76E-4664-BE02-E2AF4F4B6AEC@intel.com> <526BB5AC-60A8-4CD3-95F4-39F210E4D2FB@island-resort.com> <662EFF28-BC29-4C1F-BB00-086D449D6F0A@island-resort.com> <4E928A1C-F207-4661-B176-0DADF12EF705@island-resort.com> <20181026143033.GK45914@kduck.kaduk.org> <4B026885-9349-412C-8E47-A71BB866EDCC@island-resort.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <4B026885-9349-412C-8E47-A71BB866EDCC@island-resort.com> User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrMKsWRmVeSWpSXmKPExsUixG6nontU93K0waPLyharF29isvjZt5fZ 4sXq1UwWDf/+slq0XzjAYvHjzEMmi55D/ewWJ3ecZ7VYtnwXuwOnx5TfG1k9liz5yeSxeM9L Jo+jy8s8Fk19xuixb8Zudo+WOXuYPToe3GAM4IjisklJzcksSy3St0vgyjiyaBtbwR6xiq27 DjI2MP4T7GLk5JAQMJFY1reYuYuRi0NIYA2TxKtlH1ghnI2MEj8Xr4dy7jJJbN37hx2khUVA VaLv9S02EJtNQEWiofsyUDsHh4iAnsTuPj6QemaB30wS5xu7wWqEBcIkdn3/wgpi8wKtW3Cj DWyOkMADZonfbVwQcUGJkzOfsIDYzALqEn/mXQKbySwgLbH8HwdEWF6ieetsZhCbU8BV4tzr P2AjRQWUJfb2HWKfwCg4C8mkWUgmzUKYNAvJpAWMLKsYZVNyq3RzEzNzilOTdYuTE/PyUot0 TfRyM0v0UlNKNzGC4opTkn8H45wG70OMAhyMSjy8E75djBZiTSwrrsw9xCjJwaQkyvtY43K0 EF9SfkplRmJxRnxRaU5q8SFGCQ5mJRFeKxmgHG9KYmVValE+TEqag0VJnHdCy+JoIYH0xJLU 7NTUgtQimKwMB4eSBC8rMH0ICRalpqdWpGXmlCCkmTg4QYbzAA3/pAMyvLggMbc4Mx0if4pR UUqc1xIkIQCSyCjNg+sFpT2J7P01rxjFgV4R5vUGqeIBpky47ldAg5mABs9QuAAyuCQRISXV wOivdMxhyckuLYk/4tHM11YYpvYetPlsosrAdvqYV8y3tpZlxo/mCQtMz/c/dMhP977FXc4z /z4JinaH+XmsadfaqqyeVCYR17PIM/VK8WX/TXkXNh9vMSi8cGue7ddzpY4nHfYssjC/8faO 1+xnGxYt/Pvgh8uprUk7RFisdsU4Jvb2Oe5Wu6PEUpyRaKjFXFScCAASUldxVgMAAA== Archived-At: Subject: Re: [Rats] [EAT] Attestation BoF charter updates? - Program of Work section X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2018 15:07:53 -0000 On Fri, Oct 26, 2018 at 09:56:27PM +0700, Laurence Lundblade wrote: > See end... > > > On Oct 26, 2018, at 9:30 PM, Benjamin Kaduk wrote: > > > > On Fri, Oct 26, 2018 at 12:12:58PM +0700, Laurence Lundblade wrote: > >> (This isn’t really charter bashing anymore; think we’re mostly done with that) > >> > >> I’ll put this in the form of a proposal: > >> > >> A set of claims about a device is aggregated into a 'token' (this is the term used in CWT/JWT) or ‘document'. That token/document will be signed. We will support only two formats for the token/document. > >> > >> CWT: Claims are mainly in CBOR format, but we can stuff other things like commonly used ASN.1, XML, JSON... structures into an individual claim if necessary. Signing is COSE format, though COSE headers might carry X.509 certs to help identify and chain up to the verification key. > >> > >> JWT: Claims are mainly in JSON format, but we can stuff other things like commonly used ASN.1, XML, CBOR… structures into an individual claim if necessary. Signing is JOSE format, though JOSE headers might carry X.509 certs to help identify and chain up to the verification key. > > > > There is perhaps something of a philosophical question about stuffing > > ASN.1, XML, etc. structures into individual claims, in that "can you really > > trust the signer to vouch for what it's signing if the signed contents are > > in a format unknown to the signer?" There are certainly ways to delegate > > or chain trust so that the answer to the question is "yes", but I do not > > think we should ignore the question entirely. > > I don’t think the format matters in this case. The basis for the signer trusting what it signs is not dependent on the format. Some one feeding bad data to the signer could just as well feed it in the format the signer typically uses. > > What matters is the SW architecture and implementation on the device. In a simple set up the signer might be in the kernel and only sign data that also came from the kernel. Or it could be in TrustZone or an embedded Secure Element and only sign data that came from the same. In something more complicated the signer could be in the kernel and accept data from user mode processes, but mark it specially (this is what the submods claims is for in EAT). The nonce from the relying party always comes from far away, but it is special and it doesn’t matter. If a MiTM changes the nonce, the relying party will know. I agree that the overall system design can include trusted elements feeding information to the signer, in which case the decision about what gets signed is made by the individual trusted elements and the signer itself need not know the formats of the individual claims. If that's the architecture we want to use, we just need to be explicit about it. -Ben From nobody Fri Oct 26 12:55:01 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 30344128A6E for ; Fri, 26 Oct 2018 12:55:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ye_bnmbfcZ7A for ; Fri, 26 Oct 2018 12:54:57 -0700 (PDT) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8AB911277D2 for ; Fri, 26 Oct 2018 12:54:57 -0700 (PDT) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id w9QJsuvM006736 for ; Fri, 26 Oct 2018 15:54:56 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu w9QJsuvM006736 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1540583696; bh=fncpmNnnM6r7XW7Vn7j2ty4pBkegrV38g08pgzNYmf0=; h=From:To:Subject:Date:From; b=A2VV6QetzdLLqR/HaSBc78w2IWNr5HLQodOYu+q1KrV9kpcvKE6ckQPNGI6D6q9JY JFlfITXoikwOPgw2/O3WKRwBBuWwykoQVMZQDzFminCksSgI8xu+yLcE7ScL4kivjp QVpZ4jc8cuz6lgW7ibaKol0OCQFvWXwCVe8ninrI= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id w9QJsrCT012978 for ; Fri, 26 Oct 2018 15:54:53 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0399.000; Fri, 26 Oct 2018 15:54:53 -0400 From: Roman Danyliw To: "rats@ietf.org" Thread-Topic: Feedback on the RC3 draft charter text Thread-Index: AdRtZPP/JomPlmzFT2KYTqGhMEmPSw== Date: Fri, 26 Oct 2018 19:54:52 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0181A32A81@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Rats] Feedback on the RC3 draft charter text X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2018 19:55:00 -0000 Hello! I reviewed the v3 draft charter text at https://github.com/ietf-rats/charte= r/blob/RC3/ietf-rats-charter.md, and had the following feedback/recommendat= ions/questions: (1) Use consistent language for the "things" participating in the attestati= ons. Each section uses slightly different language -- "devices and service= s"/"communication partner"/"relying party" (in introduction); "devices, ser= vices and other third parties" (in high level goals); or "systems/entities"= , "system/remote party" (in Program of Work). (2) In the introductory section, I wanted to read a bit more about the cont= ext -- establish why RATS is needed; notionally define what "trust" and "tr= ustworthiness" means; what is the continuum of "communication partners" und= er consideration. (3) Per this sentence in the introduction, "In the absence of such procedur= es, while domain-specific attestation mechanisms such as TCG TPM/TSS, FIDO = Alliance attestation and Android Keystore attestation exist, there is no co= mmon way for a relying party to tell if data originates from a trustworthy = device or not.": ** I recommend removing the "In the absence of such procedures" phrase. It= is redundant. ** I like that this sentence acknowledges the related work. In this sectio= n, the list of related work is "TCG TPM/TSS, FIDO and Keystore". In the Hi= gh Level Goals section, another set of related work is listed, "Global Plat= form, TCG and FIDO". Are these meant to be different. Couldn't Global Pla= tform also be listed in this sentence. ** Per the notion that the domain-specific attestation methods aren't adequ= ate, is the language "there no common way" the same as "there is no genera= l purpose way"? =20 (4) I struggled with the text in the "high level goals" section as the deta= ils of the WG goals are buried in the text. I would recommend opening this= section with a declarative statement of the form "The goal of the RATS wor= king group is to specify the formats, protocols and procedures needed to cr= eate and verify trust relationships suitable for remote attestation." The sentence "Correspondingly, the RATS WG will facilitate full device atte= station ..." introduces new terminology for me that begs explanation (and w= asn't references in the introduction). =20 IMO the two bullets, under "The WG will define .." aren't necessary because= the next section already abstractly defines the activities and there will = eventually be a set of milestones that will be even more specific. (5) Program of Work: Per, "The Working Group will develop standards support= ing the creation of interoperable remote attestation procedures for systems= and entities which incorporate roots of trust.": I wasn't able to tell if the closing phrase "which incorporates roots of tr= ust" was intended to scope the problem. In the previous section which disc= ussed High Level goals, RATS was going to work with both "roots of trust or= trust anchors". I'd recommend consistency in language. (6) Program of Work. Activity 1 I recommend simplification as follows: - "Specify an architecture establishing a common terminology for remote att= estation, identifying mechanisms which will be supported for establishing t= rust relationships between a system and a remote party, and enumerating sam= ple use-cases for remote attestation." + "Specify a reference architecture that defines common terminology and sam= ples use cases for remote attestation" (7) Program of Work. Activity 2 I recommend simplification as follows: -"Specify interoperable cross-platform claims which provide information abo= ut systems and entities in support of the required use-cases, and extending= the set of claims defined in RFC7519 and RFC8392. The specification will d= escribe the syntax for each claim in at least the following formats:" +"Extend the set of claims defined in RFC7519 and RFC8392 with additional o= nes applicable to the required remote attestation use cases." The activity makes reference to "retaining interoperability with existing f= ormats based on ASN.1". What are those formats? They should be stated exp= licitly. (8) Program of Work. Activity 4 As it relates to claims specification, I'm not sure how this would be diffe= rent than Activity #2. (9) Program of Work Activity 6 I recommend dropping this bullet. This analysis should be an implicit acti= vity but not a deliverable. Roman From nobody Fri Oct 26 14:30:10 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E1A7130DDA for ; Fri, 26 Oct 2018 14:30:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.901 X-Spam-Level: X-Spam-Status: No, score=-6.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TWs5zl3L0_h3 for ; Fri, 26 Oct 2018 14:30:05 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5BE0F126F72 for ; Fri, 26 Oct 2018 14:30:04 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id w9QLTtNC005659 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Fri, 26 Oct 2018 23:29:57 +0200 Received: from [192.168.16.50] (134.102.43.163) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.408.0; Fri, 26 Oct 2018 23:29:50 +0200 To: Roman Danyliw , "rats@ietf.org" References: <359EC4B99E040048A7131E0F4E113AFC0181A32A81@marathon> From: Henk Birkholz Message-ID: Date: Fri, 26 Oct 2018 23:29:48 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0181A32A81@marathon> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.163] Archived-At: Subject: Re: [Rats] Feedback on the RC3 draft charter text X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2018 21:30:09 -0000 Hi Roman, thank you for the detailed input. A few first thoughts in-line (most of them most certainly not final). Viele Grüße, Henk On 10/26/2018 09:54 PM, Roman Danyliw wrote: > Hello! > > I reviewed the v3 draft charter text at https://github.com/ietf-rats/charter/blob/RC3/ietf-rats-charter.md, and had the following feedback/recommendations/questions: > > (1) Use consistent language for the "things" participating in the attestations. Each section uses slightly different language -- "devices and services"/"communication partner"/"relying party" (in introduction); "devices, services and other third parties" (in high level goals); or "systems/entities", "system/remote party" (in Program of Work). Understood. There was a deliberate attempt to remove a terminology subsection (charter size/readability/complexity amongst others). The reasoning behind that: if you go down the path of defining terms, the "common terms" that are used a bit loosely right now have to be "nailed down". There are at least four side effects to that, I think: 1.) everybody gets a better understanding of what a terms mean 2.) the charter will increase in size 3.) more terms will have to be defined as there are now, because precise definition will lead to more precise specialization 4.) using the "correct" terms in the "correct" places might re-initiate the cycle of discussion we were attempting to break (I am neutral on this) Having said that, I am still rather confident that we can agree on a set of terms here, but it will not be limited to the taxonomy that is implicitly defined via "devices and services"/"communication partner"/"relying party" and similar examples that were highlighted. The different flavors of roots of trust (which we do barely elaborate on) require a more fine grained definition of terms in any case. I am okay with this (as that was the initial approach), but I am not sure about the impact on current consensus in the scope that is this list. > > (2) In the introductory section, I wanted to read a bit more about the context -- establish why RATS is needed; notionally define what "trust" and "trustworthiness" means; what is the continuum of "communication partners" under consideration. These terms are defined rather explicit or via minor derivation from RFC4949, maybe a reference might mitigate that? > > (3) Per this sentence in the introduction, "In the absence of such procedures, while domain-specific attestation mechanisms such as TCG TPM/TSS, FIDO Alliance attestation and Android Keystore attestation exist, there is no common way for a relying party to tell if data originates from a trustworthy device or not.": > > ** I recommend removing the "In the absence of such procedures" phrase. It is redundant. No objection > > ** I like that this sentence acknowledges the related work. In this section, the list of related work is "TCG TPM/TSS, FIDO and Keystore". In the High Level Goals section, another set of related work is listed, "Global Platform, TCG and FIDO". Are these meant to be different. Couldn't Global Platform also be listed in this sentence. Yes > > ** Per the notion that the domain-specific attestation methods aren't adequate, is the language "there no common way" the same as "there is no general purpose way"? If you would ask me, there is a significant difference between purpose (effectively intended) and common (effectively realized) way. But that PoV is probably my very own specific one. > > (4) I struggled with the text in the "high level goals" section as the details of the WG goals are buried in the text. I would recommend opening this section with a declarative statement of the form "The goal of the RATS working group is to specify the formats, protocols and procedures needed to create and verify trust relationships suitable for remote attestation." This sounds like the statement of work. Does this imply we might not need a high level overview here (which intrinsically is redundant to the actual work by being a generalized overview)? > > The sentence "Correspondingly, the RATS WG will facilitate full device attestation ..." introduces new terminology for me that begs explanation (and wasn't references in the introduction). > > IMO the two bullets, under "The WG will define .." aren't necessary because the next section already abstractly defines the activities and there will eventually be a set of milestones that will be even more specific. Yes, there are new terms here. They are important to some stakeholders and probably not as important to others (which is true to every work item, I assume). I am not sure how to remidiate that without a dedicated terminology section, which we tried to avoid based on multiple recommendations. I'd really like to address this specific comment (not with proposals right now, I mean, but conceptually). Hence, this is one of the points, where more guidance wrt to intent and scope of your comment would really help, I think. > > (5) Program of Work: Per, "The Working Group will develop standards supporting the creation of interoperable remote attestation procedures for systems and entities which incorporate roots of trust.": > > I wasn't able to tell if the closing phrase "which incorporates roots of trust" was intended to scope the problem. In the previous section which discussed High Level goals, RATS was going to work with both "roots of trust or trust anchors". I'd recommend consistency in language. Personally, I would boil it down to RoT and go into the details of RoT and TA in draft text. I was the one, who introduced it. I am okay with removing TA again. > > (6) Program of Work. Activity 1 > > I recommend simplification as follows: > > - "Specify an architecture establishing a common terminology for remote attestation, identifying mechanisms which will be supported for establishing trust relationships between a system and a remote party, and enumerating sample use-cases for remote attestation." > + "Specify a reference architecture that defines common terminology and samples use cases for remote attestation" Simpler, but allowing for more ambiguous scope, I think. Leaning a bit more to simplicity, I'd not object. > > (7) Program of Work. Activity 2 > > I recommend simplification as follows: > > -"Specify interoperable cross-platform claims which provide information about systems and entities in support of the required use-cases, and extending the set of claims defined in RFC7519 and RFC8392. The specification will describe the syntax for each claim in at least the following formats:" > +"Extend the set of claims defined in RFC7519 and RFC8392 with additional ones applicable to the required remote attestation use cases." On one hand, this could imply that "required use-cases" might be a way to channel everything into the scope of work. On the other hand, it sounds way simpler, which is the +1 here. > > The activity makes reference to "retaining interoperability with existing formats based on ASN.1". What are those formats? They should be stated explicitly. Do you mean DER/BER/PEM (which is simple) or the semantics they were burdened with in the last 25 years (which is hard)? > > (8) Program of Work. Activity 4 > > As it relates to claims specification, I'm not sure how this would be different than Activity #2. That is true. But I think that is also rather relevant to other stakeholders, who can most likely provide more detaila on this matter. > > (9) Program of Work Activity 6 > > I recommend dropping this bullet. This analysis should be an implicit activity but not a deliverable. Then it should not be dropped, but moved one section up, right? It most certainly does seem relevant due to endorsement on the list. > > Roman Viele Grüße, Henk > > _______________________________________________ > RATS mailing list > RATS@ietf.org > https://www.ietf.org/mailman/listinfo/rats > From nobody Mon Oct 29 07:18:24 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE79F130F53 for ; Mon, 29 Oct 2018 07:18:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a4ueZxX8BO03 for ; Mon, 29 Oct 2018 07:18:21 -0700 (PDT) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 88A1F130EAC for ; Mon, 29 Oct 2018 07:18:21 -0700 (PDT) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id w9TEIJv9029026; Mon, 29 Oct 2018 10:18:19 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu w9TEIJv9029026 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1540822700; bh=8m9QBBz9n1Ge7nJP8SQKt7iqBj7k28iT2G3+Zm2Yw3s=; h=From:To:Subject:Date:References:In-Reply-To:From; b=gkPgPQmZPjUQRZrPr8+WMxdjjO1FkeSI5ZK/li9+yDkryfYnTlX1du1O7xAT/KVb6 Hwfs+X49a+cYgdyeGVxUyGv9T/LIIWy78iilEDJ4MYsFgDl8Ddv3Qjh4zIaOijptBR 8I039YhHZqYVhUg9MFF0kccwh9v1n/OLItRzzovk= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id w9TEIBuK007537; Mon, 29 Oct 2018 10:18:11 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0399.000; Mon, 29 Oct 2018 10:18:11 -0400 From: Roman Danyliw To: Henk Birkholz , "rats@ietf.org" Thread-Topic: [Rats] Feedback on the RC3 draft charter text Thread-Index: AdRtZPP/JomPlmzFT2KYTqGhMEmPSwAL5h4AAH6k3BA= Date: Mon, 29 Oct 2018 14:18:10 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0181A343E5@marathon> References: <359EC4B99E040048A7131E0F4E113AFC0181A32A81@marathon> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Feedback on the RC3 draft charter text X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Oct 2018 14:18:24 -0000 SGkgSGVuayENCg0KUmVzcG9uc2VzIGlubGluZSAuLi4NCg0KPiAtLS0tLU9yaWdpbmFsIE1lc3Nh Z2UtLS0tLQ0KPiBGcm9tOiBIZW5rIEJpcmtob2x6IFttYWlsdG86aGVuay5iaXJraG9sekBzaXQu ZnJhdW5ob2Zlci5kZV0NCj4gU2VudDogRnJpZGF5LCBPY3RvYmVyIDI2LCAyMDE4IDU6MzAgUE0N Cj4gVG86IFJvbWFuIERhbnlsaXcgPHJkZEBjZXJ0Lm9yZz47IHJhdHNAaWV0Zi5vcmcNCj4gU3Vi amVjdDogUmU6IFtSYXRzXSBGZWVkYmFjayBvbiB0aGUgUkMzIGRyYWZ0IGNoYXJ0ZXIgdGV4dA0K DQpbc25pcF0NCj4gT24gMTAvMjYvMjAxOCAwOTo1NCBQTSwgUm9tYW4gRGFueWxpdyB3cm90ZToN Cj4gPiBIZWxsbyENCj4gPg0KPiA+IEkgcmV2aWV3ZWQgdGhlIHYzIGRyYWZ0IGNoYXJ0ZXIgdGV4 dCBhdCBodHRwczovL2dpdGh1Yi5jb20vaWV0Zi0NCj4gcmF0cy9jaGFydGVyL2Jsb2IvUkMzL2ll dGYtcmF0cy1jaGFydGVyLm1kLCBhbmQgaGFkIHRoZSBmb2xsb3dpbmcNCj4gZmVlZGJhY2svcmVj b21tZW5kYXRpb25zL3F1ZXN0aW9uczoNCj4gPg0KPiA+ICgxKSBVc2UgY29uc2lzdGVudCBsYW5n dWFnZSBmb3IgdGhlICJ0aGluZ3MiIHBhcnRpY2lwYXRpbmcgaW4gdGhlDQo+IGF0dGVzdGF0aW9u cy4gIEVhY2ggc2VjdGlvbiB1c2VzIHNsaWdodGx5IGRpZmZlcmVudCBsYW5ndWFnZSAtLSAiZGV2 aWNlcyBhbmQNCj4gc2VydmljZXMiLyJjb21tdW5pY2F0aW9uIHBhcnRuZXIiLyJyZWx5aW5nIHBh cnR5IiAoaW4gaW50cm9kdWN0aW9uKTsNCj4gImRldmljZXMsIHNlcnZpY2VzIGFuZCBvdGhlciB0 aGlyZCBwYXJ0aWVzIiAoaW4gaGlnaCBsZXZlbCBnb2Fscyk7IG9yDQo+ICJzeXN0ZW1zL2VudGl0 aWVzIiwgInN5c3RlbS9yZW1vdGUgcGFydHkiIChpbiBQcm9ncmFtIG9mIFdvcmspLg0KPiANCj4g VW5kZXJzdG9vZC4gVGhlcmUgd2FzIGEgZGVsaWJlcmF0ZSBhdHRlbXB0IHRvIHJlbW92ZSBhIHRl cm1pbm9sb2d5DQo+IHN1YnNlY3Rpb24gKGNoYXJ0ZXIgc2l6ZS9yZWFkYWJpbGl0eS9jb21wbGV4 aXR5IGFtb25nc3Qgb3RoZXJzKS4gVGhlDQo+IHJlYXNvbmluZyBiZWhpbmQgdGhhdDogaWYgeW91 IGdvIGRvd24gdGhlIHBhdGggb2YgZGVmaW5pbmcgdGVybXMsIHRoZQ0KPiAiY29tbW9uIHRlcm1z IiB0aGF0IGFyZSB1c2VkIGEgYml0IGxvb3NlbHkgcmlnaHQgbm93IGhhdmUgdG8gYmUgIm5haWxl ZA0KPiBkb3duIi4gVGhlcmUgYXJlIGF0IGxlYXN0IGZvdXIgc2lkZSBlZmZlY3RzIHRvIHRoYXQs IEkgdGhpbms6DQo+IA0KPiAxLikgZXZlcnlib2R5IGdldHMgYSBiZXR0ZXIgdW5kZXJzdGFuZGlu ZyBvZiB3aGF0IGEgdGVybXMgbWVhbg0KPiAyLikgdGhlIGNoYXJ0ZXIgd2lsbCBpbmNyZWFzZSBp biBzaXplDQo+IDMuKSBtb3JlIHRlcm1zIHdpbGwgaGF2ZSB0byBiZSBkZWZpbmVkIGFzIHRoZXJl IGFyZSBub3csIGJlY2F1c2UgcHJlY2lzZQ0KPiBkZWZpbml0aW9uIHdpbGwgbGVhZCB0byBtb3Jl IHByZWNpc2Ugc3BlY2lhbGl6YXRpb24NCj4gNC4pIHVzaW5nIHRoZSAiY29ycmVjdCIgdGVybXMg aW4gdGhlICJjb3JyZWN0IiBwbGFjZXMgbWlnaHQgcmUtaW5pdGlhdGUgdGhlIGN5Y2xlDQo+IG9m IGRpc2N1c3Npb24gd2Ugd2VyZSBhdHRlbXB0aW5nIHRvIGJyZWFrIChJIGFtIG5ldXRyYWwgb24g dGhpcykNCj4gDQo+IEhhdmluZyBzYWlkIHRoYXQsIEkgYW0gc3RpbGwgcmF0aGVyIGNvbmZpZGVu dCB0aGF0IHdlIGNhbiBhZ3JlZSBvbiBhIHNldCBvZg0KPiB0ZXJtcyBoZXJlLCBidXQgaXQgd2ls bCBub3QgYmUgbGltaXRlZCB0byB0aGUgdGF4b25vbXkgdGhhdCBpcyBpbXBsaWNpdGx5IGRlZmlu ZWQNCj4gdmlhICJkZXZpY2VzIGFuZCBzZXJ2aWNlcyIvImNvbW11bmljYXRpb24gcGFydG5lciIv InJlbHlpbmcgcGFydHkiIGFuZA0KPiBzaW1pbGFyIGV4YW1wbGVzIHRoYXQgd2VyZSBoaWdobGln aHRlZC4gVGhlIGRpZmZlcmVudCBmbGF2b3JzIG9mIHJvb3RzIG9mIHRydXN0DQo+ICh3aGljaCB3 ZSBkbyBiYXJlbHkgZWxhYm9yYXRlIG9uKSByZXF1aXJlIGEgbW9yZSBmaW5lIGdyYWluZWQgZGVm aW5pdGlvbiBvZg0KPiB0ZXJtcyBpbiBhbnkgY2FzZS4gSSBhbSBva2F5IHdpdGggdGhpcyAoYXMg dGhhdCB3YXMgdGhlIGluaXRpYWwgYXBwcm9hY2gpLCBidXQgSQ0KPiBhbSBub3Qgc3VyZSBhYm91 dCB0aGUgaW1wYWN0IG9uIGN1cnJlbnQgY29uc2Vuc3VzIGluIHRoZSBzY29wZSB0aGF0IGlzIHRo aXMNCj4gbGlzdC4NCg0KSSBhZ3JlZWQgdGhhdCB3ZSBkb24ndCB3YW50IHRvIGludmVzdCBzdWJz dGFudGlhbCB0ZXh0IGRlZmluaW5nIGEgdGF4b25vbXkuICBUaGUgZ2lzdCBvZiBteSBzdWdnZXN0 aW9uIGlzIGZvciB1cyBub3QgdXNlIG11bHRpcGxlIHRheG9ub21pZXMgaW4gcGFyYWxsZWwgaW4g dGhlIHRleHQuICBSZWFkYWJpbGl0eSB3b3VsZCBiZSBncmVhdGx5IGltcHJvdmVkIGlmIHRlcm1z IGRpc2N1c3NlZCBpbiB0aGUgaW50cm9kdWN0aW9uIHdvdWxkIHRoZW4gYmUgZXZpZGVudCBpbiB0 aGUgd29yayBhcmVhcyAod2hlcmVieSBjb25uZWN0aW5nIHRoZSBzdGF0ZWQgcHJvYmxlbXMvc3Rh dGUgb2YgdGhlIHByYWN0aWNlIHdpdGggdGhlIHByb3Bvc2VkIHdvcmspLg0KDQo+ID4NCj4gPiAo MikgSW4gdGhlIGludHJvZHVjdG9yeSBzZWN0aW9uLCBJIHdhbnRlZCB0byByZWFkIGEgYml0IG1v cmUgYWJvdXQgdGhlDQo+IGNvbnRleHQgLS0gZXN0YWJsaXNoIHdoeSBSQVRTIGlzIG5lZWRlZDsg bm90aW9uYWxseSBkZWZpbmUgd2hhdCAidHJ1c3QiIGFuZA0KPiAidHJ1c3R3b3J0aGluZXNzIiBt ZWFuczsgd2hhdCBpcyB0aGUgY29udGludXVtIG9mICJjb21tdW5pY2F0aW9uDQo+IHBhcnRuZXJz IiB1bmRlciBjb25zaWRlcmF0aW9uLg0KPiANCj4gVGhlc2UgdGVybXMgYXJlIGRlZmluZWQgcmF0 aGVyIGV4cGxpY2l0IG9yIHZpYSBtaW5vciBkZXJpdmF0aW9uIGZyb20gUkZDNDk0OSwNCj4gbWF5 YmUgYSByZWZlcmVuY2UgbWlnaHQgbWl0aWdhdGUgdGhhdD8NCg0KTWFrZXMgc2Vuc2UgdG8gbWUg dG8gbWFrZSB0aGUgcmVmZXJlbmNlLg0KDQpbc25pcF0NCg0KPiA+ICoqIFBlciB0aGUgbm90aW9u IHRoYXQgdGhlIGRvbWFpbi1zcGVjaWZpYyBhdHRlc3RhdGlvbiBtZXRob2RzIGFyZW4ndA0KPiBh ZGVxdWF0ZSwgIGlzIHRoZSBsYW5ndWFnZSAidGhlcmUgbm8gY29tbW9uIHdheSIgdGhlIHNhbWUg YXMgInRoZXJlIGlzIG5vDQo+IGdlbmVyYWwgcHVycG9zZSB3YXkiPw0KPiANCj4gSWYgeW91IHdv dWxkIGFzayBtZSwgdGhlcmUgaXMgYSBzaWduaWZpY2FudCBkaWZmZXJlbmNlIGJldHdlZW4gcHVy cG9zZQ0KPiAoZWZmZWN0aXZlbHkgIGludGVuZGVkKSBhbmQgY29tbW9uIChlZmZlY3RpdmVseSBy ZWFsaXplZCkgd2F5LiBCdXQgdGhhdCBQb1YNCj4gaXMgcHJvYmFibHkgbXkgdmVyeSBvd24gc3Bl Y2lmaWMgb25lLg0KDQpPSy4gIFRoaXMgd2FzIGEgc2VtYW50aWMgbml0IG9uIG15IHBhcnQuICBJ J20gZmluZSB3aXRoIHRoZSB0ZXh0IGFzIGlzIHNpbmNlIHdlJ3JlIG9uIHRoZSBzYW1lIHBhZ2Uu DQoNCj4gPiAoNCkgSSBzdHJ1Z2dsZWQgd2l0aCB0aGUgdGV4dCBpbiB0aGUgImhpZ2ggbGV2ZWwg Z29hbHMiIHNlY3Rpb24gYXMgdGhlIGRldGFpbHMgb2YNCj4gdGhlIFdHIGdvYWxzIGFyZSBidXJp ZWQgaW4gdGhlIHRleHQuICBJIHdvdWxkIHJlY29tbWVuZCBvcGVuaW5nIHRoaXMNCj4gc2VjdGlv biB3aXRoIGEgZGVjbGFyYXRpdmUgc3RhdGVtZW50IG9mIHRoZSBmb3JtICJUaGUgZ29hbCBvZiB0 aGUgUkFUUw0KPiB3b3JraW5nIGdyb3VwIGlzIHRvIHNwZWNpZnkgdGhlIGZvcm1hdHMsIHByb3Rv Y29scyBhbmQgcHJvY2VkdXJlcyBuZWVkZWQgdG8NCj4gY3JlYXRlIGFuZCB2ZXJpZnkgdHJ1c3Qg cmVsYXRpb25zaGlwcyBzdWl0YWJsZSBmb3IgcmVtb3RlIGF0dGVzdGF0aW9uLiINCj4gDQo+IFRo aXMgc291bmRzIGxpa2UgdGhlIHN0YXRlbWVudCBvZiB3b3JrLiBEb2VzIHRoaXMgaW1wbHkgd2Ug bWlnaHQgbm90IG5lZWQgYQ0KPiBoaWdoIGxldmVsIG92ZXJ2aWV3IGhlcmUgKHdoaWNoIGludHJp bnNpY2FsbHkgaXMgcmVkdW5kYW50IHRvIHRoZSBhY3R1YWwgd29yaw0KPiBieSBiZWluZyBhIGdl bmVyYWxpemVkIG92ZXJ2aWV3KT8NCg0KSSB0aGluayBpdCBpcyBoZWxwZnVsIHRvIGludHJvZHVj ZSB0aGUgd29yaywgYnV0IG9ubHkgaWYgaXQgdGhlIGdlbmVyYWxpemF0aW9uIGFkZHMgY29udGVu dC4gIFNvbWV3aGVyZSBpbiB0aGlzIGNoYXJ0ZXIgdGV4dCBpdCB3b3VsZCBiZSBoZWxwZnVsIHRv IGhhdmUgb25lIG9yIHR3byBzZW50ZW5jZXMgdGhhdCBzdW1tYXJpemUgd2hhdCB0aGUgV0cgd2ls bCBkby4gIE15IGVkaXRvcmlhbCByZWNvbW1lbmRhdGlvbiBpcyB0byBvcGVuIHRoZSB0ZXh0IHdp dGggd2hhdCB0aGUgV0cgd2lsbCBkbyBpbnN0ZWFkIG9mIHJlc3RhdGluZyB0aGUgbmVlZC4gIEkg d291bGQgcmVjb21tZW5kIGFnYWluc3QgY29sbGFwc2luZyB0aGUgc2VjdGlvbiB3aXRoIHRoZSBw cm9ncmFtIG9mIHdvcmsgYmVjYXVzZSBpdCByZWZlcmVuY2VzIGtleSBhcmVhcyBvZiBjb29yZGlu YXRpb24gaW4tYW5kLW91dCBvZiB0aGUgSUVURi4gIA0KDQpbc25pcF0NCg0KPiA+ICg1KSBQcm9n cmFtIG9mIFdvcms6IFBlciwgIlRoZSBXb3JraW5nIEdyb3VwIHdpbGwgZGV2ZWxvcCBzdGFuZGFy ZHMNCj4gc3VwcG9ydGluZyB0aGUgY3JlYXRpb24gb2YgaW50ZXJvcGVyYWJsZSByZW1vdGUgYXR0 ZXN0YXRpb24gcHJvY2VkdXJlcyBmb3INCj4gc3lzdGVtcyBhbmQgZW50aXRpZXMgd2hpY2ggaW5j b3Jwb3JhdGUgcm9vdHMgb2YgdHJ1c3QuIjoNCj4gPg0KPiA+IEkgd2Fzbid0IGFibGUgdG8gdGVs bCBpZiB0aGUgY2xvc2luZyBwaHJhc2UgIndoaWNoIGluY29ycG9yYXRlcyByb290cyBvZiB0cnVz dCINCj4gd2FzIGludGVuZGVkIHRvIHNjb3BlIHRoZSBwcm9ibGVtLiAgSW4gdGhlIHByZXZpb3Vz IHNlY3Rpb24gd2hpY2ggZGlzY3Vzc2VkDQo+IEhpZ2ggTGV2ZWwgZ29hbHMsIFJBVFMgd2FzIGdv aW5nIHRvIHdvcmsgd2l0aCBib3RoICJyb290cyBvZiB0cnVzdCBvciB0cnVzdA0KPiBhbmNob3Jz Ii4gIEknZCByZWNvbW1lbmQgY29uc2lzdGVuY3kgaW4gbGFuZ3VhZ2UuDQo+IA0KPiBQZXJzb25h bGx5LCBJIHdvdWxkIGJvaWwgaXQgZG93biB0byBSb1QgYW5kIGdvIGludG8gdGhlIGRldGFpbHMg b2YgUm9UIGFuZCBUQSBpbg0KPiBkcmFmdCB0ZXh0LiBJIHdhcyB0aGUgb25lLCB3aG8gaW50cm9k dWNlZCBpdC4gSSBhbSBva2F5IHdpdGggcmVtb3ZpbmcgVEENCj4gYWdhaW4uDQoNCklNTywgc2lt cGxpY2l0eSAoYW5kIGNvbnNpc3RlbmN5KSB3b3VsZCBoZWxwIGhlcmUuDQoNCltzbmlwXQ0KDQo+ ID4gVGhlIGFjdGl2aXR5IG1ha2VzIHJlZmVyZW5jZSB0byAicmV0YWluaW5nIGludGVyb3BlcmFi aWxpdHkgd2l0aCBleGlzdGluZw0KPiBmb3JtYXRzIGJhc2VkIG9uIEFTTi4xIi4gIFdoYXQgYXJl IHRob3NlIGZvcm1hdHM/ICBUaGV5IHNob3VsZCBiZSBzdGF0ZWQNCj4gZXhwbGljaXRseS4NCj4g DQo+IERvIHlvdSBtZWFuIERFUi9CRVIvUEVNICh3aGljaCBpcyBzaW1wbGUpIG9yIHRoZSBzZW1h bnRpY3MgdGhleSB3ZXJlDQo+IGJ1cmRlbmVkIHdpdGggaW4gdGhlIGxhc3QgMjUgeWVhcnMgKHdo aWNoIGlzIGhhcmQpPw0KDQpJJ20gbm90IHN1cmUsIHRoYXQncyB3aHkgSSdtIGFza2luZy4gIEkg cmVhZCB0aGUgc2VudGVuY2UgYXMgdGhlcmUgYmVpbmcgYSByZXF1aXJlbWVudCBmb3IgaW50ZXJv cGVyYWJpbGl0eSB3aXRoIHVuc3BlY2lmaWVkIEFTTi4xIGZvcm1hdHMuICBNYXliZSBleGFtcGxl cyB3b3VsZCBoZWxwIGhlcmUuDQoNCj4gPiAoOCkgUHJvZ3JhbSBvZiBXb3JrLiAgQWN0aXZpdHkg NA0KPiA+DQo+ID4gQXMgaXQgcmVsYXRlcyB0byBjbGFpbXMgc3BlY2lmaWNhdGlvbiwgSSdtIG5v dCBzdXJlIGhvdyB0aGlzIHdvdWxkIGJlIGRpZmZlcmVudA0KPiB0aGFuIEFjdGl2aXR5ICMyLg0K PiANCj4gVGhhdCBpcyB0cnVlLiBCdXQgSSB0aGluayB0aGF0IGlzIGFsc28gcmF0aGVyIHJlbGV2 YW50IHRvIG90aGVyIHN0YWtlaG9sZGVycywgd2hvDQo+IGNhbiBtb3N0IGxpa2VseSBwcm92aWRl IG1vcmUgZGV0YWlsYSBvbiB0aGlzIG1hdHRlci4NCg0KT0suICBUbyBvdGhlcnMgb24gdGhlIGxp c3QsIGNhbiBhIGJpdCBtb3JlIGV4cGxhbmF0aW9uIGJlIHByb3ZpZGVkIHBsZWFzZT8NCg0KPiA+ ICg5KSBQcm9ncmFtIG9mIFdvcmsgQWN0aXZpdHkgNg0KPiA+DQo+ID4gSSByZWNvbW1lbmQgZHJv cHBpbmcgdGhpcyBidWxsZXQuICBUaGlzIGFuYWx5c2lzIHNob3VsZCBiZSBhbiBpbXBsaWNpdA0K PiBhY3Rpdml0eSBidXQgbm90IGEgZGVsaXZlcmFibGUuDQo+IA0KPiBUaGVuIGl0IHNob3VsZCBu b3QgYmUgZHJvcHBlZCwgYnV0IG1vdmVkIG9uZSBzZWN0aW9uIHVwLCByaWdodD8gSXQgbW9zdA0K PiBjZXJ0YWlubHkgZG9lcyBzZWVtIHJlbGV2YW50IGR1ZSB0byBlbmRvcnNlbWVudCBvbiB0aGUg bGlzdC4NCg0KU3VyZS4gIEkgcmVhZCBhbGwgb2YgdGhlIG90aGVyIHByb2dyYW0gb2Ygd29yayAg aXRlbXMgYXMgaXRlbXMgdGhhdCB3b3VsZCBtYW5pZmVzdCBhcyBhIGRvY3VtZW50LiAgSSdtIGxl ZXJ5IG9mIHdvcmsgaXRlbXMgdGhhdCB3b24ndCBiZSBhIGZvcm1hbCBkcmFmdC4gIFBlcmhhcHMg dGhlIG5leHQgZGVjb21wb3NpdGlvbiBvZiB3b3JrIGl0ZW1zIHRvIG1pbGVzdG9uZXMgd291bGQg Y2xlYXIgdXAgdGhhdCBjb25mdXNpb24uICBJdCB3b3VsZCBhbHNvIGVuZG9yc2UgdGhlICJwaGFz ZWQgYXBwcm9hY2giIHRvIGRlbGl2ZXJ5IHByZXZpb3VzbHkgZGlzY3Vzc2VkLg0KDQpSb21hbg0K From nobody Tue Oct 30 06:32:41 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1BDFA130DCB for ; Tue, 30 Oct 2018 06:32:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WacYu6f04JvF for ; Tue, 30 Oct 2018 06:32:38 -0700 (PDT) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4444612F295 for ; Tue, 30 Oct 2018 06:32:38 -0700 (PDT) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id w9UDWapd010346 for ; Tue, 30 Oct 2018 09:32:37 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu w9UDWapd010346 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1540906357; bh=Kbz/NYTkt9DAum4fvgZUTUbXPRFyWgxbSYjfr7iuRro=; h=From:To:Subject:Date:From; b=QzPVNiRsXe+hov65oTwuBdA0oenX2umgbB4afBj63rURAiNTGwZ5r9ooj9RCjQUSO hQtxG99QvegYOdwJxCKfMHBLB0Jw80PyeMLjSNWesz3jaqVQpN2N+8lmdYQ3j+EZ7M vLRqTZa0n916hL9dQed8p2C+Ur+IJhFG6zREy9hc= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id w9UDWXqC008389 for ; Tue, 30 Oct 2018 09:32:33 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0399.000; Tue, 30 Oct 2018 09:32:33 -0400 From: Roman Danyliw To: "rats@ietf.org" Thread-Topic: Draft agenda for IETF 103 Thread-Index: AdRwVKCJON041PwFSTi+XlWckMv9tw== Date: Tue, 30 Oct 2018 13:32:33 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0181A354F2@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Rats] Draft agenda for IETF 103 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Oct 2018 13:32:40 -0000 Hello! The RATS BoF will be on Tuesday, November 6, 2018, from 13:50-15:50 in Chi= tlada 2 at IETF 103. A draft agenda for the meeting has been posted at: https://datatracker.ietf.org/meeting/103/materials/agenda-103-rats-00 This agenda contains placeholders for topics and the currently planned stru= cture of the discussion. In the next few days, we'll provide a more specif= ic update. If you would like time on the agenda please let the chairs know= .=20 Regards, Roman and Karen From nobody Tue Oct 30 07:12:26 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78536128CF2 for ; Tue, 30 Oct 2018 07:12:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dpMHFTIw0q6j for ; Tue, 30 Oct 2018 07:12:24 -0700 (PDT) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A8AE127AC2 for ; Tue, 30 Oct 2018 07:12:24 -0700 (PDT) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id w9UECMLe010341 for ; Tue, 30 Oct 2018 10:12:23 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu w9UECMLe010341 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1540908743; bh=79j+Y9XRzy0ILSgPnMtP1zmagIF4vvZMgOEQSVxKrzs=; h=From:To:Subject:Date:From; b=EXFt6E90pZwvwenrtIhqFdIQqvfK+gZSL7u9WMBAhzVmCR0IX3z8SNJxiP+LHRU0I eGIBdCPHlLIU0VwiyaLWu3DvG+dP37JjAi1K09eu3E/d9nXxNjcIgkS79Tvi4C3iMb Vab173U+7YFSi8SryxQYksT4IYs6o87PxPQivm/8= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id w9UECJnh017974 for ; Tue, 30 Oct 2018 10:12:19 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0399.000; Tue, 30 Oct 2018 10:12:19 -0400 From: Roman Danyliw To: "rats@ietf.org" Thread-Topic: Draft agenda for IETF 103 Thread-Index: AdRwVKCJON041PwFSTi+XlWckMv9twABcgFA Date: Tue, 30 Oct 2018 14:12:19 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0181A35584@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Rats] Draft agenda for IETF 103 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Oct 2018 14:12:26 -0000 ** Not enough coffee ** ... > -----Original Message----- > Subject: Draft agenda for IETF 103 >=20 > Hello! >=20 > The RATS BoF will be on Tuesday, November 6, 2018, from 13:50-15:50 in > Chitlada 2 at IETF 103. A draft agenda for the meeting has been posted a= t: [snip] > Regards, > Roman and Karen Nancy and Roman (as the co-chairs) From nobody Tue Oct 30 08:20:30 2018 Return-Path: X-Original-To: rats@ietfa.amsl.com Delivered-To: rats@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7750E130DEB for ; Tue, 30 Oct 2018 08:20:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.502 X-Spam-Level: X-Spam-Status: No, score=-14.502 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PRcByYQk0SLF for ; Tue, 30 Oct 2018 08:20:23 -0700 (PDT) Received: from alln-iport-3.cisco.com (alln-iport-3.cisco.com [173.37.142.90]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EFACA130DF2 for ; Tue, 30 Oct 2018 08:20:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1060; q=dns/txt; s=iport; t=1540912823; x=1542122423; h=from:to:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=4+eI0Wzaq5NsnCUZ+yNaRew7wnmKpbHzsryHoI8IC2k=; b=awQWGuyGDBDYhcKvLMNpVV9/K/EDlaggWWW4/ARHvKhuTcDtVa/WGmKA gVgy7oEnb80ePJTGvEgW3vS5tpoW0qiVSPuUai/oTqdCQYzXxjv7kV77a gaCNk4k5Cl4kr/K7hdZEqLAT/1sOrZWr80LDK+qsARQ4+VTrvVp9Kluke 4=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0ANAABEdthb/5xdJa1jGwEBAQEDAQE?= =?us-ascii?q?BBwMBAQGBUQYBAQELAYIEZn8oCoNsiBiMGIFoJZcggXoLAQEYC4RJAheDDSI?= =?us-ascii?q?0DQ0BAwEBAgEBAm0cDIU6AQEEAQEBIRE6FwYBCA4JAwImAgQlCxUICgQBEoM?= =?us-ascii?q?hAYF5CA+oa4EuhTyEZAWBC4pcF4IAgREnDBOCHi6BQYFaAQGBYReCbTGCJgK?= =?us-ascii?q?fEAkCkQUYgUOPBZZ/AhEUgSYdOIFVcBU7KgGCQYIyiGeFPm+KWYEfAQE?= X-IronPort-AV: E=Sophos;i="5.54,444,1534809600"; d="scan'208";a="194101449" Received: from rcdn-core-5.cisco.com ([173.37.93.156]) by alln-iport-3.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 30 Oct 2018 15:20:22 +0000 Received: from XCH-RTP-012.cisco.com (xch-rtp-012.cisco.com [64.101.220.152]) by rcdn-core-5.cisco.com (8.15.2/8.15.2) with ESMTPS id w9UFKKTo022967 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Tue, 30 Oct 2018 15:20:21 GMT Received: from xch-rtp-015.cisco.com (64.101.220.155) by XCH-RTP-012.cisco.com (64.101.220.152) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 30 Oct 2018 11:20:21 -0400 Received: from xch-rtp-015.cisco.com ([64.101.220.155]) by XCH-RTP-015.cisco.com ([64.101.220.155]) with mapi id 15.00.1395.000; Tue, 30 Oct 2018 11:20:21 -0400 From: "Nancy Cam-Winget (ncamwing)" To: Roman Danyliw , "rats@ietf.org" Thread-Topic: [Rats] Draft agenda for IETF 103 Thread-Index: AQHUcGQSON041PwFSTi+XlWckMv9tw== Date: Tue, 30 Oct 2018 15:20:21 +0000 Message-ID: <3A22FA3D-2C72-4A96-8713-9B6E2AF7D8D4@cisco.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.c.0.180410 x-ms-exchange-messagesentrepresentingtype: 1 x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.155.80.44] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Outbound-SMTP-Client: 64.101.220.152, xch-rtp-012.cisco.com X-Outbound-Node: rcdn-core-5.cisco.com Archived-At: Subject: Re: [Rats] Draft agenda for IETF 103 X-BeenThere: rats@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Remote Attestation Procedures List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Oct 2018 15:20:28 -0000 TG9MLi4uLi5JIG11c3Qgbm90IGJlIHRoYXQgaW1wcmVzc2lvbmFibGUgdGhvdWdoIGJlaW5nIEth cmVuIGlzIG5vdCBhIGJhZCB0aGluZyBfXyENCg0K77u/T24gMTAvMzAvMTgsIDA3OjEyLCAiUkFU UyBvbiBiZWhhbGYgb2YgUm9tYW4gRGFueWxpdyIgPHJhdHMtYm91bmNlc0BpZXRmLm9yZyBvbiBi ZWhhbGYgb2YgcmRkQGNlcnQub3JnPiB3cm90ZToNCg0KICAgICoqIE5vdCBlbm91Z2ggY29mZmVl ICoqICAuLi4NCiAgICANCiAgICA+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQogICAgPiBT dWJqZWN0OiBEcmFmdCBhZ2VuZGEgZm9yIElFVEYgMTAzDQogICAgPiANCiAgICA+IEhlbGxvIQ0K ICAgID4gDQogICAgPiBUaGUgUkFUUyBCb0Ygd2lsbCBiZSBvbiBUdWVzZGF5LCBOb3ZlbWJlciA2 LCAyMDE4LCBmcm9tIDEzOjUwLTE1OjUwIAlpbg0KICAgID4gQ2hpdGxhZGEgMiBhdCBJRVRGIDEw My4gIEEgZHJhZnQgYWdlbmRhIGZvciB0aGUgbWVldGluZyBoYXMgYmVlbiBwb3N0ZWQgYXQ6DQog ICAgW3NuaXBdDQogICAgDQogICAgPiBSZWdhcmRzLA0KICAgID4gUm9tYW4gYW5kIEthcmVuDQog ICAgDQogICAgTmFuY3kgYW5kIFJvbWFuIChhcyB0aGUgY28tY2hhaXJzKQ0KICAgIA0KICAgIF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQogICAgUkFUUyBt YWlsaW5nIGxpc3QNCiAgICBSQVRTQGlldGYub3JnDQogICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9yYXRzDQogICAgDQoNCg==